Oct 2 19:13:13.183834 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Oct 2 19:13:13.183871 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 19:13:13.183894 kernel: efi: EFI v2.70 by EDK II Oct 2 19:13:13.183909 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7ac1aa98 MEMRESERVE=0x71accf98 Oct 2 19:13:13.189790 kernel: ACPI: Early table checksum verification disabled Oct 2 19:13:13.189807 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Oct 2 19:13:13.189824 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Oct 2 19:13:13.189839 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Oct 2 19:13:13.189853 kernel: ACPI: DSDT 0x0000000078640000 00154F (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Oct 2 19:13:13.189866 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Oct 2 19:13:13.189888 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Oct 2 19:13:13.189902 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Oct 2 19:13:13.189949 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Oct 2 19:13:13.189967 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Oct 2 19:13:13.189984 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Oct 2 19:13:13.190004 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Oct 2 19:13:13.190018 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Oct 2 19:13:13.190033 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Oct 2 19:13:13.190047 kernel: printk: bootconsole [uart0] enabled Oct 2 19:13:13.190061 kernel: NUMA: Failed to initialise from firmware Oct 2 19:13:13.190076 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 19:13:13.190091 kernel: NUMA: NODE_DATA [mem 0x4b5841900-0x4b5846fff] Oct 2 19:13:13.190105 kernel: Zone ranges: Oct 2 19:13:13.190120 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Oct 2 19:13:13.190134 kernel: DMA32 empty Oct 2 19:13:13.190149 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Oct 2 19:13:13.190167 kernel: Movable zone start for each node Oct 2 19:13:13.190181 kernel: Early memory node ranges Oct 2 19:13:13.190195 kernel: node 0: [mem 0x0000000040000000-0x00000000786effff] Oct 2 19:13:13.190210 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Oct 2 19:13:13.190224 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Oct 2 19:13:13.190238 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Oct 2 19:13:13.190253 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Oct 2 19:13:13.190267 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Oct 2 19:13:13.190281 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 19:13:13.190295 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Oct 2 19:13:13.190310 kernel: psci: probing for conduit method from ACPI. Oct 2 19:13:13.190324 kernel: psci: PSCIv1.0 detected in firmware. Oct 2 19:13:13.190342 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 19:13:13.190357 kernel: psci: Trusted OS migration not required Oct 2 19:13:13.190377 kernel: psci: SMC Calling Convention v1.1 Oct 2 19:13:13.190393 kernel: ACPI: SRAT not present Oct 2 19:13:13.190408 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 19:13:13.190427 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 19:13:13.190443 kernel: pcpu-alloc: [0] 0 [0] 1 Oct 2 19:13:13.190458 kernel: Detected PIPT I-cache on CPU0 Oct 2 19:13:13.190473 kernel: CPU features: detected: GIC system register CPU interface Oct 2 19:13:13.190488 kernel: CPU features: detected: Spectre-v2 Oct 2 19:13:13.190503 kernel: CPU features: detected: Spectre-v3a Oct 2 19:13:13.190518 kernel: CPU features: detected: Spectre-BHB Oct 2 19:13:13.190533 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 19:13:13.190548 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 19:13:13.190563 kernel: CPU features: detected: ARM erratum 1742098 Oct 2 19:13:13.190577 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Oct 2 19:13:13.190596 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Oct 2 19:13:13.190611 kernel: Policy zone: Normal Oct 2 19:13:13.190629 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:13:13.190645 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:13:13.190661 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:13:13.190676 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:13:13.190692 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:13:13.190708 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Oct 2 19:13:13.190724 kernel: Memory: 3826444K/4030464K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 204020K reserved, 0K cma-reserved) Oct 2 19:13:13.190740 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:13:13.190759 kernel: trace event string verifier disabled Oct 2 19:13:13.190774 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 19:13:13.190790 kernel: rcu: RCU event tracing is enabled. Oct 2 19:13:13.190805 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:13:13.190821 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 19:13:13.190837 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:13:13.190852 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:13:13.190868 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:13:13.190883 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 19:13:13.190898 kernel: GICv3: 96 SPIs implemented Oct 2 19:13:13.190929 kernel: GICv3: 0 Extended SPIs implemented Oct 2 19:13:13.190949 kernel: GICv3: Distributor has no Range Selector support Oct 2 19:13:13.190970 kernel: Root IRQ handler: gic_handle_irq Oct 2 19:13:13.190987 kernel: GICv3: 16 PPIs implemented Oct 2 19:13:13.191003 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Oct 2 19:13:13.191018 kernel: ACPI: SRAT not present Oct 2 19:13:13.191033 kernel: ITS [mem 0x10080000-0x1009ffff] Oct 2 19:13:13.191048 kernel: ITS@0x0000000010080000: allocated 8192 Devices @4000a0000 (indirect, esz 8, psz 64K, shr 1) Oct 2 19:13:13.191065 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000b0000 (flat, esz 8, psz 64K, shr 1) Oct 2 19:13:13.191080 kernel: GICv3: using LPI property table @0x00000004000c0000 Oct 2 19:13:13.191095 kernel: ITS: Using hypervisor restricted LPI range [128] Oct 2 19:13:13.191110 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Oct 2 19:13:13.191125 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Oct 2 19:13:13.191144 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Oct 2 19:13:13.191160 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Oct 2 19:13:13.191175 kernel: Console: colour dummy device 80x25 Oct 2 19:13:13.191190 kernel: printk: console [tty1] enabled Oct 2 19:13:13.191206 kernel: ACPI: Core revision 20210730 Oct 2 19:13:13.191222 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Oct 2 19:13:13.191237 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:13:13.191253 kernel: LSM: Security Framework initializing Oct 2 19:13:13.191268 kernel: SELinux: Initializing. Oct 2 19:13:13.191284 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:13:13.191303 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:13:13.191319 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:13:13.191334 kernel: Platform MSI: ITS@0x10080000 domain created Oct 2 19:13:13.191350 kernel: PCI/MSI: ITS@0x10080000 domain created Oct 2 19:13:13.191365 kernel: Remapping and enabling EFI services. Oct 2 19:13:13.191380 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:13:13.191395 kernel: Detected PIPT I-cache on CPU1 Oct 2 19:13:13.191411 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Oct 2 19:13:13.191426 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Oct 2 19:13:13.191446 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Oct 2 19:13:13.191461 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:13:13.191477 kernel: SMP: Total of 2 processors activated. Oct 2 19:13:13.191493 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 19:13:13.191509 kernel: CPU features: detected: 32-bit EL1 Support Oct 2 19:13:13.191524 kernel: CPU features: detected: CRC32 instructions Oct 2 19:13:13.191540 kernel: CPU: All CPU(s) started at EL1 Oct 2 19:13:13.191555 kernel: alternatives: patching kernel code Oct 2 19:13:13.191571 kernel: devtmpfs: initialized Oct 2 19:13:13.191590 kernel: KASLR disabled due to lack of seed Oct 2 19:13:13.191606 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:13:13.191622 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:13:13.191647 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:13:13.191667 kernel: SMBIOS 3.0.0 present. Oct 2 19:13:13.191683 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Oct 2 19:13:13.191718 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:13:13.191737 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 19:13:13.191754 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 19:13:13.191770 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 19:13:13.191786 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:13:13.191803 kernel: audit: type=2000 audit(0.251:1): state=initialized audit_enabled=0 res=1 Oct 2 19:13:13.191839 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:13:13.191860 kernel: cpuidle: using governor menu Oct 2 19:13:13.191876 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 19:13:13.191893 kernel: ASID allocator initialised with 32768 entries Oct 2 19:13:13.191909 kernel: ACPI: bus type PCI registered Oct 2 19:13:13.191949 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:13:13.191966 kernel: Serial: AMBA PL011 UART driver Oct 2 19:13:13.191983 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:13:13.191999 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 19:13:13.192015 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:13:13.192031 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 19:13:13.192047 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:13:13.192063 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 19:13:13.192080 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:13:13.192100 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:13:13.192116 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:13:13.192132 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:13:13.192148 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:13:13.192163 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:13:13.192180 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:13:13.192196 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:13:13.192212 kernel: ACPI: Interpreter enabled Oct 2 19:13:13.192228 kernel: ACPI: Using GIC for interrupt routing Oct 2 19:13:13.192248 kernel: ACPI: MCFG table detected, 1 entries Oct 2 19:13:13.192264 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Oct 2 19:13:13.192680 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:13:13.192881 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 2 19:13:13.196205 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 2 19:13:13.196432 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Oct 2 19:13:13.196634 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Oct 2 19:13:13.196667 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Oct 2 19:13:13.196685 kernel: acpiphp: Slot [1] registered Oct 2 19:13:13.196702 kernel: acpiphp: Slot [2] registered Oct 2 19:13:13.196719 kernel: acpiphp: Slot [3] registered Oct 2 19:13:13.196736 kernel: acpiphp: Slot [4] registered Oct 2 19:13:13.196753 kernel: acpiphp: Slot [5] registered Oct 2 19:13:13.196769 kernel: acpiphp: Slot [6] registered Oct 2 19:13:13.196785 kernel: acpiphp: Slot [7] registered Oct 2 19:13:13.196800 kernel: acpiphp: Slot [8] registered Oct 2 19:13:13.196820 kernel: acpiphp: Slot [9] registered Oct 2 19:13:13.196836 kernel: acpiphp: Slot [10] registered Oct 2 19:13:13.196852 kernel: acpiphp: Slot [11] registered Oct 2 19:13:13.196869 kernel: acpiphp: Slot [12] registered Oct 2 19:13:13.196885 kernel: acpiphp: Slot [13] registered Oct 2 19:13:13.196902 kernel: acpiphp: Slot [14] registered Oct 2 19:13:13.197860 kernel: acpiphp: Slot [15] registered Oct 2 19:13:13.197892 kernel: acpiphp: Slot [16] registered Oct 2 19:13:13.197908 kernel: acpiphp: Slot [17] registered Oct 2 19:13:13.197952 kernel: acpiphp: Slot [18] registered Oct 2 19:13:13.197977 kernel: acpiphp: Slot [19] registered Oct 2 19:13:13.197993 kernel: acpiphp: Slot [20] registered Oct 2 19:13:13.198009 kernel: acpiphp: Slot [21] registered Oct 2 19:13:13.198025 kernel: acpiphp: Slot [22] registered Oct 2 19:13:13.198041 kernel: acpiphp: Slot [23] registered Oct 2 19:13:13.198057 kernel: acpiphp: Slot [24] registered Oct 2 19:13:13.198073 kernel: acpiphp: Slot [25] registered Oct 2 19:13:13.198089 kernel: acpiphp: Slot [26] registered Oct 2 19:13:13.198105 kernel: acpiphp: Slot [27] registered Oct 2 19:13:13.198125 kernel: acpiphp: Slot [28] registered Oct 2 19:13:13.198141 kernel: acpiphp: Slot [29] registered Oct 2 19:13:13.198157 kernel: acpiphp: Slot [30] registered Oct 2 19:13:13.198173 kernel: acpiphp: Slot [31] registered Oct 2 19:13:13.198189 kernel: PCI host bridge to bus 0000:00 Oct 2 19:13:13.198429 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Oct 2 19:13:13.198609 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 2 19:13:13.198787 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Oct 2 19:13:13.199002 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Oct 2 19:13:13.199235 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Oct 2 19:13:13.199455 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Oct 2 19:13:13.199659 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Oct 2 19:13:13.199890 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Oct 2 19:13:13.207036 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Oct 2 19:13:13.207267 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 19:13:13.207482 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Oct 2 19:13:13.207685 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Oct 2 19:13:13.207910 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Oct 2 19:13:13.208150 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Oct 2 19:13:13.208349 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 19:13:13.208549 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Oct 2 19:13:13.208750 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Oct 2 19:13:13.208966 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Oct 2 19:13:13.209165 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Oct 2 19:13:13.209372 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Oct 2 19:13:13.209562 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Oct 2 19:13:13.209747 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 2 19:13:13.209951 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Oct 2 19:13:13.209982 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 2 19:13:13.210000 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 2 19:13:13.210017 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 2 19:13:13.210034 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 2 19:13:13.210050 kernel: iommu: Default domain type: Translated Oct 2 19:13:13.210067 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 19:13:13.210083 kernel: vgaarb: loaded Oct 2 19:13:13.210099 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:13:13.210116 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:13:13.210135 kernel: PTP clock support registered Oct 2 19:13:13.210152 kernel: Registered efivars operations Oct 2 19:13:13.210169 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 19:13:13.210185 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:13:13.210201 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:13:13.210217 kernel: pnp: PnP ACPI init Oct 2 19:13:13.218064 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Oct 2 19:13:13.218112 kernel: pnp: PnP ACPI: found 1 devices Oct 2 19:13:13.218131 kernel: NET: Registered PF_INET protocol family Oct 2 19:13:13.218159 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:13:13.218179 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:13:13.218196 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:13:13.218213 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:13:13.218229 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:13:13.218245 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:13:13.218262 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:13:13.218278 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:13:13.218295 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:13:13.218316 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:13:13.218332 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Oct 2 19:13:13.218348 kernel: kvm [1]: HYP mode not available Oct 2 19:13:13.218364 kernel: Initialise system trusted keyrings Oct 2 19:13:13.218381 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:13:13.218397 kernel: Key type asymmetric registered Oct 2 19:13:13.218413 kernel: Asymmetric key parser 'x509' registered Oct 2 19:13:13.218429 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:13:13.218445 kernel: io scheduler mq-deadline registered Oct 2 19:13:13.218466 kernel: io scheduler kyber registered Oct 2 19:13:13.218482 kernel: io scheduler bfq registered Oct 2 19:13:13.218707 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Oct 2 19:13:13.218732 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 2 19:13:13.218750 kernel: ACPI: button: Power Button [PWRB] Oct 2 19:13:13.218766 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:13:13.218783 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Oct 2 19:13:13.219012 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Oct 2 19:13:13.219043 kernel: printk: console [ttyS0] disabled Oct 2 19:13:13.219061 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Oct 2 19:13:13.219077 kernel: printk: console [ttyS0] enabled Oct 2 19:13:13.219093 kernel: printk: bootconsole [uart0] disabled Oct 2 19:13:13.219109 kernel: thunder_xcv, ver 1.0 Oct 2 19:13:13.219125 kernel: thunder_bgx, ver 1.0 Oct 2 19:13:13.219141 kernel: nicpf, ver 1.0 Oct 2 19:13:13.219157 kernel: nicvf, ver 1.0 Oct 2 19:13:13.219358 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 19:13:13.219552 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T19:13:12 UTC (1696273992) Oct 2 19:13:13.219576 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:13:13.219592 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:13:13.219608 kernel: Segment Routing with IPv6 Oct 2 19:13:13.219625 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:13:13.219641 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:13:13.219657 kernel: Key type dns_resolver registered Oct 2 19:13:13.219673 kernel: registered taskstats version 1 Oct 2 19:13:13.219708 kernel: Loading compiled-in X.509 certificates Oct 2 19:13:13.219731 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 19:13:13.219749 kernel: Key type .fscrypt registered Oct 2 19:13:13.219765 kernel: Key type fscrypt-provisioning registered Oct 2 19:13:13.219781 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:13:13.219797 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:13:13.219813 kernel: ima: No architecture policies found Oct 2 19:13:13.219829 kernel: Freeing unused kernel memory: 34560K Oct 2 19:13:13.219845 kernel: Run /init as init process Oct 2 19:13:13.219865 kernel: with arguments: Oct 2 19:13:13.219881 kernel: /init Oct 2 19:13:13.219897 kernel: with environment: Oct 2 19:13:13.219926 kernel: HOME=/ Oct 2 19:13:13.219947 kernel: TERM=linux Oct 2 19:13:13.219963 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:13:13.219984 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:13:13.220009 systemd[1]: Detected virtualization amazon. Oct 2 19:13:13.220032 systemd[1]: Detected architecture arm64. Oct 2 19:13:13.220050 systemd[1]: Running in initrd. Oct 2 19:13:13.220067 systemd[1]: No hostname configured, using default hostname. Oct 2 19:13:13.220085 systemd[1]: Hostname set to . Oct 2 19:13:13.220103 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:13:13.220120 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:13:13.220138 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:13:13.220156 systemd[1]: Reached target cryptsetup.target. Oct 2 19:13:13.220177 systemd[1]: Reached target paths.target. Oct 2 19:13:13.220195 systemd[1]: Reached target slices.target. Oct 2 19:13:13.220212 systemd[1]: Reached target swap.target. Oct 2 19:13:13.220229 systemd[1]: Reached target timers.target. Oct 2 19:13:13.220247 systemd[1]: Listening on iscsid.socket. Oct 2 19:13:13.220265 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:13:13.220283 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:13:13.220301 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:13:13.220323 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:13:13.220341 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:13:13.220358 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:13:13.220376 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:13:13.220393 systemd[1]: Reached target sockets.target. Oct 2 19:13:13.220411 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:13:13.220429 systemd[1]: Finished network-cleanup.service. Oct 2 19:13:13.220447 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:13:13.220464 systemd[1]: Starting systemd-journald.service... Oct 2 19:13:13.220486 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:13:13.220503 systemd[1]: Starting systemd-resolved.service... Oct 2 19:13:13.220521 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:13:13.220539 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:13:13.220556 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:13:13.220574 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:13:13.220592 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:13:13.220609 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:13:13.220627 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:13:13.220650 kernel: audit: type=1130 audit(1696273993.165:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.220671 systemd-journald[308]: Journal started Oct 2 19:13:13.220754 systemd-journald[308]: Runtime Journal (/run/log/journal/ec2c70c1aef8794fd003d6351e453e30) is 8.0M, max 75.4M, 67.4M free. Oct 2 19:13:13.165000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.158986 systemd-modules-load[309]: Inserted module 'overlay' Oct 2 19:13:13.250086 systemd[1]: Started systemd-journald.service. Oct 2 19:13:13.250781 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:13:13.251141 kernel: Bridge firewalling registered Oct 2 19:13:13.251316 kernel: audit: type=1130 audit(1696273993.241:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.241000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.211253 systemd-resolved[310]: Positive Trust Anchors: Oct 2 19:13:13.260820 kernel: audit: type=1130 audit(1696273993.250:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.250000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.211269 systemd-resolved[310]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:13:13.211321 systemd-resolved[310]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:13:13.232505 systemd-modules-load[309]: Inserted module 'br_netfilter' Oct 2 19:13:13.242752 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:13:13.264329 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:13:13.287935 kernel: SCSI subsystem initialized Oct 2 19:13:13.304942 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:13:13.310746 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:13:13.310801 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:13:13.315220 systemd-modules-load[309]: Inserted module 'dm_multipath' Oct 2 19:13:13.320588 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:13:13.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.325305 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:13:13.337621 kernel: audit: type=1130 audit(1696273993.322:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.348053 dracut-cmdline[326]: dracut-dracut-053 Oct 2 19:13:13.359640 dracut-cmdline[326]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:13:13.389388 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:13:13.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.401950 kernel: audit: type=1130 audit(1696273993.391:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.607943 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:13:13.618943 kernel: iscsi: registered transport (tcp) Oct 2 19:13:13.645324 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:13:13.645396 kernel: QLogic iSCSI HBA Driver Oct 2 19:13:13.803984 kernel: random: crng init done Oct 2 19:13:13.804041 systemd-resolved[310]: Defaulting to hostname 'linux'. Oct 2 19:13:13.807797 systemd[1]: Started systemd-resolved.service. Oct 2 19:13:13.821147 kernel: audit: type=1130 audit(1696273993.808:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.808000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.810134 systemd[1]: Reached target nss-lookup.target. Oct 2 19:13:13.872498 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:13:13.876000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.879508 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:13:13.888490 kernel: audit: type=1130 audit(1696273993.876:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.972953 kernel: raid6: neonx8 gen() 6388 MB/s Oct 2 19:13:13.990939 kernel: raid6: neonx8 xor() 4743 MB/s Oct 2 19:13:14.008944 kernel: raid6: neonx4 gen() 6448 MB/s Oct 2 19:13:14.026938 kernel: raid6: neonx4 xor() 4901 MB/s Oct 2 19:13:14.044943 kernel: raid6: neonx2 gen() 5736 MB/s Oct 2 19:13:14.062941 kernel: raid6: neonx2 xor() 4517 MB/s Oct 2 19:13:14.080946 kernel: raid6: neonx1 gen() 4458 MB/s Oct 2 19:13:14.098945 kernel: raid6: neonx1 xor() 3677 MB/s Oct 2 19:13:14.116945 kernel: raid6: int64x8 gen() 3410 MB/s Oct 2 19:13:14.134946 kernel: raid6: int64x8 xor() 2098 MB/s Oct 2 19:13:14.152945 kernel: raid6: int64x4 gen() 3755 MB/s Oct 2 19:13:14.170945 kernel: raid6: int64x4 xor() 2203 MB/s Oct 2 19:13:14.188945 kernel: raid6: int64x2 gen() 3580 MB/s Oct 2 19:13:14.206945 kernel: raid6: int64x2 xor() 1954 MB/s Oct 2 19:13:14.224944 kernel: raid6: int64x1 gen() 2767 MB/s Oct 2 19:13:14.244716 kernel: raid6: int64x1 xor() 1453 MB/s Oct 2 19:13:14.244745 kernel: raid6: using algorithm neonx4 gen() 6448 MB/s Oct 2 19:13:14.244774 kernel: raid6: .... xor() 4901 MB/s, rmw enabled Oct 2 19:13:14.246574 kernel: raid6: using neon recovery algorithm Oct 2 19:13:14.264951 kernel: xor: measuring software checksum speed Oct 2 19:13:14.267948 kernel: 8regs : 9333 MB/sec Oct 2 19:13:14.269945 kernel: 32regs : 11112 MB/sec Oct 2 19:13:14.274436 kernel: arm64_neon : 9563 MB/sec Oct 2 19:13:14.274467 kernel: xor: using function: 32regs (11112 MB/sec) Oct 2 19:13:14.364966 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 19:13:14.402016 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:13:14.402000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:14.411000 audit: BPF prog-id=7 op=LOAD Oct 2 19:13:14.415338 kernel: audit: type=1130 audit(1696273994.402:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:14.415389 kernel: audit: type=1334 audit(1696273994.411:10): prog-id=7 op=LOAD Oct 2 19:13:14.413429 systemd[1]: Starting systemd-udevd.service... Oct 2 19:13:14.411000 audit: BPF prog-id=8 op=LOAD Oct 2 19:13:14.451635 systemd-udevd[508]: Using default interface naming scheme 'v252'. Oct 2 19:13:14.462514 systemd[1]: Started systemd-udevd.service. Oct 2 19:13:14.469520 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:13:14.466000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:14.540688 dracut-pre-trigger[524]: rd.md=0: removing MD RAID activation Oct 2 19:13:14.647339 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:13:14.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:14.652006 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:13:14.761617 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:13:14.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:14.895258 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 2 19:13:14.895343 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Oct 2 19:13:14.903504 kernel: ena 0000:00:05.0: ENA device version: 0.10 Oct 2 19:13:14.903818 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Oct 2 19:13:14.910963 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Oct 2 19:13:14.917482 kernel: nvme nvme0: pci function 0000:00:04.0 Oct 2 19:13:14.917803 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:96:a8:e3:73:4d Oct 2 19:13:14.925966 kernel: nvme nvme0: 2/0/0 default/read/poll queues Oct 2 19:13:14.932178 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 19:13:14.932221 kernel: GPT:9289727 != 16777215 Oct 2 19:13:14.932245 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 19:13:14.934397 kernel: GPT:9289727 != 16777215 Oct 2 19:13:14.935723 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 19:13:14.939206 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:13:14.942185 (udev-worker)[570]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:13:15.027983 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (563) Oct 2 19:13:15.115364 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:13:15.192053 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:13:15.243078 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:13:15.247663 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:13:15.269974 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:13:15.271543 systemd[1]: Starting disk-uuid.service... Oct 2 19:13:15.299954 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:13:15.304952 disk-uuid[667]: Primary Header is updated. Oct 2 19:13:15.304952 disk-uuid[667]: Secondary Entries is updated. Oct 2 19:13:15.304952 disk-uuid[667]: Secondary Header is updated. Oct 2 19:13:16.336744 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:13:16.337701 disk-uuid[668]: The operation has completed successfully. Oct 2 19:13:16.601162 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:13:16.601706 systemd[1]: Finished disk-uuid.service. Oct 2 19:13:16.603000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:16.605000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:16.617752 systemd[1]: Starting verity-setup.service... Oct 2 19:13:16.658953 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 19:13:16.751231 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:13:16.757369 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:13:16.771166 systemd[1]: Finished verity-setup.service. Oct 2 19:13:16.773000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:16.776552 kernel: kauditd_printk_skb: 6 callbacks suppressed Oct 2 19:13:16.776597 kernel: audit: type=1130 audit(1696273996.773:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:16.855951 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:13:16.856535 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:13:16.859553 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:13:16.863451 systemd[1]: Starting ignition-setup.service... Oct 2 19:13:16.866272 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:13:16.903366 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:13:16.903430 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:13:16.905627 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:13:16.922951 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:13:16.956075 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:13:17.034410 systemd[1]: Finished ignition-setup.service. Oct 2 19:13:17.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.037684 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:13:17.050961 kernel: audit: type=1130 audit(1696273997.035:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.236407 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:13:17.234000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.246000 audit: BPF prog-id=9 op=LOAD Oct 2 19:13:17.250096 kernel: audit: type=1130 audit(1696273997.234:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.250148 kernel: audit: type=1334 audit(1696273997.246:20): prog-id=9 op=LOAD Oct 2 19:13:17.248451 systemd[1]: Starting systemd-networkd.service... Oct 2 19:13:17.310966 systemd-networkd[1013]: lo: Link UP Oct 2 19:13:17.310989 systemd-networkd[1013]: lo: Gained carrier Oct 2 19:13:17.314348 systemd-networkd[1013]: Enumeration completed Oct 2 19:13:17.314873 systemd-networkd[1013]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:13:17.317000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.315020 systemd[1]: Started systemd-networkd.service. Oct 2 19:13:17.332538 kernel: audit: type=1130 audit(1696273997.317:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.328974 systemd[1]: Reached target network.target. Oct 2 19:13:17.334741 systemd[1]: Starting iscsiuio.service... Oct 2 19:13:17.338066 systemd-networkd[1013]: eth0: Link UP Oct 2 19:13:17.338270 systemd-networkd[1013]: eth0: Gained carrier Oct 2 19:13:17.357791 systemd[1]: Started iscsiuio.service. Oct 2 19:13:17.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.362332 systemd[1]: Starting iscsid.service... Oct 2 19:13:17.374006 kernel: audit: type=1130 audit(1696273997.359:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.368703 systemd-networkd[1013]: eth0: DHCPv4 address 172.31.20.139/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:13:17.382022 iscsid[1018]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:13:17.382022 iscsid[1018]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:13:17.382022 iscsid[1018]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:13:17.382022 iscsid[1018]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:13:17.382022 iscsid[1018]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:13:17.403875 iscsid[1018]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:13:17.417684 systemd[1]: Started iscsid.service. Oct 2 19:13:17.418000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.428755 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:13:17.434526 kernel: audit: type=1130 audit(1696273997.418:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.471610 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:13:17.483248 kernel: audit: type=1130 audit(1696273997.471:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.471000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.474581 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:13:17.485070 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:13:17.488349 systemd[1]: Reached target remote-fs.target. Oct 2 19:13:17.492752 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:13:17.526978 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:13:17.525000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.538130 kernel: audit: type=1130 audit(1696273997.525:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.687265 ignition[945]: Ignition 2.14.0 Oct 2 19:13:17.687312 ignition[945]: Stage: fetch-offline Oct 2 19:13:17.687731 ignition[945]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:17.688951 ignition[945]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:13:17.711095 ignition[945]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:13:17.712061 ignition[945]: Ignition finished successfully Oct 2 19:13:17.717338 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:13:17.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.722580 systemd[1]: Starting ignition-fetch.service... Oct 2 19:13:17.732667 kernel: audit: type=1130 audit(1696273997.717:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.753272 ignition[1037]: Ignition 2.14.0 Oct 2 19:13:17.753301 ignition[1037]: Stage: fetch Oct 2 19:13:17.753647 ignition[1037]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:17.753704 ignition[1037]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:13:17.769704 ignition[1037]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:13:17.772140 ignition[1037]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:13:17.781118 ignition[1037]: INFO : PUT result: OK Oct 2 19:13:17.783891 ignition[1037]: DEBUG : parsed url from cmdline: "" Oct 2 19:13:17.783891 ignition[1037]: INFO : no config URL provided Oct 2 19:13:17.783891 ignition[1037]: INFO : reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:13:17.783891 ignition[1037]: INFO : no config at "/usr/lib/ignition/user.ign" Oct 2 19:13:17.783891 ignition[1037]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:13:17.794635 ignition[1037]: INFO : PUT result: OK Oct 2 19:13:17.794635 ignition[1037]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Oct 2 19:13:17.799025 ignition[1037]: INFO : GET result: OK Oct 2 19:13:17.799025 ignition[1037]: DEBUG : parsing config with SHA512: b23711383f23e7c5c65af579700976a805e11bfea5c8f95d4487749a57291d8e46105c8d38061aa6d30c613c4512471f2bb17959f6ae51a135b53906792139f9 Oct 2 19:13:17.839687 unknown[1037]: fetched base config from "system" Oct 2 19:13:17.839728 unknown[1037]: fetched base config from "system" Oct 2 19:13:17.839752 unknown[1037]: fetched user config from "aws" Oct 2 19:13:17.844312 ignition[1037]: fetch: fetch complete Oct 2 19:13:17.844327 ignition[1037]: fetch: fetch passed Oct 2 19:13:17.844416 ignition[1037]: Ignition finished successfully Oct 2 19:13:17.851102 systemd[1]: Finished ignition-fetch.service. Oct 2 19:13:17.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.855975 systemd[1]: Starting ignition-kargs.service... Oct 2 19:13:17.893703 ignition[1043]: Ignition 2.14.0 Oct 2 19:13:17.894375 ignition[1043]: Stage: kargs Oct 2 19:13:17.894744 ignition[1043]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:17.894801 ignition[1043]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:13:17.927966 ignition[1043]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:13:17.930323 ignition[1043]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:13:17.934337 ignition[1043]: INFO : PUT result: OK Oct 2 19:13:17.939258 ignition[1043]: kargs: kargs passed Oct 2 19:13:17.939361 ignition[1043]: Ignition finished successfully Oct 2 19:13:17.943729 systemd[1]: Finished ignition-kargs.service. Oct 2 19:13:17.944000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.948347 systemd[1]: Starting ignition-disks.service... Oct 2 19:13:17.976567 ignition[1049]: Ignition 2.14.0 Oct 2 19:13:17.976598 ignition[1049]: Stage: disks Oct 2 19:13:17.977006 ignition[1049]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:17.977064 ignition[1049]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:13:17.991719 ignition[1049]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:13:17.994074 ignition[1049]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:13:17.997282 ignition[1049]: INFO : PUT result: OK Oct 2 19:13:18.002141 ignition[1049]: disks: disks passed Oct 2 19:13:18.002240 ignition[1049]: Ignition finished successfully Oct 2 19:13:18.006538 systemd[1]: Finished ignition-disks.service. Oct 2 19:13:18.007000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:18.009875 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:13:18.013402 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:13:18.016513 systemd[1]: Reached target local-fs.target. Oct 2 19:13:18.018198 systemd[1]: Reached target sysinit.target. Oct 2 19:13:18.021126 systemd[1]: Reached target basic.target. Oct 2 19:13:18.026846 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:13:18.088972 systemd-fsck[1057]: ROOT: clean, 603/553520 files, 56011/553472 blocks Oct 2 19:13:18.098359 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:13:18.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:18.102032 systemd[1]: Mounting sysroot.mount... Oct 2 19:13:18.132952 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:13:18.136731 systemd[1]: Mounted sysroot.mount. Oct 2 19:13:18.139252 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:13:18.151728 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:13:18.155488 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:13:18.155581 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:13:18.155636 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:13:18.172657 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:13:18.192115 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:13:18.197043 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:13:18.225958 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1074) Oct 2 19:13:18.232462 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:13:18.232509 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:13:18.232534 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:13:18.234962 initrd-setup-root[1079]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:13:18.248969 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:13:18.252404 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:13:18.263723 initrd-setup-root[1105]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:13:18.281658 initrd-setup-root[1113]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:13:18.299399 initrd-setup-root[1121]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:13:18.536224 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:13:18.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:18.540887 systemd[1]: Starting ignition-mount.service... Oct 2 19:13:18.545482 systemd[1]: Starting sysroot-boot.service... Oct 2 19:13:18.574352 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:13:18.574516 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:13:18.608612 systemd[1]: Finished sysroot-boot.service. Oct 2 19:13:18.611000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:18.618352 ignition[1140]: INFO : Ignition 2.14.0 Oct 2 19:13:18.622020 ignition[1140]: INFO : Stage: mount Oct 2 19:13:18.622020 ignition[1140]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:18.622020 ignition[1140]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:13:18.638352 ignition[1140]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:13:18.638352 ignition[1140]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:13:18.644762 ignition[1140]: INFO : PUT result: OK Oct 2 19:13:18.649791 ignition[1140]: INFO : mount: mount passed Oct 2 19:13:18.651460 ignition[1140]: INFO : Ignition finished successfully Oct 2 19:13:18.654660 systemd[1]: Finished ignition-mount.service. Oct 2 19:13:18.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:18.659205 systemd[1]: Starting ignition-files.service... Oct 2 19:13:18.681631 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:13:18.705954 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1149) Oct 2 19:13:18.712085 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:13:18.712127 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:13:18.712151 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:13:18.720949 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:13:18.725891 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:13:18.760046 ignition[1168]: INFO : Ignition 2.14.0 Oct 2 19:13:18.760046 ignition[1168]: INFO : Stage: files Oct 2 19:13:18.763444 ignition[1168]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:18.763444 ignition[1168]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:13:18.781491 ignition[1168]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:13:18.784093 ignition[1168]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:13:18.787805 ignition[1168]: INFO : PUT result: OK Oct 2 19:13:18.793029 ignition[1168]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:13:18.797696 ignition[1168]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:13:18.800555 ignition[1168]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:13:18.813092 systemd-networkd[1013]: eth0: Gained IPv6LL Oct 2 19:13:18.828726 ignition[1168]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:13:18.831614 ignition[1168]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:13:18.834405 ignition[1168]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:13:18.833303 unknown[1168]: wrote ssh authorized keys file for user: core Oct 2 19:13:18.839363 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 19:13:18.839363 ignition[1168]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Oct 2 19:13:19.171180 ignition[1168]: INFO : GET result: OK Oct 2 19:13:19.769729 ignition[1168]: DEBUG : file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Oct 2 19:13:19.774525 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 19:13:19.774525 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 19:13:19.782352 ignition[1168]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Oct 2 19:13:20.006979 ignition[1168]: INFO : GET result: OK Oct 2 19:13:20.286123 ignition[1168]: DEBUG : file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Oct 2 19:13:20.290973 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 19:13:20.290973 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:13:20.299315 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:13:20.299315 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:13:20.299315 ignition[1168]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:13:20.320563 ignition[1168]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem993998477" Oct 2 19:13:20.328027 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1168) Oct 2 19:13:20.328064 ignition[1168]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem993998477": device or resource busy Oct 2 19:13:20.328064 ignition[1168]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem993998477", trying btrfs: device or resource busy Oct 2 19:13:20.328064 ignition[1168]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem993998477" Oct 2 19:13:20.328064 ignition[1168]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem993998477" Oct 2 19:13:20.350299 ignition[1168]: INFO : op(3): [started] unmounting "/mnt/oem993998477" Oct 2 19:13:20.352705 systemd[1]: mnt-oem993998477.mount: Deactivated successfully. Oct 2 19:13:20.359728 ignition[1168]: INFO : op(3): [finished] unmounting "/mnt/oem993998477" Oct 2 19:13:20.359728 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:13:20.359728 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:13:20.359728 ignition[1168]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubeadm: attempt #1 Oct 2 19:13:20.456229 ignition[1168]: INFO : GET result: OK Oct 2 19:13:21.663434 ignition[1168]: DEBUG : file matches expected sum of: 45b3100984c979ba0f1c0df8f4211474c2d75ebe916e677dff5fc8e3b3697cf7a953da94e356f39684cc860dff6878b772b7514c55651c2f866d9efeef23f970 Oct 2 19:13:21.668650 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:13:21.668650 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:13:21.668650 ignition[1168]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubelet: attempt #1 Oct 2 19:13:21.722235 ignition[1168]: INFO : GET result: OK Oct 2 19:13:23.071359 ignition[1168]: DEBUG : file matches expected sum of: 71857ff499ae135fa478e1827a0ed8865e578a8d2b1e25876e914fd0beba03733801c0654bcd4c0567bafeb16887dafb2dbbe8d1116e6ea28dcd8366c142d348 Oct 2 19:13:23.076441 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:13:23.076441 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:13:23.076441 ignition[1168]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubectl: attempt #1 Oct 2 19:13:23.123943 ignition[1168]: INFO : GET result: OK Oct 2 19:13:23.839168 ignition[1168]: DEBUG : file matches expected sum of: 14be61ec35669a27acf2df0380afb85b9b42311d50ca1165718421c5f605df1119ec9ae314696a674051712e80deeaa65e62d2d62ed4d107fe99d0aaf419dafc Oct 2 19:13:23.843991 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:13:23.843991 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:13:23.850815 ignition[1168]: INFO : GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 19:13:24.080052 ignition[1168]: INFO : GET result: OK Oct 2 19:13:24.230412 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:13:24.234112 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:13:24.237957 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:13:24.241715 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:13:24.241715 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:13:24.241715 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:13:24.241715 ignition[1168]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:13:24.263549 ignition[1168]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3233268987" Oct 2 19:13:24.266520 ignition[1168]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3233268987": device or resource busy Oct 2 19:13:24.266520 ignition[1168]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3233268987", trying btrfs: device or resource busy Oct 2 19:13:24.266520 ignition[1168]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3233268987" Oct 2 19:13:24.276440 ignition[1168]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3233268987" Oct 2 19:13:24.276440 ignition[1168]: INFO : op(6): [started] unmounting "/mnt/oem3233268987" Oct 2 19:13:24.281575 ignition[1168]: INFO : op(6): [finished] unmounting "/mnt/oem3233268987" Oct 2 19:13:24.281575 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:13:24.281575 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:13:24.281575 ignition[1168]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:13:24.311901 ignition[1168]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1613463787" Oct 2 19:13:24.315698 ignition[1168]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1613463787": device or resource busy Oct 2 19:13:24.315698 ignition[1168]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1613463787", trying btrfs: device or resource busy Oct 2 19:13:24.315698 ignition[1168]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1613463787" Oct 2 19:13:24.315698 ignition[1168]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1613463787" Oct 2 19:13:24.315698 ignition[1168]: INFO : op(9): [started] unmounting "/mnt/oem1613463787" Oct 2 19:13:24.315698 ignition[1168]: INFO : op(9): [finished] unmounting "/mnt/oem1613463787" Oct 2 19:13:24.315698 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:13:24.315698 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:13:24.315698 ignition[1168]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:13:24.325550 systemd[1]: mnt-oem1613463787.mount: Deactivated successfully. Oct 2 19:13:24.370841 ignition[1168]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2880474896" Oct 2 19:13:24.373834 ignition[1168]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2880474896": device or resource busy Oct 2 19:13:24.373834 ignition[1168]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2880474896", trying btrfs: device or resource busy Oct 2 19:13:24.373834 ignition[1168]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2880474896" Oct 2 19:13:24.386507 ignition[1168]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2880474896" Oct 2 19:13:24.386507 ignition[1168]: INFO : op(c): [started] unmounting "/mnt/oem2880474896" Oct 2 19:13:24.391585 ignition[1168]: INFO : op(c): [finished] unmounting "/mnt/oem2880474896" Oct 2 19:13:24.391585 ignition[1168]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:13:24.391585 ignition[1168]: INFO : files: op(10): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:13:24.391585 ignition[1168]: INFO : files: op(10): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:13:24.391585 ignition[1168]: INFO : files: op(11): [started] processing unit "amazon-ssm-agent.service" Oct 2 19:13:24.391585 ignition[1168]: INFO : files: op(11): op(12): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:13:24.391585 ignition[1168]: INFO : files: op(11): op(12): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:13:24.391585 ignition[1168]: INFO : files: op(11): [finished] processing unit "amazon-ssm-agent.service" Oct 2 19:13:24.391585 ignition[1168]: INFO : files: op(13): [started] processing unit "nvidia.service" Oct 2 19:13:24.391585 ignition[1168]: INFO : files: op(13): [finished] processing unit "nvidia.service" Oct 2 19:13:24.391585 ignition[1168]: INFO : files: op(14): [started] processing unit "prepare-critools.service" Oct 2 19:13:24.391585 ignition[1168]: INFO : files: op(14): op(15): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:13:24.391585 ignition[1168]: INFO : files: op(14): op(15): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:13:24.391585 ignition[1168]: INFO : files: op(14): [finished] processing unit "prepare-critools.service" Oct 2 19:13:24.391585 ignition[1168]: INFO : files: op(16): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:13:24.391585 ignition[1168]: INFO : files: op(16): op(17): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:13:24.391585 ignition[1168]: INFO : files: op(16): op(17): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:13:24.391585 ignition[1168]: INFO : files: op(16): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:13:24.391585 ignition[1168]: INFO : files: op(18): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:13:24.457644 ignition[1168]: INFO : files: op(18): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:13:24.457644 ignition[1168]: INFO : files: op(19): [started] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:13:24.457644 ignition[1168]: INFO : files: op(19): [finished] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:13:24.457644 ignition[1168]: INFO : files: op(1a): [started] setting preset to enabled for "nvidia.service" Oct 2 19:13:24.457644 ignition[1168]: INFO : files: op(1a): [finished] setting preset to enabled for "nvidia.service" Oct 2 19:13:24.457644 ignition[1168]: INFO : files: op(1b): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:13:24.457644 ignition[1168]: INFO : files: op(1b): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:13:24.457644 ignition[1168]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:13:24.457644 ignition[1168]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:13:24.457644 ignition[1168]: INFO : files: createResultFile: createFiles: op(1d): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:13:24.507626 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 19:13:24.507675 kernel: audit: type=1130 audit(1696274004.483:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.483000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.507786 ignition[1168]: INFO : files: createResultFile: createFiles: op(1d): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:13:24.507786 ignition[1168]: INFO : files: files passed Oct 2 19:13:24.507786 ignition[1168]: INFO : Ignition finished successfully Oct 2 19:13:24.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.482343 systemd[1]: Finished ignition-files.service. Oct 2 19:13:24.552592 kernel: audit: type=1130 audit(1696274004.530:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.552632 kernel: audit: type=1131 audit(1696274004.530:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.530000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.507752 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:13:24.507958 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:13:24.509352 systemd[1]: Starting ignition-quench.service... Oct 2 19:13:24.523886 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:13:24.524127 systemd[1]: Finished ignition-quench.service. Oct 2 19:13:24.577072 initrd-setup-root-after-ignition[1193]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:13:24.581882 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:13:24.583000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.585098 systemd[1]: Reached target ignition-complete.target. Oct 2 19:13:24.598747 kernel: audit: type=1130 audit(1696274004.583:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.598561 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:13:24.647973 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:13:24.648904 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:13:24.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.653208 systemd[1]: Reached target initrd-fs.target. Oct 2 19:13:24.669543 kernel: audit: type=1130 audit(1696274004.650:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.669577 kernel: audit: type=1131 audit(1696274004.650:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.671304 systemd[1]: Reached target initrd.target. Oct 2 19:13:24.672905 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:13:24.674438 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:13:24.714944 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:13:24.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.719560 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:13:24.729993 kernel: audit: type=1130 audit(1696274004.717:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.748786 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:13:24.752458 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:13:24.756222 systemd[1]: Stopped target timers.target. Oct 2 19:13:24.759394 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:13:24.759753 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:13:24.762000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.764868 systemd[1]: Stopped target initrd.target. Oct 2 19:13:24.788517 kernel: audit: type=1131 audit(1696274004.762:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.773891 systemd[1]: Stopped target basic.target. Oct 2 19:13:24.775582 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:13:24.777606 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:13:24.823728 kernel: audit: type=1131 audit(1696274004.810:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.810000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.835879 kernel: audit: type=1131 audit(1696274004.824:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.824000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.779582 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:13:24.781643 systemd[1]: Stopped target remote-fs.target. Oct 2 19:13:24.834000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.839000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.783505 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:13:24.862402 iscsid[1018]: iscsid shutting down. Oct 2 19:13:24.785494 systemd[1]: Stopped target sysinit.target. Oct 2 19:13:24.787834 systemd[1]: Stopped target local-fs.target. Oct 2 19:13:24.790369 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:13:24.808058 systemd[1]: Stopped target swap.target. Oct 2 19:13:24.810041 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:13:24.810323 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:13:24.820339 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:13:24.823404 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:13:24.823727 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:13:24.906000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.825776 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:13:24.833842 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:13:24.917000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.926951 ignition[1206]: INFO : Ignition 2.14.0 Oct 2 19:13:24.926951 ignition[1206]: INFO : Stage: umount Oct 2 19:13:24.926951 ignition[1206]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:24.926951 ignition[1206]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:13:24.925000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.836845 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:13:24.837830 systemd[1]: Stopped ignition-files.service. Oct 2 19:13:24.964000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.970000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.970000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.852141 systemd[1]: Stopping ignition-mount.service... Oct 2 19:13:24.854134 systemd[1]: Stopping iscsid.service... Oct 2 19:13:24.864650 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:13:24.982000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.987619 ignition[1206]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:13:24.987619 ignition[1206]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:13:24.903412 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:13:24.998092 ignition[1206]: INFO : PUT result: OK Oct 2 19:13:24.998092 ignition[1206]: INFO : umount: umount passed Oct 2 19:13:24.903728 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:13:25.003091 ignition[1206]: INFO : Ignition finished successfully Oct 2 19:13:24.908517 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:13:24.908749 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:13:24.921857 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:13:24.922464 systemd[1]: Stopped iscsid.service. Oct 2 19:13:24.931306 systemd[1]: Stopping iscsiuio.service... Oct 2 19:13:24.955785 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:13:25.016000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.956079 systemd[1]: Stopped iscsiuio.service. Oct 2 19:13:24.966608 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:13:24.966804 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:13:24.976973 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:13:25.027000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.977163 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:13:25.000331 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:13:25.000514 systemd[1]: Stopped ignition-mount.service. Oct 2 19:13:25.018051 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:13:25.018145 systemd[1]: Stopped ignition-disks.service. Oct 2 19:13:25.041000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.029200 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:13:25.044000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.029282 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:13:25.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.043793 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:13:25.044149 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:13:25.065000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.046207 systemd[1]: Stopped target network.target. Oct 2 19:13:25.049342 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:13:25.077000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.049424 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:13:25.051254 systemd[1]: Stopped target paths.target. Oct 2 19:13:25.052730 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:13:25.055988 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:13:25.058037 systemd[1]: Stopped target slices.target. Oct 2 19:13:25.059553 systemd[1]: Stopped target sockets.target. Oct 2 19:13:25.101000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.061243 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:13:25.061312 systemd[1]: Closed iscsid.socket. Oct 2 19:13:25.062777 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:13:25.062848 systemd[1]: Closed iscsiuio.socket. Oct 2 19:13:25.115000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.064337 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:13:25.064417 systemd[1]: Stopped ignition-setup.service. Oct 2 19:13:25.120000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.066120 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:13:25.066194 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:13:25.068378 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:13:25.070030 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:13:25.073018 systemd-networkd[1013]: eth0: DHCPv6 lease lost Oct 2 19:13:25.128000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:13:25.076901 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:13:25.077200 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:13:25.080684 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:13:25.080755 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:13:25.085381 systemd[1]: Stopping network-cleanup.service... Oct 2 19:13:25.099519 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:13:25.101007 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:13:25.107415 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:13:25.107509 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:13:25.119048 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:13:25.119130 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:13:25.134413 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:13:25.169015 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:13:25.171154 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:13:25.172000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.175115 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:13:25.177301 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:13:25.178000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.182000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:13:25.182075 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:13:25.191000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.194000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.182194 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:13:25.188547 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:13:25.188623 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:13:25.204000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.190535 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:13:25.190622 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:13:25.192594 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:13:25.192675 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:13:25.195998 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:13:25.196095 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:13:25.207626 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:13:25.235000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.221531 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 19:13:25.239000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.241000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.244000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.222073 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 19:13:25.238886 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:13:25.239004 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:13:25.240828 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:13:25.240908 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:13:25.243558 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:13:25.243769 systemd[1]: Stopped network-cleanup.service. Oct 2 19:13:25.265936 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:13:25.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.267000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.266160 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:13:25.268959 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:13:25.277892 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:13:25.294884 systemd[1]: mnt-oem2880474896.mount: Deactivated successfully. Oct 2 19:13:25.295148 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:13:25.295265 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:13:25.295368 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 2 19:13:25.309253 systemd[1]: Switching root. Oct 2 19:13:25.337135 systemd-journald[308]: Journal stopped Oct 2 19:13:31.738770 systemd-journald[308]: Received SIGTERM from PID 1 (systemd). Oct 2 19:13:31.739435 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:13:31.739550 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:13:31.739586 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:13:31.739620 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:13:31.739653 kernel: SELinux: policy capability open_perms=1 Oct 2 19:13:31.739685 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:13:31.739716 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:13:31.739752 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:13:31.739787 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:13:31.739816 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:13:31.739844 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:13:31.739875 systemd[1]: Successfully loaded SELinux policy in 94.578ms. Oct 2 19:13:31.740099 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 19.516ms. Oct 2 19:13:31.740139 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:13:31.740176 systemd[1]: Detected virtualization amazon. Oct 2 19:13:31.740209 systemd[1]: Detected architecture arm64. Oct 2 19:13:31.740242 systemd[1]: Detected first boot. Oct 2 19:13:31.740272 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:13:31.740304 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:13:31.740337 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:13:31.740373 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:13:31.740408 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:13:31.740501 kernel: kauditd_printk_skb: 40 callbacks suppressed Oct 2 19:13:31.740538 kernel: audit: type=1334 audit(1696274011.229:84): prog-id=12 op=LOAD Oct 2 19:13:31.740571 kernel: audit: type=1334 audit(1696274011.233:85): prog-id=3 op=UNLOAD Oct 2 19:13:31.740601 kernel: audit: type=1334 audit(1696274011.235:86): prog-id=13 op=LOAD Oct 2 19:13:31.740631 kernel: audit: type=1334 audit(1696274011.237:87): prog-id=14 op=LOAD Oct 2 19:13:31.740661 kernel: audit: type=1334 audit(1696274011.237:88): prog-id=4 op=UNLOAD Oct 2 19:13:31.740690 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:13:31.740722 kernel: audit: type=1334 audit(1696274011.237:89): prog-id=5 op=UNLOAD Oct 2 19:13:31.740753 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:13:31.740787 kernel: audit: type=1334 audit(1696274011.240:90): prog-id=15 op=LOAD Oct 2 19:13:31.740815 kernel: audit: type=1334 audit(1696274011.240:91): prog-id=12 op=UNLOAD Oct 2 19:13:31.740844 kernel: audit: type=1334 audit(1696274011.242:92): prog-id=16 op=LOAD Oct 2 19:13:31.740875 kernel: audit: type=1334 audit(1696274011.242:93): prog-id=17 op=LOAD Oct 2 19:13:31.740907 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:13:31.740962 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:13:31.740993 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:13:31.741026 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 19:13:31.741059 systemd[1]: Created slice system-getty.slice. Oct 2 19:13:31.741093 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:13:31.741126 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:13:31.741156 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:13:31.741188 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:13:31.741217 systemd[1]: Created slice user.slice. Oct 2 19:13:31.741248 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:13:31.741278 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:13:31.741312 systemd[1]: Set up automount boot.automount. Oct 2 19:13:31.741343 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:13:31.741375 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:13:31.741410 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:13:31.741440 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:13:31.741473 systemd[1]: Reached target integritysetup.target. Oct 2 19:13:31.741506 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:13:31.751146 systemd[1]: Reached target remote-fs.target. Oct 2 19:13:31.751188 systemd[1]: Reached target slices.target. Oct 2 19:13:31.751219 systemd[1]: Reached target swap.target. Oct 2 19:13:31.751256 systemd[1]: Reached target torcx.target. Oct 2 19:13:31.751287 systemd[1]: Reached target veritysetup.target. Oct 2 19:13:31.751318 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:13:31.751351 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:13:31.751388 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:13:31.751418 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:13:31.751447 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:13:31.751476 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:13:31.751507 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:13:31.751558 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:13:31.751593 systemd[1]: Mounting media.mount... Oct 2 19:13:31.751623 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:13:31.751653 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:13:31.751683 systemd[1]: Mounting tmp.mount... Oct 2 19:13:31.751715 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:13:31.751746 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:13:31.751775 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:13:31.751805 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:13:31.751839 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:13:31.751870 systemd[1]: Starting modprobe@drm.service... Oct 2 19:13:31.751899 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:13:31.758994 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:13:31.759038 systemd[1]: Starting modprobe@loop.service... Oct 2 19:13:31.759074 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:13:31.759106 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:13:31.759137 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:13:31.759169 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:13:31.759206 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:13:31.759238 systemd[1]: Stopped systemd-journald.service. Oct 2 19:13:31.759268 systemd[1]: Starting systemd-journald.service... Oct 2 19:13:31.759297 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:13:31.759328 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:13:31.759358 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:13:31.759387 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:13:31.759421 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:13:31.759451 systemd[1]: Stopped verity-setup.service. Oct 2 19:13:31.759484 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:13:31.759516 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:13:31.759566 systemd[1]: Mounted media.mount. Oct 2 19:13:31.759597 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:13:31.759628 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:13:31.759658 systemd[1]: Mounted tmp.mount. Oct 2 19:13:31.759688 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:13:31.759719 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:13:31.759751 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:13:31.759781 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:13:31.759816 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:13:31.759846 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:13:31.759876 systemd[1]: Reached target network-pre.target. Oct 2 19:13:31.759906 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:13:31.764591 systemd[1]: Finished modprobe@drm.service. Oct 2 19:13:31.764629 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:13:31.764663 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:13:31.764695 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:13:31.764737 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:13:31.764774 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:13:31.764847 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:13:31.764881 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:13:31.764927 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:13:31.764963 kernel: loop: module loaded Oct 2 19:13:31.765060 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:13:31.765097 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:13:31.765131 systemd[1]: Finished modprobe@loop.service. Oct 2 19:13:31.765163 systemd-journald[1317]: Journal started Oct 2 19:13:31.765259 systemd-journald[1317]: Runtime Journal (/run/log/journal/ec2c70c1aef8794fd003d6351e453e30) is 8.0M, max 75.4M, 67.4M free. Oct 2 19:13:26.261000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:13:26.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:13:26.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:13:26.476000 audit: BPF prog-id=10 op=LOAD Oct 2 19:13:26.476000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:13:26.476000 audit: BPF prog-id=11 op=LOAD Oct 2 19:13:26.476000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:13:31.229000 audit: BPF prog-id=12 op=LOAD Oct 2 19:13:31.233000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:13:31.235000 audit: BPF prog-id=13 op=LOAD Oct 2 19:13:31.237000 audit: BPF prog-id=14 op=LOAD Oct 2 19:13:31.237000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:13:31.237000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:13:31.240000 audit: BPF prog-id=15 op=LOAD Oct 2 19:13:31.240000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:13:31.242000 audit: BPF prog-id=16 op=LOAD Oct 2 19:13:31.242000 audit: BPF prog-id=17 op=LOAD Oct 2 19:13:31.242000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:13:31.242000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:13:31.242000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.260000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:13:31.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.264000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.524000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.534000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.538000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.539000 audit: BPF prog-id=18 op=LOAD Oct 2 19:13:31.539000 audit: BPF prog-id=19 op=LOAD Oct 2 19:13:31.774225 systemd[1]: Started systemd-journald.service. Oct 2 19:13:31.539000 audit: BPF prog-id=20 op=LOAD Oct 2 19:13:31.582000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.595000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:13:31.595000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:13:31.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.627000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.627000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.682000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.682000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.700000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.700000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.710000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.710000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.711000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:13:31.711000 audit[1317]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=fffff3639570 a2=4000 a3=1 items=0 ppid=1 pid=1317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:31.711000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:13:31.716000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.767000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.767000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.797183 kernel: fuse: init (API version 7.34) Oct 2 19:13:31.772000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.783000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.227644 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:13:31.798000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.760669 /usr/lib/systemd/system-generators/torcx-generator[1239]: time="2023-10-02T19:13:26Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:13:31.244659 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:13:26.771759 /usr/lib/systemd/system-generators/torcx-generator[1239]: time="2023-10-02T19:13:26Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:13:31.776691 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:13:26.771811 /usr/lib/systemd/system-generators/torcx-generator[1239]: time="2023-10-02T19:13:26Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:13:31.778538 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:13:26.771879 /usr/lib/systemd/system-generators/torcx-generator[1239]: time="2023-10-02T19:13:26Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:13:31.782114 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:13:26.771904 /usr/lib/systemd/system-generators/torcx-generator[1239]: time="2023-10-02T19:13:26Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:13:31.786409 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:13:26.773291 /usr/lib/systemd/system-generators/torcx-generator[1239]: time="2023-10-02T19:13:26Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:13:31.797120 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:13:26.773327 /usr/lib/systemd/system-generators/torcx-generator[1239]: time="2023-10-02T19:13:26Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:13:31.799236 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:13:26.773763 /usr/lib/systemd/system-generators/torcx-generator[1239]: time="2023-10-02T19:13:26Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:13:26.773856 /usr/lib/systemd/system-generators/torcx-generator[1239]: time="2023-10-02T19:13:26Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:13:31.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.810000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.773892 /usr/lib/systemd/system-generators/torcx-generator[1239]: time="2023-10-02T19:13:26Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:13:31.809116 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:13:26.775052 /usr/lib/systemd/system-generators/torcx-generator[1239]: time="2023-10-02T19:13:26Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:13:31.809425 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:13:26.775180 /usr/lib/systemd/system-generators/torcx-generator[1239]: time="2023-10-02T19:13:26Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:13:31.815383 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:13:26.775228 /usr/lib/systemd/system-generators/torcx-generator[1239]: time="2023-10-02T19:13:26Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:13:26.775295 /usr/lib/systemd/system-generators/torcx-generator[1239]: time="2023-10-02T19:13:26Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:13:26.775364 /usr/lib/systemd/system-generators/torcx-generator[1239]: time="2023-10-02T19:13:26Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:13:26.775406 /usr/lib/systemd/system-generators/torcx-generator[1239]: time="2023-10-02T19:13:26Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:13:30.353217 /usr/lib/systemd/system-generators/torcx-generator[1239]: time="2023-10-02T19:13:30Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:13:30.353793 /usr/lib/systemd/system-generators/torcx-generator[1239]: time="2023-10-02T19:13:30Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:13:30.354061 /usr/lib/systemd/system-generators/torcx-generator[1239]: time="2023-10-02T19:13:30Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:13:30.354500 /usr/lib/systemd/system-generators/torcx-generator[1239]: time="2023-10-02T19:13:30Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:13:30.354610 /usr/lib/systemd/system-generators/torcx-generator[1239]: time="2023-10-02T19:13:30Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:13:30.354741 /usr/lib/systemd/system-generators/torcx-generator[1239]: time="2023-10-02T19:13:30Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:13:31.830704 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:13:31.840637 systemd-journald[1317]: Time spent on flushing to /var/log/journal/ec2c70c1aef8794fd003d6351e453e30 is 81.916ms for 1155 entries. Oct 2 19:13:31.840637 systemd-journald[1317]: System Journal (/var/log/journal/ec2c70c1aef8794fd003d6351e453e30) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:13:31.976346 systemd-journald[1317]: Received client request to flush runtime journal. Oct 2 19:13:31.902000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.951000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.901626 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:13:31.950406 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:13:31.980000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.956428 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:13:31.979132 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:13:31.995383 udevadm[1349]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 19:13:32.007252 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:13:32.008000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.011506 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:13:32.168747 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:13:32.169000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.172856 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:13:32.261368 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:13:32.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.769000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.771000 audit: BPF prog-id=21 op=LOAD Oct 2 19:13:32.771000 audit: BPF prog-id=22 op=LOAD Oct 2 19:13:32.771000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:13:32.771000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:13:32.768910 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:13:32.773336 systemd[1]: Starting systemd-udevd.service... Oct 2 19:13:32.821000 systemd-udevd[1361]: Using default interface naming scheme 'v252'. Oct 2 19:13:32.895279 systemd[1]: Started systemd-udevd.service. Oct 2 19:13:32.896000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.897000 audit: BPF prog-id=23 op=LOAD Oct 2 19:13:32.900119 systemd[1]: Starting systemd-networkd.service... Oct 2 19:13:32.915000 audit: BPF prog-id=24 op=LOAD Oct 2 19:13:32.915000 audit: BPF prog-id=25 op=LOAD Oct 2 19:13:32.915000 audit: BPF prog-id=26 op=LOAD Oct 2 19:13:32.922319 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:13:33.007982 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:13:33.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:33.056647 systemd[1]: Started systemd-userdbd.service. Oct 2 19:13:33.108953 (udev-worker)[1368]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:13:33.294178 systemd-networkd[1367]: lo: Link UP Oct 2 19:13:33.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:33.294201 systemd-networkd[1367]: lo: Gained carrier Oct 2 19:13:33.295090 systemd-networkd[1367]: Enumeration completed Oct 2 19:13:33.295322 systemd-networkd[1367]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:13:33.295419 systemd[1]: Started systemd-networkd.service. Oct 2 19:13:33.299643 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:13:33.306003 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:13:33.306882 systemd-networkd[1367]: eth0: Link UP Oct 2 19:13:33.307263 systemd-networkd[1367]: eth0: Gained carrier Oct 2 19:13:33.317212 systemd-networkd[1367]: eth0: DHCPv4 address 172.31.20.139/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:13:33.334956 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1362) Oct 2 19:13:33.548065 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:13:33.551612 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:13:33.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:33.555774 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:13:33.632547 lvm[1480]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:13:33.672793 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:13:33.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:33.674968 systemd[1]: Reached target cryptsetup.target. Oct 2 19:13:33.679024 systemd[1]: Starting lvm2-activation.service... Oct 2 19:13:33.692996 lvm[1481]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:13:33.727820 systemd[1]: Finished lvm2-activation.service. Oct 2 19:13:33.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:33.729837 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:13:33.731838 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:13:33.731885 systemd[1]: Reached target local-fs.target. Oct 2 19:13:33.733942 systemd[1]: Reached target machines.target. Oct 2 19:13:33.738057 systemd[1]: Starting ldconfig.service... Oct 2 19:13:33.740444 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:13:33.740711 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:13:33.743565 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:13:33.747788 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:13:33.753881 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:13:33.755994 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:13:33.756118 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:13:33.758541 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:13:33.789657 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1483 (bootctl) Oct 2 19:13:33.791983 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:13:33.821834 systemd-tmpfiles[1486]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:13:33.824762 systemd-tmpfiles[1486]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:13:33.833708 systemd-tmpfiles[1486]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:13:33.840888 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:13:33.842000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:33.915264 systemd-fsck[1492]: fsck.fat 4.2 (2021-01-31) Oct 2 19:13:33.915264 systemd-fsck[1492]: /dev/nvme0n1p1: 236 files, 113463/258078 clusters Oct 2 19:13:33.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:33.922959 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:13:33.927725 systemd[1]: Mounting boot.mount... Oct 2 19:13:33.968760 systemd[1]: Mounted boot.mount. Oct 2 19:13:33.998699 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:13:33.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:34.165968 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:13:34.167000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:34.170402 systemd[1]: Starting audit-rules.service... Oct 2 19:13:34.174381 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:13:34.183000 audit: BPF prog-id=27 op=LOAD Oct 2 19:13:34.190000 audit: BPF prog-id=28 op=LOAD Oct 2 19:13:34.180995 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:13:34.188455 systemd[1]: Starting systemd-resolved.service... Oct 2 19:13:34.195390 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:13:34.199439 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:13:34.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:34.237456 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:13:34.239630 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:13:34.253000 audit[1511]: SYSTEM_BOOT pid=1511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:13:34.266665 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:13:34.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:34.301711 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:13:34.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:34.389884 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:13:34.391965 systemd[1]: Reached target time-set.target. Oct 2 19:13:34.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:34.399223 systemd-resolved[1509]: Positive Trust Anchors: Oct 2 19:13:34.399249 systemd-resolved[1509]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:13:34.399301 systemd-resolved[1509]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:13:34.463905 systemd-resolved[1509]: Defaulting to hostname 'linux'. Oct 2 19:13:34.469620 systemd[1]: Started systemd-resolved.service. Oct 2 19:13:34.471638 systemd[1]: Reached target network.target. Oct 2 19:13:34.470000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:34.473408 systemd[1]: Reached target nss-lookup.target. Oct 2 19:13:34.476000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:13:34.476000 audit[1527]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd2d20d70 a2=420 a3=0 items=0 ppid=1506 pid=1527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:34.476000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:13:34.477686 augenrules[1527]: No rules Oct 2 19:13:34.479494 systemd[1]: Finished audit-rules.service. Oct 2 19:13:34.499076 systemd-timesyncd[1510]: Contacted time server 5.161.186.39:123 (0.flatcar.pool.ntp.org). Oct 2 19:13:34.499295 systemd-timesyncd[1510]: Initial clock synchronization to Mon 2023-10-02 19:13:34.122074 UTC. Oct 2 19:13:35.000152 ldconfig[1482]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:13:35.005125 systemd-networkd[1367]: eth0: Gained IPv6LL Oct 2 19:13:35.008547 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:13:35.010682 systemd[1]: Reached target network-online.target. Oct 2 19:13:35.050518 systemd[1]: Finished ldconfig.service. Oct 2 19:13:35.054496 systemd[1]: Starting systemd-update-done.service... Oct 2 19:13:35.075829 systemd[1]: Finished systemd-update-done.service. Oct 2 19:13:35.077956 systemd[1]: Reached target sysinit.target. Oct 2 19:13:35.079836 systemd[1]: Started motdgen.path. Oct 2 19:13:35.081446 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:13:35.084423 systemd[1]: Started logrotate.timer. Oct 2 19:13:35.086261 systemd[1]: Started mdadm.timer. Oct 2 19:13:35.087740 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:13:35.089553 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:13:35.089712 systemd[1]: Reached target paths.target. Oct 2 19:13:35.091300 systemd[1]: Reached target timers.target. Oct 2 19:13:35.100110 systemd[1]: Listening on dbus.socket. Oct 2 19:13:35.104744 systemd[1]: Starting docker.socket... Oct 2 19:13:35.112885 systemd[1]: Listening on sshd.socket. Oct 2 19:13:35.114647 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:13:35.115511 systemd[1]: Listening on docker.socket. Oct 2 19:13:35.117232 systemd[1]: Reached target sockets.target. Oct 2 19:13:35.118852 systemd[1]: Reached target basic.target. Oct 2 19:13:35.120434 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:13:35.120496 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:13:35.122538 systemd[1]: Started amazon-ssm-agent.service. Oct 2 19:13:35.130133 systemd[1]: Starting containerd.service... Oct 2 19:13:35.138976 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 19:13:35.151714 systemd[1]: Starting dbus.service... Oct 2 19:13:35.163959 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:13:35.172705 systemd[1]: Starting extend-filesystems.service... Oct 2 19:13:35.174736 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:13:35.181422 systemd[1]: Starting motdgen.service... Oct 2 19:13:35.185307 systemd[1]: Started nvidia.service. Oct 2 19:13:35.191816 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:13:35.197017 systemd[1]: Starting prepare-critools.service... Oct 2 19:13:35.202231 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:13:35.210624 systemd[1]: Starting sshd-keygen.service... Oct 2 19:13:35.221428 systemd[1]: Starting systemd-logind.service... Oct 2 19:13:35.223055 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:13:35.223164 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:13:35.224684 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:13:35.226843 systemd[1]: Starting update-engine.service... Oct 2 19:13:35.231769 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:13:35.302084 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:13:35.302424 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:13:35.337979 jq[1541]: false Oct 2 19:13:35.362170 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:13:35.362551 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:13:35.397122 jq[1555]: true Oct 2 19:13:35.417808 extend-filesystems[1542]: Found nvme0n1 Oct 2 19:13:35.426335 tar[1560]: ./ Oct 2 19:13:35.430147 extend-filesystems[1542]: Found nvme0n1p1 Oct 2 19:13:35.431866 tar[1557]: crictl Oct 2 19:13:35.437102 extend-filesystems[1542]: Found nvme0n1p2 Oct 2 19:13:35.439248 extend-filesystems[1542]: Found nvme0n1p3 Oct 2 19:13:35.439248 extend-filesystems[1542]: Found usr Oct 2 19:13:35.439248 extend-filesystems[1542]: Found nvme0n1p4 Oct 2 19:13:35.439248 extend-filesystems[1542]: Found nvme0n1p6 Oct 2 19:13:35.439248 extend-filesystems[1542]: Found nvme0n1p7 Oct 2 19:13:35.439248 extend-filesystems[1542]: Found nvme0n1p9 Oct 2 19:13:35.439248 extend-filesystems[1542]: Checking size of /dev/nvme0n1p9 Oct 2 19:13:35.456072 tar[1560]: ./loopback Oct 2 19:13:35.505403 jq[1575]: true Oct 2 19:13:35.569544 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:13:35.569932 systemd[1]: Finished motdgen.service. Oct 2 19:13:35.658820 amazon-ssm-agent[1535]: 2023/10/02 19:13:35 Failed to load instance info from vault. RegistrationKey does not exist. Oct 2 19:13:35.663549 amazon-ssm-agent[1535]: Initializing new seelog logger Oct 2 19:13:35.675018 amazon-ssm-agent[1535]: New Seelog Logger Creation Complete Oct 2 19:13:35.675247 amazon-ssm-agent[1535]: 2023/10/02 19:13:35 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:13:35.675247 amazon-ssm-agent[1535]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:13:35.675701 amazon-ssm-agent[1535]: 2023/10/02 19:13:35 processing appconfig overrides Oct 2 19:13:35.721983 dbus-daemon[1539]: [system] SELinux support is enabled Oct 2 19:13:35.722708 systemd[1]: Started dbus.service. Oct 2 19:13:35.727326 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:13:35.727372 systemd[1]: Reached target system-config.target. Oct 2 19:13:35.730308 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:13:35.730354 systemd[1]: Reached target user-config.target. Oct 2 19:13:35.761862 dbus-daemon[1539]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.2' (uid=244 pid=1367 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Oct 2 19:13:35.762278 tar[1560]: ./bandwidth Oct 2 19:13:35.769172 dbus-daemon[1539]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 19:13:35.770080 extend-filesystems[1542]: Resized partition /dev/nvme0n1p9 Oct 2 19:13:35.791403 env[1574]: time="2023-10-02T19:13:35.791311798Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:13:35.794110 systemd-logind[1553]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 19:13:35.798893 systemd[1]: Starting systemd-hostnamed.service... Oct 2 19:13:35.808604 extend-filesystems[1622]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 19:13:35.813057 systemd-logind[1553]: New seat seat0. Oct 2 19:13:35.824943 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Oct 2 19:13:35.827573 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:13:35.835664 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:13:35.850408 systemd[1]: Started systemd-logind.service. Oct 2 19:13:35.859187 update_engine[1554]: I1002 19:13:35.858503 1554 main.cc:92] Flatcar Update Engine starting Oct 2 19:13:35.872366 systemd[1]: Started update-engine.service. Oct 2 19:13:35.873346 update_engine[1554]: I1002 19:13:35.873311 1554 update_check_scheduler.cc:74] Next update check in 7m35s Oct 2 19:13:35.877435 systemd[1]: Started locksmithd.service. Oct 2 19:13:35.891948 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Oct 2 19:13:36.005842 env[1574]: time="2023-10-02T19:13:35.953984014Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:13:36.005842 env[1574]: time="2023-10-02T19:13:36.002884152Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:13:35.951505 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 19:13:36.009322 env[1574]: time="2023-10-02T19:13:36.009233257Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:13:36.009550 extend-filesystems[1622]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Oct 2 19:13:36.009550 extend-filesystems[1622]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 2 19:13:36.009550 extend-filesystems[1622]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Oct 2 19:13:36.017890 extend-filesystems[1542]: Resized filesystem in /dev/nvme0n1p9 Oct 2 19:13:36.020011 env[1574]: time="2023-10-02T19:13:36.009299632Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:13:36.029151 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:13:36.029487 systemd[1]: Finished extend-filesystems.service. Oct 2 19:13:36.033731 env[1574]: time="2023-10-02T19:13:36.033130561Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:13:36.033731 env[1574]: time="2023-10-02T19:13:36.033480845Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:13:36.033976 env[1574]: time="2023-10-02T19:13:36.033635249Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:13:36.033976 env[1574]: time="2023-10-02T19:13:36.033847743Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:13:36.035026 env[1574]: time="2023-10-02T19:13:36.034978994Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:13:36.037158 bash[1626]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:13:36.037687 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:13:36.042933 env[1574]: time="2023-10-02T19:13:36.041184408Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:13:36.042933 env[1574]: time="2023-10-02T19:13:36.041651748Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:13:36.042933 env[1574]: time="2023-10-02T19:13:36.041723726Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:13:36.042933 env[1574]: time="2023-10-02T19:13:36.041956160Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:13:36.042933 env[1574]: time="2023-10-02T19:13:36.041987293Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:13:36.048820 env[1574]: time="2023-10-02T19:13:36.048749824Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:13:36.048996 env[1574]: time="2023-10-02T19:13:36.048829373Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:13:36.048996 env[1574]: time="2023-10-02T19:13:36.048863901Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:13:36.048996 env[1574]: time="2023-10-02T19:13:36.048971040Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:13:36.049455 env[1574]: time="2023-10-02T19:13:36.049255132Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:13:36.049455 env[1574]: time="2023-10-02T19:13:36.049311728Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:13:36.049455 env[1574]: time="2023-10-02T19:13:36.049345117Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:13:36.050042 env[1574]: time="2023-10-02T19:13:36.049944655Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:13:36.050193 env[1574]: time="2023-10-02T19:13:36.050048077Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:13:36.050193 env[1574]: time="2023-10-02T19:13:36.050081915Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:13:36.050193 env[1574]: time="2023-10-02T19:13:36.050115120Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:13:36.050342 env[1574]: time="2023-10-02T19:13:36.050187052Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:13:36.050669 env[1574]: time="2023-10-02T19:13:36.050403527Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:13:36.050669 env[1574]: time="2023-10-02T19:13:36.050575879Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:13:36.051198 env[1574]: time="2023-10-02T19:13:36.051152866Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:13:36.051271 env[1574]: time="2023-10-02T19:13:36.051215099Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.051271 env[1574]: time="2023-10-02T19:13:36.051248373Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:13:36.051681 env[1574]: time="2023-10-02T19:13:36.051414880Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.053945 env[1574]: time="2023-10-02T19:13:36.051945535Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.053945 env[1574]: time="2023-10-02T19:13:36.052139632Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.053945 env[1574]: time="2023-10-02T19:13:36.052172664Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.053945 env[1574]: time="2023-10-02T19:13:36.052204374Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.053945 env[1574]: time="2023-10-02T19:13:36.052234127Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.053945 env[1574]: time="2023-10-02T19:13:36.052262085Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.053945 env[1574]: time="2023-10-02T19:13:36.052296245Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.053945 env[1574]: time="2023-10-02T19:13:36.052330876Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:13:36.053945 env[1574]: time="2023-10-02T19:13:36.052720451Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.053945 env[1574]: time="2023-10-02T19:13:36.052754127Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.053945 env[1574]: time="2023-10-02T19:13:36.052785848Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.053945 env[1574]: time="2023-10-02T19:13:36.052814934Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:13:36.053945 env[1574]: time="2023-10-02T19:13:36.052845665Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:13:36.053945 env[1574]: time="2023-10-02T19:13:36.053045871Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:13:36.054702 env[1574]: time="2023-10-02T19:13:36.053086106Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:13:36.054702 env[1574]: time="2023-10-02T19:13:36.053147442Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.054813 env[1574]: time="2023-10-02T19:13:36.053623756Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:13:36.054813 env[1574]: time="2023-10-02T19:13:36.053729123Z" level=info msg="Connect containerd service" Oct 2 19:13:36.054813 env[1574]: time="2023-10-02T19:13:36.053785822Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:13:36.058217 env[1574]: time="2023-10-02T19:13:36.055086503Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:13:36.058946 env[1574]: time="2023-10-02T19:13:36.058765605Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:13:36.058946 env[1574]: time="2023-10-02T19:13:36.058904763Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:13:36.059126 systemd[1]: Started containerd.service. Oct 2 19:13:36.061713 env[1574]: time="2023-10-02T19:13:36.061412114Z" level=info msg="containerd successfully booted in 0.288421s" Oct 2 19:13:36.064147 env[1574]: time="2023-10-02T19:13:36.063603617Z" level=info msg="Start subscribing containerd event" Oct 2 19:13:36.064147 env[1574]: time="2023-10-02T19:13:36.063710330Z" level=info msg="Start recovering state" Oct 2 19:13:36.064147 env[1574]: time="2023-10-02T19:13:36.063847809Z" level=info msg="Start event monitor" Oct 2 19:13:36.064147 env[1574]: time="2023-10-02T19:13:36.064019861Z" level=info msg="Start snapshots syncer" Oct 2 19:13:36.064147 env[1574]: time="2023-10-02T19:13:36.064050224Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:13:36.064147 env[1574]: time="2023-10-02T19:13:36.064080139Z" level=info msg="Start streaming server" Oct 2 19:13:36.245278 tar[1560]: ./ptp Oct 2 19:13:36.292458 dbus-daemon[1539]: [system] Successfully activated service 'org.freedesktop.hostname1' Oct 2 19:13:36.292714 systemd[1]: Started systemd-hostnamed.service. Oct 2 19:13:36.300169 dbus-daemon[1539]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1624 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Oct 2 19:13:36.304763 systemd[1]: Starting polkit.service... Oct 2 19:13:36.355779 polkitd[1655]: Started polkitd version 121 Oct 2 19:13:36.387384 polkitd[1655]: Loading rules from directory /etc/polkit-1/rules.d Oct 2 19:13:36.387700 polkitd[1655]: Loading rules from directory /usr/share/polkit-1/rules.d Oct 2 19:13:36.391323 polkitd[1655]: Finished loading, compiling and executing 2 rules Oct 2 19:13:36.392228 dbus-daemon[1539]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Oct 2 19:13:36.392479 systemd[1]: Started polkit.service. Oct 2 19:13:36.395242 polkitd[1655]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Oct 2 19:13:36.432571 systemd-hostnamed[1624]: Hostname set to (transient) Oct 2 19:13:36.432721 systemd-resolved[1509]: System hostname changed to 'ip-172-31-20-139'. Oct 2 19:13:36.479090 tar[1560]: ./vlan Oct 2 19:13:36.507018 coreos-metadata[1537]: Oct 02 19:13:36.506 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Oct 2 19:13:36.509535 coreos-metadata[1537]: Oct 02 19:13:36.509 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Oct 2 19:13:36.511505 coreos-metadata[1537]: Oct 02 19:13:36.511 INFO Fetch successful Oct 2 19:13:36.511505 coreos-metadata[1537]: Oct 02 19:13:36.511 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 19:13:36.512672 coreos-metadata[1537]: Oct 02 19:13:36.512 INFO Fetch successful Oct 2 19:13:36.515156 unknown[1537]: wrote ssh authorized keys file for user: core Oct 2 19:13:36.571011 update-ssh-keys[1692]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:13:36.571976 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 19:13:36.659312 amazon-ssm-agent[1535]: 2023-10-02 19:13:36 INFO Entering SSM Agent hibernate - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0938781c38e8b65f8 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0938781c38e8b65f8 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:13:36.659312 amazon-ssm-agent[1535]: status code: 400, request id: 3a4dd640-bf6c-4cfe-9f7e-6c5b517d8573 Oct 2 19:13:36.660120 amazon-ssm-agent[1535]: 2023-10-02 19:13:36 INFO Agent is in hibernate mode. Reducing logging. Logging will be reduced to one log per backoff period Oct 2 19:13:36.672422 tar[1560]: ./host-device Oct 2 19:13:36.813830 tar[1560]: ./tuning Oct 2 19:13:36.948269 tar[1560]: ./vrf Oct 2 19:13:37.085057 tar[1560]: ./sbr Oct 2 19:13:37.220590 tar[1560]: ./tap Oct 2 19:13:37.284120 tar[1560]: ./dhcp Oct 2 19:13:37.397961 systemd[1]: Finished prepare-critools.service. Oct 2 19:13:37.475166 tar[1560]: ./static Oct 2 19:13:37.520110 tar[1560]: ./firewall Oct 2 19:13:37.587970 tar[1560]: ./macvlan Oct 2 19:13:37.649705 tar[1560]: ./dummy Oct 2 19:13:37.710503 tar[1560]: ./bridge Oct 2 19:13:37.777736 tar[1560]: ./ipvlan Oct 2 19:13:37.839058 tar[1560]: ./portmap Oct 2 19:13:37.897583 tar[1560]: ./host-local Oct 2 19:13:37.977395 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:13:38.055526 locksmithd[1627]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:13:39.602177 sshd_keygen[1566]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:13:39.659070 systemd[1]: Finished sshd-keygen.service. Oct 2 19:13:39.663606 systemd[1]: Starting issuegen.service... Oct 2 19:13:39.681730 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:13:39.682142 systemd[1]: Finished issuegen.service. Oct 2 19:13:39.686628 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:13:39.708497 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:13:39.713020 systemd[1]: Started getty@tty1.service. Oct 2 19:13:39.717652 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:13:39.719808 systemd[1]: Reached target getty.target. Oct 2 19:13:39.721568 systemd[1]: Reached target multi-user.target. Oct 2 19:13:39.726532 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:13:39.748403 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:13:39.748745 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:13:39.751000 systemd[1]: Startup finished in 1.178s (kernel) + 13.525s (initrd) + 13.625s (userspace) = 28.329s. Oct 2 19:13:44.886110 systemd[1]: Created slice system-sshd.slice. Oct 2 19:13:44.888554 systemd[1]: Started sshd@0-172.31.20.139:22-139.178.89.65:34962.service. Oct 2 19:13:45.105476 sshd[1757]: Accepted publickey for core from 139.178.89.65 port 34962 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:13:45.110705 sshd[1757]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:45.128735 systemd[1]: Created slice user-500.slice. Oct 2 19:13:45.131746 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:13:45.139016 systemd-logind[1553]: New session 1 of user core. Oct 2 19:13:45.156382 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:13:45.160268 systemd[1]: Starting user@500.service... Oct 2 19:13:45.171826 (systemd)[1760]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:45.370287 systemd[1760]: Queued start job for default target default.target. Oct 2 19:13:45.372144 systemd[1760]: Reached target paths.target. Oct 2 19:13:45.372201 systemd[1760]: Reached target sockets.target. Oct 2 19:13:45.372231 systemd[1760]: Reached target timers.target. Oct 2 19:13:45.372261 systemd[1760]: Reached target basic.target. Oct 2 19:13:45.372354 systemd[1760]: Reached target default.target. Oct 2 19:13:45.372418 systemd[1760]: Startup finished in 183ms. Oct 2 19:13:45.372986 systemd[1]: Started user@500.service. Oct 2 19:13:45.374989 systemd[1]: Started session-1.scope. Oct 2 19:13:45.529793 systemd[1]: Started sshd@1-172.31.20.139:22-139.178.89.65:34978.service. Oct 2 19:13:45.716996 sshd[1769]: Accepted publickey for core from 139.178.89.65 port 34978 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:13:45.720177 sshd[1769]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:45.728842 systemd[1]: Started session-2.scope. Oct 2 19:13:45.729861 systemd-logind[1553]: New session 2 of user core. Oct 2 19:13:45.899385 sshd[1769]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:45.905486 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:13:45.906800 systemd-logind[1553]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:13:45.907214 systemd[1]: sshd@1-172.31.20.139:22-139.178.89.65:34978.service: Deactivated successfully. Oct 2 19:13:45.909388 systemd-logind[1553]: Removed session 2. Oct 2 19:13:45.931037 systemd[1]: Started sshd@2-172.31.20.139:22-139.178.89.65:46384.service. Oct 2 19:13:46.109405 sshd[1775]: Accepted publickey for core from 139.178.89.65 port 46384 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:13:46.113099 sshd[1775]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:46.121479 systemd[1]: Started session-3.scope. Oct 2 19:13:46.122400 systemd-logind[1553]: New session 3 of user core. Oct 2 19:13:46.253181 sshd[1775]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:46.258823 systemd[1]: sshd@2-172.31.20.139:22-139.178.89.65:46384.service: Deactivated successfully. Oct 2 19:13:46.260080 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:13:46.261150 systemd-logind[1553]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:13:46.262673 systemd-logind[1553]: Removed session 3. Oct 2 19:13:46.285223 systemd[1]: Started sshd@3-172.31.20.139:22-139.178.89.65:46388.service. Oct 2 19:13:46.460784 sshd[1781]: Accepted publickey for core from 139.178.89.65 port 46388 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:13:46.463964 sshd[1781]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:46.472535 systemd-logind[1553]: New session 4 of user core. Oct 2 19:13:46.473469 systemd[1]: Started session-4.scope. Oct 2 19:13:46.617079 sshd[1781]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:46.623025 systemd-logind[1553]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:13:46.624062 systemd[1]: sshd@3-172.31.20.139:22-139.178.89.65:46388.service: Deactivated successfully. Oct 2 19:13:46.625272 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:13:46.626696 systemd-logind[1553]: Removed session 4. Oct 2 19:13:46.651067 systemd[1]: Started sshd@4-172.31.20.139:22-139.178.89.65:46398.service. Oct 2 19:13:46.834039 sshd[1787]: Accepted publickey for core from 139.178.89.65 port 46398 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:13:46.836609 sshd[1787]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:46.846163 systemd-logind[1553]: New session 5 of user core. Oct 2 19:13:46.846259 systemd[1]: Started session-5.scope. Oct 2 19:13:46.976666 sudo[1790]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:13:46.977695 sudo[1790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:13:47.017177 dbus-daemon[1539]: avc: received setenforce notice (enforcing=1) Oct 2 19:13:47.020637 sudo[1790]: pam_unix(sudo:session): session closed for user root Oct 2 19:13:47.045669 sshd[1787]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:47.051860 systemd-logind[1553]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:13:47.053195 systemd[1]: sshd@4-172.31.20.139:22-139.178.89.65:46398.service: Deactivated successfully. Oct 2 19:13:47.054516 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:13:47.055984 systemd-logind[1553]: Removed session 5. Oct 2 19:13:47.076059 systemd[1]: Started sshd@5-172.31.20.139:22-139.178.89.65:46414.service. Oct 2 19:13:47.258343 sshd[1794]: Accepted publickey for core from 139.178.89.65 port 46414 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:13:47.261403 sshd[1794]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:47.268994 systemd-logind[1553]: New session 6 of user core. Oct 2 19:13:47.270462 systemd[1]: Started session-6.scope. Oct 2 19:13:47.391049 sudo[1798]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:13:47.391537 sudo[1798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:13:47.399238 sudo[1798]: pam_unix(sudo:session): session closed for user root Oct 2 19:13:47.412810 sudo[1797]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:13:47.413342 sudo[1797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:13:47.436686 systemd[1]: Stopping audit-rules.service... Oct 2 19:13:47.440000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:13:47.443835 kernel: kauditd_printk_skb: 73 callbacks suppressed Oct 2 19:13:47.443928 kernel: audit: type=1305 audit(1696274027.440:163): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:13:47.440000 audit[1801]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffeb87f0a0 a2=420 a3=0 items=0 ppid=1 pid=1801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:47.454086 auditctl[1801]: No rules Oct 2 19:13:47.459788 kernel: audit: type=1300 audit(1696274027.440:163): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffeb87f0a0 a2=420 a3=0 items=0 ppid=1 pid=1801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:47.460389 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:13:47.440000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:13:47.463986 kernel: audit: type=1327 audit(1696274027.440:163): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:13:47.460756 systemd[1]: Stopped audit-rules.service. Oct 2 19:13:47.458000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.472589 kernel: audit: type=1131 audit(1696274027.458:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.473194 systemd[1]: Starting audit-rules.service... Oct 2 19:13:47.529419 augenrules[1818]: No rules Oct 2 19:13:47.531626 systemd[1]: Finished audit-rules.service. Oct 2 19:13:47.531000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.541721 sudo[1797]: pam_unix(sudo:session): session closed for user root Oct 2 19:13:47.541000 audit[1797]: USER_END pid=1797 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.552862 kernel: audit: type=1130 audit(1696274027.531:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.552946 kernel: audit: type=1106 audit(1696274027.541:166): pid=1797 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.541000 audit[1797]: CRED_DISP pid=1797 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.561375 kernel: audit: type=1104 audit(1696274027.541:167): pid=1797 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.565555 sshd[1794]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:47.566000 audit[1794]: USER_END pid=1794 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:47.570421 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:13:47.571478 systemd[1]: sshd@5-172.31.20.139:22-139.178.89.65:46414.service: Deactivated successfully. Oct 2 19:13:47.566000 audit[1794]: CRED_DISP pid=1794 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:47.589395 kernel: audit: type=1106 audit(1696274027.566:168): pid=1794 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:47.589483 kernel: audit: type=1104 audit(1696274027.566:169): pid=1794 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:47.570000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.20.139:22-139.178.89.65:46414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.598447 kernel: audit: type=1131 audit(1696274027.570:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.20.139:22-139.178.89.65:46414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.598715 systemd-logind[1553]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:13:47.608135 systemd[1]: Started sshd@6-172.31.20.139:22-139.178.89.65:46416.service. Oct 2 19:13:47.607000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.20.139:22-139.178.89.65:46416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.610080 systemd-logind[1553]: Removed session 6. Oct 2 19:13:47.784000 audit[1824]: USER_ACCT pid=1824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:47.785686 sshd[1824]: Accepted publickey for core from 139.178.89.65 port 46416 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:13:47.787000 audit[1824]: CRED_ACQ pid=1824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:47.788000 audit[1824]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc32de30 a2=3 a3=1 items=0 ppid=1 pid=1824 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:47.788000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:13:47.789693 sshd[1824]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:47.797004 systemd-logind[1553]: New session 7 of user core. Oct 2 19:13:47.798228 systemd[1]: Started session-7.scope. Oct 2 19:13:47.806000 audit[1824]: USER_START pid=1824 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:47.812000 audit[1826]: CRED_ACQ pid=1826 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:47.914000 audit[1827]: USER_ACCT pid=1827 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.916225 sudo[1827]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:13:47.915000 audit[1827]: CRED_REFR pid=1827 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.917268 sudo[1827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:13:47.920000 audit[1827]: USER_START pid=1827 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:13:48.637891 systemd[1]: Starting docker.service... Oct 2 19:13:48.746262 env[1842]: time="2023-10-02T19:13:48.746176511Z" level=info msg="Starting up" Oct 2 19:13:48.749402 env[1842]: time="2023-10-02T19:13:48.749357664Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:13:48.749578 env[1842]: time="2023-10-02T19:13:48.749548487Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:13:48.749711 env[1842]: time="2023-10-02T19:13:48.749678796Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:13:48.749817 env[1842]: time="2023-10-02T19:13:48.749788637Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:13:48.754847 env[1842]: time="2023-10-02T19:13:48.754781886Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:13:48.754847 env[1842]: time="2023-10-02T19:13:48.754827620Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:13:48.755133 env[1842]: time="2023-10-02T19:13:48.754862297Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:13:48.755133 env[1842]: time="2023-10-02T19:13:48.754884182Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:13:48.768516 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport3163483810-merged.mount: Deactivated successfully. Oct 2 19:13:48.831003 env[1842]: time="2023-10-02T19:13:48.830898683Z" level=info msg="Loading containers: start." Oct 2 19:13:48.942000 audit[1873]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1873 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:48.942000 audit[1873]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=fffff97d38a0 a2=0 a3=1 items=0 ppid=1842 pid=1873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:48.942000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:13:48.950000 audit[1875]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1875 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:48.950000 audit[1875]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=fffff08d6af0 a2=0 a3=1 items=0 ppid=1842 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:48.950000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:13:48.957000 audit[1877]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1877 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:48.957000 audit[1877]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffdc701a50 a2=0 a3=1 items=0 ppid=1842 pid=1877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:48.957000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:13:48.964000 audit[1879]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1879 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:48.964000 audit[1879]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffcb961dc0 a2=0 a3=1 items=0 ppid=1842 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:48.964000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:13:48.973000 audit[1881]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1881 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:48.973000 audit[1881]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff4d7a8f0 a2=0 a3=1 items=0 ppid=1842 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:48.973000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:13:49.007000 audit[1886]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1886 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.007000 audit[1886]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcb294bc0 a2=0 a3=1 items=0 ppid=1842 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.007000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:13:49.023000 audit[1888]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1888 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.023000 audit[1888]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc768b970 a2=0 a3=1 items=0 ppid=1842 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.023000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:13:49.030000 audit[1890]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1890 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.030000 audit[1890]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffebab0d80 a2=0 a3=1 items=0 ppid=1842 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.030000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:13:49.037000 audit[1892]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1892 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.037000 audit[1892]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffcc658e90 a2=0 a3=1 items=0 ppid=1842 pid=1892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.037000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:13:49.057000 audit[1896]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1896 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.057000 audit[1896]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffeed8c190 a2=0 a3=1 items=0 ppid=1842 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.057000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:13:49.060000 audit[1897]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1897 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.060000 audit[1897]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff5862340 a2=0 a3=1 items=0 ppid=1842 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.060000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:13:49.073974 kernel: Initializing XFRM netlink socket Oct 2 19:13:49.119093 env[1842]: time="2023-10-02T19:13:49.119023814Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:13:49.122779 (udev-worker)[1853]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:13:49.158000 audit[1905]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1905 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.158000 audit[1905]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffdfe46850 a2=0 a3=1 items=0 ppid=1842 pid=1905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.158000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:13:49.179000 audit[1908]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1908 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.179000 audit[1908]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffc4a2f870 a2=0 a3=1 items=0 ppid=1842 pid=1908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.179000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:13:49.189000 audit[1911]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1911 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.189000 audit[1911]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffea50b220 a2=0 a3=1 items=0 ppid=1842 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.189000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:13:49.196000 audit[1913]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1913 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.196000 audit[1913]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffdcaf5210 a2=0 a3=1 items=0 ppid=1842 pid=1913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.196000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:13:49.205000 audit[1915]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1915 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.205000 audit[1915]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=fffff58a23a0 a2=0 a3=1 items=0 ppid=1842 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.205000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:13:49.212000 audit[1917]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1917 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.212000 audit[1917]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffc1381320 a2=0 a3=1 items=0 ppid=1842 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.212000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:13:49.219000 audit[1919]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1919 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.219000 audit[1919]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffffb1aa350 a2=0 a3=1 items=0 ppid=1842 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.219000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:13:49.237000 audit[1922]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1922 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.237000 audit[1922]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffdc8ac8d0 a2=0 a3=1 items=0 ppid=1842 pid=1922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.237000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:13:49.246000 audit[1924]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1924 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.246000 audit[1924]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffcf5ba410 a2=0 a3=1 items=0 ppid=1842 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.246000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:13:49.254000 audit[1926]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1926 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.254000 audit[1926]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffc2c6df10 a2=0 a3=1 items=0 ppid=1842 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.254000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:13:49.261000 audit[1928]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1928 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.261000 audit[1928]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd151f680 a2=0 a3=1 items=0 ppid=1842 pid=1928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.261000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:13:49.263980 systemd-networkd[1367]: docker0: Link UP Oct 2 19:13:49.286000 audit[1932]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1932 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.286000 audit[1932]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffec3c6560 a2=0 a3=1 items=0 ppid=1842 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.286000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:13:49.289000 audit[1933]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1933 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.289000 audit[1933]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd5c54e90 a2=0 a3=1 items=0 ppid=1842 pid=1933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.289000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:13:49.291525 env[1842]: time="2023-10-02T19:13:49.291461198Z" level=info msg="Loading containers: done." Oct 2 19:13:49.318369 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1736668446-merged.mount: Deactivated successfully. Oct 2 19:13:49.336752 env[1842]: time="2023-10-02T19:13:49.336664205Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:13:49.337253 env[1842]: time="2023-10-02T19:13:49.337203225Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:13:49.337502 env[1842]: time="2023-10-02T19:13:49.337458744Z" level=info msg="Daemon has completed initialization" Oct 2 19:13:49.371514 systemd[1]: Started docker.service. Oct 2 19:13:49.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:49.384311 env[1842]: time="2023-10-02T19:13:49.384227968Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:13:49.434309 systemd[1]: Reloading. Oct 2 19:13:49.623831 /usr/lib/systemd/system-generators/torcx-generator[1979]: time="2023-10-02T19:13:49Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:13:49.637093 /usr/lib/systemd/system-generators/torcx-generator[1979]: time="2023-10-02T19:13:49Z" level=info msg="torcx already run" Oct 2 19:13:49.854763 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:13:49.855276 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:13:49.897677 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:13:50.043000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.043000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.043000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.044000 audit: BPF prog-id=37 op=LOAD Oct 2 19:13:50.044000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:13:50.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.049000 audit: BPF prog-id=38 op=LOAD Oct 2 19:13:50.050000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:13:50.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.051000 audit: BPF prog-id=39 op=LOAD Oct 2 19:13:50.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.051000 audit: BPF prog-id=40 op=LOAD Oct 2 19:13:50.052000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:13:50.052000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:13:50.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.054000 audit: BPF prog-id=41 op=LOAD Oct 2 19:13:50.054000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:13:50.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.055000 audit: BPF prog-id=42 op=LOAD Oct 2 19:13:50.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.056000 audit: BPF prog-id=43 op=LOAD Oct 2 19:13:50.057000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:13:50.057000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:13:50.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.061000 audit: BPF prog-id=44 op=LOAD Oct 2 19:13:50.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.062000 audit: BPF prog-id=45 op=LOAD Oct 2 19:13:50.062000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:13:50.062000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:13:50.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.065000 audit: BPF prog-id=46 op=LOAD Oct 2 19:13:50.066000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:13:50.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.067000 audit: BPF prog-id=47 op=LOAD Oct 2 19:13:50.067000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:13:50.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.069000 audit: BPF prog-id=48 op=LOAD Oct 2 19:13:50.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.069000 audit: BPF prog-id=49 op=LOAD Oct 2 19:13:50.070000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:13:50.070000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:13:50.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.074000 audit: BPF prog-id=50 op=LOAD Oct 2 19:13:50.074000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:13:50.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.075000 audit: BPF prog-id=51 op=LOAD Oct 2 19:13:50.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.075000 audit: BPF prog-id=52 op=LOAD Oct 2 19:13:50.075000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:13:50.075000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:13:50.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.076000 audit: BPF prog-id=53 op=LOAD Oct 2 19:13:50.076000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:13:50.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.078000 audit: BPF prog-id=54 op=LOAD Oct 2 19:13:50.078000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:13:50.135693 systemd[1]: Started kubelet.service. Oct 2 19:13:50.135000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:50.315770 kubelet[2034]: E1002 19:13:50.315672 2034 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:13:50.319675 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:13:50.318000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:13:50.320023 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:13:50.745107 env[1574]: time="2023-10-02T19:13:50.745047224Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\"" Oct 2 19:13:51.363895 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3077250213.mount: Deactivated successfully. Oct 2 19:13:54.677041 env[1574]: time="2023-10-02T19:13:54.676974132Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:54.679829 env[1574]: time="2023-10-02T19:13:54.679756213Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:84fc12f356926a06f93f99d06ff6b5c8df1d39c609ddaae4aaf09048dc816c36,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:54.683077 env[1574]: time="2023-10-02T19:13:54.683019794Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:54.686282 env[1574]: time="2023-10-02T19:13:54.686223132Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5e7a0196a7908cb49bcbf751d2546a008c329ff1e70c26c1cd542e0ada4b623c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:54.688044 env[1574]: time="2023-10-02T19:13:54.687981074Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\" returns image reference \"sha256:84fc12f356926a06f93f99d06ff6b5c8df1d39c609ddaae4aaf09048dc816c36\"" Oct 2 19:13:54.716525 env[1574]: time="2023-10-02T19:13:54.716476343Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\"" Oct 2 19:13:57.350948 env[1574]: time="2023-10-02T19:13:57.350866313Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:57.357351 env[1574]: time="2023-10-02T19:13:57.357285541Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:66b19e3051492d4e2377e15803f07d9bd2a4578c7e26e5fa088582d59e08884b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:57.360649 env[1574]: time="2023-10-02T19:13:57.360601436Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:57.363792 env[1574]: time="2023-10-02T19:13:57.363743934Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:c76ca5b0cf607f82c54d51c3c6766da30c9a9f684065e1cac761ea9b07b74e97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:57.365381 env[1574]: time="2023-10-02T19:13:57.365336885Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\" returns image reference \"sha256:66b19e3051492d4e2377e15803f07d9bd2a4578c7e26e5fa088582d59e08884b\"" Oct 2 19:13:57.395444 env[1574]: time="2023-10-02T19:13:57.395393997Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\"" Oct 2 19:13:59.265810 env[1574]: time="2023-10-02T19:13:59.265745485Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:59.269435 env[1574]: time="2023-10-02T19:13:59.269351877Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1faa1d898c625343f7c70abbc8e9d160eb6dc3002ec2481cf8f4abd61dc34eed,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:59.273150 env[1574]: time="2023-10-02T19:13:59.273071189Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:59.276862 env[1574]: time="2023-10-02T19:13:59.276814012Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:bb227512d96e93dd3fe356cef552cc3f78905f36330b762adde23c3f0943d57b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:59.278959 env[1574]: time="2023-10-02T19:13:59.278892429Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\" returns image reference \"sha256:1faa1d898c625343f7c70abbc8e9d160eb6dc3002ec2481cf8f4abd61dc34eed\"" Oct 2 19:13:59.307480 env[1574]: time="2023-10-02T19:13:59.307432232Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\"" Oct 2 19:14:00.418096 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:14:00.430846 kernel: kauditd_printk_skb: 292 callbacks suppressed Oct 2 19:14:00.438706 kernel: audit: type=1130 audit(1696274040.417:413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:00.438797 kernel: audit: type=1131 audit(1696274040.417:414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:00.417000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:00.417000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:00.418445 systemd[1]: Stopped kubelet.service. Oct 2 19:14:00.421024 systemd[1]: Started kubelet.service. Oct 2 19:14:00.451659 kernel: audit: type=1130 audit(1696274040.420:415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:00.420000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:00.606864 kubelet[2068]: E1002 19:14:00.606770 2068 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:14:00.614177 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:14:00.614499 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:14:00.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:14:00.623958 kernel: audit: type=1131 audit(1696274040.614:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:14:00.701784 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2622840380.mount: Deactivated successfully. Oct 2 19:14:01.466779 env[1574]: time="2023-10-02T19:14:01.466721607Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:01.471145 env[1574]: time="2023-10-02T19:14:01.471080054Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95195e68173b6cfcdd3125d7bbffa6759189df53b60ffe7a72256059cd5dd7af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:01.475265 env[1574]: time="2023-10-02T19:14:01.475204795Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:01.478698 env[1574]: time="2023-10-02T19:14:01.478639215Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:8e9eff2f6d0b398f9ac5f5a15c1cb7d5f468f28d64a78d593d57f72a969a54ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:01.479841 env[1574]: time="2023-10-02T19:14:01.479777463Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\" returns image reference \"sha256:95195e68173b6cfcdd3125d7bbffa6759189df53b60ffe7a72256059cd5dd7af\"" Oct 2 19:14:01.510893 env[1574]: time="2023-10-02T19:14:01.510824050Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:14:02.064276 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount805284584.mount: Deactivated successfully. Oct 2 19:14:02.073713 env[1574]: time="2023-10-02T19:14:02.073657695Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:02.076521 env[1574]: time="2023-10-02T19:14:02.076476674Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:02.079031 env[1574]: time="2023-10-02T19:14:02.078987108Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:02.081604 env[1574]: time="2023-10-02T19:14:02.081545745Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:02.082872 env[1574]: time="2023-10-02T19:14:02.082821318Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 19:14:02.113248 env[1574]: time="2023-10-02T19:14:02.113179248Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Oct 2 19:14:03.247705 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1288814449.mount: Deactivated successfully. Oct 2 19:14:06.442806 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Oct 2 19:14:06.442000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:06.452967 kernel: audit: type=1131 audit(1696274046.442:417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:06.468000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:14:06.474439 kernel: audit: type=1334 audit(1696274046.468:418): prog-id=49 op=UNLOAD Oct 2 19:14:06.474537 kernel: audit: type=1334 audit(1696274046.468:419): prog-id=48 op=UNLOAD Oct 2 19:14:06.468000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:14:06.468000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:14:06.477345 kernel: audit: type=1334 audit(1696274046.468:420): prog-id=47 op=UNLOAD Oct 2 19:14:06.854328 env[1574]: time="2023-10-02T19:14:06.853519769Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:06.879865 env[1574]: time="2023-10-02T19:14:06.879806673Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:06.891740 env[1574]: time="2023-10-02T19:14:06.891674218Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:06.923890 env[1574]: time="2023-10-02T19:14:06.923816405Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:06.925687 env[1574]: time="2023-10-02T19:14:06.924686168Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737\"" Oct 2 19:14:06.959287 env[1574]: time="2023-10-02T19:14:06.959195415Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:14:07.731332 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1191538905.mount: Deactivated successfully. Oct 2 19:14:08.694083 env[1574]: time="2023-10-02T19:14:08.694016932Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:08.697256 env[1574]: time="2023-10-02T19:14:08.697195111Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:08.699927 env[1574]: time="2023-10-02T19:14:08.699853651Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:08.703176 env[1574]: time="2023-10-02T19:14:08.703109422Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:08.703689 env[1574]: time="2023-10-02T19:14:08.703628893Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Oct 2 19:14:10.668090 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:14:10.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:10.668399 systemd[1]: Stopped kubelet.service. Oct 2 19:14:10.685322 systemd[1]: Started kubelet.service. Oct 2 19:14:10.697660 kernel: audit: type=1130 audit(1696274050.667:421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:10.697777 kernel: audit: type=1131 audit(1696274050.667:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:10.667000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:10.714633 kernel: audit: type=1130 audit(1696274050.684:423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:10.684000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:10.837683 kubelet[2153]: E1002 19:14:10.837619 2153 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:14:10.843000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:14:10.843684 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:14:10.844037 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:14:10.853961 kernel: audit: type=1131 audit(1696274050.843:424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:14:14.962967 systemd[1]: Stopped kubelet.service. Oct 2 19:14:14.963000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:14.967000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:14.980187 kernel: audit: type=1130 audit(1696274054.963:425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:14.980332 kernel: audit: type=1131 audit(1696274054.967:426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:15.013425 systemd[1]: Reloading. Oct 2 19:14:15.189378 /usr/lib/systemd/system-generators/torcx-generator[2186]: time="2023-10-02T19:14:15Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:14:15.189929 /usr/lib/systemd/system-generators/torcx-generator[2186]: time="2023-10-02T19:14:15Z" level=info msg="torcx already run" Oct 2 19:14:15.422955 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:14:15.423195 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:14:15.465711 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:14:15.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.629635 kernel: audit: type=1400 audit(1696274055.614:427): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.629753 kernel: audit: type=1400 audit(1696274055.614:428): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.629815 kernel: audit: type=1400 audit(1696274055.614:429): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.644451 kernel: audit: type=1400 audit(1696274055.614:430): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.644534 kernel: audit: type=1400 audit(1696274055.614:431): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.659216 kernel: audit: type=1400 audit(1696274055.614:432): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.659311 kernel: audit: type=1400 audit(1696274055.614:433): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.666707 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:14:15.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.621000 audit: BPF prog-id=55 op=LOAD Oct 2 19:14:15.621000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:14:15.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.629000 audit: BPF prog-id=56 op=LOAD Oct 2 19:14:15.629000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:14:15.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.636000 audit: BPF prog-id=57 op=LOAD Oct 2 19:14:15.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.643000 audit: BPF prog-id=58 op=LOAD Oct 2 19:14:15.643000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:14:15.643000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:14:15.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.651000 audit: BPF prog-id=59 op=LOAD Oct 2 19:14:15.651000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:14:15.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.658000 audit: BPF prog-id=60 op=LOAD Oct 2 19:14:15.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.668000 audit: BPF prog-id=61 op=LOAD Oct 2 19:14:15.668000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:14:15.668000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:14:15.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.671000 audit: BPF prog-id=62 op=LOAD Oct 2 19:14:15.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.671000 audit: BPF prog-id=63 op=LOAD Oct 2 19:14:15.671000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:14:15.671000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:14:15.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.673000 audit: BPF prog-id=64 op=LOAD Oct 2 19:14:15.673000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:14:15.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.678000 audit: BPF prog-id=65 op=LOAD Oct 2 19:14:15.678000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:14:15.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.678000 audit: BPF prog-id=66 op=LOAD Oct 2 19:14:15.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.679000 audit: BPF prog-id=67 op=LOAD Oct 2 19:14:15.679000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:14:15.679000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:14:15.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.680000 audit: BPF prog-id=68 op=LOAD Oct 2 19:14:15.680000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:14:15.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.682000 audit: BPF prog-id=69 op=LOAD Oct 2 19:14:15.682000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:14:15.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:15.717405 systemd[1]: Started kubelet.service. Oct 2 19:14:15.857308 kubelet[2239]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:14:15.857308 kubelet[2239]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:14:15.857308 kubelet[2239]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:14:15.857977 kubelet[2239]: I1002 19:14:15.857499 2239 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:14:16.970530 kubelet[2239]: I1002 19:14:16.970487 2239 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:14:16.971272 kubelet[2239]: I1002 19:14:16.971246 2239 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:14:16.971807 kubelet[2239]: I1002 19:14:16.971783 2239 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:14:16.980794 kubelet[2239]: I1002 19:14:16.980754 2239 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:14:16.982189 kubelet[2239]: E1002 19:14:16.982153 2239 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.20.139:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.20.139:6443: connect: connection refused Oct 2 19:14:16.985422 kubelet[2239]: W1002 19:14:16.985365 2239 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:14:16.987536 kubelet[2239]: I1002 19:14:16.987491 2239 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:14:16.988326 kubelet[2239]: I1002 19:14:16.988298 2239 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:14:16.988584 kubelet[2239]: I1002 19:14:16.988560 2239 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:14:16.988856 kubelet[2239]: I1002 19:14:16.988831 2239 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:14:16.989034 kubelet[2239]: I1002 19:14:16.989013 2239 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:14:16.989289 kubelet[2239]: I1002 19:14:16.989269 2239 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:14:16.995909 kubelet[2239]: I1002 19:14:16.995853 2239 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:14:16.995909 kubelet[2239]: I1002 19:14:16.995902 2239 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:14:16.996167 kubelet[2239]: I1002 19:14:16.996079 2239 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:14:16.996237 kubelet[2239]: I1002 19:14:16.996177 2239 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:14:16.997600 kubelet[2239]: I1002 19:14:16.997565 2239 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:14:16.998595 kubelet[2239]: W1002 19:14:16.998567 2239 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:14:16.999948 kubelet[2239]: I1002 19:14:16.999899 2239 server.go:1168] "Started kubelet" Oct 2 19:14:17.002000 audit[2239]: AVC avc: denied { mac_admin } for pid=2239 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:17.002000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:14:17.002000 audit[2239]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e85650 a1=4000b7ca80 a2=4000e85620 a3=25 items=0 ppid=1 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.002000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:14:17.004444 kubelet[2239]: I1002 19:14:17.004410 2239 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:14:17.003000 audit[2239]: AVC avc: denied { mac_admin } for pid=2239 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:17.003000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:14:17.003000 audit[2239]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40007f5300 a1=4000b7ca98 a2=4000e856e0 a3=25 items=0 ppid=1 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.003000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:14:17.005015 kubelet[2239]: I1002 19:14:17.004988 2239 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:14:17.005343 kubelet[2239]: I1002 19:14:17.005320 2239 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:14:17.007554 kubelet[2239]: W1002 19:14:17.007054 2239 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.20.139:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.20.139:6443: connect: connection refused Oct 2 19:14:17.007554 kubelet[2239]: E1002 19:14:17.007172 2239 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.20.139:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.20.139:6443: connect: connection refused Oct 2 19:14:17.007777 kubelet[2239]: E1002 19:14:17.007409 2239 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-20-139.178a604481300c84", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-20-139", UID:"ip-172-31-20-139", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-20-139"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 14, 16, 999865476, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 14, 16, 999865476, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.20.139:6443/api/v1/namespaces/default/events": dial tcp 172.31.20.139:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:14:17.008002 kubelet[2239]: W1002 19:14:17.007794 2239 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.20.139:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-20-139&limit=500&resourceVersion=0": dial tcp 172.31.20.139:6443: connect: connection refused Oct 2 19:14:17.008002 kubelet[2239]: E1002 19:14:17.007858 2239 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.20.139:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-20-139&limit=500&resourceVersion=0": dial tcp 172.31.20.139:6443: connect: connection refused Oct 2 19:14:17.008423 kubelet[2239]: E1002 19:14:17.008381 2239 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:14:17.008536 kubelet[2239]: E1002 19:14:17.008430 2239 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:14:17.011836 kubelet[2239]: I1002 19:14:17.011788 2239 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:14:17.012442 kubelet[2239]: I1002 19:14:17.012414 2239 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:14:17.013308 kubelet[2239]: I1002 19:14:17.013274 2239 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:14:17.015035 kubelet[2239]: I1002 19:14:17.013502 2239 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:14:17.018004 kubelet[2239]: I1002 19:14:17.013606 2239 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:14:17.019089 kubelet[2239]: E1002 19:14:17.019052 2239 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.20.139:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-20-139?timeout=10s\": dial tcp 172.31.20.139:6443: connect: connection refused" interval="200ms" Oct 2 19:14:17.019968 kubelet[2239]: W1002 19:14:17.019828 2239 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.20.139:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.20.139:6443: connect: connection refused Oct 2 19:14:17.020160 kubelet[2239]: E1002 19:14:17.019973 2239 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.20.139:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.20.139:6443: connect: connection refused Oct 2 19:14:17.033000 audit[2251]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2251 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.033000 audit[2251]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffddaf5600 a2=0 a3=1 items=0 ppid=2239 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.033000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:14:17.037000 audit[2253]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2253 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.037000 audit[2253]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd398e680 a2=0 a3=1 items=0 ppid=2239 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.037000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:14:17.045000 audit[2255]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2255 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.045000 audit[2255]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe4ce66a0 a2=0 a3=1 items=0 ppid=2239 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.045000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:14:17.052000 audit[2257]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2257 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.052000 audit[2257]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffcc3f97f0 a2=0 a3=1 items=0 ppid=2239 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.052000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:14:17.077121 kubelet[2239]: I1002 19:14:17.077023 2239 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:14:17.077121 kubelet[2239]: I1002 19:14:17.077060 2239 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:14:17.077121 kubelet[2239]: I1002 19:14:17.077092 2239 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:14:17.077000 audit[2261]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2261 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.077000 audit[2261]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffeb7bed90 a2=0 a3=1 items=0 ppid=2239 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.077000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:14:17.079793 kubelet[2239]: I1002 19:14:17.079754 2239 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:14:17.080137 kubelet[2239]: I1002 19:14:17.080098 2239 policy_none.go:49] "None policy: Start" Oct 2 19:14:17.081317 kubelet[2239]: I1002 19:14:17.081289 2239 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:14:17.081501 kubelet[2239]: I1002 19:14:17.081481 2239 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:14:17.087000 audit[2263]: NETFILTER_CFG table=mangle:31 family=2 entries=1 op=nft_register_chain pid=2263 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.087000 audit[2263]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff2e8bf50 a2=0 a3=1 items=0 ppid=2239 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.087000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:14:17.090000 audit[2262]: NETFILTER_CFG table=mangle:32 family=10 entries=2 op=nft_register_chain pid=2262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:17.090000 audit[2262]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe140de90 a2=0 a3=1 items=0 ppid=2239 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.090000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:14:17.094417 systemd[1]: Created slice kubepods.slice. Oct 2 19:14:17.094000 audit[2264]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=2264 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.094000 audit[2264]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc3719ea0 a2=0 a3=1 items=0 ppid=2239 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.094000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:14:17.099672 kubelet[2239]: I1002 19:14:17.099633 2239 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:14:17.099998 kubelet[2239]: I1002 19:14:17.099974 2239 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:14:17.100164 kubelet[2239]: I1002 19:14:17.100125 2239 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:14:17.100368 kubelet[2239]: E1002 19:14:17.100347 2239 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:14:17.101000 audit[2265]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=2265 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.101000 audit[2265]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe57ca7a0 a2=0 a3=1 items=0 ppid=2239 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.101000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:14:17.111738 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:14:17.112000 audit[2266]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=2266 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:17.112000 audit[2266]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd5ec2ce0 a2=0 a3=1 items=0 ppid=2239 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.112000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:14:17.118217 kubelet[2239]: I1002 19:14:17.118162 2239 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-20-139" Oct 2 19:14:17.118870 kubelet[2239]: W1002 19:14:17.118787 2239 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.20.139:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.20.139:6443: connect: connection refused Oct 2 19:14:17.119021 kubelet[2239]: E1002 19:14:17.118877 2239 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.20.139:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.20.139:6443: connect: connection refused Oct 2 19:14:17.121108 kubelet[2239]: E1002 19:14:17.120403 2239 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.20.139:6443/api/v1/nodes\": dial tcp 172.31.20.139:6443: connect: connection refused" node="ip-172-31-20-139" Oct 2 19:14:17.122799 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:14:17.122000 audit[2267]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=2267 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:17.122000 audit[2267]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffee164df0 a2=0 a3=1 items=0 ppid=2239 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.122000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:14:17.126000 audit[2268]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2268 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:17.126000 audit[2268]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd62b7fa0 a2=0 a3=1 items=0 ppid=2239 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.126000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:14:17.136239 kubelet[2239]: I1002 19:14:17.136206 2239 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:14:17.135000 audit[2239]: AVC avc: denied { mac_admin } for pid=2239 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:17.135000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:14:17.135000 audit[2239]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000fff710 a1=40010cfba8 a2=4000fff6e0 a3=25 items=0 ppid=1 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.135000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:14:17.136990 kubelet[2239]: I1002 19:14:17.136965 2239 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:14:17.137404 kubelet[2239]: I1002 19:14:17.137383 2239 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:14:17.141232 kubelet[2239]: E1002 19:14:17.141177 2239 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-20-139\" not found" Oct 2 19:14:17.201481 kubelet[2239]: I1002 19:14:17.201434 2239 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:14:17.203824 kubelet[2239]: I1002 19:14:17.203766 2239 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:14:17.208179 kubelet[2239]: I1002 19:14:17.208123 2239 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:14:17.217794 systemd[1]: Created slice kubepods-burstable-podae9e604feaa2a56d6d28334094745b06.slice. Oct 2 19:14:17.222987 kubelet[2239]: E1002 19:14:17.222223 2239 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.20.139:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-20-139?timeout=10s\": dial tcp 172.31.20.139:6443: connect: connection refused" interval="400ms" Oct 2 19:14:17.235449 systemd[1]: Created slice kubepods-burstable-poda058ebe665369e3587e83684b43f99af.slice. Oct 2 19:14:17.247025 systemd[1]: Created slice kubepods-burstable-podce20f5021dc7fa4d796eb54385d6cccc.slice. Oct 2 19:14:17.318716 kubelet[2239]: I1002 19:14:17.318669 2239 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/ae9e604feaa2a56d6d28334094745b06-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-20-139\" (UID: \"ae9e604feaa2a56d6d28334094745b06\") " pod="kube-system/kube-apiserver-ip-172-31-20-139" Oct 2 19:14:17.318948 kubelet[2239]: I1002 19:14:17.318753 2239 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/a058ebe665369e3587e83684b43f99af-ca-certs\") pod \"kube-controller-manager-ip-172-31-20-139\" (UID: \"a058ebe665369e3587e83684b43f99af\") " pod="kube-system/kube-controller-manager-ip-172-31-20-139" Oct 2 19:14:17.318948 kubelet[2239]: I1002 19:14:17.318807 2239 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/a058ebe665369e3587e83684b43f99af-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-20-139\" (UID: \"a058ebe665369e3587e83684b43f99af\") " pod="kube-system/kube-controller-manager-ip-172-31-20-139" Oct 2 19:14:17.318948 kubelet[2239]: I1002 19:14:17.318853 2239 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/a058ebe665369e3587e83684b43f99af-k8s-certs\") pod \"kube-controller-manager-ip-172-31-20-139\" (UID: \"a058ebe665369e3587e83684b43f99af\") " pod="kube-system/kube-controller-manager-ip-172-31-20-139" Oct 2 19:14:17.319142 kubelet[2239]: I1002 19:14:17.318900 2239 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/ae9e604feaa2a56d6d28334094745b06-ca-certs\") pod \"kube-apiserver-ip-172-31-20-139\" (UID: \"ae9e604feaa2a56d6d28334094745b06\") " pod="kube-system/kube-apiserver-ip-172-31-20-139" Oct 2 19:14:17.319142 kubelet[2239]: I1002 19:14:17.319004 2239 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/ae9e604feaa2a56d6d28334094745b06-k8s-certs\") pod \"kube-apiserver-ip-172-31-20-139\" (UID: \"ae9e604feaa2a56d6d28334094745b06\") " pod="kube-system/kube-apiserver-ip-172-31-20-139" Oct 2 19:14:17.319142 kubelet[2239]: I1002 19:14:17.319048 2239 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a058ebe665369e3587e83684b43f99af-kubeconfig\") pod \"kube-controller-manager-ip-172-31-20-139\" (UID: \"a058ebe665369e3587e83684b43f99af\") " pod="kube-system/kube-controller-manager-ip-172-31-20-139" Oct 2 19:14:17.319142 kubelet[2239]: I1002 19:14:17.319094 2239 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/a058ebe665369e3587e83684b43f99af-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-20-139\" (UID: \"a058ebe665369e3587e83684b43f99af\") " pod="kube-system/kube-controller-manager-ip-172-31-20-139" Oct 2 19:14:17.319142 kubelet[2239]: I1002 19:14:17.319136 2239 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/ce20f5021dc7fa4d796eb54385d6cccc-kubeconfig\") pod \"kube-scheduler-ip-172-31-20-139\" (UID: \"ce20f5021dc7fa4d796eb54385d6cccc\") " pod="kube-system/kube-scheduler-ip-172-31-20-139" Oct 2 19:14:17.322316 kubelet[2239]: I1002 19:14:17.322264 2239 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-20-139" Oct 2 19:14:17.322945 kubelet[2239]: E1002 19:14:17.322894 2239 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.20.139:6443/api/v1/nodes\": dial tcp 172.31.20.139:6443: connect: connection refused" node="ip-172-31-20-139" Oct 2 19:14:17.541456 env[1574]: time="2023-10-02T19:14:17.540980022Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-20-139,Uid:ae9e604feaa2a56d6d28334094745b06,Namespace:kube-system,Attempt:0,}" Oct 2 19:14:17.546777 env[1574]: time="2023-10-02T19:14:17.546395330Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-20-139,Uid:a058ebe665369e3587e83684b43f99af,Namespace:kube-system,Attempt:0,}" Oct 2 19:14:17.552326 env[1574]: time="2023-10-02T19:14:17.552265139Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-20-139,Uid:ce20f5021dc7fa4d796eb54385d6cccc,Namespace:kube-system,Attempt:0,}" Oct 2 19:14:17.623449 kubelet[2239]: E1002 19:14:17.623392 2239 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.20.139:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-20-139?timeout=10s\": dial tcp 172.31.20.139:6443: connect: connection refused" interval="800ms" Oct 2 19:14:17.725897 kubelet[2239]: I1002 19:14:17.725404 2239 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-20-139" Oct 2 19:14:17.725897 kubelet[2239]: E1002 19:14:17.725853 2239 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.20.139:6443/api/v1/nodes\": dial tcp 172.31.20.139:6443: connect: connection refused" node="ip-172-31-20-139" Oct 2 19:14:17.930308 kubelet[2239]: W1002 19:14:17.930203 2239 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.20.139:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.20.139:6443: connect: connection refused Oct 2 19:14:17.930308 kubelet[2239]: E1002 19:14:17.930265 2239 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.20.139:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.20.139:6443: connect: connection refused Oct 2 19:14:18.042437 kubelet[2239]: W1002 19:14:18.035290 2239 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.20.139:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.20.139:6443: connect: connection refused Oct 2 19:14:18.042437 kubelet[2239]: E1002 19:14:18.035383 2239 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.20.139:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.20.139:6443: connect: connection refused Oct 2 19:14:18.052448 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount337474482.mount: Deactivated successfully. Oct 2 19:14:18.059235 env[1574]: time="2023-10-02T19:14:18.059180754Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.063100 env[1574]: time="2023-10-02T19:14:18.063054420Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.064685 env[1574]: time="2023-10-02T19:14:18.064644271Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.067623 env[1574]: time="2023-10-02T19:14:18.067577054Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.069209 env[1574]: time="2023-10-02T19:14:18.069168321Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.070683 env[1574]: time="2023-10-02T19:14:18.070646781Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.072316 env[1574]: time="2023-10-02T19:14:18.072247062Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.077824 env[1574]: time="2023-10-02T19:14:18.077773314Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.084536 env[1574]: time="2023-10-02T19:14:18.084461374Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.086831 env[1574]: time="2023-10-02T19:14:18.086762964Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.089234 env[1574]: time="2023-10-02T19:14:18.089184095Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.101167 env[1574]: time="2023-10-02T19:14:18.101114208Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.152210 env[1574]: time="2023-10-02T19:14:18.150710272Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:14:18.152210 env[1574]: time="2023-10-02T19:14:18.150849484Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:14:18.152210 env[1574]: time="2023-10-02T19:14:18.150940437Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:14:18.152210 env[1574]: time="2023-10-02T19:14:18.151261650Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/988240a2a53324949fb860721a7ebe63e1d5fd8dbf918975345dd5e77e76c639 pid=2283 runtime=io.containerd.runc.v2 Oct 2 19:14:18.161526 kubelet[2239]: W1002 19:14:18.161439 2239 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.20.139:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.20.139:6443: connect: connection refused Oct 2 19:14:18.161692 kubelet[2239]: E1002 19:14:18.161536 2239 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.20.139:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.20.139:6443: connect: connection refused Oct 2 19:14:18.165521 env[1574]: time="2023-10-02T19:14:18.165388046Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:14:18.165521 env[1574]: time="2023-10-02T19:14:18.165470477Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:14:18.165814 env[1574]: time="2023-10-02T19:14:18.165497530Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:14:18.166305 env[1574]: time="2023-10-02T19:14:18.166181460Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bc7381228459d473adc0f7f6a28f160cf907628c6ee19bd9861c9044529bbeee pid=2284 runtime=io.containerd.runc.v2 Oct 2 19:14:18.197007 env[1574]: time="2023-10-02T19:14:18.196397179Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:14:18.197007 env[1574]: time="2023-10-02T19:14:18.196902865Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:14:18.199167 env[1574]: time="2023-10-02T19:14:18.199056552Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:14:18.200267 env[1574]: time="2023-10-02T19:14:18.200101662Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/810935ecd822448e76746caf660075fcc41c0e008474eef47e045d6ea33725ae pid=2318 runtime=io.containerd.runc.v2 Oct 2 19:14:18.214437 systemd[1]: Started cri-containerd-988240a2a53324949fb860721a7ebe63e1d5fd8dbf918975345dd5e77e76c639.scope. Oct 2 19:14:18.241257 systemd[1]: Started cri-containerd-bc7381228459d473adc0f7f6a28f160cf907628c6ee19bd9861c9044529bbeee.scope. Oct 2 19:14:18.253948 kubelet[2239]: W1002 19:14:18.250574 2239 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.20.139:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-20-139&limit=500&resourceVersion=0": dial tcp 172.31.20.139:6443: connect: connection refused Oct 2 19:14:18.253948 kubelet[2239]: E1002 19:14:18.250682 2239 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.20.139:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-20-139&limit=500&resourceVersion=0": dial tcp 172.31.20.139:6443: connect: connection refused Oct 2 19:14:18.281386 systemd[1]: Started cri-containerd-810935ecd822448e76746caf660075fcc41c0e008474eef47e045d6ea33725ae.scope. Oct 2 19:14:18.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.295000 audit: BPF prog-id=70 op=LOAD Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2283 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.296000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938383234306132613533333234393439666238363037323161376562 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2283 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.296000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938383234306132613533333234393439666238363037323161376562 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit: BPF prog-id=71 op=LOAD Oct 2 19:14:18.296000 audit[2300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2283 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.296000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938383234306132613533333234393439666238363037323161376562 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit: BPF prog-id=72 op=LOAD Oct 2 19:14:18.296000 audit[2300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2283 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.296000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938383234306132613533333234393439666238363037323161376562 Oct 2 19:14:18.296000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:14:18.296000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { perfmon } for pid=2300 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit[2300]: AVC avc: denied { bpf } for pid=2300 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.296000 audit: BPF prog-id=73 op=LOAD Oct 2 19:14:18.296000 audit[2300]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2283 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.296000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938383234306132613533333234393439666238363037323161376562 Oct 2 19:14:18.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.322000 audit: BPF prog-id=74 op=LOAD Oct 2 19:14:18.324000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.324000 audit[2304]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2284 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263373338313232383435396434373361646330663766366132386631 Oct 2 19:14:18.324000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.324000 audit[2304]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2284 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263373338313232383435396434373361646330663766366132386631 Oct 2 19:14:18.325000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.325000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.325000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.325000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.325000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.325000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.325000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.325000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.325000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.325000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.325000 audit: BPF prog-id=75 op=LOAD Oct 2 19:14:18.325000 audit[2304]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2284 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263373338313232383435396434373361646330663766366132386631 Oct 2 19:14:18.328000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.328000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.328000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.328000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.328000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.328000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.328000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.328000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.328000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.328000 audit: BPF prog-id=76 op=LOAD Oct 2 19:14:18.328000 audit[2304]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2284 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.328000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263373338313232383435396434373361646330663766366132386631 Oct 2 19:14:18.329000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:14:18.329000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:14:18.330000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.330000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.330000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.330000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.330000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.330000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.330000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.330000 audit[2304]: AVC avc: denied { perfmon } for pid=2304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.330000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.330000 audit[2304]: AVC avc: denied { bpf } for pid=2304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.330000 audit: BPF prog-id=77 op=LOAD Oct 2 19:14:18.330000 audit[2304]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2284 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.330000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263373338313232383435396434373361646330663766366132386631 Oct 2 19:14:18.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.356000 audit: BPF prog-id=78 op=LOAD Oct 2 19:14:18.357000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.357000 audit[2334]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2318 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.357000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831303933356563643832323434386537363734366361663636303037 Oct 2 19:14:18.357000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.357000 audit[2334]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2318 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.357000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831303933356563643832323434386537363734366361663636303037 Oct 2 19:14:18.358000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.358000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.358000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.358000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.358000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.358000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.358000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.358000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.358000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.358000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.358000 audit: BPF prog-id=79 op=LOAD Oct 2 19:14:18.358000 audit[2334]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2318 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.358000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831303933356563643832323434386537363734366361663636303037 Oct 2 19:14:18.362000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.362000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.362000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.362000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.362000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.362000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.362000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.362000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.362000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.362000 audit: BPF prog-id=80 op=LOAD Oct 2 19:14:18.362000 audit[2334]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2318 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831303933356563643832323434386537363734366361663636303037 Oct 2 19:14:18.363000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:14:18.366000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:14:18.366000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.366000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.366000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.366000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.366000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.366000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.366000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.366000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.366000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.366000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.366000 audit: BPF prog-id=81 op=LOAD Oct 2 19:14:18.366000 audit[2334]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2318 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.366000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831303933356563643832323434386537363734366361663636303037 Oct 2 19:14:18.379197 env[1574]: time="2023-10-02T19:14:18.379119866Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-20-139,Uid:ce20f5021dc7fa4d796eb54385d6cccc,Namespace:kube-system,Attempt:0,} returns sandbox id \"988240a2a53324949fb860721a7ebe63e1d5fd8dbf918975345dd5e77e76c639\"" Oct 2 19:14:18.386568 env[1574]: time="2023-10-02T19:14:18.386504073Z" level=info msg="CreateContainer within sandbox \"988240a2a53324949fb860721a7ebe63e1d5fd8dbf918975345dd5e77e76c639\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:14:18.424864 kubelet[2239]: E1002 19:14:18.424817 2239 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.20.139:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-20-139?timeout=10s\": dial tcp 172.31.20.139:6443: connect: connection refused" interval="1.6s" Oct 2 19:14:18.425259 env[1574]: time="2023-10-02T19:14:18.425202327Z" level=info msg="CreateContainer within sandbox \"988240a2a53324949fb860721a7ebe63e1d5fd8dbf918975345dd5e77e76c639\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"bee6ca936c079656a292aed87ca113f5044328b0c23a5dbb71b71da368f4a60b\"" Oct 2 19:14:18.426559 env[1574]: time="2023-10-02T19:14:18.426513272Z" level=info msg="StartContainer for \"bee6ca936c079656a292aed87ca113f5044328b0c23a5dbb71b71da368f4a60b\"" Oct 2 19:14:18.448130 env[1574]: time="2023-10-02T19:14:18.447955056Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-20-139,Uid:ae9e604feaa2a56d6d28334094745b06,Namespace:kube-system,Attempt:0,} returns sandbox id \"bc7381228459d473adc0f7f6a28f160cf907628c6ee19bd9861c9044529bbeee\"" Oct 2 19:14:18.463134 env[1574]: time="2023-10-02T19:14:18.463081831Z" level=info msg="CreateContainer within sandbox \"bc7381228459d473adc0f7f6a28f160cf907628c6ee19bd9861c9044529bbeee\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:14:18.482613 env[1574]: time="2023-10-02T19:14:18.482557532Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-20-139,Uid:a058ebe665369e3587e83684b43f99af,Namespace:kube-system,Attempt:0,} returns sandbox id \"810935ecd822448e76746caf660075fcc41c0e008474eef47e045d6ea33725ae\"" Oct 2 19:14:18.489375 env[1574]: time="2023-10-02T19:14:18.489320437Z" level=info msg="CreateContainer within sandbox \"810935ecd822448e76746caf660075fcc41c0e008474eef47e045d6ea33725ae\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:14:18.497683 env[1574]: time="2023-10-02T19:14:18.497603569Z" level=info msg="CreateContainer within sandbox \"bc7381228459d473adc0f7f6a28f160cf907628c6ee19bd9861c9044529bbeee\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"f536fac8d4e1a20df85718c37ced7233a935234cb7fc7b1135f9b1d105f13fea\"" Oct 2 19:14:18.498789 env[1574]: time="2023-10-02T19:14:18.498720476Z" level=info msg="StartContainer for \"f536fac8d4e1a20df85718c37ced7233a935234cb7fc7b1135f9b1d105f13fea\"" Oct 2 19:14:18.529104 kubelet[2239]: I1002 19:14:18.528586 2239 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-20-139" Oct 2 19:14:18.529694 kubelet[2239]: E1002 19:14:18.529654 2239 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.20.139:6443/api/v1/nodes\": dial tcp 172.31.20.139:6443: connect: connection refused" node="ip-172-31-20-139" Oct 2 19:14:18.530125 env[1574]: time="2023-10-02T19:14:18.530066784Z" level=info msg="CreateContainer within sandbox \"810935ecd822448e76746caf660075fcc41c0e008474eef47e045d6ea33725ae\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"88a42fc18b520cb265ad1df3a9083e227f33142ccd44fd9d24a144c6880b343b\"" Oct 2 19:14:18.531180 env[1574]: time="2023-10-02T19:14:18.531129597Z" level=info msg="StartContainer for \"88a42fc18b520cb265ad1df3a9083e227f33142ccd44fd9d24a144c6880b343b\"" Oct 2 19:14:18.541305 systemd[1]: Started cri-containerd-bee6ca936c079656a292aed87ca113f5044328b0c23a5dbb71b71da368f4a60b.scope. Oct 2 19:14:18.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.589000 audit: BPF prog-id=82 op=LOAD Oct 2 19:14:18.591000 audit[2400]: AVC avc: denied { bpf } for pid=2400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.591000 audit[2400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2283 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265653663613933366330373936353661323932616564383763613131 Oct 2 19:14:18.591000 audit[2400]: AVC avc: denied { perfmon } for pid=2400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.591000 audit[2400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2283 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265653663613933366330373936353661323932616564383763613131 Oct 2 19:14:18.591000 audit[2400]: AVC avc: denied { bpf } for pid=2400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.591000 audit[2400]: AVC avc: denied { bpf } for pid=2400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.591000 audit[2400]: AVC avc: denied { bpf } for pid=2400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.591000 audit[2400]: AVC avc: denied { perfmon } for pid=2400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.591000 audit[2400]: AVC avc: denied { perfmon } for pid=2400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.591000 audit[2400]: AVC avc: denied { perfmon } for pid=2400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.591000 audit[2400]: AVC avc: denied { perfmon } for pid=2400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.591000 audit[2400]: AVC avc: denied { perfmon } for pid=2400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.591000 audit[2400]: AVC avc: denied { bpf } for pid=2400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.591000 audit[2400]: AVC avc: denied { bpf } for pid=2400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.591000 audit: BPF prog-id=83 op=LOAD Oct 2 19:14:18.591000 audit[2400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2283 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265653663613933366330373936353661323932616564383763613131 Oct 2 19:14:18.591000 audit[2400]: AVC avc: denied { bpf } for pid=2400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.591000 audit[2400]: AVC avc: denied { bpf } for pid=2400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.591000 audit[2400]: AVC avc: denied { perfmon } for pid=2400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.591000 audit[2400]: AVC avc: denied { perfmon } for pid=2400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.591000 audit[2400]: AVC avc: denied { perfmon } for pid=2400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.591000 audit[2400]: AVC avc: denied { perfmon } for pid=2400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.591000 audit[2400]: AVC avc: denied { perfmon } for pid=2400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.591000 audit[2400]: AVC avc: denied { bpf } for pid=2400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.591000 audit[2400]: AVC avc: denied { bpf } for pid=2400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.591000 audit: BPF prog-id=84 op=LOAD Oct 2 19:14:18.591000 audit[2400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2283 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265653663613933366330373936353661323932616564383763613131 Oct 2 19:14:18.591000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:14:18.592000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:14:18.592000 audit[2400]: AVC avc: denied { bpf } for pid=2400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.592000 audit[2400]: AVC avc: denied { bpf } for pid=2400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.592000 audit[2400]: AVC avc: denied { bpf } for pid=2400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.592000 audit[2400]: AVC avc: denied { perfmon } for pid=2400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.592000 audit[2400]: AVC avc: denied { perfmon } for pid=2400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.592000 audit[2400]: AVC avc: denied { perfmon } for pid=2400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.592000 audit[2400]: AVC avc: denied { perfmon } for pid=2400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.592000 audit[2400]: AVC avc: denied { perfmon } for pid=2400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.592000 audit[2400]: AVC avc: denied { bpf } for pid=2400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.592000 audit[2400]: AVC avc: denied { bpf } for pid=2400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.592000 audit: BPF prog-id=85 op=LOAD Oct 2 19:14:18.592000 audit[2400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2283 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265653663613933366330373936353661323932616564383763613131 Oct 2 19:14:18.619379 systemd[1]: Started cri-containerd-88a42fc18b520cb265ad1df3a9083e227f33142ccd44fd9d24a144c6880b343b.scope. Oct 2 19:14:18.633890 systemd[1]: Started cri-containerd-f536fac8d4e1a20df85718c37ced7233a935234cb7fc7b1135f9b1d105f13fea.scope. Oct 2 19:14:18.690485 env[1574]: time="2023-10-02T19:14:18.690414341Z" level=info msg="StartContainer for \"bee6ca936c079656a292aed87ca113f5044328b0c23a5dbb71b71da368f4a60b\" returns successfully" Oct 2 19:14:18.706000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.706000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.706000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.706000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.706000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.706000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.706000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.706000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.706000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.707000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.707000 audit: BPF prog-id=86 op=LOAD Oct 2 19:14:18.708000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.708000 audit[2429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2318 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.708000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838613432666331386235323063623236356164316466336139303833 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2318 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838613432666331386235323063623236356164316466336139303833 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit: BPF prog-id=87 op=LOAD Oct 2 19:14:18.709000 audit[2429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2318 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838613432666331386235323063623236356164316466336139303833 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit: BPF prog-id=88 op=LOAD Oct 2 19:14:18.709000 audit[2429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2318 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838613432666331386235323063623236356164316466336139303833 Oct 2 19:14:18.709000 audit: BPF prog-id=88 op=UNLOAD Oct 2 19:14:18.709000 audit: BPF prog-id=87 op=UNLOAD Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.709000 audit: BPF prog-id=89 op=LOAD Oct 2 19:14:18.709000 audit[2429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2318 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838613432666331386235323063623236356164316466336139303833 Oct 2 19:14:18.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.743000 audit: BPF prog-id=90 op=LOAD Oct 2 19:14:18.744000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.744000 audit[2425]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2284 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635333666616338643465316132306466383537313863333763656437 Oct 2 19:14:18.744000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.744000 audit[2425]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2284 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635333666616338643465316132306466383537313863333763656437 Oct 2 19:14:18.744000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.744000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.744000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.744000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.744000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.744000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.744000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.744000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.744000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.744000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.744000 audit: BPF prog-id=91 op=LOAD Oct 2 19:14:18.744000 audit[2425]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2284 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635333666616338643465316132306466383537313863333763656437 Oct 2 19:14:18.747000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.747000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.747000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.747000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.747000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.747000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.747000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.747000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.747000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.747000 audit: BPF prog-id=92 op=LOAD Oct 2 19:14:18.747000 audit[2425]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2284 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635333666616338643465316132306466383537313863333763656437 Oct 2 19:14:18.748000 audit: BPF prog-id=92 op=UNLOAD Oct 2 19:14:18.748000 audit: BPF prog-id=91 op=UNLOAD Oct 2 19:14:18.748000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.748000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.748000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.748000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.748000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.748000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.748000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.748000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.748000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.748000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.748000 audit: BPF prog-id=93 op=LOAD Oct 2 19:14:18.748000 audit[2425]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2284 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635333666616338643465316132306466383537313863333763656437 Oct 2 19:14:18.792298 env[1574]: time="2023-10-02T19:14:18.792218529Z" level=info msg="StartContainer for \"88a42fc18b520cb265ad1df3a9083e227f33142ccd44fd9d24a144c6880b343b\" returns successfully" Oct 2 19:14:18.836835 env[1574]: time="2023-10-02T19:14:18.836701033Z" level=info msg="StartContainer for \"f536fac8d4e1a20df85718c37ced7233a935234cb7fc7b1135f9b1d105f13fea\" returns successfully" Oct 2 19:14:18.993694 kubelet[2239]: E1002 19:14:18.993536 2239 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.20.139:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.20.139:6443: connect: connection refused Oct 2 19:14:20.131950 kubelet[2239]: I1002 19:14:20.131861 2239 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-20-139" Oct 2 19:14:21.425052 update_engine[1554]: I1002 19:14:21.424986 1554 update_attempter.cc:505] Updating boot flags... Oct 2 19:14:21.767000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:21.770373 kernel: kauditd_printk_skb: 557 callbacks suppressed Oct 2 19:14:21.770513 kernel: audit: type=1400 audit(1696274061.767:722): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:21.767000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000779f80 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:14:21.796252 kernel: audit: type=1300 audit(1696274061.767:722): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000779f80 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:14:21.767000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:21.816494 kernel: audit: type=1327 audit(1696274061.767:722): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:21.767000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:21.836941 kernel: audit: type=1400 audit(1696274061.767:723): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:21.767000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40001b7980 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:14:21.856982 kernel: audit: type=1300 audit(1696274061.767:723): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40001b7980 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:14:21.767000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:21.872965 kernel: audit: type=1327 audit(1696274061.767:723): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:23.113000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:23.113000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4000d40000 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:14:23.137953 kernel: audit: type=1400 audit(1696274063.113:724): avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:23.138147 kernel: audit: type=1300 audit(1696274063.113:724): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4000d40000 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:14:23.113000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:14:23.151732 kernel: audit: type=1327 audit(1696274063.113:724): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:14:23.113000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:23.164375 kernel: audit: type=1400 audit(1696274063.113:725): avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:23.113000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4006e62380 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:14:23.113000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:14:23.113000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:23.113000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4000d40330 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:14:23.113000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:14:23.130000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:23.130000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4c a1=400417d350 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:14:23.130000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:14:23.154000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:23.154000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=65 a1=40059b3780 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:14:23.154000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:14:23.154000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:23.154000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=65 a1=40042fe870 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:14:23.154000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:14:23.526745 kubelet[2239]: E1002 19:14:23.526675 2239 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-20-139\" not found" node="ip-172-31-20-139" Oct 2 19:14:23.582159 kubelet[2239]: I1002 19:14:23.582074 2239 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-20-139" Oct 2 19:14:24.011392 kubelet[2239]: I1002 19:14:24.011315 2239 apiserver.go:52] "Watching apiserver" Oct 2 19:14:24.014934 kubelet[2239]: I1002 19:14:24.014836 2239 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:14:24.078755 kubelet[2239]: I1002 19:14:24.078435 2239 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:14:26.401041 systemd[1]: Reloading. Oct 2 19:14:26.540886 /usr/lib/systemd/system-generators/torcx-generator[2630]: time="2023-10-02T19:14:26Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:14:26.545239 /usr/lib/systemd/system-generators/torcx-generator[2630]: time="2023-10-02T19:14:26Z" level=info msg="torcx already run" Oct 2 19:14:26.853796 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:14:26.853837 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:14:26.899942 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:14:26.970000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:26.973055 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:14:26.973170 kernel: audit: type=1400 audit(1696274066.970:730): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:26.970000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000bcfc60 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:14:27.002418 kernel: audit: type=1300 audit(1696274066.970:730): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000bcfc60 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:14:27.002546 kernel: audit: type=1327 audit(1696274066.970:730): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:26.970000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:26.972000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:27.022359 kernel: audit: type=1400 audit(1696274066.972:731): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:27.022508 kernel: audit: type=1300 audit(1696274066.972:731): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000bcfca0 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:14:26.972000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000bcfca0 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:14:26.972000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:27.045483 kernel: audit: type=1327 audit(1696274066.972:731): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:27.046591 kernel: audit: type=1400 audit(1696274066.972:732): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:26.972000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:26.972000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000bcfde0 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:14:27.068066 kernel: audit: type=1300 audit(1696274066.972:732): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000bcfde0 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:14:26.972000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:27.078964 kernel: audit: type=1327 audit(1696274066.972:732): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:26.978000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:27.090242 kernel: audit: type=1400 audit(1696274066.978:733): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:26.978000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000bcff20 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:14:26.978000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:27.007000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:14:27.007000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000c850c0 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:14:27.007000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:27.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.191000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.191000 audit: BPF prog-id=94 op=LOAD Oct 2 19:14:27.191000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:14:27.191000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.192000 audit: BPF prog-id=95 op=LOAD Oct 2 19:14:27.192000 audit: BPF prog-id=90 op=UNLOAD Oct 2 19:14:27.201000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.201000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.205000 audit: BPF prog-id=96 op=LOAD Oct 2 19:14:27.205000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:14:27.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.205000 audit: BPF prog-id=97 op=LOAD Oct 2 19:14:27.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.205000 audit: BPF prog-id=98 op=LOAD Oct 2 19:14:27.205000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:14:27.205000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:14:27.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.207000 audit: BPF prog-id=99 op=LOAD Oct 2 19:14:27.207000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:14:27.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.210000 audit: BPF prog-id=100 op=LOAD Oct 2 19:14:27.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.210000 audit: BPF prog-id=101 op=LOAD Oct 2 19:14:27.210000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:14:27.210000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:14:27.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.218000 audit: BPF prog-id=102 op=LOAD Oct 2 19:14:27.218000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:14:27.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.220000 audit: BPF prog-id=103 op=LOAD Oct 2 19:14:27.220000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:14:27.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.226000 audit: BPF prog-id=104 op=LOAD Oct 2 19:14:27.226000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:14:27.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.227000 audit: BPF prog-id=105 op=LOAD Oct 2 19:14:27.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.227000 audit: BPF prog-id=106 op=LOAD Oct 2 19:14:27.227000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:14:27.227000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:14:27.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.234000 audit: BPF prog-id=107 op=LOAD Oct 2 19:14:27.234000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:14:27.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.245591 kubelet[2239]: I1002 19:14:27.245481 2239 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-20-139" podStartSLOduration=3.245383019 podCreationTimestamp="2023-10-02 19:14:24 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:14:27.240442912 +0000 UTC m=+11.501953906" watchObservedRunningTime="2023-10-02 19:14:27.245383019 +0000 UTC m=+11.506894013" Oct 2 19:14:27.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.245000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.246000 audit: BPF prog-id=108 op=LOAD Oct 2 19:14:27.246000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:14:27.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.247000 audit: BPF prog-id=109 op=LOAD Oct 2 19:14:27.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.247000 audit: BPF prog-id=110 op=LOAD Oct 2 19:14:27.247000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:14:27.247000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:14:27.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.251000 audit: BPF prog-id=111 op=LOAD Oct 2 19:14:27.251000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:14:27.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.252000 audit: BPF prog-id=112 op=LOAD Oct 2 19:14:27.252000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:14:27.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.257000 audit: BPF prog-id=113 op=LOAD Oct 2 19:14:27.258000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:14:27.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.260000 audit: BPF prog-id=114 op=LOAD Oct 2 19:14:27.260000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:14:27.319442 kubelet[2239]: I1002 19:14:27.319381 2239 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:14:27.320084 systemd[1]: Stopping kubelet.service... Oct 2 19:14:27.344000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:27.344519 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:14:27.344930 systemd[1]: Stopped kubelet.service. Oct 2 19:14:27.345026 systemd[1]: kubelet.service: Consumed 1.919s CPU time. Oct 2 19:14:27.348530 systemd[1]: Started kubelet.service. Oct 2 19:14:27.350000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:27.505000 audit[2690]: USER_ACCT pid=2690 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:14:27.505000 audit[2690]: CRED_REFR pid=2690 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:14:27.506215 sudo[2690]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:14:27.506735 sudo[2690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:14:27.515000 audit[2690]: USER_START pid=2690 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:14:27.569880 kubelet[2680]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:14:27.570493 kubelet[2680]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:14:27.570656 kubelet[2680]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:14:27.571093 kubelet[2680]: I1002 19:14:27.571018 2680 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:14:27.587183 kubelet[2680]: I1002 19:14:27.587145 2680 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:14:27.587372 kubelet[2680]: I1002 19:14:27.587350 2680 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:14:27.587800 kubelet[2680]: I1002 19:14:27.587776 2680 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:14:27.591005 kubelet[2680]: I1002 19:14:27.590969 2680 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:14:27.598665 kubelet[2680]: W1002 19:14:27.598630 2680 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:14:27.600301 kubelet[2680]: I1002 19:14:27.600271 2680 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:14:27.600984 kubelet[2680]: I1002 19:14:27.600960 2680 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:14:27.601205 kubelet[2680]: I1002 19:14:27.601182 2680 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:14:27.601477 kubelet[2680]: I1002 19:14:27.601455 2680 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:14:27.601616 kubelet[2680]: I1002 19:14:27.601595 2680 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:14:27.601832 kubelet[2680]: I1002 19:14:27.601811 2680 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:14:27.604428 kubelet[2680]: I1002 19:14:27.604388 2680 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:14:27.609879 kubelet[2680]: I1002 19:14:27.609845 2680 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:14:27.611139 kubelet[2680]: I1002 19:14:27.611107 2680 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:14:27.611471 kubelet[2680]: I1002 19:14:27.611449 2680 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:14:27.611669 kubelet[2680]: I1002 19:14:27.611648 2680 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:14:27.657000 kubelet[2680]: I1002 19:14:27.656960 2680 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:14:27.658620 kubelet[2680]: I1002 19:14:27.658587 2680 server.go:1168] "Started kubelet" Oct 2 19:14:27.671645 kubelet[2680]: I1002 19:14:27.671608 2680 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:14:27.672985 kubelet[2680]: I1002 19:14:27.672950 2680 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:14:27.680142 kubelet[2680]: I1002 19:14:27.680105 2680 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:14:27.687000 audit[2680]: AVC avc: denied { mac_admin } for pid=2680 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.687000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:14:27.687000 audit[2680]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40005f2150 a1=4000d85a70 a2=40005f2120 a3=25 items=0 ppid=1 pid=2680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:27.687000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:14:27.691894 kubelet[2680]: I1002 19:14:27.691862 2680 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:14:27.691000 audit[2680]: AVC avc: denied { mac_admin } for pid=2680 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:27.691000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:14:27.691000 audit[2680]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40001b7940 a1=4000d85a88 a2=40005f21e0 a3=25 items=0 ppid=1 pid=2680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:27.691000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:14:27.692528 kubelet[2680]: I1002 19:14:27.692505 2680 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:14:27.692666 kubelet[2680]: I1002 19:14:27.692645 2680 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:14:27.700296 kubelet[2680]: E1002 19:14:27.700257 2680 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:14:27.700502 kubelet[2680]: E1002 19:14:27.700479 2680 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:14:27.713527 kubelet[2680]: I1002 19:14:27.713488 2680 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:14:27.714682 kubelet[2680]: I1002 19:14:27.714631 2680 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:14:27.840604 kubelet[2680]: I1002 19:14:27.840474 2680 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-20-139" Oct 2 19:14:27.876179 kubelet[2680]: I1002 19:14:27.876144 2680 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-20-139" Oct 2 19:14:27.876721 kubelet[2680]: I1002 19:14:27.876700 2680 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-20-139" Oct 2 19:14:27.930378 kubelet[2680]: I1002 19:14:27.930320 2680 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:14:27.946187 kubelet[2680]: I1002 19:14:27.946133 2680 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:14:27.947095 kubelet[2680]: I1002 19:14:27.947052 2680 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:14:27.947217 kubelet[2680]: I1002 19:14:27.947103 2680 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:14:27.947217 kubelet[2680]: E1002 19:14:27.947186 2680 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:14:28.026836 kubelet[2680]: I1002 19:14:28.026771 2680 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:14:28.026836 kubelet[2680]: I1002 19:14:28.026814 2680 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:14:28.027079 kubelet[2680]: I1002 19:14:28.026850 2680 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:14:28.027331 kubelet[2680]: I1002 19:14:28.027285 2680 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:14:28.027331 kubelet[2680]: I1002 19:14:28.027327 2680 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:14:28.027331 kubelet[2680]: I1002 19:14:28.027374 2680 policy_none.go:49] "None policy: Start" Oct 2 19:14:28.029312 kubelet[2680]: I1002 19:14:28.029280 2680 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:14:28.029499 kubelet[2680]: I1002 19:14:28.029479 2680 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:14:28.029967 kubelet[2680]: I1002 19:14:28.029888 2680 state_mem.go:75] "Updated machine memory state" Oct 2 19:14:28.042999 kubelet[2680]: I1002 19:14:28.042966 2680 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:14:28.042000 audit[2680]: AVC avc: denied { mac_admin } for pid=2680 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.042000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:14:28.042000 audit[2680]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400044c000 a1=4000b5a030 a2=40005f3fb0 a3=25 items=0 ppid=1 pid=2680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:28.042000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:14:28.043726 kubelet[2680]: I1002 19:14:28.043703 2680 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:14:28.045743 kubelet[2680]: I1002 19:14:28.045705 2680 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:14:28.058439 kubelet[2680]: I1002 19:14:28.058404 2680 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:14:28.058782 kubelet[2680]: I1002 19:14:28.058757 2680 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:14:28.058981 kubelet[2680]: I1002 19:14:28.058960 2680 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:14:28.092558 kubelet[2680]: E1002 19:14:28.092374 2680 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ip-172-31-20-139\" already exists" pod="kube-system/kube-scheduler-ip-172-31-20-139" Oct 2 19:14:28.095736 kubelet[2680]: E1002 19:14:28.095680 2680 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ip-172-31-20-139\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-20-139" Oct 2 19:14:28.137816 kubelet[2680]: I1002 19:14:28.137773 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/ae9e604feaa2a56d6d28334094745b06-ca-certs\") pod \"kube-apiserver-ip-172-31-20-139\" (UID: \"ae9e604feaa2a56d6d28334094745b06\") " pod="kube-system/kube-apiserver-ip-172-31-20-139" Oct 2 19:14:28.138133 kubelet[2680]: I1002 19:14:28.138099 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/ae9e604feaa2a56d6d28334094745b06-k8s-certs\") pod \"kube-apiserver-ip-172-31-20-139\" (UID: \"ae9e604feaa2a56d6d28334094745b06\") " pod="kube-system/kube-apiserver-ip-172-31-20-139" Oct 2 19:14:28.138323 kubelet[2680]: I1002 19:14:28.138288 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/a058ebe665369e3587e83684b43f99af-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-20-139\" (UID: \"a058ebe665369e3587e83684b43f99af\") " pod="kube-system/kube-controller-manager-ip-172-31-20-139" Oct 2 19:14:28.138517 kubelet[2680]: I1002 19:14:28.138476 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/a058ebe665369e3587e83684b43f99af-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-20-139\" (UID: \"a058ebe665369e3587e83684b43f99af\") " pod="kube-system/kube-controller-manager-ip-172-31-20-139" Oct 2 19:14:28.138972 kubelet[2680]: I1002 19:14:28.138900 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/ae9e604feaa2a56d6d28334094745b06-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-20-139\" (UID: \"ae9e604feaa2a56d6d28334094745b06\") " pod="kube-system/kube-apiserver-ip-172-31-20-139" Oct 2 19:14:28.139167 kubelet[2680]: I1002 19:14:28.139133 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/a058ebe665369e3587e83684b43f99af-ca-certs\") pod \"kube-controller-manager-ip-172-31-20-139\" (UID: \"a058ebe665369e3587e83684b43f99af\") " pod="kube-system/kube-controller-manager-ip-172-31-20-139" Oct 2 19:14:28.139372 kubelet[2680]: I1002 19:14:28.139351 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/a058ebe665369e3587e83684b43f99af-k8s-certs\") pod \"kube-controller-manager-ip-172-31-20-139\" (UID: \"a058ebe665369e3587e83684b43f99af\") " pod="kube-system/kube-controller-manager-ip-172-31-20-139" Oct 2 19:14:28.139588 kubelet[2680]: I1002 19:14:28.139567 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a058ebe665369e3587e83684b43f99af-kubeconfig\") pod \"kube-controller-manager-ip-172-31-20-139\" (UID: \"a058ebe665369e3587e83684b43f99af\") " pod="kube-system/kube-controller-manager-ip-172-31-20-139" Oct 2 19:14:28.139802 kubelet[2680]: I1002 19:14:28.139780 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/ce20f5021dc7fa4d796eb54385d6cccc-kubeconfig\") pod \"kube-scheduler-ip-172-31-20-139\" (UID: \"ce20f5021dc7fa4d796eb54385d6cccc\") " pod="kube-system/kube-scheduler-ip-172-31-20-139" Oct 2 19:14:28.585978 sudo[2690]: pam_unix(sudo:session): session closed for user root Oct 2 19:14:28.585000 audit[2690]: USER_END pid=2690 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:14:28.585000 audit[2690]: CRED_DISP pid=2690 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:14:28.625210 kubelet[2680]: I1002 19:14:28.625160 2680 apiserver.go:52] "Watching apiserver" Oct 2 19:14:28.631368 kubelet[2680]: I1002 19:14:28.631326 2680 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:14:28.643482 kubelet[2680]: I1002 19:14:28.643401 2680 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:14:29.063881 kubelet[2680]: I1002 19:14:29.063826 2680 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-20-139" podStartSLOduration=1.063752105 podCreationTimestamp="2023-10-02 19:14:28 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:14:29.048310969 +0000 UTC m=+1.670905072" watchObservedRunningTime="2023-10-02 19:14:29.063752105 +0000 UTC m=+1.686346196" Oct 2 19:14:31.711706 sudo[1827]: pam_unix(sudo:session): session closed for user root Oct 2 19:14:31.710000 audit[1827]: USER_END pid=1827 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:14:31.711000 audit[1827]: CRED_DISP pid=1827 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:14:31.735162 sshd[1824]: pam_unix(sshd:session): session closed for user core Oct 2 19:14:31.736000 audit[1824]: USER_END pid=1824 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:14:31.736000 audit[1824]: CRED_DISP pid=1824 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:14:31.742222 systemd-logind[1553]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:14:31.742880 systemd[1]: sshd@6-172.31.20.139:22-139.178.89.65:46416.service: Deactivated successfully. Oct 2 19:14:31.742000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.20.139:22-139.178.89.65:46416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:31.744230 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:14:31.744588 systemd[1]: session-7.scope: Consumed 10.769s CPU time. Oct 2 19:14:31.746222 systemd-logind[1553]: Removed session 7. Oct 2 19:14:40.478736 kubelet[2680]: I1002 19:14:40.478682 2680 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:14:40.480055 env[1574]: time="2023-10-02T19:14:40.479999555Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:14:40.482415 kubelet[2680]: I1002 19:14:40.481169 2680 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:14:40.575068 kubelet[2680]: I1002 19:14:40.574216 2680 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:14:40.586154 systemd[1]: Created slice kubepods-besteffort-pod6da471ed_54c7_4343_91d3_482432556135.slice. Oct 2 19:14:40.604121 kubelet[2680]: W1002 19:14:40.604060 2680 reflector.go:533] object-"kube-system"/"kube-proxy": failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ip-172-31-20-139" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-20-139' and this object Oct 2 19:14:40.604309 kubelet[2680]: E1002 19:14:40.604144 2680 reflector.go:148] object-"kube-system"/"kube-proxy": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ip-172-31-20-139" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-20-139' and this object Oct 2 19:14:40.611346 kubelet[2680]: I1002 19:14:40.611226 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/6da471ed-54c7-4343-91d3-482432556135-kube-proxy\") pod \"kube-proxy-hq9tc\" (UID: \"6da471ed-54c7-4343-91d3-482432556135\") " pod="kube-system/kube-proxy-hq9tc" Oct 2 19:14:40.611543 kubelet[2680]: I1002 19:14:40.611394 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/6da471ed-54c7-4343-91d3-482432556135-xtables-lock\") pod \"kube-proxy-hq9tc\" (UID: \"6da471ed-54c7-4343-91d3-482432556135\") " pod="kube-system/kube-proxy-hq9tc" Oct 2 19:14:40.611622 kubelet[2680]: I1002 19:14:40.611444 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/6da471ed-54c7-4343-91d3-482432556135-lib-modules\") pod \"kube-proxy-hq9tc\" (UID: \"6da471ed-54c7-4343-91d3-482432556135\") " pod="kube-system/kube-proxy-hq9tc" Oct 2 19:14:40.611734 kubelet[2680]: I1002 19:14:40.611697 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-r2crf\" (UniqueName: \"kubernetes.io/projected/6da471ed-54c7-4343-91d3-482432556135-kube-api-access-r2crf\") pod \"kube-proxy-hq9tc\" (UID: \"6da471ed-54c7-4343-91d3-482432556135\") " pod="kube-system/kube-proxy-hq9tc" Oct 2 19:14:40.638225 kubelet[2680]: I1002 19:14:40.638145 2680 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:14:40.650036 systemd[1]: Created slice kubepods-burstable-pod008a43d1_2233_43f1_a2a3_eae7eb7bd7c0.slice. Oct 2 19:14:40.712966 kubelet[2680]: I1002 19:14:40.712832 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-hostproc\") pod \"cilium-bw4sc\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " pod="kube-system/cilium-bw4sc" Oct 2 19:14:40.713155 kubelet[2680]: I1002 19:14:40.713014 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-clustermesh-secrets\") pod \"cilium-bw4sc\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " pod="kube-system/cilium-bw4sc" Oct 2 19:14:40.713229 kubelet[2680]: I1002 19:14:40.713158 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-hubble-tls\") pod \"cilium-bw4sc\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " pod="kube-system/cilium-bw4sc" Oct 2 19:14:40.713334 kubelet[2680]: I1002 19:14:40.713299 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bnffl\" (UniqueName: \"kubernetes.io/projected/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-kube-api-access-bnffl\") pod \"cilium-bw4sc\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " pod="kube-system/cilium-bw4sc" Oct 2 19:14:40.713478 kubelet[2680]: I1002 19:14:40.713418 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-cilium-run\") pod \"cilium-bw4sc\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " pod="kube-system/cilium-bw4sc" Oct 2 19:14:40.713837 kubelet[2680]: I1002 19:14:40.713589 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-cilium-cgroup\") pod \"cilium-bw4sc\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " pod="kube-system/cilium-bw4sc" Oct 2 19:14:40.713994 kubelet[2680]: I1002 19:14:40.713879 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-bpf-maps\") pod \"cilium-bw4sc\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " pod="kube-system/cilium-bw4sc" Oct 2 19:14:40.714069 kubelet[2680]: I1002 19:14:40.714002 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-host-proc-sys-net\") pod \"cilium-bw4sc\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " pod="kube-system/cilium-bw4sc" Oct 2 19:14:40.714802 kubelet[2680]: I1002 19:14:40.714749 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-cni-path\") pod \"cilium-bw4sc\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " pod="kube-system/cilium-bw4sc" Oct 2 19:14:40.715031 kubelet[2680]: I1002 19:14:40.714990 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-cilium-config-path\") pod \"cilium-bw4sc\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " pod="kube-system/cilium-bw4sc" Oct 2 19:14:40.715139 kubelet[2680]: I1002 19:14:40.715072 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-host-proc-sys-kernel\") pod \"cilium-bw4sc\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " pod="kube-system/cilium-bw4sc" Oct 2 19:14:40.715347 kubelet[2680]: I1002 19:14:40.715208 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-etc-cni-netd\") pod \"cilium-bw4sc\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " pod="kube-system/cilium-bw4sc" Oct 2 19:14:40.715438 kubelet[2680]: I1002 19:14:40.715389 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-lib-modules\") pod \"cilium-bw4sc\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " pod="kube-system/cilium-bw4sc" Oct 2 19:14:40.715548 kubelet[2680]: I1002 19:14:40.715514 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-xtables-lock\") pod \"cilium-bw4sc\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " pod="kube-system/cilium-bw4sc" Oct 2 19:14:40.841387 kubelet[2680]: I1002 19:14:40.831704 2680 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:14:40.856773 systemd[1]: Created slice kubepods-besteffort-pod42da5597_54bf_4a16_af39_7e793d191374.slice. Oct 2 19:14:40.921261 kubelet[2680]: I1002 19:14:40.921162 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/42da5597-54bf-4a16-af39-7e793d191374-cilium-config-path\") pod \"cilium-operator-574c4bb98d-lknq4\" (UID: \"42da5597-54bf-4a16-af39-7e793d191374\") " pod="kube-system/cilium-operator-574c4bb98d-lknq4" Oct 2 19:14:40.921665 kubelet[2680]: I1002 19:14:40.921630 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-whmxf\" (UniqueName: \"kubernetes.io/projected/42da5597-54bf-4a16-af39-7e793d191374-kube-api-access-whmxf\") pod \"cilium-operator-574c4bb98d-lknq4\" (UID: \"42da5597-54bf-4a16-af39-7e793d191374\") " pod="kube-system/cilium-operator-574c4bb98d-lknq4" Oct 2 19:14:40.957306 env[1574]: time="2023-10-02T19:14:40.956650183Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-bw4sc,Uid:008a43d1-2233-43f1-a2a3-eae7eb7bd7c0,Namespace:kube-system,Attempt:0,}" Oct 2 19:14:41.008515 env[1574]: time="2023-10-02T19:14:41.008391188Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:14:41.008701 env[1574]: time="2023-10-02T19:14:41.008575953Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:14:41.008701 env[1574]: time="2023-10-02T19:14:41.008643277Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:14:41.009165 env[1574]: time="2023-10-02T19:14:41.009071539Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696 pid=2758 runtime=io.containerd.runc.v2 Oct 2 19:14:41.061835 systemd[1]: Started cri-containerd-1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696.scope. Oct 2 19:14:41.104020 kernel: kauditd_printk_skb: 273 callbacks suppressed Oct 2 19:14:41.104186 kernel: audit: type=1400 audit(1696274081.100:994): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.120003 kernel: audit: type=1400 audit(1696274081.100:995): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.128184 kernel: audit: type=1400 audit(1696274081.100:996): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.129122 kernel: audit: type=1400 audit(1696274081.100:997): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.145032 kernel: audit: type=1400 audit(1696274081.100:998): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.152974 kernel: audit: type=1400 audit(1696274081.100:999): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.160865 kernel: audit: type=1400 audit(1696274081.100:1000): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.168895 kernel: audit: type=1400 audit(1696274081.100:1001): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.169970 env[1574]: time="2023-10-02T19:14:41.169886256Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-lknq4,Uid:42da5597-54bf-4a16-af39-7e793d191374,Namespace:kube-system,Attempt:0,}" Oct 2 19:14:41.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.178412 kernel: audit: type=1400 audit(1696274081.100:1002): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.188473 kernel: audit: type=1400 audit(1696274081.102:1003): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.102000 audit: BPF prog-id=115 op=LOAD Oct 2 19:14:41.104000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.104000 audit[2767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2758 pid=2767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:41.104000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164333761306564346233303862636363346532636630643265333865 Oct 2 19:14:41.104000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.104000 audit[2767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2758 pid=2767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:41.104000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164333761306564346233303862636363346532636630643265333865 Oct 2 19:14:41.104000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.104000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.104000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.104000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.104000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.104000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.104000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.104000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.104000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.104000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.104000 audit: BPF prog-id=116 op=LOAD Oct 2 19:14:41.104000 audit[2767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2758 pid=2767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:41.104000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164333761306564346233303862636363346532636630643265333865 Oct 2 19:14:41.110000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.110000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.110000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.110000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.110000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.110000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.110000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.110000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.110000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.110000 audit: BPF prog-id=117 op=LOAD Oct 2 19:14:41.110000 audit[2767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2758 pid=2767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:41.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164333761306564346233303862636363346532636630643265333865 Oct 2 19:14:41.110000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:14:41.110000 audit: BPF prog-id=116 op=UNLOAD Oct 2 19:14:41.110000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.110000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.110000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.110000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.110000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.110000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.110000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.110000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.110000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.110000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.110000 audit: BPF prog-id=118 op=LOAD Oct 2 19:14:41.110000 audit[2767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2758 pid=2767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:41.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164333761306564346233303862636363346532636630643265333865 Oct 2 19:14:41.218181 env[1574]: time="2023-10-02T19:14:41.218113746Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-bw4sc,Uid:008a43d1-2233-43f1-a2a3-eae7eb7bd7c0,Namespace:kube-system,Attempt:0,} returns sandbox id \"1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696\"" Oct 2 19:14:41.223516 env[1574]: time="2023-10-02T19:14:41.223177828Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:14:41.241616 env[1574]: time="2023-10-02T19:14:41.241461641Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:14:41.241616 env[1574]: time="2023-10-02T19:14:41.241547135Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:14:41.241616 env[1574]: time="2023-10-02T19:14:41.241574653Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:14:41.242386 env[1574]: time="2023-10-02T19:14:41.242256600Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1c3854bfdbada135923255c537e5c8e450e12987f5c2c6951ef7fd39042c9358 pid=2800 runtime=io.containerd.runc.v2 Oct 2 19:14:41.278686 systemd[1]: Started cri-containerd-1c3854bfdbada135923255c537e5c8e450e12987f5c2c6951ef7fd39042c9358.scope. Oct 2 19:14:41.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.322000 audit: BPF prog-id=119 op=LOAD Oct 2 19:14:41.324000 audit[2811]: AVC avc: denied { bpf } for pid=2811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.324000 audit[2811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c7b38 a2=10 a3=0 items=0 ppid=2800 pid=2811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:41.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163333835346266646261646131333539323332353563353337653563 Oct 2 19:14:41.324000 audit[2811]: AVC avc: denied { perfmon } for pid=2811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.324000 audit[2811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c75a0 a2=3c a3=0 items=0 ppid=2800 pid=2811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:41.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163333835346266646261646131333539323332353563353337653563 Oct 2 19:14:41.324000 audit[2811]: AVC avc: denied { bpf } for pid=2811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.324000 audit[2811]: AVC avc: denied { bpf } for pid=2811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.324000 audit[2811]: AVC avc: denied { bpf } for pid=2811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.324000 audit[2811]: AVC avc: denied { perfmon } for pid=2811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.324000 audit[2811]: AVC avc: denied { perfmon } for pid=2811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.324000 audit[2811]: AVC avc: denied { perfmon } for pid=2811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.324000 audit[2811]: AVC avc: denied { perfmon } for pid=2811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.324000 audit[2811]: AVC avc: denied { perfmon } for pid=2811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.324000 audit[2811]: AVC avc: denied { bpf } for pid=2811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.324000 audit[2811]: AVC avc: denied { bpf } for pid=2811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.324000 audit: BPF prog-id=120 op=LOAD Oct 2 19:14:41.324000 audit[2811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c78e0 a2=78 a3=0 items=0 ppid=2800 pid=2811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:41.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163333835346266646261646131333539323332353563353337653563 Oct 2 19:14:41.324000 audit[2811]: AVC avc: denied { bpf } for pid=2811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.324000 audit[2811]: AVC avc: denied { bpf } for pid=2811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.324000 audit[2811]: AVC avc: denied { perfmon } for pid=2811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.324000 audit[2811]: AVC avc: denied { perfmon } for pid=2811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.324000 audit[2811]: AVC avc: denied { perfmon } for pid=2811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.324000 audit[2811]: AVC avc: denied { perfmon } for pid=2811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.324000 audit[2811]: AVC avc: denied { perfmon } for pid=2811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.324000 audit[2811]: AVC avc: denied { bpf } for pid=2811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.324000 audit[2811]: AVC avc: denied { bpf } for pid=2811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.324000 audit: BPF prog-id=121 op=LOAD Oct 2 19:14:41.324000 audit[2811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c7670 a2=78 a3=0 items=0 ppid=2800 pid=2811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:41.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163333835346266646261646131333539323332353563353337653563 Oct 2 19:14:41.324000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:14:41.325000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:14:41.325000 audit[2811]: AVC avc: denied { bpf } for pid=2811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.325000 audit[2811]: AVC avc: denied { bpf } for pid=2811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.325000 audit[2811]: AVC avc: denied { bpf } for pid=2811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.325000 audit[2811]: AVC avc: denied { perfmon } for pid=2811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.325000 audit[2811]: AVC avc: denied { perfmon } for pid=2811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.325000 audit[2811]: AVC avc: denied { perfmon } for pid=2811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.325000 audit[2811]: AVC avc: denied { perfmon } for pid=2811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.325000 audit[2811]: AVC avc: denied { perfmon } for pid=2811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.325000 audit[2811]: AVC avc: denied { bpf } for pid=2811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.325000 audit[2811]: AVC avc: denied { bpf } for pid=2811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.325000 audit: BPF prog-id=122 op=LOAD Oct 2 19:14:41.325000 audit[2811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c7b40 a2=78 a3=0 items=0 ppid=2800 pid=2811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:41.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163333835346266646261646131333539323332353563353337653563 Oct 2 19:14:41.391058 env[1574]: time="2023-10-02T19:14:41.388471684Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-lknq4,Uid:42da5597-54bf-4a16-af39-7e793d191374,Namespace:kube-system,Attempt:0,} returns sandbox id \"1c3854bfdbada135923255c537e5c8e450e12987f5c2c6951ef7fd39042c9358\"" Oct 2 19:14:41.798909 env[1574]: time="2023-10-02T19:14:41.798850601Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-hq9tc,Uid:6da471ed-54c7-4343-91d3-482432556135,Namespace:kube-system,Attempt:0,}" Oct 2 19:14:41.852679 env[1574]: time="2023-10-02T19:14:41.852538873Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:14:41.852855 env[1574]: time="2023-10-02T19:14:41.852683891Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:14:41.852855 env[1574]: time="2023-10-02T19:14:41.852749907Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:14:41.853293 env[1574]: time="2023-10-02T19:14:41.853203166Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8d7a42496091880a828e8c01ee1668a40c78237910dbfbac6299fd95d332fcf1 pid=2842 runtime=io.containerd.runc.v2 Oct 2 19:14:41.902960 systemd[1]: Started cri-containerd-8d7a42496091880a828e8c01ee1668a40c78237910dbfbac6299fd95d332fcf1.scope. Oct 2 19:14:41.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.940000 audit: BPF prog-id=123 op=LOAD Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { bpf } for pid=2852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2842 pid=2852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:41.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864376134323439363039313838306138323865386330316565313636 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { perfmon } for pid=2852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2842 pid=2852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:41.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864376134323439363039313838306138323865386330316565313636 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { bpf } for pid=2852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { bpf } for pid=2852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { bpf } for pid=2852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { perfmon } for pid=2852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { perfmon } for pid=2852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { perfmon } for pid=2852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { perfmon } for pid=2852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { perfmon } for pid=2852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { bpf } for pid=2852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { bpf } for pid=2852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit: BPF prog-id=124 op=LOAD Oct 2 19:14:41.941000 audit[2852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2842 pid=2852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:41.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864376134323439363039313838306138323865386330316565313636 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { bpf } for pid=2852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { bpf } for pid=2852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { perfmon } for pid=2852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { perfmon } for pid=2852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { perfmon } for pid=2852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { perfmon } for pid=2852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { perfmon } for pid=2852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { bpf } for pid=2852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { bpf } for pid=2852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit: BPF prog-id=125 op=LOAD Oct 2 19:14:41.941000 audit[2852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2842 pid=2852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:41.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864376134323439363039313838306138323865386330316565313636 Oct 2 19:14:41.941000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:14:41.941000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { bpf } for pid=2852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { bpf } for pid=2852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { bpf } for pid=2852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { perfmon } for pid=2852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { perfmon } for pid=2852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { perfmon } for pid=2852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { perfmon } for pid=2852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { perfmon } for pid=2852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { bpf } for pid=2852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit[2852]: AVC avc: denied { bpf } for pid=2852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:41.941000 audit: BPF prog-id=126 op=LOAD Oct 2 19:14:41.941000 audit[2852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2842 pid=2852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:41.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864376134323439363039313838306138323865386330316565313636 Oct 2 19:14:41.980434 env[1574]: time="2023-10-02T19:14:41.980375577Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-hq9tc,Uid:6da471ed-54c7-4343-91d3-482432556135,Namespace:kube-system,Attempt:0,} returns sandbox id \"8d7a42496091880a828e8c01ee1668a40c78237910dbfbac6299fd95d332fcf1\"" Oct 2 19:14:41.987019 env[1574]: time="2023-10-02T19:14:41.986949531Z" level=info msg="CreateContainer within sandbox \"8d7a42496091880a828e8c01ee1668a40c78237910dbfbac6299fd95d332fcf1\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:14:42.016041 env[1574]: time="2023-10-02T19:14:42.015968503Z" level=info msg="CreateContainer within sandbox \"8d7a42496091880a828e8c01ee1668a40c78237910dbfbac6299fd95d332fcf1\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"08b2818c6ac2505f90acf574f8a477cb06299ba5afc51e2666b74551e2b28cc0\"" Oct 2 19:14:42.019336 env[1574]: time="2023-10-02T19:14:42.019266885Z" level=info msg="StartContainer for \"08b2818c6ac2505f90acf574f8a477cb06299ba5afc51e2666b74551e2b28cc0\"" Oct 2 19:14:42.091280 systemd[1]: Started cri-containerd-08b2818c6ac2505f90acf574f8a477cb06299ba5afc51e2666b74551e2b28cc0.scope. Oct 2 19:14:42.158000 audit[2882]: AVC avc: denied { perfmon } for pid=2882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.158000 audit[2882]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2842 pid=2882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038623238313863366163323530356639306163663537346638613437 Oct 2 19:14:42.159000 audit[2882]: AVC avc: denied { bpf } for pid=2882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.159000 audit[2882]: AVC avc: denied { bpf } for pid=2882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.159000 audit[2882]: AVC avc: denied { bpf } for pid=2882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.159000 audit[2882]: AVC avc: denied { perfmon } for pid=2882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.159000 audit[2882]: AVC avc: denied { perfmon } for pid=2882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.159000 audit[2882]: AVC avc: denied { perfmon } for pid=2882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.159000 audit[2882]: AVC avc: denied { perfmon } for pid=2882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.159000 audit[2882]: AVC avc: denied { perfmon } for pid=2882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.159000 audit[2882]: AVC avc: denied { bpf } for pid=2882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.159000 audit[2882]: AVC avc: denied { bpf } for pid=2882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.159000 audit: BPF prog-id=127 op=LOAD Oct 2 19:14:42.159000 audit[2882]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2842 pid=2882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038623238313863366163323530356639306163663537346638613437 Oct 2 19:14:42.161000 audit[2882]: AVC avc: denied { bpf } for pid=2882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.161000 audit[2882]: AVC avc: denied { bpf } for pid=2882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.161000 audit[2882]: AVC avc: denied { perfmon } for pid=2882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.161000 audit[2882]: AVC avc: denied { perfmon } for pid=2882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.161000 audit[2882]: AVC avc: denied { perfmon } for pid=2882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.161000 audit[2882]: AVC avc: denied { perfmon } for pid=2882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.161000 audit[2882]: AVC avc: denied { perfmon } for pid=2882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.161000 audit[2882]: AVC avc: denied { bpf } for pid=2882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.161000 audit[2882]: AVC avc: denied { bpf } for pid=2882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.161000 audit: BPF prog-id=128 op=LOAD Oct 2 19:14:42.161000 audit[2882]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2842 pid=2882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038623238313863366163323530356639306163663537346638613437 Oct 2 19:14:42.162000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:14:42.162000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:14:42.162000 audit[2882]: AVC avc: denied { bpf } for pid=2882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.162000 audit[2882]: AVC avc: denied { bpf } for pid=2882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.162000 audit[2882]: AVC avc: denied { bpf } for pid=2882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.162000 audit[2882]: AVC avc: denied { perfmon } for pid=2882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.162000 audit[2882]: AVC avc: denied { perfmon } for pid=2882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.162000 audit[2882]: AVC avc: denied { perfmon } for pid=2882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.162000 audit[2882]: AVC avc: denied { perfmon } for pid=2882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.162000 audit[2882]: AVC avc: denied { perfmon } for pid=2882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.162000 audit[2882]: AVC avc: denied { bpf } for pid=2882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.162000 audit[2882]: AVC avc: denied { bpf } for pid=2882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:42.162000 audit: BPF prog-id=129 op=LOAD Oct 2 19:14:42.162000 audit[2882]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2842 pid=2882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.162000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038623238313863366163323530356639306163663537346638613437 Oct 2 19:14:42.210556 env[1574]: time="2023-10-02T19:14:42.210458461Z" level=info msg="StartContainer for \"08b2818c6ac2505f90acf574f8a477cb06299ba5afc51e2666b74551e2b28cc0\" returns successfully" Oct 2 19:14:42.417000 audit[2933]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2933 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:42.417000 audit[2933]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd4bcbfb0 a2=0 a3=ffffac7f36c0 items=0 ppid=2894 pid=2933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.417000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:14:42.434000 audit[2934]: NETFILTER_CFG table=mangle:39 family=2 entries=1 op=nft_register_chain pid=2934 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:42.434000 audit[2934]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe7d26340 a2=0 a3=ffff9ddd16c0 items=0 ppid=2894 pid=2934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.434000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:14:42.437000 audit[2935]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2935 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:42.437000 audit[2935]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdcae9fb0 a2=0 a3=ffffb3bbc6c0 items=0 ppid=2894 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.437000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:14:42.439000 audit[2936]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=2936 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:42.439000 audit[2936]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffccb259c0 a2=0 a3=ffffa973a6c0 items=0 ppid=2894 pid=2936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.439000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:14:42.446000 audit[2937]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=2937 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:42.446000 audit[2937]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffff7a4250 a2=0 a3=ffff83e7f6c0 items=0 ppid=2894 pid=2937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.446000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:14:42.448000 audit[2938]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2938 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:42.448000 audit[2938]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe8baddf0 a2=0 a3=ffff8c9e46c0 items=0 ppid=2894 pid=2938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.448000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:14:42.524000 audit[2939]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2939 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:42.524000 audit[2939]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffffaca5a50 a2=0 a3=ffffb49086c0 items=0 ppid=2894 pid=2939 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.524000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:14:42.533000 audit[2941]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2941 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:42.533000 audit[2941]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffff5150f0 a2=0 a3=ffffa23f46c0 items=0 ppid=2894 pid=2941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.533000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:14:42.551000 audit[2944]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2944 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:42.551000 audit[2944]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe9716020 a2=0 a3=ffff843806c0 items=0 ppid=2894 pid=2944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.551000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:14:42.556000 audit[2945]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2945 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:42.556000 audit[2945]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffde3c5d80 a2=0 a3=ffff9bcbb6c0 items=0 ppid=2894 pid=2945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.556000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:14:42.567000 audit[2947]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2947 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:42.567000 audit[2947]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffcc9c300 a2=0 a3=ffff7faee6c0 items=0 ppid=2894 pid=2947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.567000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:14:42.571000 audit[2948]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2948 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:42.571000 audit[2948]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeb8f8b70 a2=0 a3=ffffb459a6c0 items=0 ppid=2894 pid=2948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.571000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:14:42.581000 audit[2950]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2950 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:42.581000 audit[2950]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe85413e0 a2=0 a3=ffffa93366c0 items=0 ppid=2894 pid=2950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.581000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:14:42.603000 audit[2953]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2953 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:42.603000 audit[2953]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffca153ab0 a2=0 a3=ffff89a056c0 items=0 ppid=2894 pid=2953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.603000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:14:42.607000 audit[2954]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2954 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:42.607000 audit[2954]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc3a01160 a2=0 a3=ffff9c3e06c0 items=0 ppid=2894 pid=2954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.607000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:14:42.618000 audit[2956]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2956 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:42.618000 audit[2956]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff1bf70f0 a2=0 a3=ffffb36a16c0 items=0 ppid=2894 pid=2956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.618000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:14:42.623000 audit[2957]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2957 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:42.623000 audit[2957]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe7329380 a2=0 a3=ffff8bee16c0 items=0 ppid=2894 pid=2957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.623000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:14:42.637000 audit[2959]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2959 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:42.637000 audit[2959]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff33330f0 a2=0 a3=ffff8c1ae6c0 items=0 ppid=2894 pid=2959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.637000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:14:42.653000 audit[2962]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2962 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:42.653000 audit[2962]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffab42650 a2=0 a3=ffffa75586c0 items=0 ppid=2894 pid=2962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.653000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:14:42.668000 audit[2965]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2965 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:42.668000 audit[2965]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd0f6fa30 a2=0 a3=ffffb595f6c0 items=0 ppid=2894 pid=2965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.668000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:14:42.678000 audit[2966]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2966 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:42.678000 audit[2966]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffefa1d690 a2=0 a3=ffff890a06c0 items=0 ppid=2894 pid=2966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.678000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:14:42.693000 audit[2968]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2968 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:42.693000 audit[2968]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffd5d00180 a2=0 a3=ffff8499a6c0 items=0 ppid=2894 pid=2968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.693000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:14:42.716000 audit[2971]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2971 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:42.716000 audit[2971]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffeea52f40 a2=0 a3=ffffa02b36c0 items=0 ppid=2894 pid=2971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.716000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:14:42.746000 audit[2976]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2976 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:42.746000 audit[2976]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdadff1b0 a2=0 a3=ffff893ee6c0 items=0 ppid=2894 pid=2976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.746000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:14:42.757000 audit[2978]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2978 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:42.757000 audit[2978]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffeeb08b00 a2=0 a3=ffffa9c046c0 items=0 ppid=2894 pid=2978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.757000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:14:42.793000 audit[2980]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2980 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:14:42.793000 audit[2980]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=fffffc2e11b0 a2=0 a3=ffffb19886c0 items=0 ppid=2894 pid=2980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.793000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:14:42.838000 audit[2980]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2980 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:14:42.838000 audit[2980]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=fffffc2e11b0 a2=0 a3=ffffb19886c0 items=0 ppid=2894 pid=2980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.838000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:14:42.844000 audit[2987]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2987 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:42.844000 audit[2987]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffc992c0e0 a2=0 a3=ffffb88ca6c0 items=0 ppid=2894 pid=2987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.844000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:14:42.858000 audit[2989]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2989 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:42.858000 audit[2989]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffdca66600 a2=0 a3=ffffae86b6c0 items=0 ppid=2894 pid=2989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.858000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:14:42.873000 audit[2992]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2992 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:42.873000 audit[2992]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffedb53fb0 a2=0 a3=ffffbeafb6c0 items=0 ppid=2894 pid=2992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.873000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:14:42.878000 audit[2993]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2993 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:42.878000 audit[2993]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffceb9cc30 a2=0 a3=ffffa5f9a6c0 items=0 ppid=2894 pid=2993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.878000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:14:42.894000 audit[2995]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2995 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:42.894000 audit[2995]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcf8b3b60 a2=0 a3=ffff8b4726c0 items=0 ppid=2894 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.894000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:14:42.901000 audit[2996]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2996 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:42.901000 audit[2996]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe3e82b00 a2=0 a3=ffffb7c306c0 items=0 ppid=2894 pid=2996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.901000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:14:42.922000 audit[2998]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2998 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:42.922000 audit[2998]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffea9619c0 a2=0 a3=ffffa6a4e6c0 items=0 ppid=2894 pid=2998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.922000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:14:42.951000 audit[3001]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3001 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:42.951000 audit[3001]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffd6825960 a2=0 a3=ffff96f426c0 items=0 ppid=2894 pid=3001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.951000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:14:42.957000 audit[3002]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3002 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:42.957000 audit[3002]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff53b3c20 a2=0 a3=ffff8c2016c0 items=0 ppid=2894 pid=3002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.957000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:14:42.972000 audit[3004]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3004 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:42.972000 audit[3004]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdcc24c00 a2=0 a3=ffff828d16c0 items=0 ppid=2894 pid=3004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.972000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:14:42.979000 audit[3005]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3005 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:42.979000 audit[3005]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe50bd170 a2=0 a3=ffffb0e816c0 items=0 ppid=2894 pid=3005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.979000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:14:42.995000 audit[3007]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3007 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:42.995000 audit[3007]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffeb36c820 a2=0 a3=ffffb1e646c0 items=0 ppid=2894 pid=3007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.995000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:14:43.010000 audit[3010]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3010 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:43.010000 audit[3010]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd892bc30 a2=0 a3=ffffaa9806c0 items=0 ppid=2894 pid=3010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:43.010000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:14:43.038000 audit[3013]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3013 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:43.038000 audit[3013]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff41fafc0 a2=0 a3=ffffb8e5e6c0 items=0 ppid=2894 pid=3013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:43.038000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:14:43.047000 audit[3014]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3014 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:43.047000 audit[3014]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe846b870 a2=0 a3=ffffbe0636c0 items=0 ppid=2894 pid=3014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:43.047000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:14:43.068000 audit[3016]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3016 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:43.068000 audit[3016]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffff1491aa0 a2=0 a3=ffffaa5e56c0 items=0 ppid=2894 pid=3016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:43.068000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:14:43.095967 kubelet[2680]: I1002 19:14:43.091231 2680 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-hq9tc" podStartSLOduration=3.091138215 podCreationTimestamp="2023-10-02 19:14:40 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:14:43.090168973 +0000 UTC m=+15.712763052" watchObservedRunningTime="2023-10-02 19:14:43.091138215 +0000 UTC m=+15.713732294" Oct 2 19:14:43.119000 audit[3019]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3019 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:43.119000 audit[3019]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffcdf18480 a2=0 a3=ffff95fc46c0 items=0 ppid=2894 pid=3019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:43.119000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:14:43.123000 audit[3020]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_chain pid=3020 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:43.123000 audit[3020]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffda16adc0 a2=0 a3=ffff9334b6c0 items=0 ppid=2894 pid=3020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:43.123000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:14:43.144000 audit[3022]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=3022 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:43.144000 audit[3022]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc86109f0 a2=0 a3=ffffb3d046c0 items=0 ppid=2894 pid=3022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:43.144000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:14:43.168000 audit[3025]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_rule pid=3025 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:43.168000 audit[3025]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd7c73380 a2=0 a3=ffff8df986c0 items=0 ppid=2894 pid=3025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:43.168000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:14:43.188000 audit[3026]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=3026 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:43.188000 audit[3026]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffce01a440 a2=0 a3=ffffbe8346c0 items=0 ppid=2894 pid=3026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:43.188000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:14:43.199000 audit[3028]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=3028 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:43.199000 audit[3028]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffef7bac00 a2=0 a3=ffffaaaf26c0 items=0 ppid=2894 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:43.199000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:14:43.212000 audit[3030]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3030 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:14:43.212000 audit[3030]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=fffffc7a6fd0 a2=0 a3=ffffa611b6c0 items=0 ppid=2894 pid=3030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:43.212000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:14:43.214000 audit[3030]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3030 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:14:43.214000 audit[3030]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=fffffc7a6fd0 a2=0 a3=ffffa611b6c0 items=0 ppid=2894 pid=3030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:43.214000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:14:49.225183 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount50142575.mount: Deactivated successfully. Oct 2 19:14:53.272772 env[1574]: time="2023-10-02T19:14:53.272687099Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:53.275962 env[1574]: time="2023-10-02T19:14:53.275857972Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:53.281820 env[1574]: time="2023-10-02T19:14:53.281572927Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:53.282699 env[1574]: time="2023-10-02T19:14:53.282647954Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 19:14:53.287414 env[1574]: time="2023-10-02T19:14:53.287358026Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:14:53.291728 env[1574]: time="2023-10-02T19:14:53.291661061Z" level=info msg="CreateContainer within sandbox \"1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:14:53.312543 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3979345078.mount: Deactivated successfully. Oct 2 19:14:53.327253 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4026834097.mount: Deactivated successfully. Oct 2 19:14:53.328454 env[1574]: time="2023-10-02T19:14:53.328380425Z" level=info msg="CreateContainer within sandbox \"1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6\"" Oct 2 19:14:53.332146 env[1574]: time="2023-10-02T19:14:53.332080045Z" level=info msg="StartContainer for \"d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6\"" Oct 2 19:14:53.394872 systemd[1]: Started cri-containerd-d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6.scope. Oct 2 19:14:53.444082 systemd[1]: cri-containerd-d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6.scope: Deactivated successfully. Oct 2 19:14:54.307123 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6-rootfs.mount: Deactivated successfully. Oct 2 19:14:54.419754 env[1574]: time="2023-10-02T19:14:54.419637453Z" level=info msg="shim disconnected" id=d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6 Oct 2 19:14:54.420431 env[1574]: time="2023-10-02T19:14:54.419766003Z" level=warning msg="cleaning up after shim disconnected" id=d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6 namespace=k8s.io Oct 2 19:14:54.420431 env[1574]: time="2023-10-02T19:14:54.419790748Z" level=info msg="cleaning up dead shim" Oct 2 19:14:54.449619 env[1574]: time="2023-10-02T19:14:54.449525872Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:14:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3058 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:14:54Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:14:54.450205 env[1574]: time="2023-10-02T19:14:54.450028085Z" level=error msg="copy shim log" error="read /proc/self/fd/51: file already closed" Oct 2 19:14:54.450618 env[1574]: time="2023-10-02T19:14:54.450552247Z" level=error msg="Failed to pipe stderr of container \"d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6\"" error="reading from a closed fifo" Oct 2 19:14:54.450787 env[1574]: time="2023-10-02T19:14:54.450590409Z" level=error msg="Failed to pipe stdout of container \"d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6\"" error="reading from a closed fifo" Oct 2 19:14:54.453040 env[1574]: time="2023-10-02T19:14:54.452938579Z" level=error msg="StartContainer for \"d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:14:54.453355 kubelet[2680]: E1002 19:14:54.453320 2680 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6" Oct 2 19:14:54.456209 kubelet[2680]: E1002 19:14:54.453500 2680 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:14:54.456209 kubelet[2680]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:14:54.456209 kubelet[2680]: rm /hostbin/cilium-mount Oct 2 19:14:54.456435 kubelet[2680]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-bnffl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:14:54.456435 kubelet[2680]: E1002 19:14:54.453565 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:14:54.728140 env[1574]: time="2023-10-02T19:14:54.728029410Z" level=error msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" failed" error="failed to pull and unpack image \"quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://cdn03.quay.io/sha256/59/59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20231002%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231002T191454Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=f4bd7f0aa4c32799c09faa5272bf29270048f3db71d7772da899ccef8503fb96&cf_sign=E0KmQxpi1IEe7Ut1mxJBkws%2FzkMbBpsO2sD6Hqsuh%2FXWB55UVr437LMbRaV%2FLmaf2MfYTeRHdkFJ%2Be44bJYn897ZCyxaVjxDNkf%2BxTnOl4rUAxZEOjn8jhbTkou89r%2B5QX4iZKgidPyUaDXbUITdviiUrYvP9o%2FHpUfF8i7DL6nqsiBfvGNDWQ5t9pr%2BDA6nlN3qz%2BYRuZRFIGsIGspdIWx0tSVgfn1lzkzwzQwgbPnxjPB%2BQrd5cPYydqnwQWwNLj7lOyKAAqwVm66%2B4HPveGFCdn%2Fva9E7mmTCVUOuI4FllXml7O8kvVmV4kEDFa%2B%2BHq4s%2Bkc6XMcsN8mLd3I6Qg%3D%3D&cf_expiry=1696274694®ion=us-east-1\": dial tcp: lookup cdn03.quay.io: no such host" Oct 2 19:14:54.728689 kubelet[2680]: E1002 19:14:54.728647 2680 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://cdn03.quay.io/sha256/59/59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20231002%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231002T191454Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=f4bd7f0aa4c32799c09faa5272bf29270048f3db71d7772da899ccef8503fb96&cf_sign=E0KmQxpi1IEe7Ut1mxJBkws%2FzkMbBpsO2sD6Hqsuh%2FXWB55UVr437LMbRaV%2FLmaf2MfYTeRHdkFJ%2Be44bJYn897ZCyxaVjxDNkf%2BxTnOl4rUAxZEOjn8jhbTkou89r%2B5QX4iZKgidPyUaDXbUITdviiUrYvP9o%2FHpUfF8i7DL6nqsiBfvGNDWQ5t9pr%2BDA6nlN3qz%2BYRuZRFIGsIGspdIWx0tSVgfn1lzkzwzQwgbPnxjPB%2BQrd5cPYydqnwQWwNLj7lOyKAAqwVm66%2B4HPveGFCdn%2Fva9E7mmTCVUOuI4FllXml7O8kvVmV4kEDFa%2B%2BHq4s%2Bkc6XMcsN8mLd3I6Qg%3D%3D&cf_expiry=1696274694®ion=us-east-1\": dial tcp: lookup cdn03.quay.io: no such host" image="quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e" Oct 2 19:14:54.728880 kubelet[2680]: E1002 19:14:54.728757 2680 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://cdn03.quay.io/sha256/59/59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20231002%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231002T191454Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=f4bd7f0aa4c32799c09faa5272bf29270048f3db71d7772da899ccef8503fb96&cf_sign=E0KmQxpi1IEe7Ut1mxJBkws%2FzkMbBpsO2sD6Hqsuh%2FXWB55UVr437LMbRaV%2FLmaf2MfYTeRHdkFJ%2Be44bJYn897ZCyxaVjxDNkf%2BxTnOl4rUAxZEOjn8jhbTkou89r%2B5QX4iZKgidPyUaDXbUITdviiUrYvP9o%2FHpUfF8i7DL6nqsiBfvGNDWQ5t9pr%2BDA6nlN3qz%2BYRuZRFIGsIGspdIWx0tSVgfn1lzkzwzQwgbPnxjPB%2BQrd5cPYydqnwQWwNLj7lOyKAAqwVm66%2B4HPveGFCdn%2Fva9E7mmTCVUOuI4FllXml7O8kvVmV4kEDFa%2B%2BHq4s%2Bkc6XMcsN8mLd3I6Qg%3D%3D&cf_expiry=1696274694®ion=us-east-1\": dial tcp: lookup cdn03.quay.io: no such host" image="quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e" Oct 2 19:14:54.729059 kubelet[2680]: E1002 19:14:54.729039 2680 kuberuntime_manager.go:1212] container &Container{Name:cilium-operator,Image:quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Command:[cilium-operator-generic],Args:[--config-dir=/tmp/cilium/config-map --debug=$(CILIUM_DEBUG)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:K8S_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},EnvVar{Name:CILIUM_K8S_NAMESPACE,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:metadata.namespace,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},EnvVar{Name:CILIUM_DEBUG,Value:,ValueFrom:&EnvVarSource{FieldRef:nil,ResourceFieldRef:nil,ConfigMapKeyRef:&ConfigMapKeySelector{LocalObjectReference:LocalObjectReference{Name:cilium-config,},Key:debug,Optional:*true,},SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:cilium-config-path,ReadOnly:true,MountPath:/tmp/cilium/config-map,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-whmxf,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/healthz,Port:{0 9234 },Host:127.0.0.1,Scheme:HTTP,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:60,TimeoutSeconds:3,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:nil,Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-operator-574c4bb98d-lknq4_kube-system(42da5597-54bf-4a16-af39-7e793d191374): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e": failed to copy: httpReadSeeker: failed open: failed to do request: Get "https://cdn03.quay.io/sha256/59/59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20231002%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231002T191454Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=f4bd7f0aa4c32799c09faa5272bf29270048f3db71d7772da899ccef8503fb96&cf_sign=E0KmQxpi1IEe7Ut1mxJBkws%2FzkMbBpsO2sD6Hqsuh%2FXWB55UVr437LMbRaV%2FLmaf2MfYTeRHdkFJ%2Be44bJYn897ZCyxaVjxDNkf%2BxTnOl4rUAxZEOjn8jhbTkou89r%2B5QX4iZKgidPyUaDXbUITdviiUrYvP9o%2FHpUfF8i7DL6nqsiBfvGNDWQ5t9pr%2BDA6nlN3qz%2BYRuZRFIGsIGspdIWx0tSVgfn1lzkzwzQwgbPnxjPB%2BQrd5cPYydqnwQWwNLj7lOyKAAqwVm66%2B4HPveGFCdn%2Fva9E7mmTCVUOuI4FllXml7O8kvVmV4kEDFa%2B%2BHq4s%2Bkc6XMcsN8mLd3I6Qg%3D%3D&cf_expiry=1696274694®ion=us-east-1": dial tcp: lookup cdn03.quay.io: no such host Oct 2 19:14:54.729271 kubelet[2680]: E1002 19:14:54.729177 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"cilium-operator\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\\\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \\\"https://cdn03.quay.io/sha256/59/59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20231002%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231002T191454Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=f4bd7f0aa4c32799c09faa5272bf29270048f3db71d7772da899ccef8503fb96&cf_sign=E0KmQxpi1IEe7Ut1mxJBkws%2FzkMbBpsO2sD6Hqsuh%2FXWB55UVr437LMbRaV%2FLmaf2MfYTeRHdkFJ%2Be44bJYn897ZCyxaVjxDNkf%2BxTnOl4rUAxZEOjn8jhbTkou89r%2B5QX4iZKgidPyUaDXbUITdviiUrYvP9o%2FHpUfF8i7DL6nqsiBfvGNDWQ5t9pr%2BDA6nlN3qz%2BYRuZRFIGsIGspdIWx0tSVgfn1lzkzwzQwgbPnxjPB%2BQrd5cPYydqnwQWwNLj7lOyKAAqwVm66%2B4HPveGFCdn%2Fva9E7mmTCVUOuI4FllXml7O8kvVmV4kEDFa%2B%2BHq4s%2Bkc6XMcsN8mLd3I6Qg%3D%3D&cf_expiry=1696274694®ion=us-east-1\\\": dial tcp: lookup cdn03.quay.io: no such host\"" pod="kube-system/cilium-operator-574c4bb98d-lknq4" podUID=42da5597-54bf-4a16-af39-7e793d191374 Oct 2 19:14:55.122462 kubelet[2680]: E1002 19:14:55.122309 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"cilium-operator\" with ImagePullBackOff: \"Back-off pulling image \\\"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\\\"\"" pod="kube-system/cilium-operator-574c4bb98d-lknq4" podUID=42da5597-54bf-4a16-af39-7e793d191374 Oct 2 19:14:55.128473 env[1574]: time="2023-10-02T19:14:55.128391385Z" level=info msg="CreateContainer within sandbox \"1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:14:55.148064 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3350653539.mount: Deactivated successfully. Oct 2 19:14:55.160504 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2602713896.mount: Deactivated successfully. Oct 2 19:14:55.174265 env[1574]: time="2023-10-02T19:14:55.174002892Z" level=info msg="CreateContainer within sandbox \"1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef\"" Oct 2 19:14:55.176637 env[1574]: time="2023-10-02T19:14:55.175156316Z" level=info msg="StartContainer for \"ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef\"" Oct 2 19:14:55.253703 systemd[1]: Started cri-containerd-ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef.scope. Oct 2 19:14:55.337157 systemd[1]: cri-containerd-ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef.scope: Deactivated successfully. Oct 2 19:14:55.346457 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef-rootfs.mount: Deactivated successfully. Oct 2 19:14:55.366899 env[1574]: time="2023-10-02T19:14:55.366803818Z" level=info msg="shim disconnected" id=ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef Oct 2 19:14:55.366899 env[1574]: time="2023-10-02T19:14:55.366887918Z" level=warning msg="cleaning up after shim disconnected" id=ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef namespace=k8s.io Oct 2 19:14:55.367272 env[1574]: time="2023-10-02T19:14:55.366910767Z" level=info msg="cleaning up dead shim" Oct 2 19:14:55.395012 env[1574]: time="2023-10-02T19:14:55.394792002Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:14:55Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3094 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:14:55Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:14:55.396108 env[1574]: time="2023-10-02T19:14:55.395951727Z" level=error msg="copy shim log" error="read /proc/self/fd/51: file already closed" Oct 2 19:14:55.396609 env[1574]: time="2023-10-02T19:14:55.396546512Z" level=error msg="Failed to pipe stderr of container \"ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef\"" error="reading from a closed fifo" Oct 2 19:14:55.397501 env[1574]: time="2023-10-02T19:14:55.397430283Z" level=error msg="Failed to pipe stdout of container \"ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef\"" error="reading from a closed fifo" Oct 2 19:14:55.400595 env[1574]: time="2023-10-02T19:14:55.400481818Z" level=error msg="StartContainer for \"ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:14:55.401144 kubelet[2680]: E1002 19:14:55.401069 2680 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef" Oct 2 19:14:55.401339 kubelet[2680]: E1002 19:14:55.401305 2680 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:14:55.401339 kubelet[2680]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:14:55.401339 kubelet[2680]: rm /hostbin/cilium-mount Oct 2 19:14:55.401339 kubelet[2680]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-bnffl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:14:55.401799 kubelet[2680]: E1002 19:14:55.401402 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:14:56.125202 kubelet[2680]: I1002 19:14:56.125167 2680 scope.go:115] "RemoveContainer" containerID="d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6" Oct 2 19:14:56.127804 kubelet[2680]: I1002 19:14:56.127769 2680 scope.go:115] "RemoveContainer" containerID="d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6" Oct 2 19:14:56.132825 env[1574]: time="2023-10-02T19:14:56.132767850Z" level=info msg="RemoveContainer for \"d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6\"" Oct 2 19:14:56.133650 env[1574]: time="2023-10-02T19:14:56.132867791Z" level=info msg="RemoveContainer for \"d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6\"" Oct 2 19:14:56.133794 env[1574]: time="2023-10-02T19:14:56.133731437Z" level=error msg="RemoveContainer for \"d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6\" failed" error="failed to set removing state for container \"d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6\": container is already in removing state" Oct 2 19:14:56.134210 kubelet[2680]: E1002 19:14:56.134178 2680 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6\": container is already in removing state" containerID="d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6" Oct 2 19:14:56.140981 kubelet[2680]: E1002 19:14:56.139090 2680 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6": container is already in removing state; Skipping pod "cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0)" Oct 2 19:14:56.140981 kubelet[2680]: E1002 19:14:56.139651 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0)\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:14:56.149860 env[1574]: time="2023-10-02T19:14:56.149777652Z" level=info msg="RemoveContainer for \"d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6\" returns successfully" Oct 2 19:14:57.131192 kubelet[2680]: E1002 19:14:57.131149 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0)\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:14:57.526159 kubelet[2680]: W1002 19:14:57.526076 2680 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod008a43d1_2233_43f1_a2a3_eae7eb7bd7c0.slice/cri-containerd-d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6.scope WatchSource:0}: container "d49789f51947957d242afebf337538542e06407889764ed5af374340208d1aa6" in namespace "k8s.io": not found Oct 2 19:15:00.637004 kubelet[2680]: W1002 19:15:00.636953 2680 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod008a43d1_2233_43f1_a2a3_eae7eb7bd7c0.slice/cri-containerd-ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef.scope WatchSource:0}: task ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef not found: not found Oct 2 19:15:05.949909 env[1574]: time="2023-10-02T19:15:05.949321731Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:15:07.213111 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount994654173.mount: Deactivated successfully. Oct 2 19:15:07.961834 env[1574]: time="2023-10-02T19:15:07.961757377Z" level=info msg="CreateContainer within sandbox \"1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:15:07.989231 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount640053540.mount: Deactivated successfully. Oct 2 19:15:08.004571 env[1574]: time="2023-10-02T19:15:08.004467847Z" level=info msg="CreateContainer within sandbox \"1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"d6994f575e4e232eb251c8207ad11f95b45e36d58bacc15df145e813fef4a3ab\"" Oct 2 19:15:08.010511 env[1574]: time="2023-10-02T19:15:08.008306423Z" level=info msg="StartContainer for \"d6994f575e4e232eb251c8207ad11f95b45e36d58bacc15df145e813fef4a3ab\"" Oct 2 19:15:08.087421 systemd[1]: Started cri-containerd-d6994f575e4e232eb251c8207ad11f95b45e36d58bacc15df145e813fef4a3ab.scope. Oct 2 19:15:08.128627 systemd[1]: cri-containerd-d6994f575e4e232eb251c8207ad11f95b45e36d58bacc15df145e813fef4a3ab.scope: Deactivated successfully. Oct 2 19:15:08.292602 env[1574]: time="2023-10-02T19:15:08.291978204Z" level=info msg="shim disconnected" id=d6994f575e4e232eb251c8207ad11f95b45e36d58bacc15df145e813fef4a3ab Oct 2 19:15:08.292602 env[1574]: time="2023-10-02T19:15:08.292055607Z" level=warning msg="cleaning up after shim disconnected" id=d6994f575e4e232eb251c8207ad11f95b45e36d58bacc15df145e813fef4a3ab namespace=k8s.io Oct 2 19:15:08.292602 env[1574]: time="2023-10-02T19:15:08.292079128Z" level=info msg="cleaning up dead shim" Oct 2 19:15:08.308651 env[1574]: time="2023-10-02T19:15:08.308594026Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:15:08.313632 env[1574]: time="2023-10-02T19:15:08.313574498Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:15:08.317571 env[1574]: time="2023-10-02T19:15:08.317513818Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:15:08.318344 env[1574]: time="2023-10-02T19:15:08.318294235Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 19:15:08.325844 env[1574]: time="2023-10-02T19:15:08.325786340Z" level=info msg="CreateContainer within sandbox \"1c3854bfdbada135923255c537e5c8e450e12987f5c2c6951ef7fd39042c9358\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:15:08.327838 env[1574]: time="2023-10-02T19:15:08.327718072Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:15:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3128 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:15:08Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d6994f575e4e232eb251c8207ad11f95b45e36d58bacc15df145e813fef4a3ab/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:15:08.328317 env[1574]: time="2023-10-02T19:15:08.328227241Z" level=error msg="copy shim log" error="read /proc/self/fd/60: file already closed" Oct 2 19:15:08.328758 env[1574]: time="2023-10-02T19:15:08.328702257Z" level=error msg="Failed to pipe stderr of container \"d6994f575e4e232eb251c8207ad11f95b45e36d58bacc15df145e813fef4a3ab\"" error="reading from a closed fifo" Oct 2 19:15:08.329046 env[1574]: time="2023-10-02T19:15:08.329001214Z" level=error msg="Failed to pipe stdout of container \"d6994f575e4e232eb251c8207ad11f95b45e36d58bacc15df145e813fef4a3ab\"" error="reading from a closed fifo" Oct 2 19:15:08.335464 env[1574]: time="2023-10-02T19:15:08.335345315Z" level=error msg="StartContainer for \"d6994f575e4e232eb251c8207ad11f95b45e36d58bacc15df145e813fef4a3ab\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:15:08.336261 kubelet[2680]: E1002 19:15:08.336191 2680 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d6994f575e4e232eb251c8207ad11f95b45e36d58bacc15df145e813fef4a3ab" Oct 2 19:15:08.336986 kubelet[2680]: E1002 19:15:08.336409 2680 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:15:08.336986 kubelet[2680]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:15:08.336986 kubelet[2680]: rm /hostbin/cilium-mount Oct 2 19:15:08.336986 kubelet[2680]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-bnffl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:15:08.336986 kubelet[2680]: E1002 19:15:08.336544 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:15:08.353444 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2407143672.mount: Deactivated successfully. Oct 2 19:15:08.365070 env[1574]: time="2023-10-02T19:15:08.365009833Z" level=info msg="CreateContainer within sandbox \"1c3854bfdbada135923255c537e5c8e450e12987f5c2c6951ef7fd39042c9358\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"e8d3410755e6bbe6abce20e1bdd8ae41c5b4ca00becadc964216ae6f0fe7f765\"" Oct 2 19:15:08.366240 env[1574]: time="2023-10-02T19:15:08.366189627Z" level=info msg="StartContainer for \"e8d3410755e6bbe6abce20e1bdd8ae41c5b4ca00becadc964216ae6f0fe7f765\"" Oct 2 19:15:08.418424 systemd[1]: Started cri-containerd-e8d3410755e6bbe6abce20e1bdd8ae41c5b4ca00becadc964216ae6f0fe7f765.scope. Oct 2 19:15:08.473492 kernel: kauditd_printk_skb: 357 callbacks suppressed Oct 2 19:15:08.473645 kernel: audit: type=1400 audit(1696274108.463:1105): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.481977 kernel: audit: type=1400 audit(1696274108.466:1106): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.490704 kernel: audit: type=1400 audit(1696274108.466:1107): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.492047 kernel: audit: type=1400 audit(1696274108.466:1108): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.508046 kernel: audit: type=1400 audit(1696274108.466:1109): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.508403 kernel: audit: type=1400 audit(1696274108.466:1110): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.524316 kernel: audit: type=1400 audit(1696274108.466:1111): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.532390 kernel: audit: type=1400 audit(1696274108.466:1112): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.540826 kernel: audit: type=1400 audit(1696274108.466:1113): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.548702 kernel: audit: type=1400 audit(1696274108.472:1114): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.472000 audit: BPF prog-id=130 op=LOAD Oct 2 19:15:08.473000 audit[3148]: AVC avc: denied { bpf } for pid=3148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.473000 audit[3148]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2800 pid=3148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:08.473000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538643334313037353565366262653661626365323065316264643861 Oct 2 19:15:08.473000 audit[3148]: AVC avc: denied { perfmon } for pid=3148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.473000 audit[3148]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2800 pid=3148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:08.473000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538643334313037353565366262653661626365323065316264643861 Oct 2 19:15:08.473000 audit[3148]: AVC avc: denied { bpf } for pid=3148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.473000 audit[3148]: AVC avc: denied { bpf } for pid=3148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.473000 audit[3148]: AVC avc: denied { bpf } for pid=3148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.473000 audit[3148]: AVC avc: denied { perfmon } for pid=3148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.473000 audit[3148]: AVC avc: denied { perfmon } for pid=3148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.473000 audit[3148]: AVC avc: denied { perfmon } for pid=3148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.473000 audit[3148]: AVC avc: denied { perfmon } for pid=3148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.473000 audit[3148]: AVC avc: denied { perfmon } for pid=3148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.473000 audit[3148]: AVC avc: denied { bpf } for pid=3148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.473000 audit[3148]: AVC avc: denied { bpf } for pid=3148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.473000 audit: BPF prog-id=131 op=LOAD Oct 2 19:15:08.473000 audit[3148]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2800 pid=3148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:08.473000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538643334313037353565366262653661626365323065316264643861 Oct 2 19:15:08.481000 audit[3148]: AVC avc: denied { bpf } for pid=3148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.481000 audit[3148]: AVC avc: denied { bpf } for pid=3148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.481000 audit[3148]: AVC avc: denied { perfmon } for pid=3148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.481000 audit[3148]: AVC avc: denied { perfmon } for pid=3148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.481000 audit[3148]: AVC avc: denied { perfmon } for pid=3148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.481000 audit[3148]: AVC avc: denied { perfmon } for pid=3148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.481000 audit[3148]: AVC avc: denied { perfmon } for pid=3148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.481000 audit[3148]: AVC avc: denied { bpf } for pid=3148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.481000 audit[3148]: AVC avc: denied { bpf } for pid=3148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.481000 audit: BPF prog-id=132 op=LOAD Oct 2 19:15:08.481000 audit[3148]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2800 pid=3148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:08.481000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538643334313037353565366262653661626365323065316264643861 Oct 2 19:15:08.481000 audit: BPF prog-id=132 op=UNLOAD Oct 2 19:15:08.481000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:15:08.481000 audit[3148]: AVC avc: denied { bpf } for pid=3148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.481000 audit[3148]: AVC avc: denied { bpf } for pid=3148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.481000 audit[3148]: AVC avc: denied { bpf } for pid=3148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.481000 audit[3148]: AVC avc: denied { perfmon } for pid=3148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.481000 audit[3148]: AVC avc: denied { perfmon } for pid=3148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.481000 audit[3148]: AVC avc: denied { perfmon } for pid=3148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.481000 audit[3148]: AVC avc: denied { perfmon } for pid=3148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.481000 audit[3148]: AVC avc: denied { perfmon } for pid=3148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.481000 audit[3148]: AVC avc: denied { bpf } for pid=3148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.481000 audit[3148]: AVC avc: denied { bpf } for pid=3148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:08.481000 audit: BPF prog-id=133 op=LOAD Oct 2 19:15:08.481000 audit[3148]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2800 pid=3148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:08.481000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538643334313037353565366262653661626365323065316264643861 Oct 2 19:15:08.572125 env[1574]: time="2023-10-02T19:15:08.572057779Z" level=info msg="StartContainer for \"e8d3410755e6bbe6abce20e1bdd8ae41c5b4ca00becadc964216ae6f0fe7f765\" returns successfully" Oct 2 19:15:08.648000 audit[3160]: AVC avc: denied { map_create } for pid=3160 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c433,c933 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c433,c933 tclass=bpf permissive=0 Oct 2 19:15:08.648000 audit[3160]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=400060f768 a2=48 a3=0 items=0 ppid=2800 pid=3160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c433,c933 key=(null) Oct 2 19:15:08.648000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:15:09.185409 kubelet[2680]: I1002 19:15:09.185201 2680 scope.go:115] "RemoveContainer" containerID="ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef" Oct 2 19:15:09.185948 kubelet[2680]: I1002 19:15:09.185890 2680 scope.go:115] "RemoveContainer" containerID="ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef" Oct 2 19:15:09.188332 env[1574]: time="2023-10-02T19:15:09.188246025Z" level=info msg="RemoveContainer for \"ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef\"" Oct 2 19:15:09.190257 env[1574]: time="2023-10-02T19:15:09.190204783Z" level=info msg="RemoveContainer for \"ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef\"" Oct 2 19:15:09.190608 env[1574]: time="2023-10-02T19:15:09.190554417Z" level=error msg="RemoveContainer for \"ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef\" failed" error="failed to set removing state for container \"ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef\": container is already in removing state" Oct 2 19:15:09.191077 kubelet[2680]: E1002 19:15:09.191030 2680 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef\": container is already in removing state" containerID="ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef" Oct 2 19:15:09.191232 kubelet[2680]: E1002 19:15:09.191124 2680 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef": container is already in removing state; Skipping pod "cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0)" Oct 2 19:15:09.192292 kubelet[2680]: E1002 19:15:09.191607 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0)\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:15:09.196522 env[1574]: time="2023-10-02T19:15:09.196428084Z" level=info msg="RemoveContainer for \"ba6d9bb24b23d626223f671a0ea271450e4d7b534e694dbf873810aea03e38ef\" returns successfully" Oct 2 19:15:09.327283 kubelet[2680]: I1002 19:15:09.327220 2680 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-574c4bb98d-lknq4" podStartSLOduration=2.403206922 podCreationTimestamp="2023-10-02 19:14:40 +0000 UTC" firstStartedPulling="2023-10-02 19:14:41.395042253 +0000 UTC m=+14.017636332" lastFinishedPulling="2023-10-02 19:15:08.318998268 +0000 UTC m=+40.941592419" observedRunningTime="2023-10-02 19:15:09.282119 +0000 UTC m=+41.904713079" watchObservedRunningTime="2023-10-02 19:15:09.327163009 +0000 UTC m=+41.949757100" Oct 2 19:15:11.397668 kubelet[2680]: W1002 19:15:11.397619 2680 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod008a43d1_2233_43f1_a2a3_eae7eb7bd7c0.slice/cri-containerd-d6994f575e4e232eb251c8207ad11f95b45e36d58bacc15df145e813fef4a3ab.scope WatchSource:0}: task d6994f575e4e232eb251c8207ad11f95b45e36d58bacc15df145e813fef4a3ab not found: not found Oct 2 19:15:21.768000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:21.771161 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:15:21.771307 kernel: audit: type=1400 audit(1696274121.768:1124): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:21.768000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c6cfe0 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:15:21.793109 kernel: audit: type=1300 audit(1696274121.768:1124): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c6cfe0 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:15:21.793223 kernel: audit: type=1327 audit(1696274121.768:1124): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:21.768000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:21.768000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:21.813371 kernel: audit: type=1400 audit(1696274121.768:1125): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:21.813472 kernel: audit: type=1300 audit(1696274121.768:1125): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000b887b0 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:15:21.768000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000b887b0 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:15:21.768000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:21.836248 kernel: audit: type=1327 audit(1696274121.768:1125): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:22.293866 systemd[1]: Started sshd@7-172.31.20.139:22-139.178.89.65:55922.service. Oct 2 19:15:22.293000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.20.139:22-139.178.89.65:55922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:22.305984 kernel: audit: type=1130 audit(1696274122.293:1126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.20.139:22-139.178.89.65:55922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:22.480696 sshd[3187]: Accepted publickey for core from 139.178.89.65 port 55922 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:15:22.479000 audit[3187]: USER_ACCT pid=3187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:22.492196 sshd[3187]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:22.490000 audit[3187]: CRED_ACQ pid=3187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:22.502858 kernel: audit: type=1101 audit(1696274122.479:1127): pid=3187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:22.503101 kernel: audit: type=1103 audit(1696274122.490:1128): pid=3187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:22.510655 kernel: audit: type=1006 audit(1696274122.490:1129): pid=3187 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 19:15:22.490000 audit[3187]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeed6d250 a2=3 a3=1 items=0 ppid=1 pid=3187 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:22.490000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:22.520133 systemd-logind[1553]: New session 8 of user core. Oct 2 19:15:22.520234 systemd[1]: Started session-8.scope. Oct 2 19:15:22.530000 audit[3187]: USER_START pid=3187 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:22.537000 audit[3189]: CRED_ACQ pid=3189 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:22.833527 sshd[3187]: pam_unix(sshd:session): session closed for user core Oct 2 19:15:22.835000 audit[3187]: USER_END pid=3187 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:22.835000 audit[3187]: CRED_DISP pid=3187 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:22.840000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.20.139:22-139.178.89.65:55922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:22.839870 systemd-logind[1553]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:15:22.840524 systemd[1]: sshd@7-172.31.20.139:22-139.178.89.65:55922.service: Deactivated successfully. Oct 2 19:15:22.841885 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:15:22.844284 systemd-logind[1553]: Removed session 8. Oct 2 19:15:23.115000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:23.115000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40091da2e0 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:15:23.115000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:15:23.115000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:23.115000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40020786c0 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:15:23.115000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:15:23.115000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:23.115000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4002078720 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:15:23.115000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:15:23.132000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:23.132000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4002078780 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:15:23.132000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:15:23.158000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:23.158000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:23.158000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4002078840 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:15:23.158000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:15:23.158000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40091da4e0 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:15:23.158000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:15:23.948778 kubelet[2680]: E1002 19:15:23.948719 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0)\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:15:26.971000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:26.974615 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:15:26.976127 kernel: audit: type=1400 audit(1696274126.971:1141): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:26.971000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e98940 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:15:26.996761 kernel: audit: type=1300 audit(1696274126.971:1141): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e98940 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:15:26.996929 kernel: audit: type=1327 audit(1696274126.971:1141): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:26.971000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:26.973000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:27.016717 kernel: audit: type=1400 audit(1696274126.973:1142): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:27.016882 kernel: audit: type=1300 audit(1696274126.973:1142): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e98a60 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:15:26.973000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e98a60 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:15:26.973000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:27.039528 kernel: audit: type=1327 audit(1696274126.973:1142): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:27.039682 kernel: audit: type=1400 audit(1696274126.977:1143): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:26.977000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:26.977000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e98b80 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:15:27.061565 kernel: audit: type=1300 audit(1696274126.977:1143): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e98b80 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:15:27.061685 kernel: audit: type=1327 audit(1696274126.977:1143): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:26.977000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:26.979000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:27.081404 kernel: audit: type=1400 audit(1696274126.979:1144): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:26.979000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000bce420 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:15:26.979000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:32.864879 systemd[1]: Started sshd@8-172.31.20.139:22-139.178.89.65:40106.service. Oct 2 19:15:32.876585 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:15:32.876737 kernel: audit: type=1130 audit(1696274132.864:1145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.20.139:22-139.178.89.65:40106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:32.864000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.20.139:22-139.178.89.65:40106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:33.051000 audit[3202]: USER_ACCT pid=3202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:33.059156 sshd[3202]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:33.060698 sshd[3202]: Accepted publickey for core from 139.178.89.65 port 40106 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:15:33.055000 audit[3202]: CRED_ACQ pid=3202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:33.072793 kernel: audit: type=1101 audit(1696274133.051:1146): pid=3202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:33.072961 kernel: audit: type=1103 audit(1696274133.055:1147): pid=3202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:33.079501 kernel: audit: type=1006 audit(1696274133.055:1148): pid=3202 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 2 19:15:33.055000 audit[3202]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd68523c0 a2=3 a3=1 items=0 ppid=1 pid=3202 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:33.090257 kernel: audit: type=1300 audit(1696274133.055:1148): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd68523c0 a2=3 a3=1 items=0 ppid=1 pid=3202 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:33.055000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:33.094428 kernel: audit: type=1327 audit(1696274133.055:1148): proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:33.096031 systemd-logind[1553]: New session 9 of user core. Oct 2 19:15:33.100221 systemd[1]: Started session-9.scope. Oct 2 19:15:33.111000 audit[3202]: USER_START pid=3202 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:33.128000 kernel: audit: type=1105 audit(1696274133.111:1149): pid=3202 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:33.128160 kernel: audit: type=1103 audit(1696274133.126:1150): pid=3204 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:33.126000 audit[3204]: CRED_ACQ pid=3204 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:33.412213 sshd[3202]: pam_unix(sshd:session): session closed for user core Oct 2 19:15:33.416000 audit[3202]: USER_END pid=3202 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:33.429797 systemd[1]: sshd@8-172.31.20.139:22-139.178.89.65:40106.service: Deactivated successfully. Oct 2 19:15:33.439588 kernel: audit: type=1106 audit(1696274133.416:1151): pid=3202 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:33.439702 kernel: audit: type=1104 audit(1696274133.418:1152): pid=3202 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:33.418000 audit[3202]: CRED_DISP pid=3202 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:33.431162 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:15:33.429000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.20.139:22-139.178.89.65:40106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:33.441135 systemd-logind[1553]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:15:33.443388 systemd-logind[1553]: Removed session 9. Oct 2 19:15:34.952964 env[1574]: time="2023-10-02T19:15:34.952880048Z" level=info msg="CreateContainer within sandbox \"1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:15:34.976085 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount440289484.mount: Deactivated successfully. Oct 2 19:15:34.985408 env[1574]: time="2023-10-02T19:15:34.985328726Z" level=info msg="CreateContainer within sandbox \"1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c\"" Oct 2 19:15:34.989248 env[1574]: time="2023-10-02T19:15:34.989155230Z" level=info msg="StartContainer for \"2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c\"" Oct 2 19:15:35.047364 systemd[1]: Started cri-containerd-2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c.scope. Oct 2 19:15:35.091051 systemd[1]: cri-containerd-2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c.scope: Deactivated successfully. Oct 2 19:15:35.122935 env[1574]: time="2023-10-02T19:15:35.122851981Z" level=info msg="shim disconnected" id=2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c Oct 2 19:15:35.123348 env[1574]: time="2023-10-02T19:15:35.123301404Z" level=warning msg="cleaning up after shim disconnected" id=2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c namespace=k8s.io Oct 2 19:15:35.123485 env[1574]: time="2023-10-02T19:15:35.123455760Z" level=info msg="cleaning up dead shim" Oct 2 19:15:35.150891 env[1574]: time="2023-10-02T19:15:35.150740503Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:15:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3238 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:15:35Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:15:35.151664 env[1574]: time="2023-10-02T19:15:35.151581774Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 19:15:35.152072 env[1574]: time="2023-10-02T19:15:35.152005925Z" level=error msg="Failed to pipe stdout of container \"2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c\"" error="reading from a closed fifo" Oct 2 19:15:35.154100 env[1574]: time="2023-10-02T19:15:35.154008303Z" level=error msg="Failed to pipe stderr of container \"2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c\"" error="reading from a closed fifo" Oct 2 19:15:35.156551 env[1574]: time="2023-10-02T19:15:35.156471396Z" level=error msg="StartContainer for \"2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:15:35.156863 kubelet[2680]: E1002 19:15:35.156804 2680 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c" Oct 2 19:15:35.157467 kubelet[2680]: E1002 19:15:35.156984 2680 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:15:35.157467 kubelet[2680]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:15:35.157467 kubelet[2680]: rm /hostbin/cilium-mount Oct 2 19:15:35.157467 kubelet[2680]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-bnffl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:15:35.157467 kubelet[2680]: E1002 19:15:35.157048 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:15:35.256735 kubelet[2680]: I1002 19:15:35.256597 2680 scope.go:115] "RemoveContainer" containerID="d6994f575e4e232eb251c8207ad11f95b45e36d58bacc15df145e813fef4a3ab" Oct 2 19:15:35.258579 kubelet[2680]: I1002 19:15:35.258530 2680 scope.go:115] "RemoveContainer" containerID="d6994f575e4e232eb251c8207ad11f95b45e36d58bacc15df145e813fef4a3ab" Oct 2 19:15:35.265192 env[1574]: time="2023-10-02T19:15:35.265097342Z" level=info msg="RemoveContainer for \"d6994f575e4e232eb251c8207ad11f95b45e36d58bacc15df145e813fef4a3ab\"" Oct 2 19:15:35.269222 env[1574]: time="2023-10-02T19:15:35.269125041Z" level=info msg="RemoveContainer for \"d6994f575e4e232eb251c8207ad11f95b45e36d58bacc15df145e813fef4a3ab\"" Oct 2 19:15:35.269755 env[1574]: time="2023-10-02T19:15:35.269613177Z" level=error msg="RemoveContainer for \"d6994f575e4e232eb251c8207ad11f95b45e36d58bacc15df145e813fef4a3ab\" failed" error="rpc error: code = NotFound desc = get container info: container \"d6994f575e4e232eb251c8207ad11f95b45e36d58bacc15df145e813fef4a3ab\" in namespace \"k8s.io\": not found" Oct 2 19:15:35.271557 env[1574]: time="2023-10-02T19:15:35.271491007Z" level=info msg="RemoveContainer for \"d6994f575e4e232eb251c8207ad11f95b45e36d58bacc15df145e813fef4a3ab\" returns successfully" Oct 2 19:15:35.275171 kubelet[2680]: E1002 19:15:35.271894 2680 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = NotFound desc = get container info: container \"d6994f575e4e232eb251c8207ad11f95b45e36d58bacc15df145e813fef4a3ab\" in namespace \"k8s.io\": not found" containerID="d6994f575e4e232eb251c8207ad11f95b45e36d58bacc15df145e813fef4a3ab" Oct 2 19:15:35.275171 kubelet[2680]: E1002 19:15:35.274066 2680 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = NotFound desc = get container info: container "d6994f575e4e232eb251c8207ad11f95b45e36d58bacc15df145e813fef4a3ab" in namespace "k8s.io": not found; Skipping pod "cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0)" Oct 2 19:15:35.275171 kubelet[2680]: E1002 19:15:35.274533 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0)\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:15:35.968853 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c-rootfs.mount: Deactivated successfully. Oct 2 19:15:38.228630 kubelet[2680]: W1002 19:15:38.228544 2680 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod008a43d1_2233_43f1_a2a3_eae7eb7bd7c0.slice/cri-containerd-2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c.scope WatchSource:0}: task 2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c not found: not found Oct 2 19:15:43.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.20.139:22-139.178.89.65:46808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:43.443102 systemd[1]: Started sshd@9-172.31.20.139:22-139.178.89.65:46808.service. Oct 2 19:15:43.445711 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:15:43.445786 kernel: audit: type=1130 audit(1696274143.442:1154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.20.139:22-139.178.89.65:46808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:43.631000 audit[3254]: USER_ACCT pid=3254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:43.633067 sshd[3254]: Accepted publickey for core from 139.178.89.65 port 46808 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:15:43.643970 kernel: audit: type=1101 audit(1696274143.631:1155): pid=3254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:43.644000 audit[3254]: CRED_ACQ pid=3254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:43.646762 sshd[3254]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:43.661597 kernel: audit: type=1103 audit(1696274143.644:1156): pid=3254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:43.661737 kernel: audit: type=1006 audit(1696274143.644:1157): pid=3254 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:15:43.644000 audit[3254]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc97f8d0 a2=3 a3=1 items=0 ppid=1 pid=3254 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:43.670383 systemd[1]: Started session-10.scope. Oct 2 19:15:43.672599 kernel: audit: type=1300 audit(1696274143.644:1157): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc97f8d0 a2=3 a3=1 items=0 ppid=1 pid=3254 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:43.672065 systemd-logind[1553]: New session 10 of user core. Oct 2 19:15:43.676217 kernel: audit: type=1327 audit(1696274143.644:1157): proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:43.644000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:43.684000 audit[3254]: USER_START pid=3254 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:43.698085 kernel: audit: type=1105 audit(1696274143.684:1158): pid=3254 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:43.698000 audit[3256]: CRED_ACQ pid=3256 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:43.708964 kernel: audit: type=1103 audit(1696274143.698:1159): pid=3256 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:43.968879 sshd[3254]: pam_unix(sshd:session): session closed for user core Oct 2 19:15:43.971000 audit[3254]: USER_END pid=3254 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:43.977911 systemd-logind[1553]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:15:43.981061 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:15:43.973000 audit[3254]: CRED_DISP pid=3254 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:43.983435 systemd[1]: sshd@9-172.31.20.139:22-139.178.89.65:46808.service: Deactivated successfully. Oct 2 19:15:43.985401 systemd-logind[1553]: Removed session 10. Oct 2 19:15:43.992641 kernel: audit: type=1106 audit(1696274143.971:1160): pid=3254 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:43.992812 kernel: audit: type=1104 audit(1696274143.973:1161): pid=3254 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:43.982000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.20.139:22-139.178.89.65:46808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:47.948709 kubelet[2680]: E1002 19:15:47.948642 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0)\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:15:54.012569 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:15:54.012726 kernel: audit: type=1130 audit(1696274154.000:1163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.20.139:22-139.178.89.65:50454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:54.000000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.20.139:22-139.178.89.65:50454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:54.001395 systemd[1]: Started sshd@10-172.31.20.139:22-139.178.89.65:50454.service. Oct 2 19:15:54.187000 audit[3267]: USER_ACCT pid=3267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:54.188525 sshd[3267]: Accepted publickey for core from 139.178.89.65 port 50454 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:15:54.200048 kernel: audit: type=1101 audit(1696274154.187:1164): pid=3267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:54.199000 audit[3267]: CRED_ACQ pid=3267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:54.201841 sshd[3267]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:54.216279 kernel: audit: type=1103 audit(1696274154.199:1165): pid=3267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:54.216432 kernel: audit: type=1006 audit(1696274154.200:1166): pid=3267 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:15:54.217056 kernel: audit: type=1300 audit(1696274154.200:1166): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb14f9f0 a2=3 a3=1 items=0 ppid=1 pid=3267 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.200000 audit[3267]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb14f9f0 a2=3 a3=1 items=0 ppid=1 pid=3267 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.200000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:54.234740 kernel: audit: type=1327 audit(1696274154.200:1166): proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:54.233257 systemd[1]: Started session-11.scope. Oct 2 19:15:54.235055 systemd-logind[1553]: New session 11 of user core. Oct 2 19:15:54.248000 audit[3267]: USER_START pid=3267 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:54.255000 audit[3269]: CRED_ACQ pid=3269 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:54.270668 kernel: audit: type=1105 audit(1696274154.248:1167): pid=3267 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:54.270840 kernel: audit: type=1103 audit(1696274154.255:1168): pid=3269 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:54.531987 sshd[3267]: pam_unix(sshd:session): session closed for user core Oct 2 19:15:54.533000 audit[3267]: USER_END pid=3267 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:54.533000 audit[3267]: CRED_DISP pid=3267 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:54.548765 systemd-logind[1553]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:15:54.551056 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:15:54.553166 systemd-logind[1553]: Removed session 11. Oct 2 19:15:54.555736 kernel: audit: type=1106 audit(1696274154.533:1169): pid=3267 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:54.555887 kernel: audit: type=1104 audit(1696274154.533:1170): pid=3267 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:54.554392 systemd[1]: sshd@10-172.31.20.139:22-139.178.89.65:50454.service: Deactivated successfully. Oct 2 19:15:54.553000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.20.139:22-139.178.89.65:50454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:58.949216 kubelet[2680]: E1002 19:15:58.949176 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0)\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:16:04.563000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.20.139:22-139.178.89.65:45112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:04.564017 systemd[1]: Started sshd@11-172.31.20.139:22-139.178.89.65:45112.service. Oct 2 19:16:04.570298 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:16:04.570430 kernel: audit: type=1130 audit(1696274164.563:1172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.20.139:22-139.178.89.65:45112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:04.751000 audit[3280]: USER_ACCT pid=3280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:04.753118 sshd[3280]: Accepted publickey for core from 139.178.89.65 port 45112 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:16:04.763968 kernel: audit: type=1101 audit(1696274164.751:1173): pid=3280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:04.764000 audit[3280]: CRED_ACQ pid=3280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:04.766732 sshd[3280]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:04.781898 kernel: audit: type=1103 audit(1696274164.764:1174): pid=3280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:04.782069 kernel: audit: type=1006 audit(1696274164.764:1175): pid=3280 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:16:04.764000 audit[3280]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffbb9fb50 a2=3 a3=1 items=0 ppid=1 pid=3280 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:04.788003 systemd[1]: Started session-12.scope. Oct 2 19:16:04.790855 systemd-logind[1553]: New session 12 of user core. Oct 2 19:16:04.793202 kernel: audit: type=1300 audit(1696274164.764:1175): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffbb9fb50 a2=3 a3=1 items=0 ppid=1 pid=3280 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:04.764000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:04.797741 kernel: audit: type=1327 audit(1696274164.764:1175): proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:04.800000 audit[3280]: USER_START pid=3280 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:04.817483 kernel: audit: type=1105 audit(1696274164.800:1176): pid=3280 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:04.817629 kernel: audit: type=1103 audit(1696274164.813:1177): pid=3282 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:04.813000 audit[3282]: CRED_ACQ pid=3282 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:05.097276 sshd[3280]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:05.098000 audit[3280]: USER_END pid=3280 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:05.104083 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:16:05.105464 systemd[1]: sshd@11-172.31.20.139:22-139.178.89.65:45112.service: Deactivated successfully. Oct 2 19:16:05.112470 systemd-logind[1553]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:16:05.114134 systemd-logind[1553]: Removed session 12. Oct 2 19:16:05.098000 audit[3280]: CRED_DISP pid=3280 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:05.124320 kernel: audit: type=1106 audit(1696274165.098:1178): pid=3280 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:05.124491 kernel: audit: type=1104 audit(1696274165.098:1179): pid=3280 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:05.104000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.20.139:22-139.178.89.65:45112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:13.949814 kubelet[2680]: E1002 19:16:13.949771 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0)\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:16:15.130033 systemd[1]: Started sshd@12-172.31.20.139:22-139.178.89.65:55520.service. Oct 2 19:16:15.129000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.20.139:22-139.178.89.65:55520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:15.135927 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:16:15.136068 kernel: audit: type=1130 audit(1696274175.129:1181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.20.139:22-139.178.89.65:55520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:15.319000 audit[3295]: USER_ACCT pid=3295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:15.321061 sshd[3295]: Accepted publickey for core from 139.178.89.65 port 55520 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:16:15.330964 kernel: audit: type=1101 audit(1696274175.319:1182): pid=3295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:15.332000 audit[3295]: CRED_ACQ pid=3295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:15.334278 sshd[3295]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:15.349102 kernel: audit: type=1103 audit(1696274175.332:1183): pid=3295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:15.349261 kernel: audit: type=1006 audit(1696274175.332:1184): pid=3295 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:16:15.332000 audit[3295]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2ec9440 a2=3 a3=1 items=0 ppid=1 pid=3295 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:15.361148 kernel: audit: type=1300 audit(1696274175.332:1184): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2ec9440 a2=3 a3=1 items=0 ppid=1 pid=3295 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:15.332000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:15.365431 kernel: audit: type=1327 audit(1696274175.332:1184): proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:15.372715 systemd-logind[1553]: New session 13 of user core. Oct 2 19:16:15.373643 systemd[1]: Started session-13.scope. Oct 2 19:16:15.386000 audit[3295]: USER_START pid=3295 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:15.393000 audit[3297]: CRED_ACQ pid=3297 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:15.409347 kernel: audit: type=1105 audit(1696274175.386:1185): pid=3295 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:15.409439 kernel: audit: type=1103 audit(1696274175.393:1186): pid=3297 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:15.665049 sshd[3295]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:15.665000 audit[3295]: USER_END pid=3295 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:15.671679 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:16:15.673099 systemd[1]: sshd@12-172.31.20.139:22-139.178.89.65:55520.service: Deactivated successfully. Oct 2 19:16:15.668000 audit[3295]: CRED_DISP pid=3295 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:15.687733 kernel: audit: type=1106 audit(1696274175.665:1187): pid=3295 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:15.687886 kernel: audit: type=1104 audit(1696274175.668:1188): pid=3295 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:15.687953 systemd-logind[1553]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:16:15.672000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.20.139:22-139.178.89.65:55520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:15.689575 systemd-logind[1553]: Removed session 13. Oct 2 19:16:21.769000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:21.772167 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:16:21.772247 kernel: audit: type=1400 audit(1696274181.769:1190): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:21.769000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001868bc0 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:16:21.793986 kernel: audit: type=1300 audit(1696274181.769:1190): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001868bc0 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:16:21.794118 kernel: audit: type=1327 audit(1696274181.769:1190): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:21.769000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:21.769000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:21.814332 kernel: audit: type=1400 audit(1696274181.769:1191): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:21.814521 kernel: audit: type=1300 audit(1696274181.769:1191): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40022f5440 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:16:21.769000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40022f5440 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:16:21.769000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:21.837127 kernel: audit: type=1327 audit(1696274181.769:1191): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:23.115000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:23.126943 kernel: audit: type=1400 audit(1696274183.115:1192): avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:23.127093 kernel: audit: type=1400 audit(1696274183.115:1193): avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:23.115000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:23.115000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400e7823a0 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:16:23.148825 kernel: audit: type=1300 audit(1696274183.115:1193): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400e7823a0 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:16:23.115000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:16:23.159381 kernel: audit: type=1327 audit(1696274183.115:1193): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:16:23.116000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:23.116000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400a319a40 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:16:23.116000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:16:23.115000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400a39c420 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:16:23.115000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:16:23.133000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:23.133000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400a319da0 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:16:23.133000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:16:23.159000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:23.159000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400e782580 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:16:23.159000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:16:23.159000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:23.159000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400a39c510 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:16:23.159000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:16:25.699000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.20.139:22-139.178.89.65:34520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:25.700022 systemd[1]: Started sshd@13-172.31.20.139:22-139.178.89.65:34520.service. Oct 2 19:16:25.881000 audit[3308]: USER_ACCT pid=3308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:25.882486 sshd[3308]: Accepted publickey for core from 139.178.89.65 port 34520 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:16:25.884000 audit[3308]: CRED_ACQ pid=3308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:25.884000 audit[3308]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc3000e00 a2=3 a3=1 items=0 ppid=1 pid=3308 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:25.884000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:25.886558 sshd[3308]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:25.896044 systemd[1]: Started session-14.scope. Oct 2 19:16:25.897235 systemd-logind[1553]: New session 14 of user core. Oct 2 19:16:25.906000 audit[3308]: USER_START pid=3308 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:25.913000 audit[3310]: CRED_ACQ pid=3310 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:26.200987 sshd[3308]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:26.203000 audit[3308]: USER_END pid=3308 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:26.204000 audit[3308]: CRED_DISP pid=3308 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:26.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.20.139:22-139.178.89.65:34520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:26.209022 systemd[1]: sshd@13-172.31.20.139:22-139.178.89.65:34520.service: Deactivated successfully. Oct 2 19:16:26.210078 systemd-logind[1553]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:16:26.211404 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:16:26.212868 systemd-logind[1553]: Removed session 14. Oct 2 19:16:26.972000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:26.975424 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:16:26.975583 kernel: audit: type=1400 audit(1696274186.972:1207): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:26.972000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000efa140 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:16:26.997241 kernel: audit: type=1300 audit(1696274186.972:1207): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000efa140 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:16:26.997387 kernel: audit: type=1327 audit(1696274186.972:1207): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:26.972000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:26.981000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:27.017223 kernel: audit: type=1400 audit(1696274186.981:1208): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:27.017385 kernel: audit: type=1300 audit(1696274186.981:1208): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001869120 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:16:26.981000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001869120 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:16:26.981000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:27.039899 kernel: audit: type=1327 audit(1696274186.981:1208): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:27.040026 kernel: audit: type=1400 audit(1696274186.981:1209): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:26.981000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:27.049327 kernel: audit: type=1300 audit(1696274186.981:1209): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001869140 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:16:26.981000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001869140 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:16:27.061659 kernel: audit: type=1327 audit(1696274186.981:1209): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:26.981000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:26.982000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:27.081425 kernel: audit: type=1400 audit(1696274186.982:1210): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:26.982000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000efa180 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:16:26.982000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:27.812955 kubelet[2680]: E1002 19:16:27.812888 2680 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:16:27.954552 env[1574]: time="2023-10-02T19:16:27.954258602Z" level=info msg="CreateContainer within sandbox \"1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:16:27.974245 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3435202342.mount: Deactivated successfully. Oct 2 19:16:27.985698 env[1574]: time="2023-10-02T19:16:27.985621239Z" level=info msg="CreateContainer within sandbox \"1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a\"" Oct 2 19:16:27.990819 env[1574]: time="2023-10-02T19:16:27.990764460Z" level=info msg="StartContainer for \"20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a\"" Oct 2 19:16:28.049489 systemd[1]: Started cri-containerd-20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a.scope. Oct 2 19:16:28.089746 systemd[1]: cri-containerd-20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a.scope: Deactivated successfully. Oct 2 19:16:28.091488 kubelet[2680]: E1002 19:16:28.091329 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:28.122296 env[1574]: time="2023-10-02T19:16:28.122211051Z" level=info msg="shim disconnected" id=20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a Oct 2 19:16:28.122296 env[1574]: time="2023-10-02T19:16:28.122283869Z" level=warning msg="cleaning up after shim disconnected" id=20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a namespace=k8s.io Oct 2 19:16:28.122636 env[1574]: time="2023-10-02T19:16:28.122306057Z" level=info msg="cleaning up dead shim" Oct 2 19:16:28.148255 env[1574]: time="2023-10-02T19:16:28.148174459Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:16:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3346 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:16:28Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:16:28.149089 env[1574]: time="2023-10-02T19:16:28.148634058Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 19:16:28.149451 env[1574]: time="2023-10-02T19:16:28.149382899Z" level=error msg="Failed to pipe stdout of container \"20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a\"" error="reading from a closed fifo" Oct 2 19:16:28.149451 env[1574]: time="2023-10-02T19:16:28.149368451Z" level=error msg="Failed to pipe stderr of container \"20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a\"" error="reading from a closed fifo" Oct 2 19:16:28.152353 env[1574]: time="2023-10-02T19:16:28.152263397Z" level=error msg="StartContainer for \"20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:16:28.154897 kubelet[2680]: E1002 19:16:28.152883 2680 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a" Oct 2 19:16:28.154897 kubelet[2680]: E1002 19:16:28.153106 2680 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:16:28.154897 kubelet[2680]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:16:28.154897 kubelet[2680]: rm /hostbin/cilium-mount Oct 2 19:16:28.154897 kubelet[2680]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-bnffl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:16:28.154897 kubelet[2680]: E1002 19:16:28.153176 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:16:28.412991 kubelet[2680]: I1002 19:16:28.411727 2680 scope.go:115] "RemoveContainer" containerID="2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c" Oct 2 19:16:28.415849 env[1574]: time="2023-10-02T19:16:28.415561281Z" level=info msg="RemoveContainer for \"2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c\"" Oct 2 19:16:28.417528 kubelet[2680]: I1002 19:16:28.416345 2680 scope.go:115] "RemoveContainer" containerID="2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c" Oct 2 19:16:28.420226 env[1574]: time="2023-10-02T19:16:28.420166734Z" level=info msg="RemoveContainer for \"2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c\"" Oct 2 19:16:28.420399 env[1574]: time="2023-10-02T19:16:28.420296001Z" level=error msg="RemoveContainer for \"2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c\" failed" error="rpc error: code = NotFound desc = get container info: container \"2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c\" in namespace \"k8s.io\": not found" Oct 2 19:16:28.421284 kubelet[2680]: E1002 19:16:28.421249 2680 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = NotFound desc = get container info: container \"2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c\" in namespace \"k8s.io\": not found" containerID="2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c" Oct 2 19:16:28.421513 kubelet[2680]: E1002 19:16:28.421488 2680 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = NotFound desc = get container info: container "2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c" in namespace "k8s.io": not found; Skipping pod "cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0)" Oct 2 19:16:28.422101 kubelet[2680]: E1002 19:16:28.422075 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0)\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:16:28.422614 env[1574]: time="2023-10-02T19:16:28.422521619Z" level=info msg="RemoveContainer for \"2f19672d6ec61563727b9d479faef930f400e28fb69a91c2ade9a3bb7e27b90c\" returns successfully" Oct 2 19:16:28.968585 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a-rootfs.mount: Deactivated successfully. Oct 2 19:16:31.227082 kubelet[2680]: W1002 19:16:31.226987 2680 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod008a43d1_2233_43f1_a2a3_eae7eb7bd7c0.slice/cri-containerd-20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a.scope WatchSource:0}: task 20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a not found: not found Oct 2 19:16:33.093042 kubelet[2680]: E1002 19:16:33.092896 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:36.235355 systemd[1]: Started sshd@14-172.31.20.139:22-139.178.89.65:60962.service. Oct 2 19:16:36.247387 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:16:36.247544 kernel: audit: type=1130 audit(1696274196.234:1211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.20.139:22-139.178.89.65:60962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:36.234000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.20.139:22-139.178.89.65:60962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:36.419000 audit[3360]: USER_ACCT pid=3360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:36.425322 sshd[3360]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:36.426743 sshd[3360]: Accepted publickey for core from 139.178.89.65 port 60962 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:16:36.422000 audit[3360]: CRED_ACQ pid=3360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:36.442054 kernel: audit: type=1101 audit(1696274196.419:1212): pid=3360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:36.442214 kernel: audit: type=1103 audit(1696274196.422:1213): pid=3360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:36.449017 kernel: audit: type=1006 audit(1696274196.422:1214): pid=3360 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:16:36.422000 audit[3360]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2d63420 a2=3 a3=1 items=0 ppid=1 pid=3360 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:36.422000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:36.466111 kernel: audit: type=1300 audit(1696274196.422:1214): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2d63420 a2=3 a3=1 items=0 ppid=1 pid=3360 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:36.466280 kernel: audit: type=1327 audit(1696274196.422:1214): proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:36.470278 systemd-logind[1553]: New session 15 of user core. Oct 2 19:16:36.471300 systemd[1]: Started session-15.scope. Oct 2 19:16:36.483000 audit[3360]: USER_START pid=3360 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:36.490000 audit[3362]: CRED_ACQ pid=3362 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:36.507109 kernel: audit: type=1105 audit(1696274196.483:1215): pid=3360 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:36.507197 kernel: audit: type=1103 audit(1696274196.490:1216): pid=3362 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:36.758430 sshd[3360]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:36.759000 audit[3360]: USER_END pid=3360 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:36.773568 systemd[1]: sshd@14-172.31.20.139:22-139.178.89.65:60962.service: Deactivated successfully. Oct 2 19:16:36.759000 audit[3360]: CRED_DISP pid=3360 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:36.773959 kernel: audit: type=1106 audit(1696274196.759:1217): pid=3360 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:36.774889 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:16:36.786108 kernel: audit: type=1104 audit(1696274196.759:1218): pid=3360 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:36.772000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.20.139:22-139.178.89.65:60962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:36.785210 systemd-logind[1553]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:16:36.787568 systemd-logind[1553]: Removed session 15. Oct 2 19:16:38.094601 kubelet[2680]: E1002 19:16:38.094567 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:40.949022 kubelet[2680]: E1002 19:16:40.948972 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0)\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:16:43.097021 kubelet[2680]: E1002 19:16:43.096974 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:46.789000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.20.139:22-139.178.89.65:51512 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:46.790372 systemd[1]: Started sshd@15-172.31.20.139:22-139.178.89.65:51512.service. Oct 2 19:16:46.793959 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:16:46.794066 kernel: audit: type=1130 audit(1696274206.789:1220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.20.139:22-139.178.89.65:51512 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:46.978000 audit[3374]: USER_ACCT pid=3374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:46.979874 sshd[3374]: Accepted publickey for core from 139.178.89.65 port 51512 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:16:46.990963 kernel: audit: type=1101 audit(1696274206.978:1221): pid=3374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:46.991000 audit[3374]: CRED_ACQ pid=3374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:46.993283 sshd[3374]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:47.008423 kernel: audit: type=1103 audit(1696274206.991:1222): pid=3374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:47.008523 kernel: audit: type=1006 audit(1696274206.991:1223): pid=3374 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:16:46.991000 audit[3374]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0fdb5b0 a2=3 a3=1 items=0 ppid=1 pid=3374 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:47.018952 kernel: audit: type=1300 audit(1696274206.991:1223): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0fdb5b0 a2=3 a3=1 items=0 ppid=1 pid=3374 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:46.991000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:47.022984 kernel: audit: type=1327 audit(1696274206.991:1223): proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:47.028138 systemd[1]: Started session-16.scope. Oct 2 19:16:47.029170 systemd-logind[1553]: New session 16 of user core. Oct 2 19:16:47.037000 audit[3374]: USER_START pid=3374 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:47.044000 audit[3376]: CRED_ACQ pid=3376 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:47.058887 kernel: audit: type=1105 audit(1696274207.037:1224): pid=3374 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:47.059000 kernel: audit: type=1103 audit(1696274207.044:1225): pid=3376 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:47.315189 sshd[3374]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:47.317000 audit[3374]: USER_END pid=3374 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:47.321775 systemd-logind[1553]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:16:47.324440 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:16:47.326781 systemd-logind[1553]: Removed session 16. Oct 2 19:16:47.328586 systemd[1]: sshd@15-172.31.20.139:22-139.178.89.65:51512.service: Deactivated successfully. Oct 2 19:16:47.317000 audit[3374]: CRED_DISP pid=3374 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:47.339283 kernel: audit: type=1106 audit(1696274207.317:1226): pid=3374 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:47.339375 kernel: audit: type=1104 audit(1696274207.317:1227): pid=3374 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:47.328000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.20.139:22-139.178.89.65:51512 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:48.097881 kubelet[2680]: E1002 19:16:48.097847 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:52.948624 kubelet[2680]: E1002 19:16:52.948572 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0)\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:16:53.099738 kubelet[2680]: E1002 19:16:53.099685 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:57.360570 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:16:57.360716 kernel: audit: type=1130 audit(1696274217.348:1229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.20.139:22-139.178.89.65:52706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:57.348000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.20.139:22-139.178.89.65:52706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:57.349328 systemd[1]: Started sshd@16-172.31.20.139:22-139.178.89.65:52706.service. Oct 2 19:16:57.542000 audit[3386]: USER_ACCT pid=3386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:57.543623 sshd[3386]: Accepted publickey for core from 139.178.89.65 port 52706 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:16:57.547488 sshd[3386]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:57.545000 audit[3386]: CRED_ACQ pid=3386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:57.563859 kernel: audit: type=1101 audit(1696274217.542:1230): pid=3386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:57.564012 kernel: audit: type=1103 audit(1696274217.545:1231): pid=3386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:57.570324 kernel: audit: type=1006 audit(1696274217.545:1232): pid=3386 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:16:57.545000 audit[3386]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffda0970b0 a2=3 a3=1 items=0 ppid=1 pid=3386 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:57.580765 kernel: audit: type=1300 audit(1696274217.545:1232): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffda0970b0 a2=3 a3=1 items=0 ppid=1 pid=3386 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:57.585251 kernel: audit: type=1327 audit(1696274217.545:1232): proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:57.545000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:57.586452 systemd[1]: Started session-17.scope. Oct 2 19:16:57.588190 systemd-logind[1553]: New session 17 of user core. Oct 2 19:16:57.596000 audit[3386]: USER_START pid=3386 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:57.602000 audit[3388]: CRED_ACQ pid=3388 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:57.617785 kernel: audit: type=1105 audit(1696274217.596:1233): pid=3386 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:57.618192 kernel: audit: type=1103 audit(1696274217.602:1234): pid=3388 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:57.877283 sshd[3386]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:57.878000 audit[3386]: USER_END pid=3386 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:57.883594 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:16:57.884894 systemd[1]: sshd@16-172.31.20.139:22-139.178.89.65:52706.service: Deactivated successfully. Oct 2 19:16:57.880000 audit[3386]: CRED_DISP pid=3386 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:57.900692 kernel: audit: type=1106 audit(1696274217.878:1235): pid=3386 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:57.900792 kernel: audit: type=1104 audit(1696274217.880:1236): pid=3386 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:57.884000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.20.139:22-139.178.89.65:52706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:57.902284 systemd-logind[1553]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:16:57.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.20.139:22-139.178.89.65:52714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:57.911689 systemd[1]: Started sshd@17-172.31.20.139:22-139.178.89.65:52714.service. Oct 2 19:16:57.912786 systemd-logind[1553]: Removed session 17. Oct 2 19:16:58.098000 audit[3399]: USER_ACCT pid=3399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:58.099506 sshd[3399]: Accepted publickey for core from 139.178.89.65 port 52714 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:16:58.100970 kubelet[2680]: E1002 19:16:58.100864 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:58.102000 audit[3399]: CRED_ACQ pid=3399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:58.102000 audit[3399]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeabe02b0 a2=3 a3=1 items=0 ppid=1 pid=3399 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:58.102000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:58.104086 sshd[3399]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:58.113508 systemd[1]: Started session-18.scope. Oct 2 19:16:58.114290 systemd-logind[1553]: New session 18 of user core. Oct 2 19:16:58.122000 audit[3399]: USER_START pid=3399 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:58.128000 audit[3401]: CRED_ACQ pid=3401 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:59.657088 sshd[3399]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:59.660000 audit[3399]: USER_END pid=3399 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:59.661000 audit[3399]: CRED_DISP pid=3399 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:59.665000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.20.139:22-139.178.89.65:52714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:59.665542 systemd[1]: sshd@17-172.31.20.139:22-139.178.89.65:52714.service: Deactivated successfully. Oct 2 19:16:59.667822 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:16:59.669557 systemd-logind[1553]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:16:59.672373 systemd-logind[1553]: Removed session 18. Oct 2 19:16:59.688000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.20.139:22-139.178.89.65:52730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:59.688628 systemd[1]: Started sshd@18-172.31.20.139:22-139.178.89.65:52730.service. Oct 2 19:16:59.874000 audit[3410]: USER_ACCT pid=3410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:59.876288 sshd[3410]: Accepted publickey for core from 139.178.89.65 port 52730 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:16:59.877000 audit[3410]: CRED_ACQ pid=3410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:59.878000 audit[3410]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdcecc150 a2=3 a3=1 items=0 ppid=1 pid=3410 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:59.878000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:59.880281 sshd[3410]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:59.890959 systemd[1]: Started session-19.scope. Oct 2 19:16:59.892063 systemd-logind[1553]: New session 19 of user core. Oct 2 19:16:59.899000 audit[3410]: USER_START pid=3410 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:59.906000 audit[3412]: CRED_ACQ pid=3412 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:00.174151 sshd[3410]: pam_unix(sshd:session): session closed for user core Oct 2 19:17:00.175000 audit[3410]: USER_END pid=3410 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:00.175000 audit[3410]: CRED_DISP pid=3410 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:00.180024 systemd-logind[1553]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:17:00.180480 systemd[1]: sshd@18-172.31.20.139:22-139.178.89.65:52730.service: Deactivated successfully. Oct 2 19:17:00.180000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.20.139:22-139.178.89.65:52730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:00.181908 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:17:00.183852 systemd-logind[1553]: Removed session 19. Oct 2 19:17:03.102247 kubelet[2680]: E1002 19:17:03.102191 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:07.949338 kubelet[2680]: E1002 19:17:07.949294 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0)\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:17:08.103945 kubelet[2680]: E1002 19:17:08.103882 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:10.205000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.20.139:22-139.178.89.65:49740 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:10.206268 systemd[1]: Started sshd@19-172.31.20.139:22-139.178.89.65:49740.service. Oct 2 19:17:10.210949 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:17:10.211089 kernel: audit: type=1130 audit(1696274230.205:1256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.20.139:22-139.178.89.65:49740 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:10.392000 audit[3421]: USER_ACCT pid=3421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:10.393523 sshd[3421]: Accepted publickey for core from 139.178.89.65 port 49740 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:17:10.397435 sshd[3421]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:17:10.395000 audit[3421]: CRED_ACQ pid=3421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:10.413075 kernel: audit: type=1101 audit(1696274230.392:1257): pid=3421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:10.413205 kernel: audit: type=1103 audit(1696274230.395:1258): pid=3421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:10.419184 kernel: audit: type=1006 audit(1696274230.395:1259): pid=3421 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:17:10.395000 audit[3421]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd8f9680 a2=3 a3=1 items=0 ppid=1 pid=3421 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:10.429694 kernel: audit: type=1300 audit(1696274230.395:1259): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd8f9680 a2=3 a3=1 items=0 ppid=1 pid=3421 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:10.437320 systemd-logind[1553]: New session 20 of user core. Oct 2 19:17:10.395000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:10.439052 systemd[1]: Started session-20.scope. Oct 2 19:17:10.442671 kernel: audit: type=1327 audit(1696274230.395:1259): proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:10.448000 audit[3421]: USER_START pid=3421 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:10.454000 audit[3423]: CRED_ACQ pid=3423 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:10.462960 kernel: audit: type=1105 audit(1696274230.448:1260): pid=3421 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:10.472955 kernel: audit: type=1103 audit(1696274230.454:1261): pid=3423 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:10.739381 sshd[3421]: pam_unix(sshd:session): session closed for user core Oct 2 19:17:10.740000 audit[3421]: USER_END pid=3421 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:10.747431 systemd-logind[1553]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:17:10.750135 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:17:10.752445 systemd-logind[1553]: Removed session 20. Oct 2 19:17:10.741000 audit[3421]: CRED_DISP pid=3421 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:10.754424 systemd[1]: sshd@19-172.31.20.139:22-139.178.89.65:49740.service: Deactivated successfully. Oct 2 19:17:10.762666 kernel: audit: type=1106 audit(1696274230.740:1262): pid=3421 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:10.762857 kernel: audit: type=1104 audit(1696274230.741:1263): pid=3421 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:10.753000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.20.139:22-139.178.89.65:49740 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:13.105953 kubelet[2680]: E1002 19:17:13.105860 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:18.108376 kubelet[2680]: E1002 19:17:18.108337 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:20.771443 systemd[1]: Started sshd@20-172.31.20.139:22-139.178.89.65:40980.service. Oct 2 19:17:20.771000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.20.139:22-139.178.89.65:40980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:20.775966 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:17:20.776091 kernel: audit: type=1130 audit(1696274240.771:1265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.20.139:22-139.178.89.65:40980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:20.955000 audit[3434]: USER_ACCT pid=3434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:20.959047 sshd[3434]: Accepted publickey for core from 139.178.89.65 port 40980 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:17:20.962881 sshd[3434]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:17:20.961000 audit[3434]: CRED_ACQ pid=3434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:20.977288 kernel: audit: type=1101 audit(1696274240.955:1266): pid=3434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:20.977402 kernel: audit: type=1103 audit(1696274240.961:1267): pid=3434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:20.983309 kernel: audit: type=1006 audit(1696274240.961:1268): pid=3434 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:17:20.961000 audit[3434]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff91b8720 a2=3 a3=1 items=0 ppid=1 pid=3434 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:20.993657 kernel: audit: type=1300 audit(1696274240.961:1268): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff91b8720 a2=3 a3=1 items=0 ppid=1 pid=3434 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:20.961000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:20.997284 kernel: audit: type=1327 audit(1696274240.961:1268): proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:21.000864 systemd-logind[1553]: New session 21 of user core. Oct 2 19:17:21.001694 systemd[1]: Started session-21.scope. Oct 2 19:17:21.011000 audit[3434]: USER_START pid=3434 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:21.017000 audit[3436]: CRED_ACQ pid=3436 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:21.032521 kernel: audit: type=1105 audit(1696274241.011:1269): pid=3434 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:21.032623 kernel: audit: type=1103 audit(1696274241.017:1270): pid=3436 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:21.292691 sshd[3434]: pam_unix(sshd:session): session closed for user core Oct 2 19:17:21.293000 audit[3434]: USER_END pid=3434 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:21.296000 audit[3434]: CRED_DISP pid=3434 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:21.316390 kernel: audit: type=1106 audit(1696274241.293:1271): pid=3434 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:21.316537 kernel: audit: type=1104 audit(1696274241.296:1272): pid=3434 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:21.307214 systemd[1]: sshd@20-172.31.20.139:22-139.178.89.65:40980.service: Deactivated successfully. Oct 2 19:17:21.308505 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:17:21.306000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.20.139:22-139.178.89.65:40980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:21.317764 systemd-logind[1553]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:17:21.320347 systemd-logind[1553]: Removed session 21. Oct 2 19:17:21.769000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:21.769000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:21.769000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40012dc600 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:17:21.769000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:21.769000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40013680e0 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:17:21.769000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:22.948758 kubelet[2680]: E1002 19:17:22.948719 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0)\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:17:23.110955 kubelet[2680]: E1002 19:17:23.110899 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:23.117000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:23.116000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:23.117000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400970f6e0 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:17:23.117000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:17:23.116000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400ed16f90 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:17:23.116000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:17:23.118000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:23.118000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400ed170b0 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:17:23.118000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:17:23.134000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:23.134000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400ed17140 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:17:23.134000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:17:23.161000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:23.161000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400f0982d0 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:17:23.161000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:17:23.162000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:23.162000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400970f7c0 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:17:23.162000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:17:26.974000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:26.977621 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:17:26.977721 kernel: audit: type=1400 audit(1696274246.974:1282): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:26.974000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40015aa080 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:17:26.999463 kernel: audit: type=1300 audit(1696274246.974:1282): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40015aa080 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:17:26.999535 kernel: audit: type=1327 audit(1696274246.974:1282): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:26.974000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:26.982000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:27.019382 kernel: audit: type=1400 audit(1696274246.982:1283): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:27.019456 kernel: audit: type=1300 audit(1696274246.982:1283): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40015aa0c0 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:17:26.982000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40015aa0c0 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:17:26.982000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:27.042162 kernel: audit: type=1327 audit(1696274246.982:1283): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:27.042317 kernel: audit: type=1400 audit(1696274246.982:1284): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:26.982000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:26.982000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001368760 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:17:27.064271 kernel: audit: type=1300 audit(1696274246.982:1284): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001368760 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:17:27.064357 kernel: audit: type=1327 audit(1696274246.982:1284): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:26.982000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:26.982000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:27.084163 kernel: audit: type=1400 audit(1696274246.982:1285): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:26.982000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40013687a0 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:17:26.982000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:28.112034 kubelet[2680]: E1002 19:17:28.111989 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:31.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.20.139:22-139.178.89.65:44464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:31.326732 systemd[1]: Started sshd@21-172.31.20.139:22-139.178.89.65:44464.service. Oct 2 19:17:31.511000 audit[3447]: USER_ACCT pid=3447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:31.512358 sshd[3447]: Accepted publickey for core from 139.178.89.65 port 44464 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:17:31.514000 audit[3447]: CRED_ACQ pid=3447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:31.514000 audit[3447]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe2a0c260 a2=3 a3=1 items=0 ppid=1 pid=3447 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:31.514000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:31.515811 sshd[3447]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:17:31.524636 systemd[1]: Started session-22.scope. Oct 2 19:17:31.527305 systemd-logind[1553]: New session 22 of user core. Oct 2 19:17:31.535000 audit[3447]: USER_START pid=3447 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:31.542000 audit[3449]: CRED_ACQ pid=3449 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:31.828339 sshd[3447]: pam_unix(sshd:session): session closed for user core Oct 2 19:17:31.829000 audit[3447]: USER_END pid=3447 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:31.830000 audit[3447]: CRED_DISP pid=3447 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:31.834434 systemd-logind[1553]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:17:31.835478 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:17:31.836882 systemd[1]: sshd@21-172.31.20.139:22-139.178.89.65:44464.service: Deactivated successfully. Oct 2 19:17:31.836000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.20.139:22-139.178.89.65:44464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:31.839064 systemd-logind[1553]: Removed session 22. Oct 2 19:17:33.114162 kubelet[2680]: E1002 19:17:33.114106 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:37.949208 kubelet[2680]: E1002 19:17:37.949150 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0)\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:17:38.115895 kubelet[2680]: E1002 19:17:38.115861 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:41.864000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.20.139:22-139.178.89.65:57960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:41.867379 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:17:41.867457 kernel: audit: type=1130 audit(1696274261.864:1295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.20.139:22-139.178.89.65:57960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:41.864870 systemd[1]: Started sshd@22-172.31.20.139:22-139.178.89.65:57960.service. Oct 2 19:17:42.062000 audit[3459]: USER_ACCT pid=3459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:42.064268 sshd[3459]: Accepted publickey for core from 139.178.89.65 port 57960 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:17:42.075996 kernel: audit: type=1101 audit(1696274262.062:1296): pid=3459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:42.075000 audit[3459]: CRED_ACQ pid=3459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:42.077981 sshd[3459]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:17:42.093359 kernel: audit: type=1103 audit(1696274262.075:1297): pid=3459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:42.093456 kernel: audit: type=1006 audit(1696274262.076:1298): pid=3459 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:17:42.076000 audit[3459]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb246f60 a2=3 a3=1 items=0 ppid=1 pid=3459 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:42.076000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:42.108111 kernel: audit: type=1300 audit(1696274262.076:1298): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb246f60 a2=3 a3=1 items=0 ppid=1 pid=3459 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:42.108250 kernel: audit: type=1327 audit(1696274262.076:1298): proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:42.114143 systemd-logind[1553]: New session 23 of user core. Oct 2 19:17:42.114653 systemd[1]: Started session-23.scope. Oct 2 19:17:42.124000 audit[3459]: USER_START pid=3459 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:42.138095 kernel: audit: type=1105 audit(1696274262.124:1299): pid=3459 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:42.137000 audit[3461]: CRED_ACQ pid=3461 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:42.148968 kernel: audit: type=1103 audit(1696274262.137:1300): pid=3461 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:42.414269 sshd[3459]: pam_unix(sshd:session): session closed for user core Oct 2 19:17:42.415000 audit[3459]: USER_END pid=3459 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:42.428267 systemd[1]: sshd@22-172.31.20.139:22-139.178.89.65:57960.service: Deactivated successfully. Oct 2 19:17:42.429551 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:17:42.418000 audit[3459]: CRED_DISP pid=3459 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:42.440234 kernel: audit: type=1106 audit(1696274262.415:1301): pid=3459 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:42.440352 kernel: audit: type=1104 audit(1696274262.418:1302): pid=3459 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:42.427000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.20.139:22-139.178.89.65:57960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:42.440892 systemd-logind[1553]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:17:42.443353 systemd-logind[1553]: Removed session 23. Oct 2 19:17:43.116942 kubelet[2680]: E1002 19:17:43.116865 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:48.118305 kubelet[2680]: E1002 19:17:48.118267 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:49.952047 env[1574]: time="2023-10-02T19:17:49.951988546Z" level=info msg="CreateContainer within sandbox \"1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:17:49.972031 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3313897928.mount: Deactivated successfully. Oct 2 19:17:49.982507 env[1574]: time="2023-10-02T19:17:49.982436001Z" level=info msg="CreateContainer within sandbox \"1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"7d95634a93d9746b3ded96430d24fd98fcd6cead2745365f6fc27609af5c72c8\"" Oct 2 19:17:49.983278 env[1574]: time="2023-10-02T19:17:49.983230658Z" level=info msg="StartContainer for \"7d95634a93d9746b3ded96430d24fd98fcd6cead2745365f6fc27609af5c72c8\"" Oct 2 19:17:50.033634 systemd[1]: Started cri-containerd-7d95634a93d9746b3ded96430d24fd98fcd6cead2745365f6fc27609af5c72c8.scope. Oct 2 19:17:50.067712 systemd[1]: cri-containerd-7d95634a93d9746b3ded96430d24fd98fcd6cead2745365f6fc27609af5c72c8.scope: Deactivated successfully. Oct 2 19:17:50.092310 env[1574]: time="2023-10-02T19:17:50.092198796Z" level=info msg="shim disconnected" id=7d95634a93d9746b3ded96430d24fd98fcd6cead2745365f6fc27609af5c72c8 Oct 2 19:17:50.092625 env[1574]: time="2023-10-02T19:17:50.092326225Z" level=warning msg="cleaning up after shim disconnected" id=7d95634a93d9746b3ded96430d24fd98fcd6cead2745365f6fc27609af5c72c8 namespace=k8s.io Oct 2 19:17:50.092625 env[1574]: time="2023-10-02T19:17:50.092350837Z" level=info msg="cleaning up dead shim" Oct 2 19:17:50.120006 env[1574]: time="2023-10-02T19:17:50.119901677Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:17:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3498 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:17:50Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/7d95634a93d9746b3ded96430d24fd98fcd6cead2745365f6fc27609af5c72c8/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:17:50.120510 env[1574]: time="2023-10-02T19:17:50.120410228Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 19:17:50.120901 env[1574]: time="2023-10-02T19:17:50.120845759Z" level=error msg="Failed to pipe stderr of container \"7d95634a93d9746b3ded96430d24fd98fcd6cead2745365f6fc27609af5c72c8\"" error="reading from a closed fifo" Oct 2 19:17:50.121067 env[1574]: time="2023-10-02T19:17:50.120853079Z" level=error msg="Failed to pipe stdout of container \"7d95634a93d9746b3ded96430d24fd98fcd6cead2745365f6fc27609af5c72c8\"" error="reading from a closed fifo" Oct 2 19:17:50.123131 env[1574]: time="2023-10-02T19:17:50.123047819Z" level=error msg="StartContainer for \"7d95634a93d9746b3ded96430d24fd98fcd6cead2745365f6fc27609af5c72c8\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:17:50.124221 kubelet[2680]: E1002 19:17:50.123527 2680 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="7d95634a93d9746b3ded96430d24fd98fcd6cead2745365f6fc27609af5c72c8" Oct 2 19:17:50.124221 kubelet[2680]: E1002 19:17:50.123715 2680 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:17:50.124221 kubelet[2680]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:17:50.124221 kubelet[2680]: rm /hostbin/cilium-mount Oct 2 19:17:50.124221 kubelet[2680]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-bnffl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:17:50.124221 kubelet[2680]: E1002 19:17:50.123801 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:17:50.610957 kubelet[2680]: I1002 19:17:50.610862 2680 scope.go:115] "RemoveContainer" containerID="20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a" Oct 2 19:17:50.613205 kubelet[2680]: I1002 19:17:50.611443 2680 scope.go:115] "RemoveContainer" containerID="20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a" Oct 2 19:17:50.615410 env[1574]: time="2023-10-02T19:17:50.614690731Z" level=info msg="RemoveContainer for \"20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a\"" Oct 2 19:17:50.615898 env[1574]: time="2023-10-02T19:17:50.615854162Z" level=info msg="RemoveContainer for \"20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a\"" Oct 2 19:17:50.620978 env[1574]: time="2023-10-02T19:17:50.616467053Z" level=error msg="RemoveContainer for \"20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a\" failed" error="failed to set removing state for container \"20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a\": container is already in removing state" Oct 2 19:17:50.621164 kubelet[2680]: E1002 19:17:50.616801 2680 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a\": container is already in removing state" containerID="20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a" Oct 2 19:17:50.621164 kubelet[2680]: E1002 19:17:50.616852 2680 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a": container is already in removing state; Skipping pod "cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0)" Oct 2 19:17:50.621164 kubelet[2680]: E1002 19:17:50.617319 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0)\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:17:50.624171 env[1574]: time="2023-10-02T19:17:50.624098701Z" level=info msg="RemoveContainer for \"20448110113634e6cb7c175bc5f05717bf81d72915f99125399043a59126766a\" returns successfully" Oct 2 19:17:50.965844 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-7d95634a93d9746b3ded96430d24fd98fcd6cead2745365f6fc27609af5c72c8-rootfs.mount: Deactivated successfully. Oct 2 19:17:52.446000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.20.139:22-139.178.89.65:58148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:52.446711 systemd[1]: Started sshd@23-172.31.20.139:22-139.178.89.65:58148.service. Oct 2 19:17:52.454092 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:17:52.454265 kernel: audit: type=1130 audit(1696274272.446:1304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.20.139:22-139.178.89.65:58148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:52.631000 audit[3513]: USER_ACCT pid=3513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:52.632527 sshd[3513]: Accepted publickey for core from 139.178.89.65 port 58148 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:17:52.643981 kernel: audit: type=1101 audit(1696274272.631:1305): pid=3513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:52.645980 sshd[3513]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:17:52.644000 audit[3513]: CRED_ACQ pid=3513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:52.657201 kernel: audit: type=1103 audit(1696274272.644:1306): pid=3513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:52.657328 kernel: audit: type=1006 audit(1696274272.644:1307): pid=3513 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:17:52.644000 audit[3513]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf246120 a2=3 a3=1 items=0 ppid=1 pid=3513 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:52.674021 kernel: audit: type=1300 audit(1696274272.644:1307): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf246120 a2=3 a3=1 items=0 ppid=1 pid=3513 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:52.644000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:52.678131 kernel: audit: type=1327 audit(1696274272.644:1307): proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:52.681720 systemd-logind[1553]: New session 24 of user core. Oct 2 19:17:52.682690 systemd[1]: Started session-24.scope. Oct 2 19:17:52.693000 audit[3513]: USER_START pid=3513 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:52.706000 audit[3515]: CRED_ACQ pid=3515 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:52.716869 kernel: audit: type=1105 audit(1696274272.693:1308): pid=3513 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:52.716988 kernel: audit: type=1103 audit(1696274272.706:1309): pid=3515 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:52.983361 sshd[3513]: pam_unix(sshd:session): session closed for user core Oct 2 19:17:52.984000 audit[3513]: USER_END pid=3513 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:53.000284 kernel: audit: type=1106 audit(1696274272.984:1310): pid=3513 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:53.000427 kernel: audit: type=1104 audit(1696274272.986:1311): pid=3513 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:52.986000 audit[3513]: CRED_DISP pid=3513 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:52.998210 systemd[1]: sshd@23-172.31.20.139:22-139.178.89.65:58148.service: Deactivated successfully. Oct 2 19:17:52.999457 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:17:52.997000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.20.139:22-139.178.89.65:58148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:53.008528 systemd-logind[1553]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:17:53.010128 systemd-logind[1553]: Removed session 24. Oct 2 19:17:53.120287 kubelet[2680]: E1002 19:17:53.120225 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:53.199081 kubelet[2680]: W1002 19:17:53.198672 2680 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod008a43d1_2233_43f1_a2a3_eae7eb7bd7c0.slice/cri-containerd-7d95634a93d9746b3ded96430d24fd98fcd6cead2745365f6fc27609af5c72c8.scope WatchSource:0}: task 7d95634a93d9746b3ded96430d24fd98fcd6cead2745365f6fc27609af5c72c8 not found: not found Oct 2 19:17:58.121562 kubelet[2680]: E1002 19:17:58.121497 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:03.015515 systemd[1]: Started sshd@24-172.31.20.139:22-139.178.89.65:60998.service. Oct 2 19:18:03.028367 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:18:03.028503 kernel: audit: type=1130 audit(1696274283.016:1313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.20.139:22-139.178.89.65:60998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:03.016000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.20.139:22-139.178.89.65:60998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:03.122793 kubelet[2680]: E1002 19:18:03.122737 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:03.193000 audit[3525]: USER_ACCT pid=3525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:03.194797 sshd[3525]: Accepted publickey for core from 139.178.89.65 port 60998 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:18:03.198798 sshd[3525]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:18:03.197000 audit[3525]: CRED_ACQ pid=3525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:03.215362 kernel: audit: type=1101 audit(1696274283.193:1314): pid=3525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:03.215473 kernel: audit: type=1103 audit(1696274283.197:1315): pid=3525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:03.221572 kernel: audit: type=1006 audit(1696274283.197:1316): pid=3525 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:18:03.197000 audit[3525]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcde70570 a2=3 a3=1 items=0 ppid=1 pid=3525 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:03.232362 kernel: audit: type=1300 audit(1696274283.197:1316): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcde70570 a2=3 a3=1 items=0 ppid=1 pid=3525 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:03.197000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:03.239438 kernel: audit: type=1327 audit(1696274283.197:1316): proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:03.246040 systemd-logind[1553]: New session 25 of user core. Oct 2 19:18:03.247374 systemd[1]: Started session-25.scope. Oct 2 19:18:03.262000 audit[3525]: USER_START pid=3525 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:03.269000 audit[3527]: CRED_ACQ pid=3527 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:03.286710 kernel: audit: type=1105 audit(1696274283.262:1317): pid=3525 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:03.286828 kernel: audit: type=1103 audit(1696274283.269:1318): pid=3527 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:03.534908 sshd[3525]: pam_unix(sshd:session): session closed for user core Oct 2 19:18:03.536000 audit[3525]: USER_END pid=3525 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:03.541934 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:18:03.543559 systemd[1]: sshd@24-172.31.20.139:22-139.178.89.65:60998.service: Deactivated successfully. Oct 2 19:18:03.550224 systemd-logind[1553]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:18:03.536000 audit[3525]: CRED_DISP pid=3525 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:03.561204 kernel: audit: type=1106 audit(1696274283.536:1319): pid=3525 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:03.561281 kernel: audit: type=1104 audit(1696274283.536:1320): pid=3525 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:03.561453 systemd-logind[1553]: Removed session 25. Oct 2 19:18:03.542000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.20.139:22-139.178.89.65:60998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:05.958874 kubelet[2680]: E1002 19:18:05.958817 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0)\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:18:08.124180 kubelet[2680]: E1002 19:18:08.124146 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:13.126337 kubelet[2680]: E1002 19:18:13.126261 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:13.566128 systemd[1]: Started sshd@25-172.31.20.139:22-139.178.89.65:39014.service. Oct 2 19:18:13.577811 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:18:13.577970 kernel: audit: type=1130 audit(1696274293.565:1322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.20.139:22-139.178.89.65:39014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:13.565000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.20.139:22-139.178.89.65:39014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:13.743000 audit[3538]: USER_ACCT pid=3538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:13.747623 sshd[3538]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:18:13.749021 sshd[3538]: Accepted publickey for core from 139.178.89.65 port 39014 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:18:13.745000 audit[3538]: CRED_ACQ pid=3538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:13.764513 kernel: audit: type=1101 audit(1696274293.743:1323): pid=3538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:13.764603 kernel: audit: type=1103 audit(1696274293.745:1324): pid=3538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:13.764986 kernel: audit: type=1006 audit(1696274293.746:1325): pid=3538 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:18:13.746000 audit[3538]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff3931e0 a2=3 a3=1 items=0 ppid=1 pid=3538 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:13.781151 kernel: audit: type=1300 audit(1696274293.746:1325): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff3931e0 a2=3 a3=1 items=0 ppid=1 pid=3538 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:13.746000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:13.785262 kernel: audit: type=1327 audit(1696274293.746:1325): proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:13.791421 systemd-logind[1553]: New session 26 of user core. Oct 2 19:18:13.792427 systemd[1]: Started session-26.scope. Oct 2 19:18:13.800000 audit[3538]: USER_START pid=3538 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:13.807000 audit[3540]: CRED_ACQ pid=3540 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:13.822575 kernel: audit: type=1105 audit(1696274293.800:1326): pid=3538 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:13.822688 kernel: audit: type=1103 audit(1696274293.807:1327): pid=3540 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:14.082225 sshd[3538]: pam_unix(sshd:session): session closed for user core Oct 2 19:18:14.083000 audit[3538]: USER_END pid=3538 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:14.089866 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:18:14.091216 systemd[1]: sshd@25-172.31.20.139:22-139.178.89.65:39014.service: Deactivated successfully. Oct 2 19:18:14.085000 audit[3538]: CRED_DISP pid=3538 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:14.105898 kernel: audit: type=1106 audit(1696274294.083:1328): pid=3538 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:14.106064 kernel: audit: type=1104 audit(1696274294.085:1329): pid=3538 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:14.106337 systemd-logind[1553]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:18:14.090000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.20.139:22-139.178.89.65:39014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:14.107898 systemd-logind[1553]: Removed session 26. Oct 2 19:18:18.128322 kubelet[2680]: E1002 19:18:18.128283 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:20.948701 kubelet[2680]: E1002 19:18:20.948635 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0)\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:18:21.770000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:21.773244 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:18:21.773345 kernel: audit: type=1400 audit(1696274301.770:1331): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:21.770000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:21.792725 kernel: audit: type=1400 audit(1696274301.770:1332): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:21.792831 kernel: audit: type=1300 audit(1696274301.770:1332): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400146ef60 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:18:21.770000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400146ef60 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:18:21.770000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:21.815429 kernel: audit: type=1327 audit(1696274301.770:1332): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:21.815533 kernel: audit: type=1300 audit(1696274301.770:1331): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400234f440 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:18:21.770000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400234f440 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:18:21.770000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:21.838171 kernel: audit: type=1327 audit(1696274301.770:1331): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:23.117000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:23.117000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4012837050 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:18:23.140789 kernel: audit: type=1400 audit(1696274303.117:1333): avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:23.141052 kernel: audit: type=1300 audit(1696274303.117:1333): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4012837050 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:18:23.117000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:18:23.151685 kernel: audit: type=1327 audit(1696274303.117:1333): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:18:23.152238 kubelet[2680]: E1002 19:18:23.152180 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:23.118000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:23.162111 kernel: audit: type=1400 audit(1696274303.118:1334): avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:23.118000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4012837080 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:18:23.118000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:18:23.118000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:23.118000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400f00f3e0 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:18:23.118000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:18:23.134000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:23.134000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=401252ba10 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:18:23.134000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:18:23.161000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:23.161000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=401252bb00 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:18:23.161000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:18:23.162000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:23.162000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400f00f420 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:18:23.162000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:18:24.115488 systemd[1]: Started sshd@26-172.31.20.139:22-139.178.89.65:42136.service. Oct 2 19:18:24.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.20.139:22-139.178.89.65:42136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:24.296000 audit[3550]: USER_ACCT pid=3550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:24.297835 sshd[3550]: Accepted publickey for core from 139.178.89.65 port 42136 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:18:24.300000 audit[3550]: CRED_ACQ pid=3550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:24.300000 audit[3550]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3b5a060 a2=3 a3=1 items=0 ppid=1 pid=3550 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:24.300000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:24.302023 sshd[3550]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:18:24.310001 systemd-logind[1553]: New session 27 of user core. Oct 2 19:18:24.311430 systemd[1]: Started session-27.scope. Oct 2 19:18:24.320000 audit[3550]: USER_START pid=3550 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:24.327000 audit[3552]: CRED_ACQ pid=3552 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:24.593257 sshd[3550]: pam_unix(sshd:session): session closed for user core Oct 2 19:18:24.594000 audit[3550]: USER_END pid=3550 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:24.595000 audit[3550]: CRED_DISP pid=3550 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:24.599529 systemd-logind[1553]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:18:24.599964 systemd[1]: sshd@26-172.31.20.139:22-139.178.89.65:42136.service: Deactivated successfully. Oct 2 19:18:24.599000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.20.139:22-139.178.89.65:42136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:24.601303 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:18:24.603005 systemd-logind[1553]: Removed session 27. Oct 2 19:18:26.980961 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:18:26.981115 kernel: audit: type=1400 audit(1696274306.976:1348): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:26.976000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:26.976000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027a0200 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:18:27.002024 kernel: audit: type=1300 audit(1696274306.976:1348): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027a0200 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:18:26.976000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:27.012532 kernel: audit: type=1327 audit(1696274306.976:1348): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:27.012647 kernel: audit: type=1400 audit(1696274306.983:1349): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:26.983000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:27.022031 kernel: audit: type=1300 audit(1696274306.983:1349): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40019de020 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:18:26.983000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40019de020 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:18:26.983000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:27.044652 kernel: audit: type=1327 audit(1696274306.983:1349): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:27.044780 kernel: audit: type=1400 audit(1696274306.983:1350): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:26.983000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:26.983000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40019de040 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:18:27.066565 kernel: audit: type=1300 audit(1696274306.983:1350): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40019de040 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:18:27.066641 kernel: audit: type=1327 audit(1696274306.983:1350): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:26.983000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:27.076952 kernel: audit: type=1400 audit(1696274306.984:1351): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:26.984000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:26.984000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40019de160 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:18:26.984000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:28.153856 kubelet[2680]: E1002 19:18:28.153821 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:33.155520 kubelet[2680]: E1002 19:18:33.155465 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:33.948905 kubelet[2680]: E1002 19:18:33.948844 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bw4sc_kube-system(008a43d1-2233-43f1-a2a3-eae7eb7bd7c0)\"" pod="kube-system/cilium-bw4sc" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 Oct 2 19:18:34.624531 systemd[1]: Started sshd@27-172.31.20.139:22-139.178.89.65:35520.service. Oct 2 19:18:34.624000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.20.139:22-139.178.89.65:35520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:34.630687 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:18:34.630855 kernel: audit: type=1130 audit(1696274314.624:1352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.20.139:22-139.178.89.65:35520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:34.807000 audit[3567]: USER_ACCT pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:34.809145 sshd[3567]: Accepted publickey for core from 139.178.89.65 port 35520 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:18:34.821006 kernel: audit: type=1101 audit(1696274314.807:1353): pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:34.820000 audit[3567]: CRED_ACQ pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:34.822674 sshd[3567]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:18:34.838034 kernel: audit: type=1103 audit(1696274314.820:1354): pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:34.838194 kernel: audit: type=1006 audit(1696274314.820:1355): pid=3567 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:18:34.820000 audit[3567]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1b2b3b0 a2=3 a3=1 items=0 ppid=1 pid=3567 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:34.849201 kernel: audit: type=1300 audit(1696274314.820:1355): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1b2b3b0 a2=3 a3=1 items=0 ppid=1 pid=3567 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:34.820000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:34.853729 kernel: audit: type=1327 audit(1696274314.820:1355): proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:34.857427 systemd-logind[1553]: New session 28 of user core. Oct 2 19:18:34.859323 systemd[1]: Started session-28.scope. Oct 2 19:18:34.868000 audit[3567]: USER_START pid=3567 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:34.882092 kernel: audit: type=1105 audit(1696274314.868:1356): pid=3567 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:34.882000 audit[3570]: CRED_ACQ pid=3570 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:34.892963 kernel: audit: type=1103 audit(1696274314.882:1357): pid=3570 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:35.172078 sshd[3567]: pam_unix(sshd:session): session closed for user core Oct 2 19:18:35.172000 audit[3567]: USER_END pid=3567 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:35.178777 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:18:35.180087 systemd[1]: sshd@27-172.31.20.139:22-139.178.89.65:35520.service: Deactivated successfully. Oct 2 19:18:35.175000 audit[3567]: CRED_DISP pid=3567 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:35.187074 systemd-logind[1553]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:18:35.189312 systemd-logind[1553]: Removed session 28. Oct 2 19:18:35.194602 kernel: audit: type=1106 audit(1696274315.172:1358): pid=3567 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:35.194777 kernel: audit: type=1104 audit(1696274315.175:1359): pid=3567 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:35.179000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.20.139:22-139.178.89.65:35520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:35.205000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.20.139:22-139.178.89.65:35536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:35.206539 systemd[1]: Started sshd@28-172.31.20.139:22-139.178.89.65:35536.service. Oct 2 19:18:35.391000 audit[3580]: USER_ACCT pid=3580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:35.392622 sshd[3580]: Accepted publickey for core from 139.178.89.65 port 35536 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:18:35.394000 audit[3580]: CRED_ACQ pid=3580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:35.394000 audit[3580]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec06ad40 a2=3 a3=1 items=0 ppid=1 pid=3580 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:35.394000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:35.396444 sshd[3580]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:18:35.405707 systemd[1]: Started session-29.scope. Oct 2 19:18:35.408016 systemd-logind[1553]: New session 29 of user core. Oct 2 19:18:35.416000 audit[3580]: USER_START pid=3580 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:35.422000 audit[3582]: CRED_ACQ pid=3582 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:36.660047 amazon-ssm-agent[1535]: 2023-10-02 19:18:36 INFO Backing off health check to every 600 seconds for 1800 seconds. Oct 2 19:18:36.760493 amazon-ssm-agent[1535]: 2023-10-02 19:18:36 ERROR Health ping failed with error - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0938781c38e8b65f8 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0938781c38e8b65f8 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:18:36.760493 amazon-ssm-agent[1535]: status code: 400, request id: 037bd5c1-491a-494f-a3c3-756ab0903ac4 Oct 2 19:18:38.156881 kubelet[2680]: E1002 19:18:38.156847 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:39.588270 env[1574]: time="2023-10-02T19:18:39.587943593Z" level=info msg="StopPodSandbox for \"1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696\"" Oct 2 19:18:39.588270 env[1574]: time="2023-10-02T19:18:39.588063883Z" level=info msg="Container to stop \"7d95634a93d9746b3ded96430d24fd98fcd6cead2745365f6fc27609af5c72c8\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:18:39.594770 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696-shm.mount: Deactivated successfully. Oct 2 19:18:39.611329 env[1574]: time="2023-10-02T19:18:39.608550632Z" level=info msg="StopContainer for \"e8d3410755e6bbe6abce20e1bdd8ae41c5b4ca00becadc964216ae6f0fe7f765\" with timeout 30 (s)" Oct 2 19:18:39.614086 env[1574]: time="2023-10-02T19:18:39.613997866Z" level=info msg="Stop container \"e8d3410755e6bbe6abce20e1bdd8ae41c5b4ca00becadc964216ae6f0fe7f765\" with signal terminated" Oct 2 19:18:39.652504 systemd[1]: cri-containerd-1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696.scope: Deactivated successfully. Oct 2 19:18:39.652000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:18:39.657111 kernel: kauditd_printk_skb: 9 callbacks suppressed Oct 2 19:18:39.657232 kernel: audit: type=1334 audit(1696274319.652:1367): prog-id=115 op=UNLOAD Oct 2 19:18:39.663233 kernel: audit: type=1334 audit(1696274319.659:1368): prog-id=118 op=UNLOAD Oct 2 19:18:39.659000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:18:39.684505 systemd[1]: cri-containerd-e8d3410755e6bbe6abce20e1bdd8ae41c5b4ca00becadc964216ae6f0fe7f765.scope: Deactivated successfully. Oct 2 19:18:39.684000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:18:39.689038 kernel: audit: type=1334 audit(1696274319.684:1369): prog-id=130 op=UNLOAD Oct 2 19:18:39.691000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:18:39.696006 kernel: audit: type=1334 audit(1696274319.691:1370): prog-id=133 op=UNLOAD Oct 2 19:18:39.758439 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696-rootfs.mount: Deactivated successfully. Oct 2 19:18:39.768630 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e8d3410755e6bbe6abce20e1bdd8ae41c5b4ca00becadc964216ae6f0fe7f765-rootfs.mount: Deactivated successfully. Oct 2 19:18:39.786023 env[1574]: time="2023-10-02T19:18:39.785957858Z" level=info msg="shim disconnected" id=1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696 Oct 2 19:18:39.786405 env[1574]: time="2023-10-02T19:18:39.786368720Z" level=warning msg="cleaning up after shim disconnected" id=1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696 namespace=k8s.io Oct 2 19:18:39.786557 env[1574]: time="2023-10-02T19:18:39.786528815Z" level=info msg="cleaning up dead shim" Oct 2 19:18:39.789131 env[1574]: time="2023-10-02T19:18:39.789065607Z" level=info msg="shim disconnected" id=e8d3410755e6bbe6abce20e1bdd8ae41c5b4ca00becadc964216ae6f0fe7f765 Oct 2 19:18:39.789568 env[1574]: time="2023-10-02T19:18:39.789505066Z" level=warning msg="cleaning up after shim disconnected" id=e8d3410755e6bbe6abce20e1bdd8ae41c5b4ca00becadc964216ae6f0fe7f765 namespace=k8s.io Oct 2 19:18:39.789800 env[1574]: time="2023-10-02T19:18:39.789760118Z" level=info msg="cleaning up dead shim" Oct 2 19:18:39.817628 env[1574]: time="2023-10-02T19:18:39.817569827Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:18:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3628 runtime=io.containerd.runc.v2\n" Oct 2 19:18:39.818528 env[1574]: time="2023-10-02T19:18:39.818471833Z" level=info msg="TearDown network for sandbox \"1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696\" successfully" Oct 2 19:18:39.818784 env[1574]: time="2023-10-02T19:18:39.818726297Z" level=info msg="StopPodSandbox for \"1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696\" returns successfully" Oct 2 19:18:39.838067 env[1574]: time="2023-10-02T19:18:39.838012523Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:18:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3629 runtime=io.containerd.runc.v2\n" Oct 2 19:18:39.842073 env[1574]: time="2023-10-02T19:18:39.840944206Z" level=info msg="StopContainer for \"e8d3410755e6bbe6abce20e1bdd8ae41c5b4ca00becadc964216ae6f0fe7f765\" returns successfully" Oct 2 19:18:39.843169 env[1574]: time="2023-10-02T19:18:39.843116348Z" level=info msg="StopPodSandbox for \"1c3854bfdbada135923255c537e5c8e450e12987f5c2c6951ef7fd39042c9358\"" Oct 2 19:18:39.843499 env[1574]: time="2023-10-02T19:18:39.843459098Z" level=info msg="Container to stop \"e8d3410755e6bbe6abce20e1bdd8ae41c5b4ca00becadc964216ae6f0fe7f765\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:18:39.846341 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1c3854bfdbada135923255c537e5c8e450e12987f5c2c6951ef7fd39042c9358-shm.mount: Deactivated successfully. Oct 2 19:18:39.866739 systemd[1]: cri-containerd-1c3854bfdbada135923255c537e5c8e450e12987f5c2c6951ef7fd39042c9358.scope: Deactivated successfully. Oct 2 19:18:39.866000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:18:39.871980 kernel: audit: type=1334 audit(1696274319.866:1371): prog-id=119 op=UNLOAD Oct 2 19:18:39.873000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:18:39.877983 kernel: audit: type=1334 audit(1696274319.873:1372): prog-id=122 op=UNLOAD Oct 2 19:18:39.928720 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1c3854bfdbada135923255c537e5c8e450e12987f5c2c6951ef7fd39042c9358-rootfs.mount: Deactivated successfully. Oct 2 19:18:39.943498 env[1574]: time="2023-10-02T19:18:39.943420875Z" level=info msg="shim disconnected" id=1c3854bfdbada135923255c537e5c8e450e12987f5c2c6951ef7fd39042c9358 Oct 2 19:18:39.943498 env[1574]: time="2023-10-02T19:18:39.943493440Z" level=warning msg="cleaning up after shim disconnected" id=1c3854bfdbada135923255c537e5c8e450e12987f5c2c6951ef7fd39042c9358 namespace=k8s.io Oct 2 19:18:39.943829 env[1574]: time="2023-10-02T19:18:39.943517549Z" level=info msg="cleaning up dead shim" Oct 2 19:18:39.977261 env[1574]: time="2023-10-02T19:18:39.977196887Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:18:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3672 runtime=io.containerd.runc.v2\n" Oct 2 19:18:39.977988 env[1574]: time="2023-10-02T19:18:39.977852601Z" level=info msg="TearDown network for sandbox \"1c3854bfdbada135923255c537e5c8e450e12987f5c2c6951ef7fd39042c9358\" successfully" Oct 2 19:18:39.977988 env[1574]: time="2023-10-02T19:18:39.977989379Z" level=info msg="StopPodSandbox for \"1c3854bfdbada135923255c537e5c8e450e12987f5c2c6951ef7fd39042c9358\" returns successfully" Oct 2 19:18:39.991829 kubelet[2680]: I1002 19:18:39.991778 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-bpf-maps\") pod \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " Oct 2 19:18:39.992606 kubelet[2680]: I1002 19:18:39.992576 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-cilium-config-path\") pod \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " Oct 2 19:18:39.992771 kubelet[2680]: I1002 19:18:39.992749 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-xtables-lock\") pod \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " Oct 2 19:18:39.992964 kubelet[2680]: I1002 19:18:39.992940 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-host-proc-sys-net\") pod \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " Oct 2 19:18:39.993129 kubelet[2680]: I1002 19:18:39.993107 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-cni-path\") pod \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " Oct 2 19:18:39.993284 kubelet[2680]: I1002 19:18:39.993262 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-hubble-tls\") pod \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " Oct 2 19:18:39.993433 kubelet[2680]: I1002 19:18:39.993411 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-host-proc-sys-kernel\") pod \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " Oct 2 19:18:39.993648 kubelet[2680]: I1002 19:18:39.993625 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-etc-cni-netd\") pod \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " Oct 2 19:18:39.993817 kubelet[2680]: I1002 19:18:39.993792 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-hostproc\") pod \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " Oct 2 19:18:39.993979 kubelet[2680]: I1002 19:18:39.993956 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-cilium-run\") pod \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " Oct 2 19:18:39.994141 kubelet[2680]: I1002 19:18:39.994120 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-cilium-cgroup\") pod \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " Oct 2 19:18:39.994294 kubelet[2680]: I1002 19:18:39.994273 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-clustermesh-secrets\") pod \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " Oct 2 19:18:39.994444 kubelet[2680]: I1002 19:18:39.994423 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-lib-modules\") pod \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " Oct 2 19:18:39.994609 kubelet[2680]: I1002 19:18:39.994588 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-bnffl\" (UniqueName: \"kubernetes.io/projected/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-kube-api-access-bnffl\") pod \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\" (UID: \"008a43d1-2233-43f1-a2a3-eae7eb7bd7c0\") " Oct 2 19:18:39.995345 kubelet[2680]: I1002 19:18:39.995304 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" (UID: "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:39.995592 kubelet[2680]: I1002 19:18:39.995562 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" (UID: "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:39.996024 kubelet[2680]: W1002 19:18:39.995977 2680 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:18:40.001260 kubelet[2680]: I1002 19:18:40.000643 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" (UID: "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:40.001260 kubelet[2680]: I1002 19:18:40.000777 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" (UID: "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:40.001260 kubelet[2680]: I1002 19:18:40.000823 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-cni-path" (OuterVolumeSpecName: "cni-path") pod "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" (UID: "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:40.005711 kubelet[2680]: I1002 19:18:40.005663 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" (UID: "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:40.007297 kubelet[2680]: I1002 19:18:40.005957 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-hostproc" (OuterVolumeSpecName: "hostproc") pod "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" (UID: "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:40.007534 kubelet[2680]: I1002 19:18:40.005990 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" (UID: "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:40.007534 kubelet[2680]: I1002 19:18:40.006043 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" (UID: "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:40.007677 kubelet[2680]: I1002 19:18:40.007039 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" (UID: "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:18:40.007677 kubelet[2680]: I1002 19:18:40.007465 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" (UID: "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:40.017486 kubelet[2680]: I1002 19:18:40.017436 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" (UID: "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:18:40.018165 kubelet[2680]: I1002 19:18:40.018121 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-kube-api-access-bnffl" (OuterVolumeSpecName: "kube-api-access-bnffl") pod "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" (UID: "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0"). InnerVolumeSpecName "kube-api-access-bnffl". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:18:40.023895 kubelet[2680]: I1002 19:18:40.023805 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" (UID: "008a43d1-2233-43f1-a2a3-eae7eb7bd7c0"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:18:40.095044 kubelet[2680]: I1002 19:18:40.094881 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/42da5597-54bf-4a16-af39-7e793d191374-cilium-config-path\") pod \"42da5597-54bf-4a16-af39-7e793d191374\" (UID: \"42da5597-54bf-4a16-af39-7e793d191374\") " Oct 2 19:18:40.095044 kubelet[2680]: I1002 19:18:40.094984 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-whmxf\" (UniqueName: \"kubernetes.io/projected/42da5597-54bf-4a16-af39-7e793d191374-kube-api-access-whmxf\") pod \"42da5597-54bf-4a16-af39-7e793d191374\" (UID: \"42da5597-54bf-4a16-af39-7e793d191374\") " Oct 2 19:18:40.095279 kubelet[2680]: I1002 19:18:40.095060 2680 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-hubble-tls\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:18:40.095279 kubelet[2680]: I1002 19:18:40.095090 2680 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-host-proc-sys-kernel\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:18:40.095279 kubelet[2680]: I1002 19:18:40.095116 2680 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-etc-cni-netd\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:18:40.095279 kubelet[2680]: I1002 19:18:40.095140 2680 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-hostproc\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:18:40.095279 kubelet[2680]: I1002 19:18:40.095163 2680 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-cilium-run\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:18:40.095279 kubelet[2680]: I1002 19:18:40.095186 2680 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-cilium-cgroup\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:18:40.095279 kubelet[2680]: I1002 19:18:40.095210 2680 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-clustermesh-secrets\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:18:40.095279 kubelet[2680]: I1002 19:18:40.095237 2680 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-lib-modules\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:18:40.095279 kubelet[2680]: I1002 19:18:40.095262 2680 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-bnffl\" (UniqueName: \"kubernetes.io/projected/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-kube-api-access-bnffl\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:18:40.095279 kubelet[2680]: I1002 19:18:40.095286 2680 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-xtables-lock\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:18:40.095866 kubelet[2680]: I1002 19:18:40.095309 2680 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-bpf-maps\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:18:40.095866 kubelet[2680]: I1002 19:18:40.095333 2680 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-cilium-config-path\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:18:40.095866 kubelet[2680]: I1002 19:18:40.095356 2680 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-host-proc-sys-net\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:18:40.095866 kubelet[2680]: I1002 19:18:40.095378 2680 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0-cni-path\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:18:40.096164 kubelet[2680]: W1002 19:18:40.096124 2680 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/42da5597-54bf-4a16-af39-7e793d191374/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:18:40.101640 kubelet[2680]: I1002 19:18:40.101549 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/42da5597-54bf-4a16-af39-7e793d191374-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "42da5597-54bf-4a16-af39-7e793d191374" (UID: "42da5597-54bf-4a16-af39-7e793d191374"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:18:40.110348 kubelet[2680]: I1002 19:18:40.110267 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/42da5597-54bf-4a16-af39-7e793d191374-kube-api-access-whmxf" (OuterVolumeSpecName: "kube-api-access-whmxf") pod "42da5597-54bf-4a16-af39-7e793d191374" (UID: "42da5597-54bf-4a16-af39-7e793d191374"). InnerVolumeSpecName "kube-api-access-whmxf". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:18:40.196088 kubelet[2680]: I1002 19:18:40.196046 2680 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/42da5597-54bf-4a16-af39-7e793d191374-cilium-config-path\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:18:40.196324 kubelet[2680]: I1002 19:18:40.196301 2680 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-whmxf\" (UniqueName: \"kubernetes.io/projected/42da5597-54bf-4a16-af39-7e793d191374-kube-api-access-whmxf\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:18:40.594215 systemd[1]: var-lib-kubelet-pods-42da5597\x2d54bf\x2d4a16\x2daf39\x2d7e793d191374-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dwhmxf.mount: Deactivated successfully. Oct 2 19:18:40.594411 systemd[1]: var-lib-kubelet-pods-008a43d1\x2d2233\x2d43f1\x2da2a3\x2deae7eb7bd7c0-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dbnffl.mount: Deactivated successfully. Oct 2 19:18:40.594581 systemd[1]: var-lib-kubelet-pods-008a43d1\x2d2233\x2d43f1\x2da2a3\x2deae7eb7bd7c0-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:18:40.594714 systemd[1]: var-lib-kubelet-pods-008a43d1\x2d2233\x2d43f1\x2da2a3\x2deae7eb7bd7c0-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:18:40.737682 kubelet[2680]: I1002 19:18:40.737623 2680 scope.go:115] "RemoveContainer" containerID="e8d3410755e6bbe6abce20e1bdd8ae41c5b4ca00becadc964216ae6f0fe7f765" Oct 2 19:18:40.740948 env[1574]: time="2023-10-02T19:18:40.740858427Z" level=info msg="RemoveContainer for \"e8d3410755e6bbe6abce20e1bdd8ae41c5b4ca00becadc964216ae6f0fe7f765\"" Oct 2 19:18:40.746741 env[1574]: time="2023-10-02T19:18:40.746670156Z" level=info msg="RemoveContainer for \"e8d3410755e6bbe6abce20e1bdd8ae41c5b4ca00becadc964216ae6f0fe7f765\" returns successfully" Oct 2 19:18:40.753963 kubelet[2680]: I1002 19:18:40.752331 2680 scope.go:115] "RemoveContainer" containerID="e8d3410755e6bbe6abce20e1bdd8ae41c5b4ca00becadc964216ae6f0fe7f765" Oct 2 19:18:40.755344 env[1574]: time="2023-10-02T19:18:40.754943220Z" level=error msg="ContainerStatus for \"e8d3410755e6bbe6abce20e1bdd8ae41c5b4ca00becadc964216ae6f0fe7f765\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"e8d3410755e6bbe6abce20e1bdd8ae41c5b4ca00becadc964216ae6f0fe7f765\": not found" Oct 2 19:18:40.755959 kubelet[2680]: E1002 19:18:40.755755 2680 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"e8d3410755e6bbe6abce20e1bdd8ae41c5b4ca00becadc964216ae6f0fe7f765\": not found" containerID="e8d3410755e6bbe6abce20e1bdd8ae41c5b4ca00becadc964216ae6f0fe7f765" Oct 2 19:18:40.755959 kubelet[2680]: I1002 19:18:40.755949 2680 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:e8d3410755e6bbe6abce20e1bdd8ae41c5b4ca00becadc964216ae6f0fe7f765} err="failed to get container status \"e8d3410755e6bbe6abce20e1bdd8ae41c5b4ca00becadc964216ae6f0fe7f765\": rpc error: code = NotFound desc = an error occurred when try to find container \"e8d3410755e6bbe6abce20e1bdd8ae41c5b4ca00becadc964216ae6f0fe7f765\": not found" Oct 2 19:18:40.756157 kubelet[2680]: I1002 19:18:40.755979 2680 scope.go:115] "RemoveContainer" containerID="7d95634a93d9746b3ded96430d24fd98fcd6cead2745365f6fc27609af5c72c8" Oct 2 19:18:40.757577 systemd[1]: Removed slice kubepods-besteffort-pod42da5597_54bf_4a16_af39_7e793d191374.slice. Oct 2 19:18:40.763983 systemd[1]: Removed slice kubepods-burstable-pod008a43d1_2233_43f1_a2a3_eae7eb7bd7c0.slice. Oct 2 19:18:40.775002 env[1574]: time="2023-10-02T19:18:40.773713296Z" level=info msg="RemoveContainer for \"7d95634a93d9746b3ded96430d24fd98fcd6cead2745365f6fc27609af5c72c8\"" Oct 2 19:18:40.787944 env[1574]: time="2023-10-02T19:18:40.783474684Z" level=info msg="RemoveContainer for \"7d95634a93d9746b3ded96430d24fd98fcd6cead2745365f6fc27609af5c72c8\" returns successfully" Oct 2 19:18:41.549887 sshd[3580]: pam_unix(sshd:session): session closed for user core Oct 2 19:18:41.551000 audit[3580]: USER_END pid=3580 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:41.551000 audit[3580]: CRED_DISP pid=3580 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:41.573683 kernel: audit: type=1106 audit(1696274321.551:1373): pid=3580 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:41.573834 kernel: audit: type=1104 audit(1696274321.551:1374): pid=3580 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:41.564573 systemd[1]: sshd@28-172.31.20.139:22-139.178.89.65:35536.service: Deactivated successfully. Oct 2 19:18:41.565817 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:18:41.566163 systemd[1]: session-29.scope: Consumed 3.402s CPU time. Oct 2 19:18:41.563000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.20.139:22-139.178.89.65:35536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:41.583867 kernel: audit: type=1131 audit(1696274321.563:1375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.20.139:22-139.178.89.65:35536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:41.577569 systemd-logind[1553]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:18:41.590279 systemd[1]: Started sshd@29-172.31.20.139:22-139.178.89.65:59468.service. Oct 2 19:18:41.589000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.20.139:22-139.178.89.65:59468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:41.594595 systemd-logind[1553]: Removed session 29. Oct 2 19:18:41.602988 kernel: audit: type=1130 audit(1696274321.589:1376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.20.139:22-139.178.89.65:59468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:41.778000 audit[3690]: USER_ACCT pid=3690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:41.779984 sshd[3690]: Accepted publickey for core from 139.178.89.65 port 59468 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:18:41.781000 audit[3690]: CRED_ACQ pid=3690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:41.781000 audit[3690]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc094da0 a2=3 a3=1 items=0 ppid=1 pid=3690 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:41.781000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:41.783846 sshd[3690]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:18:41.793023 systemd-logind[1553]: New session 30 of user core. Oct 2 19:18:41.794037 systemd[1]: Started session-30.scope. Oct 2 19:18:41.803000 audit[3690]: USER_START pid=3690 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:41.810000 audit[3692]: CRED_ACQ pid=3692 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:41.953745 kubelet[2680]: I1002 19:18:41.953710 2680 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=008a43d1-2233-43f1-a2a3-eae7eb7bd7c0 path="/var/lib/kubelet/pods/008a43d1-2233-43f1-a2a3-eae7eb7bd7c0/volumes" Oct 2 19:18:41.956565 kubelet[2680]: I1002 19:18:41.955869 2680 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=42da5597-54bf-4a16-af39-7e793d191374 path="/var/lib/kubelet/pods/42da5597-54bf-4a16-af39-7e793d191374/volumes" Oct 2 19:18:43.160178 kubelet[2680]: E1002 19:18:43.160145 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:43.311931 kubelet[2680]: I1002 19:18:43.311865 2680 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:18:43.312090 kubelet[2680]: E1002 19:18:43.311964 2680 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" containerName="mount-cgroup" Oct 2 19:18:43.312090 kubelet[2680]: E1002 19:18:43.311987 2680 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" containerName="mount-cgroup" Oct 2 19:18:43.312090 kubelet[2680]: E1002 19:18:43.312005 2680 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" containerName="mount-cgroup" Oct 2 19:18:43.312090 kubelet[2680]: E1002 19:18:43.312023 2680 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" containerName="mount-cgroup" Oct 2 19:18:43.312090 kubelet[2680]: E1002 19:18:43.312042 2680 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="42da5597-54bf-4a16-af39-7e793d191374" containerName="cilium-operator" Oct 2 19:18:43.312090 kubelet[2680]: E1002 19:18:43.312060 2680 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" containerName="mount-cgroup" Oct 2 19:18:43.312491 kubelet[2680]: I1002 19:18:43.312102 2680 memory_manager.go:346] "RemoveStaleState removing state" podUID="008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" containerName="mount-cgroup" Oct 2 19:18:43.312491 kubelet[2680]: I1002 19:18:43.312120 2680 memory_manager.go:346] "RemoveStaleState removing state" podUID="008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" containerName="mount-cgroup" Oct 2 19:18:43.312491 kubelet[2680]: I1002 19:18:43.312135 2680 memory_manager.go:346] "RemoveStaleState removing state" podUID="008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" containerName="mount-cgroup" Oct 2 19:18:43.312491 kubelet[2680]: I1002 19:18:43.312150 2680 memory_manager.go:346] "RemoveStaleState removing state" podUID="42da5597-54bf-4a16-af39-7e793d191374" containerName="cilium-operator" Oct 2 19:18:43.312491 kubelet[2680]: I1002 19:18:43.312168 2680 memory_manager.go:346] "RemoveStaleState removing state" podUID="008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" containerName="mount-cgroup" Oct 2 19:18:43.312491 kubelet[2680]: I1002 19:18:43.312183 2680 memory_manager.go:346] "RemoveStaleState removing state" podUID="008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" containerName="mount-cgroup" Oct 2 19:18:43.312491 kubelet[2680]: E1002 19:18:43.312225 2680 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" containerName="mount-cgroup" Oct 2 19:18:43.312491 kubelet[2680]: I1002 19:18:43.312281 2680 memory_manager.go:346] "RemoveStaleState removing state" podUID="008a43d1-2233-43f1-a2a3-eae7eb7bd7c0" containerName="mount-cgroup" Oct 2 19:18:43.323228 systemd[1]: Created slice kubepods-burstable-pod00f798d8_d947_489a_b0ea_24d6af759d5b.slice. Oct 2 19:18:43.416407 kubelet[2680]: I1002 19:18:43.416240 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-etc-cni-netd\") pod \"cilium-bbcq9\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " pod="kube-system/cilium-bbcq9" Oct 2 19:18:43.416714 kubelet[2680]: I1002 19:18:43.416680 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-hostproc\") pod \"cilium-bbcq9\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " pod="kube-system/cilium-bbcq9" Oct 2 19:18:43.417063 kubelet[2680]: I1002 19:18:43.417017 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-cni-path\") pod \"cilium-bbcq9\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " pod="kube-system/cilium-bbcq9" Oct 2 19:18:43.417311 kubelet[2680]: I1002 19:18:43.417282 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-d2jtp\" (UniqueName: \"kubernetes.io/projected/00f798d8-d947-489a-b0ea-24d6af759d5b-kube-api-access-d2jtp\") pod \"cilium-bbcq9\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " pod="kube-system/cilium-bbcq9" Oct 2 19:18:43.417545 kubelet[2680]: I1002 19:18:43.417518 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-bpf-maps\") pod \"cilium-bbcq9\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " pod="kube-system/cilium-bbcq9" Oct 2 19:18:43.417717 kubelet[2680]: I1002 19:18:43.417691 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-cilium-run\") pod \"cilium-bbcq9\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " pod="kube-system/cilium-bbcq9" Oct 2 19:18:43.417889 kubelet[2680]: I1002 19:18:43.417864 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/00f798d8-d947-489a-b0ea-24d6af759d5b-cilium-config-path\") pod \"cilium-bbcq9\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " pod="kube-system/cilium-bbcq9" Oct 2 19:18:43.418118 kubelet[2680]: I1002 19:18:43.418086 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-host-proc-sys-kernel\") pod \"cilium-bbcq9\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " pod="kube-system/cilium-bbcq9" Oct 2 19:18:43.418335 kubelet[2680]: I1002 19:18:43.418303 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/00f798d8-d947-489a-b0ea-24d6af759d5b-cilium-ipsec-secrets\") pod \"cilium-bbcq9\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " pod="kube-system/cilium-bbcq9" Oct 2 19:18:43.418588 kubelet[2680]: I1002 19:18:43.418560 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-xtables-lock\") pod \"cilium-bbcq9\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " pod="kube-system/cilium-bbcq9" Oct 2 19:18:43.418748 kubelet[2680]: I1002 19:18:43.418726 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/00f798d8-d947-489a-b0ea-24d6af759d5b-hubble-tls\") pod \"cilium-bbcq9\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " pod="kube-system/cilium-bbcq9" Oct 2 19:18:43.418896 kubelet[2680]: I1002 19:18:43.418874 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/00f798d8-d947-489a-b0ea-24d6af759d5b-clustermesh-secrets\") pod \"cilium-bbcq9\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " pod="kube-system/cilium-bbcq9" Oct 2 19:18:43.420702 kubelet[2680]: I1002 19:18:43.420662 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-host-proc-sys-net\") pod \"cilium-bbcq9\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " pod="kube-system/cilium-bbcq9" Oct 2 19:18:43.421633 kubelet[2680]: I1002 19:18:43.421513 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-cilium-cgroup\") pod \"cilium-bbcq9\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " pod="kube-system/cilium-bbcq9" Oct 2 19:18:43.422656 kubelet[2680]: I1002 19:18:43.422621 2680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-lib-modules\") pod \"cilium-bbcq9\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " pod="kube-system/cilium-bbcq9" Oct 2 19:18:43.636861 env[1574]: time="2023-10-02T19:18:43.636120233Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-bbcq9,Uid:00f798d8-d947-489a-b0ea-24d6af759d5b,Namespace:kube-system,Attempt:0,}" Oct 2 19:18:43.688752 env[1574]: time="2023-10-02T19:18:43.688080952Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:18:43.688752 env[1574]: time="2023-10-02T19:18:43.688155401Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:18:43.688752 env[1574]: time="2023-10-02T19:18:43.688181526Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:18:43.689402 env[1574]: time="2023-10-02T19:18:43.688856285Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/80a3b4d8f1cc3687c6a240e76e0c06b994b19c4dd04a79fa068c80b173333fe8 pid=3713 runtime=io.containerd.runc.v2 Oct 2 19:18:43.728990 systemd[1]: Started cri-containerd-80a3b4d8f1cc3687c6a240e76e0c06b994b19c4dd04a79fa068c80b173333fe8.scope. Oct 2 19:18:43.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.790000 audit: BPF prog-id=134 op=LOAD Oct 2 19:18:43.792000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.792000 audit[3721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=3713 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:43.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830613362346438663163633336383763366132343065373665306330 Oct 2 19:18:43.792000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.792000 audit[3721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=3713 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:43.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830613362346438663163633336383763366132343065373665306330 Oct 2 19:18:43.793000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.793000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.793000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.793000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.793000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.793000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.793000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.793000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.793000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.793000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.793000 audit: BPF prog-id=135 op=LOAD Oct 2 19:18:43.793000 audit[3721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=3713 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:43.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830613362346438663163633336383763366132343065373665306330 Oct 2 19:18:43.794000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.794000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.794000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.794000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.794000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.794000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.794000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.794000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.794000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.794000 audit: BPF prog-id=136 op=LOAD Oct 2 19:18:43.794000 audit[3721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=3713 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:43.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830613362346438663163633336383763366132343065373665306330 Oct 2 19:18:43.795000 audit: BPF prog-id=136 op=UNLOAD Oct 2 19:18:43.795000 audit: BPF prog-id=135 op=UNLOAD Oct 2 19:18:43.795000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.795000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.795000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.795000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.795000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.795000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.795000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.795000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.795000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.795000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:43.795000 audit: BPF prog-id=137 op=LOAD Oct 2 19:18:43.795000 audit[3721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=3713 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:43.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830613362346438663163633336383763366132343065373665306330 Oct 2 19:18:43.831686 env[1574]: time="2023-10-02T19:18:43.831621940Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-bbcq9,Uid:00f798d8-d947-489a-b0ea-24d6af759d5b,Namespace:kube-system,Attempt:0,} returns sandbox id \"80a3b4d8f1cc3687c6a240e76e0c06b994b19c4dd04a79fa068c80b173333fe8\"" Oct 2 19:18:43.837742 env[1574]: time="2023-10-02T19:18:43.837667448Z" level=info msg="CreateContainer within sandbox \"80a3b4d8f1cc3687c6a240e76e0c06b994b19c4dd04a79fa068c80b173333fe8\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:18:43.860313 env[1574]: time="2023-10-02T19:18:43.860226665Z" level=info msg="CreateContainer within sandbox \"80a3b4d8f1cc3687c6a240e76e0c06b994b19c4dd04a79fa068c80b173333fe8\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"d05326dc75a0a81f8d506badf85a86e310f058befb250d7cf2ce3dd501a95c70\"" Oct 2 19:18:43.863532 env[1574]: time="2023-10-02T19:18:43.861719118Z" level=info msg="StartContainer for \"d05326dc75a0a81f8d506badf85a86e310f058befb250d7cf2ce3dd501a95c70\"" Oct 2 19:18:43.913105 systemd[1]: Started cri-containerd-d05326dc75a0a81f8d506badf85a86e310f058befb250d7cf2ce3dd501a95c70.scope. Oct 2 19:18:43.960282 systemd[1]: cri-containerd-d05326dc75a0a81f8d506badf85a86e310f058befb250d7cf2ce3dd501a95c70.scope: Deactivated successfully. Oct 2 19:18:44.006699 env[1574]: time="2023-10-02T19:18:44.006619597Z" level=info msg="shim disconnected" id=d05326dc75a0a81f8d506badf85a86e310f058befb250d7cf2ce3dd501a95c70 Oct 2 19:18:44.007101 env[1574]: time="2023-10-02T19:18:44.007061312Z" level=warning msg="cleaning up after shim disconnected" id=d05326dc75a0a81f8d506badf85a86e310f058befb250d7cf2ce3dd501a95c70 namespace=k8s.io Oct 2 19:18:44.007248 env[1574]: time="2023-10-02T19:18:44.007216943Z" level=info msg="cleaning up dead shim" Oct 2 19:18:44.036818 env[1574]: time="2023-10-02T19:18:44.036746839Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:18:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3772 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:18:44Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d05326dc75a0a81f8d506badf85a86e310f058befb250d7cf2ce3dd501a95c70/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:18:44.037710 env[1574]: time="2023-10-02T19:18:44.037602657Z" level=error msg="copy shim log" error="read /proc/self/fd/30: file already closed" Oct 2 19:18:44.038387 env[1574]: time="2023-10-02T19:18:44.038280884Z" level=error msg="Failed to pipe stderr of container \"d05326dc75a0a81f8d506badf85a86e310f058befb250d7cf2ce3dd501a95c70\"" error="reading from a closed fifo" Oct 2 19:18:44.039198 env[1574]: time="2023-10-02T19:18:44.039113218Z" level=error msg="Failed to pipe stdout of container \"d05326dc75a0a81f8d506badf85a86e310f058befb250d7cf2ce3dd501a95c70\"" error="reading from a closed fifo" Oct 2 19:18:44.041845 env[1574]: time="2023-10-02T19:18:44.041732801Z" level=error msg="StartContainer for \"d05326dc75a0a81f8d506badf85a86e310f058befb250d7cf2ce3dd501a95c70\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:18:44.042397 kubelet[2680]: E1002 19:18:44.042322 2680 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d05326dc75a0a81f8d506badf85a86e310f058befb250d7cf2ce3dd501a95c70" Oct 2 19:18:44.042642 kubelet[2680]: E1002 19:18:44.042609 2680 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:18:44.042642 kubelet[2680]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:18:44.042642 kubelet[2680]: rm /hostbin/cilium-mount Oct 2 19:18:44.042642 kubelet[2680]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-d2jtp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-bbcq9_kube-system(00f798d8-d947-489a-b0ea-24d6af759d5b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:18:44.043118 kubelet[2680]: E1002 19:18:44.042730 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bbcq9" podUID=00f798d8-d947-489a-b0ea-24d6af759d5b Oct 2 19:18:44.779536 env[1574]: time="2023-10-02T19:18:44.779477277Z" level=info msg="CreateContainer within sandbox \"80a3b4d8f1cc3687c6a240e76e0c06b994b19c4dd04a79fa068c80b173333fe8\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:18:44.807015 env[1574]: time="2023-10-02T19:18:44.806894142Z" level=info msg="CreateContainer within sandbox \"80a3b4d8f1cc3687c6a240e76e0c06b994b19c4dd04a79fa068c80b173333fe8\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585\"" Oct 2 19:18:44.809288 env[1574]: time="2023-10-02T19:18:44.809218232Z" level=info msg="StartContainer for \"6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585\"" Oct 2 19:18:44.862439 systemd[1]: Started cri-containerd-6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585.scope. Oct 2 19:18:44.902643 systemd[1]: cri-containerd-6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585.scope: Deactivated successfully. Oct 2 19:18:44.926153 env[1574]: time="2023-10-02T19:18:44.926081202Z" level=info msg="shim disconnected" id=6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585 Oct 2 19:18:44.926629 env[1574]: time="2023-10-02T19:18:44.926581251Z" level=warning msg="cleaning up after shim disconnected" id=6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585 namespace=k8s.io Oct 2 19:18:44.926816 env[1574]: time="2023-10-02T19:18:44.926783730Z" level=info msg="cleaning up dead shim" Oct 2 19:18:44.964814 env[1574]: time="2023-10-02T19:18:44.964748469Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:18:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3808 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:18:44Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:18:44.965552 env[1574]: time="2023-10-02T19:18:44.965465697Z" level=error msg="copy shim log" error="read /proc/self/fd/30: file already closed" Oct 2 19:18:44.967982 env[1574]: time="2023-10-02T19:18:44.967890829Z" level=error msg="Failed to pipe stdout of container \"6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585\"" error="reading from a closed fifo" Oct 2 19:18:44.968096 env[1574]: time="2023-10-02T19:18:44.967895053Z" level=error msg="Failed to pipe stderr of container \"6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585\"" error="reading from a closed fifo" Oct 2 19:18:44.970502 env[1574]: time="2023-10-02T19:18:44.970423879Z" level=error msg="StartContainer for \"6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:18:44.973775 kubelet[2680]: E1002 19:18:44.972895 2680 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585" Oct 2 19:18:44.973775 kubelet[2680]: E1002 19:18:44.973607 2680 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:18:44.973775 kubelet[2680]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:18:44.973775 kubelet[2680]: rm /hostbin/cilium-mount Oct 2 19:18:44.973775 kubelet[2680]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-d2jtp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-bbcq9_kube-system(00f798d8-d947-489a-b0ea-24d6af759d5b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:18:44.973775 kubelet[2680]: E1002 19:18:44.973698 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bbcq9" podUID=00f798d8-d947-489a-b0ea-24d6af759d5b Oct 2 19:18:45.541706 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585-rootfs.mount: Deactivated successfully. Oct 2 19:18:45.780023 kubelet[2680]: I1002 19:18:45.779986 2680 scope.go:115] "RemoveContainer" containerID="d05326dc75a0a81f8d506badf85a86e310f058befb250d7cf2ce3dd501a95c70" Oct 2 19:18:45.782672 kubelet[2680]: I1002 19:18:45.781203 2680 scope.go:115] "RemoveContainer" containerID="d05326dc75a0a81f8d506badf85a86e310f058befb250d7cf2ce3dd501a95c70" Oct 2 19:18:45.785978 env[1574]: time="2023-10-02T19:18:45.785894888Z" level=info msg="RemoveContainer for \"d05326dc75a0a81f8d506badf85a86e310f058befb250d7cf2ce3dd501a95c70\"" Oct 2 19:18:45.790317 env[1574]: time="2023-10-02T19:18:45.790259505Z" level=info msg="RemoveContainer for \"d05326dc75a0a81f8d506badf85a86e310f058befb250d7cf2ce3dd501a95c70\"" Oct 2 19:18:45.790737 env[1574]: time="2023-10-02T19:18:45.790676308Z" level=error msg="RemoveContainer for \"d05326dc75a0a81f8d506badf85a86e310f058befb250d7cf2ce3dd501a95c70\" failed" error="failed to set removing state for container \"d05326dc75a0a81f8d506badf85a86e310f058befb250d7cf2ce3dd501a95c70\": container is already in removing state" Oct 2 19:18:45.791378 kubelet[2680]: E1002 19:18:45.791320 2680 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"d05326dc75a0a81f8d506badf85a86e310f058befb250d7cf2ce3dd501a95c70\": container is already in removing state" containerID="d05326dc75a0a81f8d506badf85a86e310f058befb250d7cf2ce3dd501a95c70" Oct 2 19:18:45.793332 env[1574]: time="2023-10-02T19:18:45.793199962Z" level=info msg="RemoveContainer for \"d05326dc75a0a81f8d506badf85a86e310f058befb250d7cf2ce3dd501a95c70\" returns successfully" Oct 2 19:18:45.793832 kubelet[2680]: E1002 19:18:45.793797 2680 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "d05326dc75a0a81f8d506badf85a86e310f058befb250d7cf2ce3dd501a95c70": container is already in removing state; Skipping pod "cilium-bbcq9_kube-system(00f798d8-d947-489a-b0ea-24d6af759d5b)" Oct 2 19:18:45.798306 kubelet[2680]: E1002 19:18:45.798143 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-bbcq9_kube-system(00f798d8-d947-489a-b0ea-24d6af759d5b)\"" pod="kube-system/cilium-bbcq9" podUID=00f798d8-d947-489a-b0ea-24d6af759d5b Oct 2 19:18:47.112426 kubelet[2680]: W1002 19:18:47.112356 2680 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod00f798d8_d947_489a_b0ea_24d6af759d5b.slice/cri-containerd-d05326dc75a0a81f8d506badf85a86e310f058befb250d7cf2ce3dd501a95c70.scope WatchSource:0}: container "d05326dc75a0a81f8d506badf85a86e310f058befb250d7cf2ce3dd501a95c70" in namespace "k8s.io": not found Oct 2 19:18:48.161894 kubelet[2680]: E1002 19:18:48.161835 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:50.221196 kubelet[2680]: W1002 19:18:50.221149 2680 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod00f798d8_d947_489a_b0ea_24d6af759d5b.slice/cri-containerd-6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585.scope WatchSource:0}: task 6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585 not found: not found Oct 2 19:18:53.163712 kubelet[2680]: E1002 19:18:53.163675 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:58.165478 kubelet[2680]: E1002 19:18:58.165443 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:00.952749 env[1574]: time="2023-10-02T19:19:00.952673604Z" level=info msg="CreateContainer within sandbox \"80a3b4d8f1cc3687c6a240e76e0c06b994b19c4dd04a79fa068c80b173333fe8\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:19:00.972137 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2496208053.mount: Deactivated successfully. Oct 2 19:19:00.981832 env[1574]: time="2023-10-02T19:19:00.981751792Z" level=info msg="CreateContainer within sandbox \"80a3b4d8f1cc3687c6a240e76e0c06b994b19c4dd04a79fa068c80b173333fe8\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"700fad6a77a13b2ad79ade54c4af4cd6327b0f5b0eccab28ca9e48b6142f4e36\"" Oct 2 19:19:00.984168 env[1574]: time="2023-10-02T19:19:00.982653620Z" level=info msg="StartContainer for \"700fad6a77a13b2ad79ade54c4af4cd6327b0f5b0eccab28ca9e48b6142f4e36\"" Oct 2 19:19:01.037999 systemd[1]: Started cri-containerd-700fad6a77a13b2ad79ade54c4af4cd6327b0f5b0eccab28ca9e48b6142f4e36.scope. Oct 2 19:19:01.084321 systemd[1]: cri-containerd-700fad6a77a13b2ad79ade54c4af4cd6327b0f5b0eccab28ca9e48b6142f4e36.scope: Deactivated successfully. Oct 2 19:19:01.106696 env[1574]: time="2023-10-02T19:19:01.106628367Z" level=info msg="shim disconnected" id=700fad6a77a13b2ad79ade54c4af4cd6327b0f5b0eccab28ca9e48b6142f4e36 Oct 2 19:19:01.107101 env[1574]: time="2023-10-02T19:19:01.107054555Z" level=warning msg="cleaning up after shim disconnected" id=700fad6a77a13b2ad79ade54c4af4cd6327b0f5b0eccab28ca9e48b6142f4e36 namespace=k8s.io Oct 2 19:19:01.107245 env[1574]: time="2023-10-02T19:19:01.107217422Z" level=info msg="cleaning up dead shim" Oct 2 19:19:01.140817 env[1574]: time="2023-10-02T19:19:01.138719081Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:19:01Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3845 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:19:01Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/700fad6a77a13b2ad79ade54c4af4cd6327b0f5b0eccab28ca9e48b6142f4e36/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:19:01.140817 env[1574]: time="2023-10-02T19:19:01.139448683Z" level=error msg="copy shim log" error="read /proc/self/fd/30: file already closed" Oct 2 19:19:01.140817 env[1574]: time="2023-10-02T19:19:01.140079594Z" level=error msg="Failed to pipe stdout of container \"700fad6a77a13b2ad79ade54c4af4cd6327b0f5b0eccab28ca9e48b6142f4e36\"" error="reading from a closed fifo" Oct 2 19:19:01.141411 env[1574]: time="2023-10-02T19:19:01.141332441Z" level=error msg="Failed to pipe stderr of container \"700fad6a77a13b2ad79ade54c4af4cd6327b0f5b0eccab28ca9e48b6142f4e36\"" error="reading from a closed fifo" Oct 2 19:19:01.143685 env[1574]: time="2023-10-02T19:19:01.143599211Z" level=error msg="StartContainer for \"700fad6a77a13b2ad79ade54c4af4cd6327b0f5b0eccab28ca9e48b6142f4e36\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:19:01.144079 kubelet[2680]: E1002 19:19:01.144022 2680 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="700fad6a77a13b2ad79ade54c4af4cd6327b0f5b0eccab28ca9e48b6142f4e36" Oct 2 19:19:01.146118 kubelet[2680]: E1002 19:19:01.144879 2680 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:19:01.146118 kubelet[2680]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:19:01.146118 kubelet[2680]: rm /hostbin/cilium-mount Oct 2 19:19:01.146118 kubelet[2680]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-d2jtp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-bbcq9_kube-system(00f798d8-d947-489a-b0ea-24d6af759d5b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:19:01.146118 kubelet[2680]: E1002 19:19:01.145104 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bbcq9" podUID=00f798d8-d947-489a-b0ea-24d6af759d5b Oct 2 19:19:01.826407 kubelet[2680]: I1002 19:19:01.826360 2680 scope.go:115] "RemoveContainer" containerID="6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585" Oct 2 19:19:01.827006 kubelet[2680]: I1002 19:19:01.826966 2680 scope.go:115] "RemoveContainer" containerID="6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585" Oct 2 19:19:01.829472 env[1574]: time="2023-10-02T19:19:01.829395313Z" level=info msg="RemoveContainer for \"6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585\"" Oct 2 19:19:01.831473 env[1574]: time="2023-10-02T19:19:01.831386581Z" level=info msg="RemoveContainer for \"6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585\"" Oct 2 19:19:01.831678 env[1574]: time="2023-10-02T19:19:01.831614825Z" level=error msg="RemoveContainer for \"6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585\" failed" error="failed to set removing state for container \"6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585\": container is already in removing state" Oct 2 19:19:01.832140 kubelet[2680]: E1002 19:19:01.832092 2680 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585\": container is already in removing state" containerID="6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585" Oct 2 19:19:01.832268 kubelet[2680]: E1002 19:19:01.832156 2680 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585": container is already in removing state; Skipping pod "cilium-bbcq9_kube-system(00f798d8-d947-489a-b0ea-24d6af759d5b)" Oct 2 19:19:01.832815 kubelet[2680]: E1002 19:19:01.832772 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-bbcq9_kube-system(00f798d8-d947-489a-b0ea-24d6af759d5b)\"" pod="kube-system/cilium-bbcq9" podUID=00f798d8-d947-489a-b0ea-24d6af759d5b Oct 2 19:19:01.841970 env[1574]: time="2023-10-02T19:19:01.839956035Z" level=info msg="RemoveContainer for \"6be3192b81818badd0554881f6b20acb5e0f36caecdf37efd5b84a3888cfa585\" returns successfully" Oct 2 19:19:01.967145 systemd[1]: run-containerd-runc-k8s.io-700fad6a77a13b2ad79ade54c4af4cd6327b0f5b0eccab28ca9e48b6142f4e36-runc.u04T7u.mount: Deactivated successfully. Oct 2 19:19:01.967321 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-700fad6a77a13b2ad79ade54c4af4cd6327b0f5b0eccab28ca9e48b6142f4e36-rootfs.mount: Deactivated successfully. Oct 2 19:19:03.167674 kubelet[2680]: E1002 19:19:03.167619 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:04.213465 kubelet[2680]: W1002 19:19:04.213414 2680 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod00f798d8_d947_489a_b0ea_24d6af759d5b.slice/cri-containerd-700fad6a77a13b2ad79ade54c4af4cd6327b0f5b0eccab28ca9e48b6142f4e36.scope WatchSource:0}: task 700fad6a77a13b2ad79ade54c4af4cd6327b0f5b0eccab28ca9e48b6142f4e36 not found: not found Oct 2 19:19:08.169425 kubelet[2680]: E1002 19:19:08.169376 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:13.171294 kubelet[2680]: E1002 19:19:13.171235 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:15.948677 kubelet[2680]: E1002 19:19:15.948624 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-bbcq9_kube-system(00f798d8-d947-489a-b0ea-24d6af759d5b)\"" pod="kube-system/cilium-bbcq9" podUID=00f798d8-d947-489a-b0ea-24d6af759d5b Oct 2 19:19:18.172664 kubelet[2680]: E1002 19:19:18.172584 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:21.771000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:21.774499 kernel: kauditd_printk_skb: 64 callbacks suppressed Oct 2 19:19:21.774609 kernel: audit: type=1400 audit(1696274361.771:1401): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:21.771000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:21.794277 kernel: audit: type=1400 audit(1696274361.771:1400): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:21.794372 kernel: audit: type=1300 audit(1696274361.771:1401): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001fce030 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:19:21.771000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001fce030 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:19:21.771000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:21.817370 kernel: audit: type=1327 audit(1696274361.771:1401): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:21.817449 kernel: audit: type=1300 audit(1696274361.771:1400): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40027a0040 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:19:21.771000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40027a0040 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:19:21.771000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:21.840348 kernel: audit: type=1327 audit(1696274361.771:1400): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:23.119000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:23.119000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:23.139592 kernel: audit: type=1400 audit(1696274363.119:1402): avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:23.139724 kernel: audit: type=1400 audit(1696274363.119:1403): avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:23.119000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400ec41480 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:19:23.152035 kernel: audit: type=1300 audit(1696274363.119:1403): arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400ec41480 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:19:23.152187 kernel: audit: type=1327 audit(1696274363.119:1403): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:19:23.119000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:19:23.120000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:23.120000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400cea2db0 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:19:23.120000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:19:23.119000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400cdaab40 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:19:23.119000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:19:23.136000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:23.136000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400cdaab70 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:19:23.136000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:19:23.162000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:23.162000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400cdaaba0 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:19:23.162000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:19:23.164000 audit[2468]: AVC avc: denied { watch } for pid=2468 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:23.164000 audit[2468]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400f217760 a2=fc6 a3=0 items=0 ppid=2284 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c37,c972 key=(null) Oct 2 19:19:23.164000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E313339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:19:23.173611 kubelet[2680]: E1002 19:19:23.173578 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:26.955296 env[1574]: time="2023-10-02T19:19:26.954201769Z" level=info msg="CreateContainer within sandbox \"80a3b4d8f1cc3687c6a240e76e0c06b994b19c4dd04a79fa068c80b173333fe8\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:19:26.979166 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1380163923.mount: Deactivated successfully. Oct 2 19:19:26.982379 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:19:26.982441 kernel: audit: type=1400 audit(1696274366.978:1408): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:26.978000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:26.978000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027a1f20 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:19:27.001212 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1531328696.mount: Deactivated successfully. Oct 2 19:19:27.004195 kernel: audit: type=1300 audit(1696274366.978:1408): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027a1f20 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:19:26.978000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:27.017548 kernel: audit: type=1327 audit(1696274366.978:1408): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:26.980000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:27.019434 env[1574]: time="2023-10-02T19:19:27.019374439Z" level=info msg="CreateContainer within sandbox \"80a3b4d8f1cc3687c6a240e76e0c06b994b19c4dd04a79fa068c80b173333fe8\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"72b796bd67d0bc32e3d18d315fb147b5671bccf471d000fe508a55f96c2991ae\"" Oct 2 19:19:27.027387 kernel: audit: type=1400 audit(1696274366.980:1409): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:26.980000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000efa080 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:19:27.040479 kernel: audit: type=1300 audit(1696274366.980:1409): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000efa080 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:19:27.041109 env[1574]: time="2023-10-02T19:19:27.041056950Z" level=info msg="StartContainer for \"72b796bd67d0bc32e3d18d315fb147b5671bccf471d000fe508a55f96c2991ae\"" Oct 2 19:19:26.980000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:27.053251 kernel: audit: type=1327 audit(1696274366.980:1409): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:26.980000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:27.064359 kernel: audit: type=1400 audit(1696274366.980:1410): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:26.980000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000efa0c0 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:19:27.078202 kernel: audit: type=1300 audit(1696274366.980:1410): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000efa0c0 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:19:26.980000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:27.083954 kernel: audit: type=1327 audit(1696274366.980:1410): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:26.980000 audit[2455]: AVC avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:27.106946 kernel: audit: type=1400 audit(1696274366.980:1411): avc: denied { watch } for pid=2455 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:27.105634 systemd[1]: Started cri-containerd-72b796bd67d0bc32e3d18d315fb147b5671bccf471d000fe508a55f96c2991ae.scope. Oct 2 19:19:26.980000 audit[2455]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000efa100 a2=fc6 a3=0 items=0 ppid=2318 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:19:26.980000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:27.147389 systemd[1]: cri-containerd-72b796bd67d0bc32e3d18d315fb147b5671bccf471d000fe508a55f96c2991ae.scope: Deactivated successfully. Oct 2 19:19:27.175188 env[1574]: time="2023-10-02T19:19:27.175118495Z" level=info msg="shim disconnected" id=72b796bd67d0bc32e3d18d315fb147b5671bccf471d000fe508a55f96c2991ae Oct 2 19:19:27.175523 env[1574]: time="2023-10-02T19:19:27.175489087Z" level=warning msg="cleaning up after shim disconnected" id=72b796bd67d0bc32e3d18d315fb147b5671bccf471d000fe508a55f96c2991ae namespace=k8s.io Oct 2 19:19:27.175657 env[1574]: time="2023-10-02T19:19:27.175629718Z" level=info msg="cleaning up dead shim" Oct 2 19:19:27.203343 env[1574]: time="2023-10-02T19:19:27.203278907Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:19:27Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3884 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:19:27Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/72b796bd67d0bc32e3d18d315fb147b5671bccf471d000fe508a55f96c2991ae/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:19:27.204090 env[1574]: time="2023-10-02T19:19:27.204011594Z" level=error msg="copy shim log" error="read /proc/self/fd/30: file already closed" Oct 2 19:19:27.204882 env[1574]: time="2023-10-02T19:19:27.204814434Z" level=error msg="Failed to pipe stdout of container \"72b796bd67d0bc32e3d18d315fb147b5671bccf471d000fe508a55f96c2991ae\"" error="reading from a closed fifo" Oct 2 19:19:27.205044 env[1574]: time="2023-10-02T19:19:27.204935733Z" level=error msg="Failed to pipe stderr of container \"72b796bd67d0bc32e3d18d315fb147b5671bccf471d000fe508a55f96c2991ae\"" error="reading from a closed fifo" Oct 2 19:19:27.209630 env[1574]: time="2023-10-02T19:19:27.207440952Z" level=error msg="StartContainer for \"72b796bd67d0bc32e3d18d315fb147b5671bccf471d000fe508a55f96c2991ae\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:19:27.212005 kubelet[2680]: E1002 19:19:27.210105 2680 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="72b796bd67d0bc32e3d18d315fb147b5671bccf471d000fe508a55f96c2991ae" Oct 2 19:19:27.212005 kubelet[2680]: E1002 19:19:27.210239 2680 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:19:27.212005 kubelet[2680]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:19:27.212005 kubelet[2680]: rm /hostbin/cilium-mount Oct 2 19:19:27.212005 kubelet[2680]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-d2jtp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-bbcq9_kube-system(00f798d8-d947-489a-b0ea-24d6af759d5b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:19:27.212005 kubelet[2680]: E1002 19:19:27.210296 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bbcq9" podUID=00f798d8-d947-489a-b0ea-24d6af759d5b Oct 2 19:19:27.822816 kubelet[2680]: I1002 19:19:27.822677 2680 scope.go:115] "RemoveContainer" containerID="700fad6a77a13b2ad79ade54c4af4cd6327b0f5b0eccab28ca9e48b6142f4e36" Oct 2 19:19:27.824739 env[1574]: time="2023-10-02T19:19:27.824689881Z" level=info msg="RemoveContainer for \"700fad6a77a13b2ad79ade54c4af4cd6327b0f5b0eccab28ca9e48b6142f4e36\"" Oct 2 19:19:27.829693 env[1574]: time="2023-10-02T19:19:27.829640186Z" level=info msg="RemoveContainer for \"700fad6a77a13b2ad79ade54c4af4cd6327b0f5b0eccab28ca9e48b6142f4e36\" returns successfully" Oct 2 19:19:27.832273 env[1574]: time="2023-10-02T19:19:27.832212583Z" level=info msg="StopPodSandbox for \"1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696\"" Oct 2 19:19:27.832467 env[1574]: time="2023-10-02T19:19:27.832360822Z" level=info msg="TearDown network for sandbox \"1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696\" successfully" Oct 2 19:19:27.832467 env[1574]: time="2023-10-02T19:19:27.832420055Z" level=info msg="StopPodSandbox for \"1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696\" returns successfully" Oct 2 19:19:27.833677 env[1574]: time="2023-10-02T19:19:27.833630328Z" level=info msg="RemovePodSandbox for \"1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696\"" Oct 2 19:19:27.834073 env[1574]: time="2023-10-02T19:19:27.833992975Z" level=info msg="Forcibly stopping sandbox \"1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696\"" Oct 2 19:19:27.834337 env[1574]: time="2023-10-02T19:19:27.834302438Z" level=info msg="TearDown network for sandbox \"1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696\" successfully" Oct 2 19:19:27.840041 env[1574]: time="2023-10-02T19:19:27.839982670Z" level=info msg="RemovePodSandbox \"1d37a0ed4b308bccc4e2cf0d2e38e761e96f1807dda9f466262f9ddc0a228696\" returns successfully" Oct 2 19:19:27.841073 env[1574]: time="2023-10-02T19:19:27.841021267Z" level=info msg="StopPodSandbox for \"1c3854bfdbada135923255c537e5c8e450e12987f5c2c6951ef7fd39042c9358\"" Oct 2 19:19:27.841240 env[1574]: time="2023-10-02T19:19:27.841170130Z" level=info msg="TearDown network for sandbox \"1c3854bfdbada135923255c537e5c8e450e12987f5c2c6951ef7fd39042c9358\" successfully" Oct 2 19:19:27.841319 env[1574]: time="2023-10-02T19:19:27.841235508Z" level=info msg="StopPodSandbox for \"1c3854bfdbada135923255c537e5c8e450e12987f5c2c6951ef7fd39042c9358\" returns successfully" Oct 2 19:19:27.841969 env[1574]: time="2023-10-02T19:19:27.841903441Z" level=info msg="RemovePodSandbox for \"1c3854bfdbada135923255c537e5c8e450e12987f5c2c6951ef7fd39042c9358\"" Oct 2 19:19:27.842176 env[1574]: time="2023-10-02T19:19:27.842118510Z" level=info msg="Forcibly stopping sandbox \"1c3854bfdbada135923255c537e5c8e450e12987f5c2c6951ef7fd39042c9358\"" Oct 2 19:19:27.842390 env[1574]: time="2023-10-02T19:19:27.842357218Z" level=info msg="TearDown network for sandbox \"1c3854bfdbada135923255c537e5c8e450e12987f5c2c6951ef7fd39042c9358\" successfully" Oct 2 19:19:27.847067 env[1574]: time="2023-10-02T19:19:27.847014922Z" level=info msg="RemovePodSandbox \"1c3854bfdbada135923255c537e5c8e450e12987f5c2c6951ef7fd39042c9358\" returns successfully" Oct 2 19:19:27.893893 kubelet[2680]: E1002 19:19:27.893850 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-bbcq9_kube-system(00f798d8-d947-489a-b0ea-24d6af759d5b)\"" pod="kube-system/cilium-bbcq9" podUID=00f798d8-d947-489a-b0ea-24d6af759d5b Oct 2 19:19:27.973489 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-72b796bd67d0bc32e3d18d315fb147b5671bccf471d000fe508a55f96c2991ae-rootfs.mount: Deactivated successfully. Oct 2 19:19:28.020432 kubelet[2680]: W1002 19:19:28.020401 2680 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:19:28.175782 kubelet[2680]: E1002 19:19:28.175725 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:30.281755 kubelet[2680]: W1002 19:19:30.281708 2680 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod00f798d8_d947_489a_b0ea_24d6af759d5b.slice/cri-containerd-72b796bd67d0bc32e3d18d315fb147b5671bccf471d000fe508a55f96c2991ae.scope WatchSource:0}: task 72b796bd67d0bc32e3d18d315fb147b5671bccf471d000fe508a55f96c2991ae not found: not found Oct 2 19:19:33.177507 kubelet[2680]: E1002 19:19:33.177350 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:38.178454 kubelet[2680]: E1002 19:19:38.178381 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:39.948979 kubelet[2680]: E1002 19:19:39.948895 2680 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-bbcq9_kube-system(00f798d8-d947-489a-b0ea-24d6af759d5b)\"" pod="kube-system/cilium-bbcq9" podUID=00f798d8-d947-489a-b0ea-24d6af759d5b Oct 2 19:19:43.180273 kubelet[2680]: E1002 19:19:43.180218 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:45.065333 env[1574]: time="2023-10-02T19:19:45.064910441Z" level=info msg="StopPodSandbox for \"80a3b4d8f1cc3687c6a240e76e0c06b994b19c4dd04a79fa068c80b173333fe8\"" Oct 2 19:19:45.065333 env[1574]: time="2023-10-02T19:19:45.065097981Z" level=info msg="Container to stop \"72b796bd67d0bc32e3d18d315fb147b5671bccf471d000fe508a55f96c2991ae\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:19:45.072723 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-80a3b4d8f1cc3687c6a240e76e0c06b994b19c4dd04a79fa068c80b173333fe8-shm.mount: Deactivated successfully. Oct 2 19:19:45.101578 systemd[1]: cri-containerd-80a3b4d8f1cc3687c6a240e76e0c06b994b19c4dd04a79fa068c80b173333fe8.scope: Deactivated successfully. Oct 2 19:19:45.101000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:19:45.105155 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:19:45.105348 kernel: audit: type=1334 audit(1696274385.101:1412): prog-id=134 op=UNLOAD Oct 2 19:19:45.108000 audit: BPF prog-id=137 op=UNLOAD Oct 2 19:19:45.112135 kernel: audit: type=1334 audit(1696274385.108:1413): prog-id=137 op=UNLOAD Oct 2 19:19:45.195709 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-80a3b4d8f1cc3687c6a240e76e0c06b994b19c4dd04a79fa068c80b173333fe8-rootfs.mount: Deactivated successfully. Oct 2 19:19:45.217075 env[1574]: time="2023-10-02T19:19:45.217004547Z" level=info msg="shim disconnected" id=80a3b4d8f1cc3687c6a240e76e0c06b994b19c4dd04a79fa068c80b173333fe8 Oct 2 19:19:45.217580 env[1574]: time="2023-10-02T19:19:45.217517714Z" level=warning msg="cleaning up after shim disconnected" id=80a3b4d8f1cc3687c6a240e76e0c06b994b19c4dd04a79fa068c80b173333fe8 namespace=k8s.io Oct 2 19:19:45.217777 env[1574]: time="2023-10-02T19:19:45.217742239Z" level=info msg="cleaning up dead shim" Oct 2 19:19:45.228272 sshd[3690]: pam_unix(sshd:session): session closed for user core Oct 2 19:19:45.235000 audit[3690]: USER_END pid=3690 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:19:45.240380 systemd-logind[1553]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:19:45.235000 audit[3690]: CRED_DISP pid=3690 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:19:45.251061 systemd[1]: sshd@29-172.31.20.139:22-139.178.89.65:59468.service: Deactivated successfully. Oct 2 19:19:45.252493 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:19:45.252863 systemd[1]: session-30.scope: Consumed 1.997s CPU time. Oct 2 19:19:45.255978 systemd-logind[1553]: Removed session 30. Oct 2 19:19:45.262545 kernel: audit: type=1106 audit(1696274385.235:1414): pid=3690 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:19:45.262761 kernel: audit: type=1104 audit(1696274385.235:1415): pid=3690 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:19:45.250000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.20.139:22-139.178.89.65:59468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:45.272522 kernel: audit: type=1131 audit(1696274385.250:1416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.20.139:22-139.178.89.65:59468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:45.290461 env[1574]: time="2023-10-02T19:19:45.290073719Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:19:45Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3919 runtime=io.containerd.runc.v2\n" Oct 2 19:19:45.292033 env[1574]: time="2023-10-02T19:19:45.291443488Z" level=info msg="TearDown network for sandbox \"80a3b4d8f1cc3687c6a240e76e0c06b994b19c4dd04a79fa068c80b173333fe8\" successfully" Oct 2 19:19:45.292033 env[1574]: time="2023-10-02T19:19:45.291508061Z" level=info msg="StopPodSandbox for \"80a3b4d8f1cc3687c6a240e76e0c06b994b19c4dd04a79fa068c80b173333fe8\" returns successfully" Oct 2 19:19:45.414592 kubelet[2680]: I1002 19:19:45.414451 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-cilium-cgroup\") pod \"00f798d8-d947-489a-b0ea-24d6af759d5b\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " Oct 2 19:19:45.415535 kubelet[2680]: I1002 19:19:45.415502 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-etc-cni-netd\") pod \"00f798d8-d947-489a-b0ea-24d6af759d5b\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " Oct 2 19:19:45.417646 kubelet[2680]: I1002 19:19:45.417610 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-cilium-run\") pod \"00f798d8-d947-489a-b0ea-24d6af759d5b\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " Oct 2 19:19:45.418023 kubelet[2680]: I1002 19:19:45.417994 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-xtables-lock\") pod \"00f798d8-d947-489a-b0ea-24d6af759d5b\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " Oct 2 19:19:45.418300 kubelet[2680]: I1002 19:19:45.418278 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-lib-modules\") pod \"00f798d8-d947-489a-b0ea-24d6af759d5b\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " Oct 2 19:19:45.418537 kubelet[2680]: I1002 19:19:45.418515 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-cni-path\") pod \"00f798d8-d947-489a-b0ea-24d6af759d5b\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " Oct 2 19:19:45.418725 kubelet[2680]: I1002 19:19:45.418702 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/00f798d8-d947-489a-b0ea-24d6af759d5b-hubble-tls\") pod \"00f798d8-d947-489a-b0ea-24d6af759d5b\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " Oct 2 19:19:45.418892 kubelet[2680]: I1002 19:19:45.418867 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-hostproc\") pod \"00f798d8-d947-489a-b0ea-24d6af759d5b\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " Oct 2 19:19:45.419778 kubelet[2680]: I1002 19:19:45.419739 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-d2jtp\" (UniqueName: \"kubernetes.io/projected/00f798d8-d947-489a-b0ea-24d6af759d5b-kube-api-access-d2jtp\") pod \"00f798d8-d947-489a-b0ea-24d6af759d5b\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " Oct 2 19:19:45.420428 kubelet[2680]: I1002 19:19:45.417516 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "00f798d8-d947-489a-b0ea-24d6af759d5b" (UID: "00f798d8-d947-489a-b0ea-24d6af759d5b"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:45.421055 kubelet[2680]: I1002 19:19:45.419083 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-hostproc" (OuterVolumeSpecName: "hostproc") pod "00f798d8-d947-489a-b0ea-24d6af759d5b" (UID: "00f798d8-d947-489a-b0ea-24d6af759d5b"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:45.421214 kubelet[2680]: I1002 19:19:45.418453 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "00f798d8-d947-489a-b0ea-24d6af759d5b" (UID: "00f798d8-d947-489a-b0ea-24d6af759d5b"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:45.421346 kubelet[2680]: I1002 19:19:45.418212 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "00f798d8-d947-489a-b0ea-24d6af759d5b" (UID: "00f798d8-d947-489a-b0ea-24d6af759d5b"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:45.421461 kubelet[2680]: I1002 19:19:45.417888 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "00f798d8-d947-489a-b0ea-24d6af759d5b" (UID: "00f798d8-d947-489a-b0ea-24d6af759d5b"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:45.421647 kubelet[2680]: I1002 19:19:45.415405 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "00f798d8-d947-489a-b0ea-24d6af759d5b" (UID: "00f798d8-d947-489a-b0ea-24d6af759d5b"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:45.421753 kubelet[2680]: I1002 19:19:45.419118 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-cni-path" (OuterVolumeSpecName: "cni-path") pod "00f798d8-d947-489a-b0ea-24d6af759d5b" (UID: "00f798d8-d947-489a-b0ea-24d6af759d5b"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:45.421854 kubelet[2680]: I1002 19:19:45.420674 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/00f798d8-d947-489a-b0ea-24d6af759d5b-cilium-config-path\") pod \"00f798d8-d947-489a-b0ea-24d6af759d5b\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " Oct 2 19:19:45.422062 kubelet[2680]: W1002 19:19:45.420983 2680 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/00f798d8-d947-489a-b0ea-24d6af759d5b/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:19:45.427719 kubelet[2680]: I1002 19:19:45.427652 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/00f798d8-d947-489a-b0ea-24d6af759d5b-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "00f798d8-d947-489a-b0ea-24d6af759d5b" (UID: "00f798d8-d947-489a-b0ea-24d6af759d5b"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:19:45.430565 kubelet[2680]: I1002 19:19:45.428088 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-host-proc-sys-kernel\") pod \"00f798d8-d947-489a-b0ea-24d6af759d5b\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " Oct 2 19:19:45.430881 kubelet[2680]: I1002 19:19:45.430847 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-bpf-maps\") pod \"00f798d8-d947-489a-b0ea-24d6af759d5b\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " Oct 2 19:19:45.431214 kubelet[2680]: I1002 19:19:45.428133 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "00f798d8-d947-489a-b0ea-24d6af759d5b" (UID: "00f798d8-d947-489a-b0ea-24d6af759d5b"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:45.431379 kubelet[2680]: I1002 19:19:45.430944 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "00f798d8-d947-489a-b0ea-24d6af759d5b" (UID: "00f798d8-d947-489a-b0ea-24d6af759d5b"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:45.431551 kubelet[2680]: I1002 19:19:45.431284 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/00f798d8-d947-489a-b0ea-24d6af759d5b-cilium-ipsec-secrets\") pod \"00f798d8-d947-489a-b0ea-24d6af759d5b\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " Oct 2 19:19:45.431780 kubelet[2680]: I1002 19:19:45.431750 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-host-proc-sys-net\") pod \"00f798d8-d947-489a-b0ea-24d6af759d5b\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " Oct 2 19:19:45.432027 kubelet[2680]: I1002 19:19:45.432001 2680 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/00f798d8-d947-489a-b0ea-24d6af759d5b-clustermesh-secrets\") pod \"00f798d8-d947-489a-b0ea-24d6af759d5b\" (UID: \"00f798d8-d947-489a-b0ea-24d6af759d5b\") " Oct 2 19:19:45.432236 kubelet[2680]: I1002 19:19:45.432211 2680 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-cilium-cgroup\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:19:45.432386 kubelet[2680]: I1002 19:19:45.432360 2680 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-etc-cni-netd\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:19:45.432541 kubelet[2680]: I1002 19:19:45.432517 2680 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-xtables-lock\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:19:45.433381 kubelet[2680]: I1002 19:19:45.433347 2680 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-lib-modules\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:19:45.433599 kubelet[2680]: I1002 19:19:45.433570 2680 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-cilium-run\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:19:45.433784 kubelet[2680]: I1002 19:19:45.433758 2680 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-cni-path\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:19:45.434003 kubelet[2680]: I1002 19:19:45.433973 2680 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-hostproc\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:19:45.434196 kubelet[2680]: I1002 19:19:45.434168 2680 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/00f798d8-d947-489a-b0ea-24d6af759d5b-cilium-config-path\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:19:45.434358 kubelet[2680]: I1002 19:19:45.434333 2680 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-bpf-maps\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:19:45.434505 kubelet[2680]: I1002 19:19:45.433272 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "00f798d8-d947-489a-b0ea-24d6af759d5b" (UID: "00f798d8-d947-489a-b0ea-24d6af759d5b"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:45.442413 kubelet[2680]: I1002 19:19:45.442360 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/00f798d8-d947-489a-b0ea-24d6af759d5b-kube-api-access-d2jtp" (OuterVolumeSpecName: "kube-api-access-d2jtp") pod "00f798d8-d947-489a-b0ea-24d6af759d5b" (UID: "00f798d8-d947-489a-b0ea-24d6af759d5b"). InnerVolumeSpecName "kube-api-access-d2jtp". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:19:45.443206 systemd[1]: var-lib-kubelet-pods-00f798d8\x2dd947\x2d489a\x2db0ea\x2d24d6af759d5b-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dd2jtp.mount: Deactivated successfully. Oct 2 19:19:45.443421 systemd[1]: var-lib-kubelet-pods-00f798d8\x2dd947\x2d489a\x2db0ea\x2d24d6af759d5b-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:19:45.452695 kubelet[2680]: I1002 19:19:45.452643 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/00f798d8-d947-489a-b0ea-24d6af759d5b-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "00f798d8-d947-489a-b0ea-24d6af759d5b" (UID: "00f798d8-d947-489a-b0ea-24d6af759d5b"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:19:45.461385 systemd[1]: var-lib-kubelet-pods-00f798d8\x2dd947\x2d489a\x2db0ea\x2d24d6af759d5b-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:19:45.468326 kubelet[2680]: I1002 19:19:45.467546 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/00f798d8-d947-489a-b0ea-24d6af759d5b-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "00f798d8-d947-489a-b0ea-24d6af759d5b" (UID: "00f798d8-d947-489a-b0ea-24d6af759d5b"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:19:45.469297 kubelet[2680]: I1002 19:19:45.469252 2680 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/00f798d8-d947-489a-b0ea-24d6af759d5b-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "00f798d8-d947-489a-b0ea-24d6af759d5b" (UID: "00f798d8-d947-489a-b0ea-24d6af759d5b"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:19:45.535569 kubelet[2680]: I1002 19:19:45.535512 2680 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/00f798d8-d947-489a-b0ea-24d6af759d5b-hubble-tls\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:19:45.535824 kubelet[2680]: I1002 19:19:45.535803 2680 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-d2jtp\" (UniqueName: \"kubernetes.io/projected/00f798d8-d947-489a-b0ea-24d6af759d5b-kube-api-access-d2jtp\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:19:45.535994 kubelet[2680]: I1002 19:19:45.535972 2680 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-host-proc-sys-kernel\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:19:45.536230 kubelet[2680]: I1002 19:19:45.536207 2680 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/00f798d8-d947-489a-b0ea-24d6af759d5b-cilium-ipsec-secrets\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:19:45.536352 kubelet[2680]: I1002 19:19:45.536333 2680 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/00f798d8-d947-489a-b0ea-24d6af759d5b-host-proc-sys-net\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:19:45.536473 kubelet[2680]: I1002 19:19:45.536453 2680 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/00f798d8-d947-489a-b0ea-24d6af759d5b-clustermesh-secrets\") on node \"ip-172-31-20-139\" DevicePath \"\"" Oct 2 19:19:45.939133 kubelet[2680]: I1002 19:19:45.939074 2680 scope.go:115] "RemoveContainer" containerID="72b796bd67d0bc32e3d18d315fb147b5671bccf471d000fe508a55f96c2991ae" Oct 2 19:19:45.942708 env[1574]: time="2023-10-02T19:19:45.942656968Z" level=info msg="RemoveContainer for \"72b796bd67d0bc32e3d18d315fb147b5671bccf471d000fe508a55f96c2991ae\"" Oct 2 19:19:45.948252 env[1574]: time="2023-10-02T19:19:45.948172443Z" level=info msg="RemoveContainer for \"72b796bd67d0bc32e3d18d315fb147b5671bccf471d000fe508a55f96c2991ae\" returns successfully" Oct 2 19:19:45.951449 systemd[1]: Removed slice kubepods-burstable-pod00f798d8_d947_489a_b0ea_24d6af759d5b.slice. Oct 2 19:19:46.072297 systemd[1]: var-lib-kubelet-pods-00f798d8\x2dd947\x2d489a\x2db0ea\x2d24d6af759d5b-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:19:47.952678 kubelet[2680]: I1002 19:19:47.952644 2680 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=00f798d8-d947-489a-b0ea-24d6af759d5b path="/var/lib/kubelet/pods/00f798d8-d947-489a-b0ea-24d6af759d5b/volumes" Oct 2 19:19:48.182140 kubelet[2680]: E1002 19:19:48.182093 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:53.183649 kubelet[2680]: E1002 19:19:53.183571 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:58.185563 kubelet[2680]: E1002 19:19:58.185526 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:58.426102 systemd[1]: cri-containerd-88a42fc18b520cb265ad1df3a9083e227f33142ccd44fd9d24a144c6880b343b.scope: Deactivated successfully. Oct 2 19:19:58.426676 systemd[1]: cri-containerd-88a42fc18b520cb265ad1df3a9083e227f33142ccd44fd9d24a144c6880b343b.scope: Consumed 6.486s CPU time. Oct 2 19:19:58.429000 audit: BPF prog-id=89 op=UNLOAD Oct 2 19:19:58.429000 audit: BPF prog-id=103 op=UNLOAD Oct 2 19:19:58.436636 kernel: audit: type=1334 audit(1696274398.429:1417): prog-id=89 op=UNLOAD Oct 2 19:19:58.436804 kernel: audit: type=1334 audit(1696274398.429:1418): prog-id=103 op=UNLOAD Oct 2 19:19:58.479249 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-88a42fc18b520cb265ad1df3a9083e227f33142ccd44fd9d24a144c6880b343b-rootfs.mount: Deactivated successfully. Oct 2 19:19:58.501196 env[1574]: time="2023-10-02T19:19:58.501112438Z" level=info msg="shim disconnected" id=88a42fc18b520cb265ad1df3a9083e227f33142ccd44fd9d24a144c6880b343b Oct 2 19:19:58.501196 env[1574]: time="2023-10-02T19:19:58.501185580Z" level=warning msg="cleaning up after shim disconnected" id=88a42fc18b520cb265ad1df3a9083e227f33142ccd44fd9d24a144c6880b343b namespace=k8s.io Oct 2 19:19:58.501998 env[1574]: time="2023-10-02T19:19:58.501208549Z" level=info msg="cleaning up dead shim" Oct 2 19:19:58.528543 env[1574]: time="2023-10-02T19:19:58.528465889Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:19:58Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3951 runtime=io.containerd.runc.v2\n" Oct 2 19:19:58.984459 kubelet[2680]: I1002 19:19:58.984425 2680 scope.go:115] "RemoveContainer" containerID="88a42fc18b520cb265ad1df3a9083e227f33142ccd44fd9d24a144c6880b343b" Oct 2 19:19:58.989017 env[1574]: time="2023-10-02T19:19:58.988910854Z" level=info msg="CreateContainer within sandbox \"810935ecd822448e76746caf660075fcc41c0e008474eef47e045d6ea33725ae\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 19:19:59.006321 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2759553594.mount: Deactivated successfully. Oct 2 19:19:59.020839 env[1574]: time="2023-10-02T19:19:59.020755284Z" level=info msg="CreateContainer within sandbox \"810935ecd822448e76746caf660075fcc41c0e008474eef47e045d6ea33725ae\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"44d1e6fcbeb59990978d5a6c47a5f344c812d4493c28f8457dd2a20cd36809f4\"" Oct 2 19:19:59.021634 env[1574]: time="2023-10-02T19:19:59.021590790Z" level=info msg="StartContainer for \"44d1e6fcbeb59990978d5a6c47a5f344c812d4493c28f8457dd2a20cd36809f4\"" Oct 2 19:19:59.071729 systemd[1]: Started cri-containerd-44d1e6fcbeb59990978d5a6c47a5f344c812d4493c28f8457dd2a20cd36809f4.scope. Oct 2 19:19:59.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.135947 kernel: audit: type=1400 audit(1696274399.119:1419): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.136071 kernel: audit: type=1400 audit(1696274399.119:1420): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.150657 kernel: audit: type=1400 audit(1696274399.119:1421): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.165811 kernel: audit: type=1400 audit(1696274399.119:1422): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.175539 kernel: audit: type=1400 audit(1696274399.119:1423): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.175668 kernel: audit: type=1400 audit(1696274399.119:1424): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.193857 kernel: audit: type=1400 audit(1696274399.119:1425): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.207984 kernel: audit: type=1400 audit(1696274399.119:1426): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.127000 audit: BPF prog-id=138 op=LOAD Oct 2 19:19:59.135000 audit[3972]: AVC avc: denied { bpf } for pid=3972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.135000 audit[3972]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2318 pid=3972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:59.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434643165366663626562353939393039373864356136633437613566 Oct 2 19:19:59.135000 audit[3972]: AVC avc: denied { perfmon } for pid=3972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.135000 audit[3972]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2318 pid=3972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:59.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434643165366663626562353939393039373864356136633437613566 Oct 2 19:19:59.135000 audit[3972]: AVC avc: denied { bpf } for pid=3972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.135000 audit[3972]: AVC avc: denied { bpf } for pid=3972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.135000 audit[3972]: AVC avc: denied { bpf } for pid=3972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.135000 audit[3972]: AVC avc: denied { perfmon } for pid=3972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.135000 audit[3972]: AVC avc: denied { perfmon } for pid=3972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.135000 audit[3972]: AVC avc: denied { perfmon } for pid=3972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.135000 audit[3972]: AVC avc: denied { perfmon } for pid=3972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.135000 audit[3972]: AVC avc: denied { perfmon } for pid=3972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.135000 audit[3972]: AVC avc: denied { bpf } for pid=3972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.135000 audit[3972]: AVC avc: denied { bpf } for pid=3972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.135000 audit: BPF prog-id=139 op=LOAD Oct 2 19:19:59.135000 audit[3972]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2318 pid=3972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:59.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434643165366663626562353939393039373864356136633437613566 Oct 2 19:19:59.135000 audit[3972]: AVC avc: denied { bpf } for pid=3972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.135000 audit[3972]: AVC avc: denied { bpf } for pid=3972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.135000 audit[3972]: AVC avc: denied { perfmon } for pid=3972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.135000 audit[3972]: AVC avc: denied { perfmon } for pid=3972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.135000 audit[3972]: AVC avc: denied { perfmon } for pid=3972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.135000 audit[3972]: AVC avc: denied { perfmon } for pid=3972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.135000 audit[3972]: AVC avc: denied { perfmon } for pid=3972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.135000 audit[3972]: AVC avc: denied { bpf } for pid=3972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.135000 audit[3972]: AVC avc: denied { bpf } for pid=3972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.135000 audit: BPF prog-id=140 op=LOAD Oct 2 19:19:59.135000 audit[3972]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2318 pid=3972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:59.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434643165366663626562353939393039373864356136633437613566 Oct 2 19:19:59.136000 audit: BPF prog-id=140 op=UNLOAD Oct 2 19:19:59.136000 audit: BPF prog-id=139 op=UNLOAD Oct 2 19:19:59.136000 audit[3972]: AVC avc: denied { bpf } for pid=3972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.136000 audit[3972]: AVC avc: denied { bpf } for pid=3972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.136000 audit[3972]: AVC avc: denied { bpf } for pid=3972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.136000 audit[3972]: AVC avc: denied { perfmon } for pid=3972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.136000 audit[3972]: AVC avc: denied { perfmon } for pid=3972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.136000 audit[3972]: AVC avc: denied { perfmon } for pid=3972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.136000 audit[3972]: AVC avc: denied { perfmon } for pid=3972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.136000 audit[3972]: AVC avc: denied { perfmon } for pid=3972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.136000 audit[3972]: AVC avc: denied { bpf } for pid=3972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.136000 audit[3972]: AVC avc: denied { bpf } for pid=3972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:59.136000 audit: BPF prog-id=141 op=LOAD Oct 2 19:19:59.136000 audit[3972]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2318 pid=3972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:59.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434643165366663626562353939393039373864356136633437613566 Oct 2 19:19:59.230998 env[1574]: time="2023-10-02T19:19:59.230154874Z" level=info msg="StartContainer for \"44d1e6fcbeb59990978d5a6c47a5f344c812d4493c28f8457dd2a20cd36809f4\" returns successfully" Oct 2 19:20:02.268000 audit[3983]: AVC avc: denied { watch } for pid=3983 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:20:02.268000 audit[3983]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000368f60 a2=fc6 a3=0 items=0 ppid=2318 pid=3983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:20:02.268000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:20:02.269000 audit[3983]: AVC avc: denied { watch } for pid=3983 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520976 scontext=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:20:02.269000 audit[3983]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400023e240 a2=fc6 a3=0 items=0 ppid=2318 pid=3983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c879,c910 key=(null) Oct 2 19:20:02.269000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:20:03.187684 kubelet[2680]: E1002 19:20:03.187632 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:20:04.080267 kubelet[2680]: E1002 19:20:04.080204 2680 controller.go:193] "Failed to update lease" err="Put \"https://172.31.20.139:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-20-139?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 19:20:04.322407 systemd[1]: cri-containerd-bee6ca936c079656a292aed87ca113f5044328b0c23a5dbb71b71da368f4a60b.scope: Deactivated successfully. Oct 2 19:20:04.323020 systemd[1]: cri-containerd-bee6ca936c079656a292aed87ca113f5044328b0c23a5dbb71b71da368f4a60b.scope: Consumed 5.270s CPU time. Oct 2 19:20:04.326000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:20:04.329207 kernel: kauditd_printk_skb: 55 callbacks suppressed Oct 2 19:20:04.329343 kernel: audit: type=1334 audit(1696274404.326:1439): prog-id=85 op=UNLOAD Oct 2 19:20:04.326000 audit: BPF prog-id=102 op=UNLOAD Oct 2 19:20:04.334765 kernel: audit: type=1334 audit(1696274404.326:1440): prog-id=102 op=UNLOAD Oct 2 19:20:04.378485 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-bee6ca936c079656a292aed87ca113f5044328b0c23a5dbb71b71da368f4a60b-rootfs.mount: Deactivated successfully. Oct 2 19:20:04.407039 env[1574]: time="2023-10-02T19:20:04.404876274Z" level=info msg="shim disconnected" id=bee6ca936c079656a292aed87ca113f5044328b0c23a5dbb71b71da368f4a60b Oct 2 19:20:04.407039 env[1574]: time="2023-10-02T19:20:04.404987792Z" level=warning msg="cleaning up after shim disconnected" id=bee6ca936c079656a292aed87ca113f5044328b0c23a5dbb71b71da368f4a60b namespace=k8s.io Oct 2 19:20:04.407039 env[1574]: time="2023-10-02T19:20:04.405061450Z" level=info msg="cleaning up dead shim" Oct 2 19:20:04.445279 env[1574]: time="2023-10-02T19:20:04.445208223Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:20:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4013 runtime=io.containerd.runc.v2\n" Oct 2 19:20:05.003075 kubelet[2680]: I1002 19:20:05.002462 2680 scope.go:115] "RemoveContainer" containerID="bee6ca936c079656a292aed87ca113f5044328b0c23a5dbb71b71da368f4a60b" Oct 2 19:20:05.006022 env[1574]: time="2023-10-02T19:20:05.005949602Z" level=info msg="CreateContainer within sandbox \"988240a2a53324949fb860721a7ebe63e1d5fd8dbf918975345dd5e77e76c639\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 19:20:05.022497 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1838697269.mount: Deactivated successfully. Oct 2 19:20:05.034147 env[1574]: time="2023-10-02T19:20:05.034064704Z" level=info msg="CreateContainer within sandbox \"988240a2a53324949fb860721a7ebe63e1d5fd8dbf918975345dd5e77e76c639\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"5f12f820bc3f257cee07e652eb40f3642b80b0ec638d22813422ad31b1b77c92\"" Oct 2 19:20:05.035167 env[1574]: time="2023-10-02T19:20:05.035123440Z" level=info msg="StartContainer for \"5f12f820bc3f257cee07e652eb40f3642b80b0ec638d22813422ad31b1b77c92\"" Oct 2 19:20:05.081620 systemd[1]: Started cri-containerd-5f12f820bc3f257cee07e652eb40f3642b80b0ec638d22813422ad31b1b77c92.scope. Oct 2 19:20:05.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.140454 kernel: audit: type=1400 audit(1696274405.123:1441): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.140555 kernel: audit: type=1400 audit(1696274405.123:1442): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.140608 kernel: audit: type=1400 audit(1696274405.123:1443): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.148017 kernel: audit: type=1400 audit(1696274405.123:1444): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.163110 kernel: audit: type=1400 audit(1696274405.123:1445): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.171769 kernel: audit: type=1400 audit(1696274405.123:1446): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.181840 kernel: audit: type=1400 audit(1696274405.123:1447): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.194759 kernel: audit: type=1400 audit(1696274405.123:1448): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.131000 audit: BPF prog-id=142 op=LOAD Oct 2 19:20:05.131000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.131000 audit[4033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2283 pid=4033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:05.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566313266383230626333663235376365653037653635326562343066 Oct 2 19:20:05.131000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.131000 audit[4033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2283 pid=4033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:05.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566313266383230626333663235376365653037653635326562343066 Oct 2 19:20:05.131000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.131000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.131000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.131000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.131000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.131000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.131000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.131000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.131000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.131000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.131000 audit: BPF prog-id=143 op=LOAD Oct 2 19:20:05.131000 audit[4033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2283 pid=4033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:05.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566313266383230626333663235376365653037653635326562343066 Oct 2 19:20:05.139000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.139000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.139000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.139000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.139000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.139000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.139000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.139000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.139000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.139000 audit: BPF prog-id=144 op=LOAD Oct 2 19:20:05.139000 audit[4033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2283 pid=4033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:05.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566313266383230626333663235376365653037653635326562343066 Oct 2 19:20:05.147000 audit: BPF prog-id=144 op=UNLOAD Oct 2 19:20:05.147000 audit: BPF prog-id=143 op=UNLOAD Oct 2 19:20:05.147000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.147000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.147000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.147000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.147000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.147000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.147000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.147000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.147000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.147000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:20:05.147000 audit: BPF prog-id=145 op=LOAD Oct 2 19:20:05.147000 audit[4033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2283 pid=4033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:05.147000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566313266383230626333663235376365653037653635326562343066 Oct 2 19:20:05.235000 env[1574]: time="2023-10-02T19:20:05.234839797Z" level=info msg="StartContainer for \"5f12f820bc3f257cee07e652eb40f3642b80b0ec638d22813422ad31b1b77c92\" returns successfully" Oct 2 19:20:08.189160 kubelet[2680]: E1002 19:20:08.189126 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:20:13.190908 kubelet[2680]: E1002 19:20:13.190860 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:20:14.081639 kubelet[2680]: E1002 19:20:14.081589 2680 controller.go:193] "Failed to update lease" err="the server was unable to return a response in the time allotted, but may still be processing the request (put leases.coordination.k8s.io ip-172-31-20-139)" Oct 2 19:20:18.192229 kubelet[2680]: E1002 19:20:18.192193 2680 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized"