Oct 2 19:24:58.167467 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Oct 2 19:24:58.167503 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 19:24:58.167526 kernel: efi: EFI v2.70 by EDK II Oct 2 19:24:58.167541 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7ac1aa98 MEMRESERVE=0x71accf98 Oct 2 19:24:58.167555 kernel: ACPI: Early table checksum verification disabled Oct 2 19:24:58.167568 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Oct 2 19:24:58.167584 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Oct 2 19:24:58.167598 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Oct 2 19:24:58.167612 kernel: ACPI: DSDT 0x0000000078640000 00154F (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Oct 2 19:24:58.167625 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Oct 2 19:24:58.167643 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Oct 2 19:24:58.167657 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Oct 2 19:24:58.167671 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Oct 2 19:24:58.167705 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Oct 2 19:24:58.167725 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Oct 2 19:24:58.167746 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Oct 2 19:24:58.167761 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Oct 2 19:24:58.167776 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Oct 2 19:24:58.167790 kernel: printk: bootconsole [uart0] enabled Oct 2 19:24:58.167804 kernel: NUMA: Failed to initialise from firmware Oct 2 19:24:58.167819 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 19:24:58.167834 kernel: NUMA: NODE_DATA [mem 0x4b5841900-0x4b5846fff] Oct 2 19:24:58.167848 kernel: Zone ranges: Oct 2 19:24:58.167862 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Oct 2 19:24:58.167877 kernel: DMA32 empty Oct 2 19:24:58.167891 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Oct 2 19:24:58.167909 kernel: Movable zone start for each node Oct 2 19:24:58.167924 kernel: Early memory node ranges Oct 2 19:24:58.167938 kernel: node 0: [mem 0x0000000040000000-0x00000000786effff] Oct 2 19:24:58.167952 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Oct 2 19:24:58.169029 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Oct 2 19:24:58.169048 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Oct 2 19:24:58.169063 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Oct 2 19:24:58.169077 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Oct 2 19:24:58.169092 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 19:24:58.169106 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Oct 2 19:24:58.169121 kernel: psci: probing for conduit method from ACPI. Oct 2 19:24:58.169136 kernel: psci: PSCIv1.0 detected in firmware. Oct 2 19:24:58.169156 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 19:24:58.169171 kernel: psci: Trusted OS migration not required Oct 2 19:24:58.169192 kernel: psci: SMC Calling Convention v1.1 Oct 2 19:24:58.169207 kernel: ACPI: SRAT not present Oct 2 19:24:58.169223 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 19:24:58.169242 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 19:24:58.169258 kernel: pcpu-alloc: [0] 0 [0] 1 Oct 2 19:24:58.169273 kernel: Detected PIPT I-cache on CPU0 Oct 2 19:24:58.169288 kernel: CPU features: detected: GIC system register CPU interface Oct 2 19:24:58.169304 kernel: CPU features: detected: Spectre-v2 Oct 2 19:24:58.169319 kernel: CPU features: detected: Spectre-v3a Oct 2 19:24:58.169334 kernel: CPU features: detected: Spectre-BHB Oct 2 19:24:58.169349 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 19:24:58.169364 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 19:24:58.169379 kernel: CPU features: detected: ARM erratum 1742098 Oct 2 19:24:58.169394 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Oct 2 19:24:58.169413 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Oct 2 19:24:58.169429 kernel: Policy zone: Normal Oct 2 19:24:58.169447 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:24:58.169463 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:24:58.169478 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:24:58.169493 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:24:58.169508 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:24:58.169524 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Oct 2 19:24:58.169540 kernel: Memory: 3826444K/4030464K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 204020K reserved, 0K cma-reserved) Oct 2 19:24:58.169555 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:24:58.169574 kernel: trace event string verifier disabled Oct 2 19:24:58.169590 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 19:24:58.169606 kernel: rcu: RCU event tracing is enabled. Oct 2 19:24:58.169621 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:24:58.169637 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 19:24:58.169653 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:24:58.169668 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:24:58.169683 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:24:58.169698 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 19:24:58.169713 kernel: GICv3: 96 SPIs implemented Oct 2 19:24:58.169728 kernel: GICv3: 0 Extended SPIs implemented Oct 2 19:24:58.169744 kernel: GICv3: Distributor has no Range Selector support Oct 2 19:24:58.169763 kernel: Root IRQ handler: gic_handle_irq Oct 2 19:24:58.169778 kernel: GICv3: 16 PPIs implemented Oct 2 19:24:58.169793 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Oct 2 19:24:58.169808 kernel: ACPI: SRAT not present Oct 2 19:24:58.169823 kernel: ITS [mem 0x10080000-0x1009ffff] Oct 2 19:24:58.169839 kernel: ITS@0x0000000010080000: allocated 8192 Devices @4000a0000 (indirect, esz 8, psz 64K, shr 1) Oct 2 19:24:58.169854 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000b0000 (flat, esz 8, psz 64K, shr 1) Oct 2 19:24:58.169869 kernel: GICv3: using LPI property table @0x00000004000c0000 Oct 2 19:24:58.169884 kernel: ITS: Using hypervisor restricted LPI range [128] Oct 2 19:24:58.169900 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Oct 2 19:24:58.169915 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Oct 2 19:24:58.169934 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Oct 2 19:24:58.169950 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Oct 2 19:24:58.169987 kernel: Console: colour dummy device 80x25 Oct 2 19:24:58.170007 kernel: printk: console [tty1] enabled Oct 2 19:24:58.170023 kernel: ACPI: Core revision 20210730 Oct 2 19:24:58.170040 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Oct 2 19:24:58.170055 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:24:58.170071 kernel: LSM: Security Framework initializing Oct 2 19:24:58.170087 kernel: SELinux: Initializing. Oct 2 19:24:58.170102 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:24:58.170124 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:24:58.170139 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:24:58.170154 kernel: Platform MSI: ITS@0x10080000 domain created Oct 2 19:24:58.170170 kernel: PCI/MSI: ITS@0x10080000 domain created Oct 2 19:24:58.170185 kernel: Remapping and enabling EFI services. Oct 2 19:24:58.170200 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:24:58.170216 kernel: Detected PIPT I-cache on CPU1 Oct 2 19:24:58.170232 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Oct 2 19:24:58.170248 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Oct 2 19:24:58.170267 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Oct 2 19:24:58.170283 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:24:58.170298 kernel: SMP: Total of 2 processors activated. Oct 2 19:24:58.170313 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 19:24:58.170329 kernel: CPU features: detected: 32-bit EL1 Support Oct 2 19:24:58.170344 kernel: CPU features: detected: CRC32 instructions Oct 2 19:24:58.170359 kernel: CPU: All CPU(s) started at EL1 Oct 2 19:24:58.170375 kernel: alternatives: patching kernel code Oct 2 19:24:58.170390 kernel: devtmpfs: initialized Oct 2 19:24:58.170409 kernel: KASLR disabled due to lack of seed Oct 2 19:24:58.170425 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:24:58.170441 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:24:58.170466 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:24:58.170486 kernel: SMBIOS 3.0.0 present. Oct 2 19:24:58.170502 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Oct 2 19:24:58.170518 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:24:58.170534 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 19:24:58.170550 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 19:24:58.170566 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 19:24:58.170582 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:24:58.170599 kernel: audit: type=2000 audit(0.250:1): state=initialized audit_enabled=0 res=1 Oct 2 19:24:58.170619 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:24:58.170635 kernel: cpuidle: using governor menu Oct 2 19:24:58.170651 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 19:24:58.170667 kernel: ASID allocator initialised with 32768 entries Oct 2 19:24:58.170683 kernel: ACPI: bus type PCI registered Oct 2 19:24:58.170703 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:24:58.170718 kernel: Serial: AMBA PL011 UART driver Oct 2 19:24:58.170734 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:24:58.170750 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 19:24:58.170766 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:24:58.170782 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 19:24:58.170799 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:24:58.170815 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 19:24:58.170830 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:24:58.170851 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:24:58.170867 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:24:58.170883 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:24:58.170898 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:24:58.170914 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:24:58.170930 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:24:58.170946 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:24:58.170979 kernel: ACPI: Interpreter enabled Oct 2 19:24:58.171001 kernel: ACPI: Using GIC for interrupt routing Oct 2 19:24:58.171022 kernel: ACPI: MCFG table detected, 1 entries Oct 2 19:24:58.171038 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Oct 2 19:24:58.171443 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:24:58.171641 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 2 19:24:58.171854 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 2 19:24:58.172078 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Oct 2 19:24:58.181211 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Oct 2 19:24:58.181262 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Oct 2 19:24:58.181281 kernel: acpiphp: Slot [1] registered Oct 2 19:24:58.181299 kernel: acpiphp: Slot [2] registered Oct 2 19:24:58.181315 kernel: acpiphp: Slot [3] registered Oct 2 19:24:58.181331 kernel: acpiphp: Slot [4] registered Oct 2 19:24:58.181347 kernel: acpiphp: Slot [5] registered Oct 2 19:24:58.181363 kernel: acpiphp: Slot [6] registered Oct 2 19:24:58.181380 kernel: acpiphp: Slot [7] registered Oct 2 19:24:58.181396 kernel: acpiphp: Slot [8] registered Oct 2 19:24:58.181416 kernel: acpiphp: Slot [9] registered Oct 2 19:24:58.181433 kernel: acpiphp: Slot [10] registered Oct 2 19:24:58.181450 kernel: acpiphp: Slot [11] registered Oct 2 19:24:58.181465 kernel: acpiphp: Slot [12] registered Oct 2 19:24:58.181481 kernel: acpiphp: Slot [13] registered Oct 2 19:24:58.181497 kernel: acpiphp: Slot [14] registered Oct 2 19:24:58.181513 kernel: acpiphp: Slot [15] registered Oct 2 19:24:58.181529 kernel: acpiphp: Slot [16] registered Oct 2 19:24:58.181545 kernel: acpiphp: Slot [17] registered Oct 2 19:24:58.181561 kernel: acpiphp: Slot [18] registered Oct 2 19:24:58.181581 kernel: acpiphp: Slot [19] registered Oct 2 19:24:58.181597 kernel: acpiphp: Slot [20] registered Oct 2 19:24:58.181613 kernel: acpiphp: Slot [21] registered Oct 2 19:24:58.181629 kernel: acpiphp: Slot [22] registered Oct 2 19:24:58.181645 kernel: acpiphp: Slot [23] registered Oct 2 19:24:58.181661 kernel: acpiphp: Slot [24] registered Oct 2 19:24:58.181677 kernel: acpiphp: Slot [25] registered Oct 2 19:24:58.181693 kernel: acpiphp: Slot [26] registered Oct 2 19:24:58.181709 kernel: acpiphp: Slot [27] registered Oct 2 19:24:58.181728 kernel: acpiphp: Slot [28] registered Oct 2 19:24:58.181744 kernel: acpiphp: Slot [29] registered Oct 2 19:24:58.181760 kernel: acpiphp: Slot [30] registered Oct 2 19:24:58.181776 kernel: acpiphp: Slot [31] registered Oct 2 19:24:58.181792 kernel: PCI host bridge to bus 0000:00 Oct 2 19:24:58.194790 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Oct 2 19:24:58.195053 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 2 19:24:58.195234 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Oct 2 19:24:58.195416 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Oct 2 19:24:58.195633 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Oct 2 19:24:58.195873 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Oct 2 19:24:58.196105 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Oct 2 19:24:58.196318 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Oct 2 19:24:58.196513 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Oct 2 19:24:58.196713 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 19:24:58.197005 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Oct 2 19:24:58.197207 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Oct 2 19:24:58.197408 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Oct 2 19:24:58.197667 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Oct 2 19:24:58.197870 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 19:24:58.198116 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Oct 2 19:24:58.198326 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Oct 2 19:24:58.198528 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Oct 2 19:24:58.198724 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Oct 2 19:24:58.198919 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Oct 2 19:24:58.199135 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Oct 2 19:24:58.199312 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 2 19:24:58.199492 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Oct 2 19:24:58.199520 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 2 19:24:58.199538 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 2 19:24:58.199554 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 2 19:24:58.199571 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 2 19:24:58.199587 kernel: iommu: Default domain type: Translated Oct 2 19:24:58.199604 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 19:24:58.199620 kernel: vgaarb: loaded Oct 2 19:24:58.199636 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:24:58.199653 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:24:58.199673 kernel: PTP clock support registered Oct 2 19:24:58.199708 kernel: Registered efivars operations Oct 2 19:24:58.199727 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 19:24:58.199743 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:24:58.199760 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:24:58.199776 kernel: pnp: PnP ACPI init Oct 2 19:24:58.202945 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Oct 2 19:24:58.203050 kernel: pnp: PnP ACPI: found 1 devices Oct 2 19:24:58.203069 kernel: NET: Registered PF_INET protocol family Oct 2 19:24:58.203094 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:24:58.203111 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:24:58.203128 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:24:58.203144 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:24:58.203160 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:24:58.203177 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:24:58.203193 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:24:58.203209 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:24:58.203225 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:24:58.203246 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:24:58.203262 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Oct 2 19:24:58.203282 kernel: kvm [1]: HYP mode not available Oct 2 19:24:58.203298 kernel: Initialise system trusted keyrings Oct 2 19:24:58.203315 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:24:58.203331 kernel: Key type asymmetric registered Oct 2 19:24:58.203348 kernel: Asymmetric key parser 'x509' registered Oct 2 19:24:58.203364 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:24:58.203380 kernel: io scheduler mq-deadline registered Oct 2 19:24:58.203400 kernel: io scheduler kyber registered Oct 2 19:24:58.203416 kernel: io scheduler bfq registered Oct 2 19:24:58.203645 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Oct 2 19:24:58.203672 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 2 19:24:58.203706 kernel: ACPI: button: Power Button [PWRB] Oct 2 19:24:58.203725 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:24:58.203742 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Oct 2 19:24:58.203947 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Oct 2 19:24:58.203997 kernel: printk: console [ttyS0] disabled Oct 2 19:24:58.204017 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Oct 2 19:24:58.204033 kernel: printk: console [ttyS0] enabled Oct 2 19:24:58.204049 kernel: printk: bootconsole [uart0] disabled Oct 2 19:24:58.204065 kernel: thunder_xcv, ver 1.0 Oct 2 19:24:58.204081 kernel: thunder_bgx, ver 1.0 Oct 2 19:24:58.204097 kernel: nicpf, ver 1.0 Oct 2 19:24:58.204113 kernel: nicvf, ver 1.0 Oct 2 19:24:58.204331 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 19:24:58.204522 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T19:24:57 UTC (1696274697) Oct 2 19:24:58.204545 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:24:58.204561 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:24:58.204577 kernel: Segment Routing with IPv6 Oct 2 19:24:58.204594 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:24:58.204610 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:24:58.204626 kernel: Key type dns_resolver registered Oct 2 19:24:58.204644 kernel: registered taskstats version 1 Oct 2 19:24:58.204665 kernel: Loading compiled-in X.509 certificates Oct 2 19:24:58.204683 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 19:24:58.204699 kernel: Key type .fscrypt registered Oct 2 19:24:58.204715 kernel: Key type fscrypt-provisioning registered Oct 2 19:24:58.204731 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:24:58.204747 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:24:58.204763 kernel: ima: No architecture policies found Oct 2 19:24:58.204779 kernel: Freeing unused kernel memory: 34560K Oct 2 19:24:58.204795 kernel: Run /init as init process Oct 2 19:24:58.204815 kernel: with arguments: Oct 2 19:24:58.204831 kernel: /init Oct 2 19:24:58.204846 kernel: with environment: Oct 2 19:24:58.204862 kernel: HOME=/ Oct 2 19:24:58.204878 kernel: TERM=linux Oct 2 19:24:58.204894 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:24:58.204915 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:24:58.204936 systemd[1]: Detected virtualization amazon. Oct 2 19:24:58.204958 systemd[1]: Detected architecture arm64. Oct 2 19:24:58.211638 systemd[1]: Running in initrd. Oct 2 19:24:58.211668 systemd[1]: No hostname configured, using default hostname. Oct 2 19:24:58.211704 systemd[1]: Hostname set to . Oct 2 19:24:58.211725 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:24:58.211743 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:24:58.211762 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:24:58.211779 systemd[1]: Reached target cryptsetup.target. Oct 2 19:24:58.211808 systemd[1]: Reached target paths.target. Oct 2 19:24:58.211827 systemd[1]: Reached target slices.target. Oct 2 19:24:58.211846 systemd[1]: Reached target swap.target. Oct 2 19:24:58.211864 systemd[1]: Reached target timers.target. Oct 2 19:24:58.211884 systemd[1]: Listening on iscsid.socket. Oct 2 19:24:58.211903 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:24:58.211923 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:24:58.211942 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:24:58.212007 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:24:58.212029 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:24:58.212048 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:24:58.212065 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:24:58.212083 systemd[1]: Reached target sockets.target. Oct 2 19:24:58.212101 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:24:58.212119 systemd[1]: Finished network-cleanup.service. Oct 2 19:24:58.212136 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:24:58.212154 systemd[1]: Starting systemd-journald.service... Oct 2 19:24:58.212177 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:24:58.212194 systemd[1]: Starting systemd-resolved.service... Oct 2 19:24:58.212212 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:24:58.212230 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:24:58.212247 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:24:58.212265 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:24:58.212283 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:24:58.212301 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:24:58.212318 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:24:58.212342 kernel: audit: type=1130 audit(1696274698.184:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.212360 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:24:58.212381 systemd-journald[308]: Journal started Oct 2 19:24:58.212477 systemd-journald[308]: Runtime Journal (/run/log/journal/ec265da0d083654dd8837161f6283251) is 8.0M, max 75.4M, 67.4M free. Oct 2 19:24:58.184000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.135033 systemd-modules-load[309]: Inserted module 'overlay' Oct 2 19:24:58.215614 systemd[1]: Started systemd-journald.service. Oct 2 19:24:58.219534 systemd-modules-load[309]: Inserted module 'br_netfilter' Oct 2 19:24:58.220382 kernel: Bridge firewalling registered Oct 2 19:24:58.222000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.237000 kernel: audit: type=1130 audit(1696274698.222:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.241503 systemd-resolved[310]: Positive Trust Anchors: Oct 2 19:24:58.241529 systemd-resolved[310]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:24:58.241584 systemd-resolved[310]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:24:58.263993 kernel: SCSI subsystem initialized Oct 2 19:24:58.282229 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:24:58.282341 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:24:58.280851 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:24:58.293263 kernel: audit: type=1130 audit(1696274698.282:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.294565 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:24:58.303992 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:24:58.315267 systemd-modules-load[309]: Inserted module 'dm_multipath' Oct 2 19:24:58.319511 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:24:58.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.337781 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:24:58.344989 kernel: audit: type=1130 audit(1696274698.322:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.366012 dracut-cmdline[325]: dracut-dracut-053 Oct 2 19:24:58.370340 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:24:58.371000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.382998 kernel: audit: type=1130 audit(1696274698.371:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.386155 dracut-cmdline[325]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:24:58.628993 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:24:58.640012 kernel: iscsi: registered transport (tcp) Oct 2 19:24:58.666213 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:24:58.666283 kernel: QLogic iSCSI HBA Driver Oct 2 19:24:58.817043 kernel: random: crng init done Oct 2 19:24:58.816997 systemd-resolved[310]: Defaulting to hostname 'linux'. Oct 2 19:24:58.820817 systemd[1]: Started systemd-resolved.service. Oct 2 19:24:58.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.824135 systemd[1]: Reached target nss-lookup.target. Oct 2 19:24:58.834723 kernel: audit: type=1130 audit(1696274698.822:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.883257 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:24:58.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.887913 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:24:58.897126 kernel: audit: type=1130 audit(1696274698.884:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:58.980999 kernel: raid6: neonx8 gen() 6414 MB/s Oct 2 19:24:58.998996 kernel: raid6: neonx8 xor() 4548 MB/s Oct 2 19:24:59.016995 kernel: raid6: neonx4 gen() 6599 MB/s Oct 2 19:24:59.034995 kernel: raid6: neonx4 xor() 4695 MB/s Oct 2 19:24:59.052995 kernel: raid6: neonx2 gen() 5834 MB/s Oct 2 19:24:59.071003 kernel: raid6: neonx2 xor() 4391 MB/s Oct 2 19:24:59.088994 kernel: raid6: neonx1 gen() 4508 MB/s Oct 2 19:24:59.106997 kernel: raid6: neonx1 xor() 3577 MB/s Oct 2 19:24:59.124994 kernel: raid6: int64x8 gen() 3443 MB/s Oct 2 19:24:59.142994 kernel: raid6: int64x8 xor() 2041 MB/s Oct 2 19:24:59.160995 kernel: raid6: int64x4 gen() 3848 MB/s Oct 2 19:24:59.178994 kernel: raid6: int64x4 xor() 2162 MB/s Oct 2 19:24:59.196994 kernel: raid6: int64x2 gen() 3619 MB/s Oct 2 19:24:59.214995 kernel: raid6: int64x2 xor() 1921 MB/s Oct 2 19:24:59.232994 kernel: raid6: int64x1 gen() 2767 MB/s Oct 2 19:24:59.252568 kernel: raid6: int64x1 xor() 1437 MB/s Oct 2 19:24:59.252597 kernel: raid6: using algorithm neonx4 gen() 6599 MB/s Oct 2 19:24:59.252627 kernel: raid6: .... xor() 4695 MB/s, rmw enabled Oct 2 19:24:59.254408 kernel: raid6: using neon recovery algorithm Oct 2 19:24:59.273000 kernel: xor: measuring software checksum speed Oct 2 19:24:59.275996 kernel: 8regs : 9332 MB/sec Oct 2 19:24:59.277995 kernel: 32regs : 11099 MB/sec Oct 2 19:24:59.282245 kernel: arm64_neon : 9628 MB/sec Oct 2 19:24:59.282277 kernel: xor: using function: 32regs (11099 MB/sec) Oct 2 19:24:59.372008 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 19:24:59.410405 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:24:59.410000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.419000 audit: BPF prog-id=7 op=LOAD Oct 2 19:24:59.423932 kernel: audit: type=1130 audit(1696274699.410:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.423997 kernel: audit: type=1334 audit(1696274699.419:10): prog-id=7 op=LOAD Oct 2 19:24:59.422106 systemd[1]: Starting systemd-udevd.service... Oct 2 19:24:59.419000 audit: BPF prog-id=8 op=LOAD Oct 2 19:24:59.459374 systemd-udevd[507]: Using default interface naming scheme 'v252'. Oct 2 19:24:59.470143 systemd[1]: Started systemd-udevd.service. Oct 2 19:24:59.473325 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:24:59.469000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.535348 dracut-pre-trigger[512]: rd.md=0: removing MD RAID activation Oct 2 19:24:59.643721 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:24:59.644000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.648340 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:24:59.758638 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:24:59.759000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:59.917857 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 2 19:24:59.917918 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Oct 2 19:24:59.917943 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Oct 2 19:24:59.918226 kernel: nvme nvme0: pci function 0000:00:04.0 Oct 2 19:24:59.926079 kernel: ena 0000:00:05.0: ENA device version: 0.10 Oct 2 19:24:59.926406 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Oct 2 19:24:59.934987 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:6e:7d:b0:49:ab Oct 2 19:24:59.935277 kernel: nvme nvme0: 2/0/0 default/read/poll queues Oct 2 19:24:59.944844 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 19:24:59.944916 kernel: GPT:9289727 != 16777215 Oct 2 19:24:59.944941 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 19:24:59.947126 kernel: GPT:9289727 != 16777215 Oct 2 19:24:59.948434 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 19:24:59.951886 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:24:59.956418 (udev-worker)[563]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:25:00.027057 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (555) Oct 2 19:25:00.086584 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:25:00.167459 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:25:00.216244 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:25:00.243370 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:25:00.249272 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:25:00.273297 systemd[1]: Starting disk-uuid.service... Oct 2 19:25:00.294549 disk-uuid[667]: Primary Header is updated. Oct 2 19:25:00.294549 disk-uuid[667]: Secondary Entries is updated. Oct 2 19:25:00.294549 disk-uuid[667]: Secondary Header is updated. Oct 2 19:25:00.301994 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:25:00.314005 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:25:00.326999 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:25:01.331948 disk-uuid[668]: The operation has completed successfully. Oct 2 19:25:01.335219 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:25:01.615410 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:25:01.617000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:01.617000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:01.615610 systemd[1]: Finished disk-uuid.service. Oct 2 19:25:01.621805 systemd[1]: Starting verity-setup.service... Oct 2 19:25:01.677017 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 19:25:01.804737 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:25:01.810854 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:25:01.824308 systemd[1]: Finished verity-setup.service. Oct 2 19:25:01.836675 kernel: kauditd_printk_skb: 6 callbacks suppressed Oct 2 19:25:01.836711 kernel: audit: type=1130 audit(1696274701.822:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:01.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:01.918012 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:25:01.919323 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:25:01.920872 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:25:01.923886 systemd[1]: Starting ignition-setup.service... Oct 2 19:25:01.945399 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:25:01.966618 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:25:01.966683 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:25:01.968914 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:25:01.985012 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:25:02.019180 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:25:02.049382 systemd[1]: Finished ignition-setup.service. Oct 2 19:25:02.051000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:02.053800 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:25:02.063479 kernel: audit: type=1130 audit(1696274702.051:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:02.307469 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:25:02.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:02.316000 audit: BPF prog-id=9 op=LOAD Oct 2 19:25:02.321166 kernel: audit: type=1130 audit(1696274702.309:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:02.321224 kernel: audit: type=1334 audit(1696274702.316:20): prog-id=9 op=LOAD Oct 2 19:25:02.320088 systemd[1]: Starting systemd-networkd.service... Oct 2 19:25:02.378083 systemd-networkd[1179]: lo: Link UP Oct 2 19:25:02.378105 systemd-networkd[1179]: lo: Gained carrier Oct 2 19:25:02.381640 systemd-networkd[1179]: Enumeration completed Oct 2 19:25:02.383444 systemd-networkd[1179]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:25:02.386571 systemd[1]: Started systemd-networkd.service. Oct 2 19:25:02.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:02.390915 systemd[1]: Reached target network.target. Oct 2 19:25:02.401948 kernel: audit: type=1130 audit(1696274702.389:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:02.402931 systemd-networkd[1179]: eth0: Link UP Oct 2 19:25:02.402945 systemd-networkd[1179]: eth0: Gained carrier Oct 2 19:25:02.403790 systemd[1]: Starting iscsiuio.service... Oct 2 19:25:02.419211 systemd-networkd[1179]: eth0: DHCPv4 address 172.31.29.2/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:25:02.430354 systemd[1]: Started iscsiuio.service. Oct 2 19:25:02.436571 systemd[1]: Starting iscsid.service... Oct 2 19:25:02.434000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:02.447040 kernel: audit: type=1130 audit(1696274702.434:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:02.452125 iscsid[1187]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:25:02.452125 iscsid[1187]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:25:02.452125 iscsid[1187]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:25:02.452125 iscsid[1187]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:25:02.469716 iscsid[1187]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:25:02.469716 iscsid[1187]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:25:02.485566 systemd[1]: Started iscsid.service. Oct 2 19:25:02.490926 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:25:02.501591 kernel: audit: type=1130 audit(1696274702.486:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:02.486000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:02.541387 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:25:02.560385 kernel: audit: type=1130 audit(1696274702.539:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:02.539000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:02.542269 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:25:02.542941 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:25:02.544721 systemd[1]: Reached target remote-fs.target. Oct 2 19:25:02.557575 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:25:02.592600 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:25:02.591000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:02.603993 kernel: audit: type=1130 audit(1696274702.591:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:02.690848 ignition[1089]: Ignition 2.14.0 Oct 2 19:25:02.690876 ignition[1089]: Stage: fetch-offline Oct 2 19:25:02.691311 ignition[1089]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:25:02.692600 ignition[1089]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:25:02.711855 ignition[1089]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:25:02.714430 ignition[1089]: Ignition finished successfully Oct 2 19:25:02.717554 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:25:02.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:02.721220 systemd[1]: Starting ignition-fetch.service... Oct 2 19:25:02.739002 kernel: audit: type=1130 audit(1696274702.718:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:02.759428 ignition[1203]: Ignition 2.14.0 Oct 2 19:25:02.759458 ignition[1203]: Stage: fetch Oct 2 19:25:02.759819 ignition[1203]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:25:02.759878 ignition[1203]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:25:02.777217 ignition[1203]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:25:02.779942 ignition[1203]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:25:02.798662 ignition[1203]: INFO : PUT result: OK Oct 2 19:25:02.802240 ignition[1203]: DEBUG : parsed url from cmdline: "" Oct 2 19:25:02.804091 ignition[1203]: INFO : no config URL provided Oct 2 19:25:02.805771 ignition[1203]: INFO : reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:25:02.805771 ignition[1203]: INFO : no config at "/usr/lib/ignition/user.ign" Oct 2 19:25:02.805771 ignition[1203]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:25:02.813307 ignition[1203]: INFO : PUT result: OK Oct 2 19:25:02.815082 ignition[1203]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Oct 2 19:25:02.818160 ignition[1203]: INFO : GET result: OK Oct 2 19:25:02.819747 ignition[1203]: DEBUG : parsing config with SHA512: 4dc7f355cbf48a3776c856644dfbf4fea911ef12869f60ded22155355ce36f24029b8ecf390a9d9a9692b9de23c8cea110a3ba04daf3c6fe83e669f73ffa05ec Oct 2 19:25:02.860749 unknown[1203]: fetched base config from "system" Oct 2 19:25:02.860792 unknown[1203]: fetched base config from "system" Oct 2 19:25:02.860818 unknown[1203]: fetched user config from "aws" Oct 2 19:25:02.867235 ignition[1203]: fetch: fetch complete Oct 2 19:25:02.867272 ignition[1203]: fetch: fetch passed Oct 2 19:25:02.867365 ignition[1203]: Ignition finished successfully Oct 2 19:25:02.872373 systemd[1]: Finished ignition-fetch.service. Oct 2 19:25:02.875000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:02.879110 systemd[1]: Starting ignition-kargs.service... Oct 2 19:25:02.912394 ignition[1209]: Ignition 2.14.0 Oct 2 19:25:02.912422 ignition[1209]: Stage: kargs Oct 2 19:25:02.912776 ignition[1209]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:25:02.912835 ignition[1209]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:25:02.928943 ignition[1209]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:25:02.931459 ignition[1209]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:25:02.935022 ignition[1209]: INFO : PUT result: OK Oct 2 19:25:02.940336 ignition[1209]: kargs: kargs passed Oct 2 19:25:02.941946 ignition[1209]: Ignition finished successfully Oct 2 19:25:02.945221 systemd[1]: Finished ignition-kargs.service. Oct 2 19:25:02.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:02.949751 systemd[1]: Starting ignition-disks.service... Oct 2 19:25:02.979332 ignition[1215]: Ignition 2.14.0 Oct 2 19:25:02.979362 ignition[1215]: Stage: disks Oct 2 19:25:02.979749 ignition[1215]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:25:02.979810 ignition[1215]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:25:02.994900 ignition[1215]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:25:02.997592 ignition[1215]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:25:03.001396 ignition[1215]: INFO : PUT result: OK Oct 2 19:25:03.006883 ignition[1215]: disks: disks passed Oct 2 19:25:03.008535 ignition[1215]: Ignition finished successfully Oct 2 19:25:03.011830 systemd[1]: Finished ignition-disks.service. Oct 2 19:25:03.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:03.013867 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:25:03.015761 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:25:03.017474 systemd[1]: Reached target local-fs.target. Oct 2 19:25:03.019096 systemd[1]: Reached target sysinit.target. Oct 2 19:25:03.022213 systemd[1]: Reached target basic.target. Oct 2 19:25:03.032769 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:25:03.078451 systemd-fsck[1223]: ROOT: clean, 603/553520 files, 56011/553472 blocks Oct 2 19:25:03.087485 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:25:03.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:03.092824 systemd[1]: Mounting sysroot.mount... Oct 2 19:25:03.123997 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:25:03.126045 systemd[1]: Mounted sysroot.mount. Oct 2 19:25:03.126829 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:25:03.137296 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:25:03.153931 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:25:03.154031 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:25:03.154088 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:25:03.165539 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:25:03.180322 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:25:03.186652 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:25:03.217006 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1241) Oct 2 19:25:03.223344 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:25:03.223390 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:25:03.223414 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:25:03.225682 initrd-setup-root[1246]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:25:03.240010 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:25:03.243767 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:25:03.266664 initrd-setup-root[1272]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:25:03.285391 initrd-setup-root[1280]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:25:03.304717 initrd-setup-root[1288]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:25:03.607166 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:25:03.608000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:03.612349 systemd[1]: Starting ignition-mount.service... Oct 2 19:25:03.616868 systemd[1]: Starting sysroot-boot.service... Oct 2 19:25:03.648138 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:25:03.648302 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:25:03.677508 systemd[1]: Finished sysroot-boot.service. Oct 2 19:25:03.679000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:03.699124 ignition[1309]: INFO : Ignition 2.14.0 Oct 2 19:25:03.699124 ignition[1309]: INFO : Stage: mount Oct 2 19:25:03.702526 ignition[1309]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:25:03.702526 ignition[1309]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:25:03.720724 ignition[1309]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:25:03.720724 ignition[1309]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:25:03.729780 ignition[1309]: INFO : PUT result: OK Oct 2 19:25:03.734735 ignition[1309]: INFO : mount: mount passed Oct 2 19:25:03.736406 ignition[1309]: INFO : Ignition finished successfully Oct 2 19:25:03.739607 systemd[1]: Finished ignition-mount.service. Oct 2 19:25:03.740000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:03.744510 systemd[1]: Starting ignition-files.service... Oct 2 19:25:03.767766 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:25:03.792010 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1316) Oct 2 19:25:03.798085 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:25:03.798141 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:25:03.798165 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:25:03.806998 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:25:03.812014 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:25:03.845889 ignition[1335]: INFO : Ignition 2.14.0 Oct 2 19:25:03.845889 ignition[1335]: INFO : Stage: files Oct 2 19:25:03.849310 ignition[1335]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:25:03.849310 ignition[1335]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:25:03.867672 ignition[1335]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:25:03.870284 ignition[1335]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:25:03.874085 ignition[1335]: INFO : PUT result: OK Oct 2 19:25:03.878831 ignition[1335]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:25:03.883263 ignition[1335]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:25:03.883263 ignition[1335]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:25:03.924125 ignition[1335]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:25:03.927039 ignition[1335]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:25:03.930935 unknown[1335]: wrote ssh authorized keys file for user: core Oct 2 19:25:03.933307 ignition[1335]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:25:03.936955 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 19:25:03.941570 ignition[1335]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Oct 2 19:25:04.189142 systemd-networkd[1179]: eth0: Gained IPv6LL Oct 2 19:25:04.297630 ignition[1335]: INFO : GET result: OK Oct 2 19:25:04.929859 ignition[1335]: DEBUG : file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Oct 2 19:25:04.935006 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 19:25:04.935006 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 19:25:04.935006 ignition[1335]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Oct 2 19:25:05.222134 ignition[1335]: INFO : GET result: OK Oct 2 19:25:05.509609 ignition[1335]: DEBUG : file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Oct 2 19:25:05.519747 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 19:25:05.519747 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:25:05.519747 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:25:05.519747 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:25:05.519747 ignition[1335]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:25:05.539568 ignition[1335]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1865377418" Oct 2 19:25:05.546452 ignition[1335]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1865377418": device or resource busy Oct 2 19:25:05.546452 ignition[1335]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1865377418", trying btrfs: device or resource busy Oct 2 19:25:05.546452 ignition[1335]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1865377418" Oct 2 19:25:05.569548 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1338) Oct 2 19:25:05.572176 ignition[1335]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1865377418" Oct 2 19:25:05.586945 ignition[1335]: INFO : op(3): [started] unmounting "/mnt/oem1865377418" Oct 2 19:25:05.586945 ignition[1335]: INFO : op(3): [finished] unmounting "/mnt/oem1865377418" Oct 2 19:25:05.586945 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:25:05.595601 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:25:05.595601 ignition[1335]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubeadm: attempt #1 Oct 2 19:25:05.603919 systemd[1]: mnt-oem1865377418.mount: Deactivated successfully. Oct 2 19:25:05.686112 ignition[1335]: INFO : GET result: OK Oct 2 19:25:06.843291 ignition[1335]: DEBUG : file matches expected sum of: 45b3100984c979ba0f1c0df8f4211474c2d75ebe916e677dff5fc8e3b3697cf7a953da94e356f39684cc860dff6878b772b7514c55651c2f866d9efeef23f970 Oct 2 19:25:06.848434 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:25:06.848434 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:25:06.848434 ignition[1335]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubelet: attempt #1 Oct 2 19:25:06.901919 ignition[1335]: INFO : GET result: OK Oct 2 19:25:08.621638 ignition[1335]: DEBUG : file matches expected sum of: 71857ff499ae135fa478e1827a0ed8865e578a8d2b1e25876e914fd0beba03733801c0654bcd4c0567bafeb16887dafb2dbbe8d1116e6ea28dcd8366c142d348 Oct 2 19:25:08.627016 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:25:08.627016 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:25:08.627016 ignition[1335]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubectl: attempt #1 Oct 2 19:25:08.700627 ignition[1335]: INFO : GET result: OK Oct 2 19:25:09.586717 ignition[1335]: DEBUG : file matches expected sum of: 14be61ec35669a27acf2df0380afb85b9b42311d50ca1165718421c5f605df1119ec9ae314696a674051712e80deeaa65e62d2d62ed4d107fe99d0aaf419dafc Oct 2 19:25:09.591806 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:25:09.591806 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:25:09.591806 ignition[1335]: INFO : GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 19:25:09.686116 ignition[1335]: INFO : GET result: OK Oct 2 19:25:09.814759 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:25:09.818489 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:25:09.822135 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:25:09.825731 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:25:09.829480 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:25:09.833104 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:25:09.836859 ignition[1335]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:25:09.849932 ignition[1335]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1589558963" Oct 2 19:25:09.852936 ignition[1335]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1589558963": device or resource busy Oct 2 19:25:09.852936 ignition[1335]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1589558963", trying btrfs: device or resource busy Oct 2 19:25:09.852936 ignition[1335]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1589558963" Oct 2 19:25:09.871779 ignition[1335]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1589558963" Oct 2 19:25:09.877475 ignition[1335]: INFO : op(6): [started] unmounting "/mnt/oem1589558963" Oct 2 19:25:09.881876 systemd[1]: mnt-oem1589558963.mount: Deactivated successfully. Oct 2 19:25:09.884457 ignition[1335]: INFO : op(6): [finished] unmounting "/mnt/oem1589558963" Oct 2 19:25:09.886702 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:25:09.890514 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:25:09.894414 ignition[1335]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:25:09.907754 ignition[1335]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2394486331" Oct 2 19:25:09.907754 ignition[1335]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2394486331": device or resource busy Oct 2 19:25:09.907754 ignition[1335]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2394486331", trying btrfs: device or resource busy Oct 2 19:25:09.907754 ignition[1335]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2394486331" Oct 2 19:25:09.931554 ignition[1335]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2394486331" Oct 2 19:25:09.931554 ignition[1335]: INFO : op(9): [started] unmounting "/mnt/oem2394486331" Oct 2 19:25:09.931554 ignition[1335]: INFO : op(9): [finished] unmounting "/mnt/oem2394486331" Oct 2 19:25:09.931554 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:25:09.931554 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:25:09.931554 ignition[1335]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:25:09.917859 systemd[1]: mnt-oem2394486331.mount: Deactivated successfully. Oct 2 19:25:09.969063 ignition[1335]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem977038984" Oct 2 19:25:09.983763 ignition[1335]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem977038984": device or resource busy Oct 2 19:25:09.983763 ignition[1335]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem977038984", trying btrfs: device or resource busy Oct 2 19:25:09.983763 ignition[1335]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem977038984" Oct 2 19:25:09.998087 ignition[1335]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem977038984" Oct 2 19:25:10.001094 ignition[1335]: INFO : op(c): [started] unmounting "/mnt/oem977038984" Oct 2 19:25:10.003405 ignition[1335]: INFO : op(c): [finished] unmounting "/mnt/oem977038984" Oct 2 19:25:10.005699 ignition[1335]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:25:10.013006 ignition[1335]: INFO : files: op(10): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:25:10.013006 ignition[1335]: INFO : files: op(10): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:25:10.018797 ignition[1335]: INFO : files: op(11): [started] processing unit "amazon-ssm-agent.service" Oct 2 19:25:10.018797 ignition[1335]: INFO : files: op(11): op(12): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:25:10.025409 ignition[1335]: INFO : files: op(11): op(12): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:25:10.025409 ignition[1335]: INFO : files: op(11): [finished] processing unit "amazon-ssm-agent.service" Oct 2 19:25:10.032068 ignition[1335]: INFO : files: op(13): [started] processing unit "nvidia.service" Oct 2 19:25:10.032068 ignition[1335]: INFO : files: op(13): [finished] processing unit "nvidia.service" Oct 2 19:25:10.032068 ignition[1335]: INFO : files: op(14): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:25:10.032068 ignition[1335]: INFO : files: op(14): op(15): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:25:10.044079 ignition[1335]: INFO : files: op(14): op(15): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:25:10.044079 ignition[1335]: INFO : files: op(14): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:25:10.044079 ignition[1335]: INFO : files: op(16): [started] processing unit "prepare-critools.service" Oct 2 19:25:10.053845 ignition[1335]: INFO : files: op(16): op(17): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:25:10.053845 ignition[1335]: INFO : files: op(16): op(17): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:25:10.053845 ignition[1335]: INFO : files: op(16): [finished] processing unit "prepare-critools.service" Oct 2 19:25:10.053845 ignition[1335]: INFO : files: op(18): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:25:10.067571 ignition[1335]: INFO : files: op(18): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:25:10.067571 ignition[1335]: INFO : files: op(19): [started] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:25:10.073680 ignition[1335]: INFO : files: op(19): [finished] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:25:10.073680 ignition[1335]: INFO : files: op(1a): [started] setting preset to enabled for "nvidia.service" Oct 2 19:25:10.083060 ignition[1335]: INFO : files: op(1a): [finished] setting preset to enabled for "nvidia.service" Oct 2 19:25:10.083060 ignition[1335]: INFO : files: op(1b): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:25:10.083060 ignition[1335]: INFO : files: op(1b): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:25:10.083060 ignition[1335]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:25:10.083060 ignition[1335]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:25:10.123769 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 19:25:10.123823 kernel: audit: type=1130 audit(1696274710.094:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.093511 systemd[1]: Finished ignition-files.service. Oct 2 19:25:10.125561 ignition[1335]: INFO : files: createResultFile: createFiles: op(1d): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:25:10.125561 ignition[1335]: INFO : files: createResultFile: createFiles: op(1d): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:25:10.125561 ignition[1335]: INFO : files: files passed Oct 2 19:25:10.125561 ignition[1335]: INFO : Ignition finished successfully Oct 2 19:25:10.118491 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:25:10.138785 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:25:10.149480 systemd[1]: Starting ignition-quench.service... Oct 2 19:25:10.176355 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:25:10.176545 systemd[1]: Finished ignition-quench.service. Oct 2 19:25:10.203984 kernel: audit: type=1130 audit(1696274710.183:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.204025 kernel: audit: type=1131 audit(1696274710.192:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.183000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.192000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.206977 initrd-setup-root-after-ignition[1360]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:25:10.209938 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:25:10.233245 kernel: audit: type=1130 audit(1696274710.217:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.218432 systemd[1]: Reached target ignition-complete.target. Oct 2 19:25:10.233676 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:25:10.284616 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:25:10.286648 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:25:10.305911 kernel: audit: type=1130 audit(1696274710.287:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.305958 kernel: audit: type=1131 audit(1696274710.287:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.287000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.288667 systemd[1]: Reached target initrd-fs.target. Oct 2 19:25:10.307649 systemd[1]: Reached target initrd.target. Oct 2 19:25:10.312311 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:25:10.316382 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:25:10.359165 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:25:10.361000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.364436 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:25:10.373068 kernel: audit: type=1130 audit(1696274710.361:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.400673 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:25:10.404092 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:25:10.417342 systemd[1]: Stopped target timers.target. Oct 2 19:25:10.420372 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:25:10.420486 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:25:10.434615 kernel: audit: type=1131 audit(1696274710.424:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.424000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.425875 systemd[1]: Stopped target initrd.target. Oct 2 19:25:10.437803 systemd[1]: Stopped target basic.target. Oct 2 19:25:10.439395 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:25:10.441162 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:25:10.442920 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:25:10.471296 kernel: audit: type=1131 audit(1696274710.460:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.460000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.444747 systemd[1]: Stopped target remote-fs.target. Oct 2 19:25:10.446404 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:25:10.473000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.449367 systemd[1]: Stopped target sysinit.target. Oct 2 19:25:10.452636 systemd[1]: Stopped target local-fs.target. Oct 2 19:25:10.455753 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:25:10.459003 systemd[1]: Stopped target swap.target. Oct 2 19:25:10.460514 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:25:10.460617 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:25:10.462353 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:25:10.494191 kernel: audit: type=1131 audit(1696274710.473:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.471317 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:25:10.495000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.471400 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:25:10.475605 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:25:10.475692 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:25:10.501867 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:25:10.504000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.501991 systemd[1]: Stopped ignition-files.service. Oct 2 19:25:10.509940 systemd[1]: Stopping ignition-mount.service... Oct 2 19:25:10.523901 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:25:10.527193 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:25:10.534000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.539894 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:25:10.546000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.543276 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:25:10.543464 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:25:10.550701 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:25:10.550800 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:25:10.560583 ignition[1373]: INFO : Ignition 2.14.0 Oct 2 19:25:10.562038 ignition[1373]: INFO : Stage: umount Oct 2 19:25:10.563005 ignition[1373]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:25:10.566088 ignition[1373]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:25:10.588000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.591120 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:25:10.595437 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:25:10.606484 ignition[1373]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:25:10.602000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.602000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.612626 ignition[1373]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:25:10.616861 ignition[1373]: INFO : PUT result: OK Oct 2 19:25:10.616939 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:25:10.620937 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:25:10.623000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.627185 ignition[1373]: INFO : umount: umount passed Oct 2 19:25:10.639752 ignition[1373]: INFO : Ignition finished successfully Oct 2 19:25:10.642916 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:25:10.643000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.643144 systemd[1]: Stopped ignition-mount.service. Oct 2 19:25:10.651000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.646619 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:25:10.654000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.656000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.656000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.646710 systemd[1]: Stopped ignition-disks.service. Oct 2 19:25:10.653555 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:25:10.653645 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:25:10.655835 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:25:10.655911 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:25:10.658805 systemd[1]: Stopped target network.target. Oct 2 19:25:10.660449 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:25:10.660529 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:25:10.662414 systemd[1]: Stopped target paths.target. Oct 2 19:25:10.663954 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:25:10.671103 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:25:10.684848 systemd[1]: Stopped target slices.target. Oct 2 19:25:10.687712 systemd[1]: Stopped target sockets.target. Oct 2 19:25:10.689410 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:25:10.690804 systemd[1]: Closed iscsid.socket. Oct 2 19:25:10.695113 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:25:10.695175 systemd[1]: Closed iscsiuio.socket. Oct 2 19:25:10.698264 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:25:10.699581 systemd[1]: Stopped ignition-setup.service. Oct 2 19:25:10.701000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.702958 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:25:10.706631 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:25:10.705000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.710327 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:25:10.713545 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:25:10.717037 systemd-networkd[1179]: eth0: DHCPv6 lease lost Oct 2 19:25:10.721252 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:25:10.726000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.730000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.741000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.745000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.745000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:25:10.747000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:25:10.747000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.721477 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:25:10.727761 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:25:10.727954 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:25:10.734208 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:25:10.734297 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:25:10.737221 systemd[1]: Stopping network-cleanup.service... Oct 2 19:25:10.738705 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:25:10.738822 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:25:10.744268 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:25:10.744367 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:25:10.746305 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:25:10.782000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.746391 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:25:10.749837 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:25:10.792000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.775559 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:25:10.775870 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:25:10.797000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.797000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.803000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.787137 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:25:10.787311 systemd[1]: Stopped network-cleanup.service. Oct 2 19:25:10.794393 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:25:10.794474 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:25:10.796445 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:25:10.833000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.797367 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:25:10.800007 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:25:10.800093 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:25:10.801866 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:25:10.801942 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:25:10.803709 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:25:10.803786 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:25:10.806835 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:25:10.808579 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:25:10.808692 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:25:10.853236 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:25:10.857284 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:25:10.859000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.859000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:10.862698 systemd[1]: mnt-oem977038984.mount: Deactivated successfully. Oct 2 19:25:10.862864 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:25:10.866682 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:25:10.870026 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:25:10.874888 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:25:10.906184 systemd[1]: Switching root. Oct 2 19:25:10.935524 systemd-journald[308]: Journal stopped Oct 2 19:25:16.868909 systemd-journald[308]: Received SIGTERM from PID 1 (systemd). Oct 2 19:25:16.870950 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:25:16.872928 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:25:16.880009 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:25:16.880083 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:25:16.880116 kernel: SELinux: policy capability open_perms=1 Oct 2 19:25:16.880148 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:25:16.880179 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:25:16.880208 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:25:16.880240 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:25:16.880276 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:25:16.880308 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:25:16.880340 systemd[1]: Successfully loaded SELinux policy in 87.132ms. Oct 2 19:25:16.880560 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 19.801ms. Oct 2 19:25:16.880599 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:25:16.880631 systemd[1]: Detected virtualization amazon. Oct 2 19:25:16.880664 systemd[1]: Detected architecture arm64. Oct 2 19:25:16.880695 systemd[1]: Detected first boot. Oct 2 19:25:16.883025 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:25:16.883084 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:25:16.883120 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:25:16.883157 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:25:16.883193 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:25:16.883293 kernel: kauditd_printk_skb: 37 callbacks suppressed Oct 2 19:25:16.883328 kernel: audit: type=1334 audit(1696274716.348:81): prog-id=12 op=LOAD Oct 2 19:25:16.883366 kernel: audit: type=1334 audit(1696274716.348:82): prog-id=3 op=UNLOAD Oct 2 19:25:16.883396 kernel: audit: type=1334 audit(1696274716.350:83): prog-id=13 op=LOAD Oct 2 19:25:16.883424 kernel: audit: type=1334 audit(1696274716.353:84): prog-id=14 op=LOAD Oct 2 19:25:16.883455 kernel: audit: type=1334 audit(1696274716.353:85): prog-id=4 op=UNLOAD Oct 2 19:25:16.883502 kernel: audit: type=1334 audit(1696274716.353:86): prog-id=5 op=UNLOAD Oct 2 19:25:16.883538 kernel: audit: type=1334 audit(1696274716.358:87): prog-id=15 op=LOAD Oct 2 19:25:16.883571 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:25:16.883607 kernel: audit: type=1334 audit(1696274716.358:88): prog-id=12 op=UNLOAD Oct 2 19:25:16.883702 systemd[1]: Stopped iscsiuio.service. Oct 2 19:25:16.883738 kernel: audit: type=1334 audit(1696274716.361:89): prog-id=16 op=LOAD Oct 2 19:25:16.883768 kernel: audit: type=1334 audit(1696274716.363:90): prog-id=17 op=LOAD Oct 2 19:25:16.883801 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:25:16.883833 systemd[1]: Stopped iscsid.service. Oct 2 19:25:16.883863 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:25:16.883896 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:25:16.883928 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:25:16.883974 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:25:16.884017 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:25:16.884049 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 19:25:16.884082 systemd[1]: Created slice system-getty.slice. Oct 2 19:25:16.884114 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:25:16.884146 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:25:16.884176 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:25:16.884206 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:25:16.884240 systemd[1]: Created slice user.slice. Oct 2 19:25:16.884270 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:25:16.884306 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:25:16.884337 systemd[1]: Set up automount boot.automount. Oct 2 19:25:16.884366 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:25:16.884396 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:25:16.884428 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:25:16.884459 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:25:16.884489 systemd[1]: Reached target integritysetup.target. Oct 2 19:25:16.884519 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:25:16.884550 systemd[1]: Reached target remote-fs.target. Oct 2 19:25:16.884584 systemd[1]: Reached target slices.target. Oct 2 19:25:16.884614 systemd[1]: Reached target swap.target. Oct 2 19:25:16.884643 systemd[1]: Reached target torcx.target. Oct 2 19:25:16.884673 systemd[1]: Reached target veritysetup.target. Oct 2 19:25:16.884704 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:25:16.884736 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:25:16.884766 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:25:16.884797 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:25:16.884828 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:25:16.884857 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:25:16.884890 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:25:16.884921 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:25:16.884950 systemd[1]: Mounting media.mount... Oct 2 19:25:16.884998 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:25:16.885033 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:25:16.885065 systemd[1]: Mounting tmp.mount... Oct 2 19:25:16.885094 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:25:16.885124 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:25:16.885153 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:25:16.885187 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:25:16.885216 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:25:16.885248 systemd[1]: Starting modprobe@drm.service... Oct 2 19:25:16.885278 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:25:16.885308 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:25:16.885339 systemd[1]: Starting modprobe@loop.service... Oct 2 19:25:16.885370 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:25:16.885403 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:25:16.885502 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:25:16.885537 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:25:16.885567 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:25:16.885596 systemd[1]: Stopped systemd-journald.service. Oct 2 19:25:16.885626 systemd[1]: Starting systemd-journald.service... Oct 2 19:25:16.885657 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:25:16.885689 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:25:16.885718 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:25:16.885748 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:25:16.885779 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:25:16.885812 systemd[1]: Stopped verity-setup.service. Oct 2 19:25:16.885843 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:25:16.885873 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:25:16.885902 systemd[1]: Mounted media.mount. Oct 2 19:25:16.885931 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:25:16.885974 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:25:16.886010 systemd[1]: Mounted tmp.mount. Oct 2 19:25:16.886043 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:25:16.886076 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:25:16.886106 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:25:16.886139 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:25:16.886173 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:25:16.886202 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:25:16.886232 systemd[1]: Finished modprobe@drm.service. Oct 2 19:25:16.886265 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:25:16.886295 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:25:16.886328 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:25:16.886359 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:25:16.886389 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:25:16.886418 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:25:16.886446 kernel: loop: module loaded Oct 2 19:25:16.886475 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:25:16.886508 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:25:16.886538 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:25:16.886571 systemd[1]: Finished modprobe@loop.service. Oct 2 19:25:16.886609 kernel: fuse: init (API version 7.34) Oct 2 19:25:16.886644 systemd[1]: Reached target network-pre.target. Oct 2 19:25:16.886677 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:25:16.886707 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:25:16.886737 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:25:16.886775 systemd-journald[1483]: Journal started Oct 2 19:25:16.886881 systemd-journald[1483]: Runtime Journal (/run/log/journal/ec265da0d083654dd8837161f6283251) is 8.0M, max 75.4M, 67.4M free. Oct 2 19:25:11.643000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:25:16.913057 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:25:16.913131 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:25:16.913169 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:25:16.913216 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:25:16.913253 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:25:11.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:25:11.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:25:11.906000 audit: BPF prog-id=10 op=LOAD Oct 2 19:25:11.906000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:25:11.906000 audit: BPF prog-id=11 op=LOAD Oct 2 19:25:11.906000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:25:16.348000 audit: BPF prog-id=12 op=LOAD Oct 2 19:25:16.348000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:25:16.350000 audit: BPF prog-id=13 op=LOAD Oct 2 19:25:16.353000 audit: BPF prog-id=14 op=LOAD Oct 2 19:25:16.353000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:25:16.353000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:25:16.358000 audit: BPF prog-id=15 op=LOAD Oct 2 19:25:16.358000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:25:16.361000 audit: BPF prog-id=16 op=LOAD Oct 2 19:25:16.363000 audit: BPF prog-id=17 op=LOAD Oct 2 19:25:16.363000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:25:16.363000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:25:16.367000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.375000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:25:16.382000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.396000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.396000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.658000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.666000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.671000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.671000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.672000 audit: BPF prog-id=18 op=LOAD Oct 2 19:25:16.673000 audit: BPF prog-id=19 op=LOAD Oct 2 19:25:16.673000 audit: BPF prog-id=20 op=LOAD Oct 2 19:25:16.673000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:25:16.920319 systemd[1]: Started systemd-journald.service. Oct 2 19:25:16.673000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:25:16.719000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.753000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.764000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.773000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.773000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.782000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.782000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.793000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.793000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.797000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.849000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.863000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:25:16.863000 audit[1483]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=4 a1=fffff4e553b0 a2=4000 a3=1 items=0 ppid=1 pid=1483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:16.863000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:25:16.865000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.865000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.908000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.908000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:12.182810 /usr/lib/systemd/system-generators/torcx-generator[1408]: time="2023-10-02T19:25:12Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:25:16.347137 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:25:16.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:12.184098 /usr/lib/systemd/system-generators/torcx-generator[1408]: time="2023-10-02T19:25:12Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:25:16.367398 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:25:12.184149 /usr/lib/systemd/system-generators/torcx-generator[1408]: time="2023-10-02T19:25:12Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:25:16.926994 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:25:12.184216 /usr/lib/systemd/system-generators/torcx-generator[1408]: time="2023-10-02T19:25:12Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:25:16.938423 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:25:12.184241 /usr/lib/systemd/system-generators/torcx-generator[1408]: time="2023-10-02T19:25:12Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:25:12.184303 /usr/lib/systemd/system-generators/torcx-generator[1408]: time="2023-10-02T19:25:12Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:25:12.184334 /usr/lib/systemd/system-generators/torcx-generator[1408]: time="2023-10-02T19:25:12Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:25:12.184740 /usr/lib/systemd/system-generators/torcx-generator[1408]: time="2023-10-02T19:25:12Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:25:12.184821 /usr/lib/systemd/system-generators/torcx-generator[1408]: time="2023-10-02T19:25:12Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:25:12.184856 /usr/lib/systemd/system-generators/torcx-generator[1408]: time="2023-10-02T19:25:12Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:25:12.185735 /usr/lib/systemd/system-generators/torcx-generator[1408]: time="2023-10-02T19:25:12Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:25:12.185812 /usr/lib/systemd/system-generators/torcx-generator[1408]: time="2023-10-02T19:25:12Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:25:12.185856 /usr/lib/systemd/system-generators/torcx-generator[1408]: time="2023-10-02T19:25:12Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:25:12.185896 /usr/lib/systemd/system-generators/torcx-generator[1408]: time="2023-10-02T19:25:12Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:25:12.185941 /usr/lib/systemd/system-generators/torcx-generator[1408]: time="2023-10-02T19:25:12Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:25:16.957955 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:25:16.959000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:12.186023 /usr/lib/systemd/system-generators/torcx-generator[1408]: time="2023-10-02T19:25:12Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:25:15.555706 /usr/lib/systemd/system-generators/torcx-generator[1408]: time="2023-10-02T19:25:15Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:25:15.556288 /usr/lib/systemd/system-generators/torcx-generator[1408]: time="2023-10-02T19:25:15Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:25:15.556550 /usr/lib/systemd/system-generators/torcx-generator[1408]: time="2023-10-02T19:25:15Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:25:15.557041 /usr/lib/systemd/system-generators/torcx-generator[1408]: time="2023-10-02T19:25:15Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:25:15.557163 /usr/lib/systemd/system-generators/torcx-generator[1408]: time="2023-10-02T19:25:15Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:25:15.557301 /usr/lib/systemd/system-generators/torcx-generator[1408]: time="2023-10-02T19:25:15Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:25:16.967000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:16.966390 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:25:16.968675 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:25:16.981583 systemd-journald[1483]: Time spent on flushing to /var/log/journal/ec265da0d083654dd8837161f6283251 is 78.663ms for 1153 entries. Oct 2 19:25:16.981583 systemd-journald[1483]: System Journal (/var/log/journal/ec265da0d083654dd8837161f6283251) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:25:17.092267 systemd-journald[1483]: Received client request to flush runtime journal. Oct 2 19:25:17.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:17.082497 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:25:17.086706 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:25:17.097000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:17.096752 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:25:17.128453 udevadm[1513]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 19:25:17.161155 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:25:17.175000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:17.180442 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:25:17.283000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:17.282840 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:25:17.894036 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:25:17.894000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:17.896000 audit: BPF prog-id=21 op=LOAD Oct 2 19:25:17.896000 audit: BPF prog-id=22 op=LOAD Oct 2 19:25:17.896000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:25:17.896000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:25:17.898327 systemd[1]: Starting systemd-udevd.service... Oct 2 19:25:17.946990 systemd-udevd[1528]: Using default interface naming scheme 'v252'. Oct 2 19:25:17.987943 systemd[1]: Started systemd-udevd.service. Oct 2 19:25:17.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:17.992000 audit: BPF prog-id=23 op=LOAD Oct 2 19:25:17.997312 systemd[1]: Starting systemd-networkd.service... Oct 2 19:25:18.009000 audit: BPF prog-id=24 op=LOAD Oct 2 19:25:18.010000 audit: BPF prog-id=25 op=LOAD Oct 2 19:25:18.010000 audit: BPF prog-id=26 op=LOAD Oct 2 19:25:18.012379 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:25:18.126885 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:25:18.140150 systemd[1]: Started systemd-userdbd.service. Oct 2 19:25:18.142000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:18.190553 (udev-worker)[1529]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:25:18.344906 systemd-networkd[1535]: lo: Link UP Oct 2 19:25:18.345467 systemd-networkd[1535]: lo: Gained carrier Oct 2 19:25:18.346603 systemd-networkd[1535]: Enumeration completed Oct 2 19:25:18.347029 systemd[1]: Started systemd-networkd.service. Oct 2 19:25:18.350708 systemd-networkd[1535]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:25:18.349000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:18.352958 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:25:18.365002 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:25:18.365500 systemd-networkd[1535]: eth0: Link UP Oct 2 19:25:18.365931 systemd-networkd[1535]: eth0: Gained carrier Oct 2 19:25:18.379282 systemd-networkd[1535]: eth0: DHCPv4 address 172.31.29.2/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:25:18.399102 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1530) Oct 2 19:25:18.622293 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:25:18.625125 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:25:18.625000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:18.629698 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:25:18.719129 lvm[1645]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:25:18.759019 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:25:18.759000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:18.761159 systemd[1]: Reached target cryptsetup.target. Oct 2 19:25:18.765239 systemd[1]: Starting lvm2-activation.service... Oct 2 19:25:18.779996 lvm[1646]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:25:18.819012 systemd[1]: Finished lvm2-activation.service. Oct 2 19:25:18.819000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:18.821067 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:25:18.822888 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:25:18.822931 systemd[1]: Reached target local-fs.target. Oct 2 19:25:18.824824 systemd[1]: Reached target machines.target. Oct 2 19:25:18.839727 systemd[1]: Starting ldconfig.service... Oct 2 19:25:18.842206 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:25:18.842519 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:25:18.845644 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:25:18.852078 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:25:18.856520 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:25:18.858595 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:25:18.858735 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:25:18.861150 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:25:18.900171 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1648 (bootctl) Oct 2 19:25:18.902516 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:25:18.932852 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:25:18.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:18.964562 systemd-tmpfiles[1651]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:25:19.008047 systemd-tmpfiles[1651]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:25:19.025260 systemd-tmpfiles[1651]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:25:19.053951 systemd-fsck[1657]: fsck.fat 4.2 (2021-01-31) Oct 2 19:25:19.053951 systemd-fsck[1657]: /dev/nvme0n1p1: 236 files, 113463/258078 clusters Oct 2 19:25:19.058941 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:25:19.060000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:19.063824 systemd[1]: Mounting boot.mount... Oct 2 19:25:19.099749 systemd[1]: Mounted boot.mount. Oct 2 19:25:19.123238 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:25:19.124000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:19.345621 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:25:19.346000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:19.362000 audit: BPF prog-id=27 op=LOAD Oct 2 19:25:19.349993 systemd[1]: Starting audit-rules.service... Oct 2 19:25:19.354039 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:25:19.359905 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:25:19.368000 audit: BPF prog-id=28 op=LOAD Oct 2 19:25:19.366308 systemd[1]: Starting systemd-resolved.service... Oct 2 19:25:19.372281 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:25:19.378830 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:25:19.409337 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:25:19.410000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:19.411439 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:25:19.421000 audit[1676]: SYSTEM_BOOT pid=1676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:25:19.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:19.432429 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:25:19.494000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:19.493351 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:25:19.565145 systemd-resolved[1674]: Positive Trust Anchors: Oct 2 19:25:19.565677 systemd-resolved[1674]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:25:19.567945 systemd-resolved[1674]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:25:19.570223 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:25:19.571000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:19.572252 systemd[1]: Reached target time-set.target. Oct 2 19:25:19.633130 systemd-resolved[1674]: Defaulting to hostname 'linux'. Oct 2 19:25:19.637239 systemd[1]: Started systemd-resolved.service. Oct 2 19:25:19.638000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:19.639298 systemd[1]: Reached target network.target. Oct 2 19:25:19.641093 systemd[1]: Reached target nss-lookup.target. Oct 2 19:25:19.677000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:25:19.677000 audit[1692]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd4a3fd00 a2=420 a3=0 items=0 ppid=1671 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:19.677000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:25:19.679266 augenrules[1692]: No rules Oct 2 19:25:19.681205 systemd[1]: Finished audit-rules.service. Oct 2 19:25:19.815180 systemd-timesyncd[1675]: Contacted time server 199.68.201.235:123 (0.flatcar.pool.ntp.org). Oct 2 19:25:19.815400 systemd-timesyncd[1675]: Initial clock synchronization to Mon 2023-10-02 19:25:20.193843 UTC. Oct 2 19:25:20.061251 systemd-networkd[1535]: eth0: Gained IPv6LL Oct 2 19:25:20.065731 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:25:20.068797 systemd[1]: Reached target network-online.target. Oct 2 19:25:20.234061 ldconfig[1647]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:25:20.345355 systemd[1]: Finished ldconfig.service. Oct 2 19:25:20.351545 systemd[1]: Starting systemd-update-done.service... Oct 2 19:25:20.462085 systemd[1]: Finished systemd-update-done.service. Oct 2 19:25:20.464260 systemd[1]: Reached target sysinit.target. Oct 2 19:25:20.466287 systemd[1]: Started motdgen.path. Oct 2 19:25:20.467839 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:25:20.470552 systemd[1]: Started logrotate.timer. Oct 2 19:25:20.472647 systemd[1]: Started mdadm.timer. Oct 2 19:25:20.474174 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:25:20.476027 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:25:20.476107 systemd[1]: Reached target paths.target. Oct 2 19:25:20.477693 systemd[1]: Reached target timers.target. Oct 2 19:25:20.479777 systemd[1]: Listening on dbus.socket. Oct 2 19:25:20.483350 systemd[1]: Starting docker.socket... Oct 2 19:25:20.510395 systemd[1]: Listening on sshd.socket. Oct 2 19:25:20.512486 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:25:20.513386 systemd[1]: Listening on docker.socket. Oct 2 19:25:20.515286 systemd[1]: Reached target sockets.target. Oct 2 19:25:20.517114 systemd[1]: Reached target basic.target. Oct 2 19:25:20.519419 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:25:20.519491 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:25:20.522629 systemd[1]: Started amazon-ssm-agent.service. Oct 2 19:25:20.527027 systemd[1]: Starting containerd.service... Oct 2 19:25:20.533602 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 19:25:20.538301 systemd[1]: Starting dbus.service... Oct 2 19:25:20.544550 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:25:20.552184 systemd[1]: Starting extend-filesystems.service... Oct 2 19:25:20.554042 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:25:20.558274 systemd[1]: Starting motdgen.service... Oct 2 19:25:20.562961 systemd[1]: Started nvidia.service. Oct 2 19:25:20.567377 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:25:20.572637 systemd[1]: Starting prepare-critools.service... Oct 2 19:25:20.576804 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:25:20.584302 systemd[1]: Starting sshd-keygen.service... Oct 2 19:25:20.593448 systemd[1]: Starting systemd-logind.service... Oct 2 19:25:20.595153 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:25:20.595290 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:25:20.596786 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:25:20.600021 systemd[1]: Starting update-engine.service... Oct 2 19:25:20.604183 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:25:20.647511 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:25:20.647870 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:25:20.698507 jq[1724]: true Oct 2 19:25:20.707542 jq[1714]: false Oct 2 19:25:20.737397 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:25:20.737824 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:25:20.779055 extend-filesystems[1715]: Found nvme0n1 Oct 2 19:25:20.779055 extend-filesystems[1715]: Found nvme0n1p1 Oct 2 19:25:20.779055 extend-filesystems[1715]: Found nvme0n1p2 Oct 2 19:25:20.779055 extend-filesystems[1715]: Found nvme0n1p3 Oct 2 19:25:20.779055 extend-filesystems[1715]: Found usr Oct 2 19:25:20.818132 extend-filesystems[1715]: Found nvme0n1p4 Oct 2 19:25:20.818132 extend-filesystems[1715]: Found nvme0n1p6 Oct 2 19:25:20.818132 extend-filesystems[1715]: Found nvme0n1p7 Oct 2 19:25:20.818132 extend-filesystems[1715]: Found nvme0n1p9 Oct 2 19:25:20.818132 extend-filesystems[1715]: Checking size of /dev/nvme0n1p9 Oct 2 19:25:20.859602 tar[1727]: ./ Oct 2 19:25:20.859602 tar[1727]: ./loopback Oct 2 19:25:20.860179 jq[1737]: true Oct 2 19:25:20.867040 tar[1726]: crictl Oct 2 19:25:20.875528 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:25:20.875935 systemd[1]: Finished motdgen.service. Oct 2 19:25:21.083541 systemd-logind[1722]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 19:25:21.086674 systemd-logind[1722]: New seat seat0. Oct 2 19:25:21.171207 amazon-ssm-agent[1710]: 2023/10/02 19:25:21 Failed to load instance info from vault. RegistrationKey does not exist. Oct 2 19:25:21.174329 tar[1727]: ./bandwidth Oct 2 19:25:21.188814 amazon-ssm-agent[1710]: Initializing new seelog logger Oct 2 19:25:21.207935 env[1738]: time="2023-10-02T19:25:21.207838807Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:25:21.221668 dbus-daemon[1713]: [system] SELinux support is enabled Oct 2 19:25:21.223474 extend-filesystems[1715]: Resized partition /dev/nvme0n1p9 Oct 2 19:25:21.226170 systemd[1]: Started dbus.service. Oct 2 19:25:21.231227 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:25:21.231288 systemd[1]: Reached target system-config.target. Oct 2 19:25:21.233283 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:25:21.233334 systemd[1]: Reached target user-config.target. Oct 2 19:25:21.241731 extend-filesystems[1780]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 19:25:21.255342 amazon-ssm-agent[1710]: New Seelog Logger Creation Complete Oct 2 19:25:21.255342 amazon-ssm-agent[1710]: 2023/10/02 19:25:21 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:25:21.255342 amazon-ssm-agent[1710]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:25:21.263147 amazon-ssm-agent[1710]: 2023/10/02 19:25:21 processing appconfig overrides Oct 2 19:25:21.269292 dbus-daemon[1713]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.4' (uid=244 pid=1535 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Oct 2 19:25:21.269340 systemd[1]: Started systemd-logind.service. Oct 2 19:25:21.288681 systemd[1]: Starting systemd-hostnamed.service... Oct 2 19:25:21.305048 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Oct 2 19:25:21.327156 bash[1775]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:25:21.371510 update_engine[1723]: I1002 19:25:21.351361 1723 main.cc:92] Flatcar Update Engine starting Oct 2 19:25:21.371510 update_engine[1723]: I1002 19:25:21.358091 1723 update_check_scheduler.cc:74] Next update check in 2m14s Oct 2 19:25:21.329075 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:25:21.357952 systemd[1]: Started update-engine.service. Oct 2 19:25:21.373977 systemd[1]: Started locksmithd.service. Oct 2 19:25:21.385051 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Oct 2 19:25:21.412676 extend-filesystems[1780]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Oct 2 19:25:21.412676 extend-filesystems[1780]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 2 19:25:21.412676 extend-filesystems[1780]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Oct 2 19:25:21.423251 extend-filesystems[1715]: Resized filesystem in /dev/nvme0n1p9 Oct 2 19:25:21.429919 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:25:21.430311 systemd[1]: Finished extend-filesystems.service. Oct 2 19:25:21.476504 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 19:25:21.486431 env[1738]: time="2023-10-02T19:25:21.486343702Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:25:21.486690 env[1738]: time="2023-10-02T19:25:21.486639587Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:25:21.520804 env[1738]: time="2023-10-02T19:25:21.520693696Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:25:21.520804 env[1738]: time="2023-10-02T19:25:21.520792887Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:25:21.521520 env[1738]: time="2023-10-02T19:25:21.521456966Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:25:21.521636 env[1738]: time="2023-10-02T19:25:21.521513691Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:25:21.521636 env[1738]: time="2023-10-02T19:25:21.521575202Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:25:21.521636 env[1738]: time="2023-10-02T19:25:21.521602671Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:25:21.521916 env[1738]: time="2023-10-02T19:25:21.521868175Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:25:21.523168 env[1738]: time="2023-10-02T19:25:21.523107290Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:25:21.524043 env[1738]: time="2023-10-02T19:25:21.523948667Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:25:21.524574 env[1738]: time="2023-10-02T19:25:21.524038473Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:25:21.524800 env[1738]: time="2023-10-02T19:25:21.524746929Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:25:21.524899 env[1738]: time="2023-10-02T19:25:21.524796756Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:25:21.540821 env[1738]: time="2023-10-02T19:25:21.540720365Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:25:21.540993 env[1738]: time="2023-10-02T19:25:21.540825855Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:25:21.540993 env[1738]: time="2023-10-02T19:25:21.540888828Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:25:21.541230 env[1738]: time="2023-10-02T19:25:21.541164255Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:25:21.541307 env[1738]: time="2023-10-02T19:25:21.541242925Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:25:21.541307 env[1738]: time="2023-10-02T19:25:21.541280117Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:25:21.541427 env[1738]: time="2023-10-02T19:25:21.541314185Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:25:21.542114 env[1738]: time="2023-10-02T19:25:21.541822085Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:25:21.542224 env[1738]: time="2023-10-02T19:25:21.542139116Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:25:21.542224 env[1738]: time="2023-10-02T19:25:21.542181819Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:25:21.542224 env[1738]: time="2023-10-02T19:25:21.542214599Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:25:21.542395 env[1738]: time="2023-10-02T19:25:21.542246817Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:25:21.542533 env[1738]: time="2023-10-02T19:25:21.542488151Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:25:21.542722 env[1738]: time="2023-10-02T19:25:21.542680747Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:25:21.543280 env[1738]: time="2023-10-02T19:25:21.543238686Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:25:21.543350 env[1738]: time="2023-10-02T19:25:21.543301760Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:25:21.543424 env[1738]: time="2023-10-02T19:25:21.543345438Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:25:21.543554 env[1738]: time="2023-10-02T19:25:21.543511889Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:25:21.543630 env[1738]: time="2023-10-02T19:25:21.543558066Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:25:21.543630 env[1738]: time="2023-10-02T19:25:21.543595670Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:25:21.543759 env[1738]: time="2023-10-02T19:25:21.543625864Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:25:21.543759 env[1738]: time="2023-10-02T19:25:21.543657007Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:25:21.543759 env[1738]: time="2023-10-02T19:25:21.543689987Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:25:21.543759 env[1738]: time="2023-10-02T19:25:21.543719743Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:25:21.543759 env[1738]: time="2023-10-02T19:25:21.543750774Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:25:21.544071 env[1738]: time="2023-10-02T19:25:21.543784641Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:25:21.544186 env[1738]: time="2023-10-02T19:25:21.544138588Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:25:21.544260 env[1738]: time="2023-10-02T19:25:21.544192352Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:25:21.544327 env[1738]: time="2023-10-02T19:25:21.544252688Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:25:21.544327 env[1738]: time="2023-10-02T19:25:21.544285481Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:25:21.544448 env[1738]: time="2023-10-02T19:25:21.544348230Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:25:21.544448 env[1738]: time="2023-10-02T19:25:21.544380348Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:25:21.544558 env[1738]: time="2023-10-02T19:25:21.544445171Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:25:21.544558 env[1738]: time="2023-10-02T19:25:21.544535226Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:25:21.554952 env[1738]: time="2023-10-02T19:25:21.553895330Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:25:21.556338 env[1738]: time="2023-10-02T19:25:21.554995638Z" level=info msg="Connect containerd service" Oct 2 19:25:21.556338 env[1738]: time="2023-10-02T19:25:21.555110225Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:25:21.562213 env[1738]: time="2023-10-02T19:25:21.562113097Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:25:21.563253 env[1738]: time="2023-10-02T19:25:21.563195371Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:25:21.563416 env[1738]: time="2023-10-02T19:25:21.563372220Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:25:21.563650 systemd[1]: Started containerd.service. Oct 2 19:25:21.569356 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:25:21.573701 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:25:21.581460 env[1738]: time="2023-10-02T19:25:21.581375197Z" level=info msg="Start subscribing containerd event" Oct 2 19:25:21.581776 env[1738]: time="2023-10-02T19:25:21.581726795Z" level=info msg="Start recovering state" Oct 2 19:25:21.582285 env[1738]: time="2023-10-02T19:25:21.582237545Z" level=info msg="Start event monitor" Oct 2 19:25:21.582677 env[1738]: time="2023-10-02T19:25:21.582518745Z" level=info msg="Start snapshots syncer" Oct 2 19:25:21.582775 env[1738]: time="2023-10-02T19:25:21.582673586Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:25:21.582842 env[1738]: time="2023-10-02T19:25:21.582699493Z" level=info msg="Start streaming server" Oct 2 19:25:21.583372 env[1738]: time="2023-10-02T19:25:21.581606284Z" level=info msg="containerd successfully booted in 0.384152s" Oct 2 19:25:21.611694 tar[1727]: ./ptp Oct 2 19:25:21.783365 dbus-daemon[1713]: [system] Successfully activated service 'org.freedesktop.hostname1' Oct 2 19:25:21.783642 systemd[1]: Started systemd-hostnamed.service. Oct 2 19:25:21.792715 dbus-daemon[1713]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1786 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Oct 2 19:25:21.797648 systemd[1]: Starting polkit.service... Oct 2 19:25:21.846409 coreos-metadata[1712]: Oct 02 19:25:21.845 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Oct 2 19:25:21.850783 coreos-metadata[1712]: Oct 02 19:25:21.850 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Oct 2 19:25:21.851597 coreos-metadata[1712]: Oct 02 19:25:21.851 INFO Fetch successful Oct 2 19:25:21.851715 coreos-metadata[1712]: Oct 02 19:25:21.851 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 19:25:21.852684 coreos-metadata[1712]: Oct 02 19:25:21.852 INFO Fetch successful Oct 2 19:25:21.858264 unknown[1712]: wrote ssh authorized keys file for user: core Oct 2 19:25:21.893595 polkitd[1813]: Started polkitd version 121 Oct 2 19:25:21.895287 update-ssh-keys[1826]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:25:21.896512 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 19:25:21.924466 tar[1727]: ./vlan Oct 2 19:25:21.949179 polkitd[1813]: Loading rules from directory /etc/polkit-1/rules.d Oct 2 19:25:21.955607 polkitd[1813]: Loading rules from directory /usr/share/polkit-1/rules.d Oct 2 19:25:21.963429 polkitd[1813]: Finished loading, compiling and executing 2 rules Oct 2 19:25:21.966038 dbus-daemon[1713]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Oct 2 19:25:21.966324 systemd[1]: Started polkit.service. Oct 2 19:25:21.970611 polkitd[1813]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Oct 2 19:25:22.034636 systemd-hostnamed[1786]: Hostname set to (transient) Oct 2 19:25:22.034807 systemd-resolved[1674]: System hostname changed to 'ip-172-31-29-2'. Oct 2 19:25:22.101023 tar[1727]: ./host-device Oct 2 19:25:22.240424 tar[1727]: ./tuning Oct 2 19:25:22.261774 amazon-ssm-agent[1710]: 2023-10-02 19:25:22 INFO Entering SSM Agent hibernate - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-04418a715ef7cb675 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-04418a715ef7cb675 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:25:22.261774 amazon-ssm-agent[1710]: status code: 400, request id: 032f00fd-4306-45ba-90f7-4aa33b8c7193 Oct 2 19:25:22.261774 amazon-ssm-agent[1710]: 2023-10-02 19:25:22 INFO Agent is in hibernate mode. Reducing logging. Logging will be reduced to one log per backoff period Oct 2 19:25:22.370496 tar[1727]: ./vrf Oct 2 19:25:22.508209 tar[1727]: ./sbr Oct 2 19:25:22.653821 tar[1727]: ./tap Oct 2 19:25:22.803281 tar[1727]: ./dhcp Oct 2 19:25:22.995537 systemd[1]: Finished prepare-critools.service. Oct 2 19:25:23.056587 tar[1727]: ./static Oct 2 19:25:23.104226 tar[1727]: ./firewall Oct 2 19:25:23.176880 tar[1727]: ./macvlan Oct 2 19:25:23.244480 tar[1727]: ./dummy Oct 2 19:25:23.309685 tar[1727]: ./bridge Oct 2 19:25:23.380856 tar[1727]: ./ipvlan Oct 2 19:25:23.445938 tar[1727]: ./portmap Oct 2 19:25:23.508486 tar[1727]: ./host-local Oct 2 19:25:23.593677 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:25:23.649648 locksmithd[1790]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:25:28.820412 sshd_keygen[1733]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:25:28.879394 systemd[1]: Finished sshd-keygen.service. Oct 2 19:25:28.884222 systemd[1]: Starting issuegen.service... Oct 2 19:25:28.903156 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:25:28.903518 systemd[1]: Finished issuegen.service. Oct 2 19:25:28.908103 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:25:28.930902 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:25:28.935627 systemd[1]: Started getty@tty1.service. Oct 2 19:25:28.940535 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:25:28.942801 systemd[1]: Reached target getty.target. Oct 2 19:25:28.944644 systemd[1]: Reached target multi-user.target. Oct 2 19:25:28.949134 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:25:28.973618 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:25:28.973973 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:25:28.976363 systemd[1]: Startup finished in 1.186s (kernel) + 13.932s (initrd) + 17.443s (userspace) = 32.562s. Oct 2 19:25:30.202569 systemd[1]: Created slice system-sshd.slice. Oct 2 19:25:30.205058 systemd[1]: Started sshd@0-172.31.29.2:22-139.178.89.65:55512.service. Oct 2 19:25:30.420641 sshd[1922]: Accepted publickey for core from 139.178.89.65 port 55512 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:25:30.425889 sshd[1922]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:30.443755 systemd[1]: Created slice user-500.slice. Oct 2 19:25:30.446768 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:25:30.454100 systemd-logind[1722]: New session 1 of user core. Oct 2 19:25:30.475677 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:25:30.479134 systemd[1]: Starting user@500.service... Oct 2 19:25:30.490166 (systemd)[1925]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:30.691259 systemd[1925]: Queued start job for default target default.target. Oct 2 19:25:30.692320 systemd[1925]: Reached target paths.target. Oct 2 19:25:30.692374 systemd[1925]: Reached target sockets.target. Oct 2 19:25:30.692407 systemd[1925]: Reached target timers.target. Oct 2 19:25:30.692437 systemd[1925]: Reached target basic.target. Oct 2 19:25:30.692528 systemd[1925]: Reached target default.target. Oct 2 19:25:30.692594 systemd[1925]: Startup finished in 184ms. Oct 2 19:25:30.693129 systemd[1]: Started user@500.service. Oct 2 19:25:30.695249 systemd[1]: Started session-1.scope. Oct 2 19:25:30.850589 systemd[1]: Started sshd@1-172.31.29.2:22-139.178.89.65:55514.service. Oct 2 19:25:31.036876 sshd[1934]: Accepted publickey for core from 139.178.89.65 port 55514 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:25:31.040192 sshd[1934]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:31.048313 systemd-logind[1722]: New session 2 of user core. Oct 2 19:25:31.050176 systemd[1]: Started session-2.scope. Oct 2 19:25:31.199045 sshd[1934]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:31.205359 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:25:31.206440 systemd[1]: sshd@1-172.31.29.2:22-139.178.89.65:55514.service: Deactivated successfully. Oct 2 19:25:31.208071 systemd-logind[1722]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:25:31.209827 systemd-logind[1722]: Removed session 2. Oct 2 19:25:31.232156 systemd[1]: Started sshd@2-172.31.29.2:22-139.178.89.65:55528.service. Oct 2 19:25:31.414879 sshd[1940]: Accepted publickey for core from 139.178.89.65 port 55528 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:25:31.418647 sshd[1940]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:31.427089 systemd-logind[1722]: New session 3 of user core. Oct 2 19:25:31.427500 systemd[1]: Started session-3.scope. Oct 2 19:25:31.560818 sshd[1940]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:31.568399 systemd[1]: sshd@2-172.31.29.2:22-139.178.89.65:55528.service: Deactivated successfully. Oct 2 19:25:31.569622 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:25:31.570770 systemd-logind[1722]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:25:31.573241 systemd-logind[1722]: Removed session 3. Oct 2 19:25:31.591523 systemd[1]: Started sshd@3-172.31.29.2:22-139.178.89.65:55544.service. Oct 2 19:25:31.772756 sshd[1946]: Accepted publickey for core from 139.178.89.65 port 55544 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:25:31.776525 sshd[1946]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:31.784300 systemd-logind[1722]: New session 4 of user core. Oct 2 19:25:31.785310 systemd[1]: Started session-4.scope. Oct 2 19:25:31.931084 sshd[1946]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:31.938744 systemd-logind[1722]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:25:31.939119 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:25:31.940230 systemd[1]: sshd@3-172.31.29.2:22-139.178.89.65:55544.service: Deactivated successfully. Oct 2 19:25:31.942105 systemd-logind[1722]: Removed session 4. Oct 2 19:25:31.960714 systemd[1]: Started sshd@4-172.31.29.2:22-139.178.89.65:55552.service. Oct 2 19:25:32.141999 sshd[1952]: Accepted publickey for core from 139.178.89.65 port 55552 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:25:32.145254 sshd[1952]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:32.153062 systemd-logind[1722]: New session 5 of user core. Oct 2 19:25:32.154482 systemd[1]: Started session-5.scope. Oct 2 19:25:32.289560 sudo[1955]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:25:32.290727 sudo[1955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:25:32.306240 dbus-daemon[1713]: avc: received setenforce notice (enforcing=1) Oct 2 19:25:32.309203 sudo[1955]: pam_unix(sudo:session): session closed for user root Oct 2 19:25:32.334043 sshd[1952]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:32.340703 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:25:32.341946 systemd[1]: sshd@4-172.31.29.2:22-139.178.89.65:55552.service: Deactivated successfully. Oct 2 19:25:32.343761 systemd-logind[1722]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:25:32.346060 systemd-logind[1722]: Removed session 5. Oct 2 19:25:32.365551 systemd[1]: Started sshd@5-172.31.29.2:22-139.178.89.65:55554.service. Oct 2 19:25:32.553988 sshd[1959]: Accepted publickey for core from 139.178.89.65 port 55554 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:25:32.556562 sshd[1959]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:32.565654 systemd[1]: Started session-6.scope. Oct 2 19:25:32.567080 systemd-logind[1722]: New session 6 of user core. Oct 2 19:25:32.689900 sudo[1963]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:25:32.690414 sudo[1963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:25:32.697685 sudo[1963]: pam_unix(sudo:session): session closed for user root Oct 2 19:25:32.711322 sudo[1962]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:25:32.712313 sudo[1962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:25:32.736485 systemd[1]: Stopping audit-rules.service... Oct 2 19:25:32.741000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:25:32.744430 kernel: kauditd_printk_skb: 74 callbacks suppressed Oct 2 19:25:32.744516 kernel: audit: type=1305 audit(1696274732.741:161): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:25:32.741000 audit[1966]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff0fd9aa0 a2=420 a3=0 items=0 ppid=1 pid=1966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.749957 auditctl[1966]: No rules Oct 2 19:25:32.760743 kernel: audit: type=1300 audit(1696274732.741:161): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff0fd9aa0 a2=420 a3=0 items=0 ppid=1 pid=1966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:32.761350 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:25:32.741000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:25:32.765044 kernel: audit: type=1327 audit(1696274732.741:161): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:25:32.761703 systemd[1]: Stopped audit-rules.service. Oct 2 19:25:32.760000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:32.773348 kernel: audit: type=1131 audit(1696274732.760:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:32.774053 systemd[1]: Starting audit-rules.service... Oct 2 19:25:32.832725 augenrules[1983]: No rules Oct 2 19:25:32.834335 systemd[1]: Finished audit-rules.service. Oct 2 19:25:32.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:32.842000 audit[1962]: USER_END pid=1962 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:32.843478 sudo[1962]: pam_unix(sudo:session): session closed for user root Oct 2 19:25:32.853628 kernel: audit: type=1130 audit(1696274732.833:163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:32.853705 kernel: audit: type=1106 audit(1696274732.842:164): pid=1962 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:32.853748 kernel: audit: type=1104 audit(1696274732.842:165): pid=1962 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:32.842000 audit[1962]: CRED_DISP pid=1962 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:32.868191 sshd[1959]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:32.869000 audit[1959]: USER_END pid=1959 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:25:32.869000 audit[1959]: CRED_DISP pid=1959 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:25:32.895465 kernel: audit: type=1106 audit(1696274732.869:166): pid=1959 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:25:32.895591 kernel: audit: type=1104 audit(1696274732.869:167): pid=1959 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:25:32.886728 systemd[1]: sshd@5-172.31.29.2:22-139.178.89.65:55554.service: Deactivated successfully. Oct 2 19:25:32.887862 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:25:32.894870 systemd-logind[1722]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:25:32.886000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.29.2:22-139.178.89.65:55554 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:32.905666 kernel: audit: type=1131 audit(1696274732.886:168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.29.2:22-139.178.89.65:55554 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:32.906251 systemd[1]: Started sshd@6-172.31.29.2:22-139.178.89.65:55566.service. Oct 2 19:25:32.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.29.2:22-139.178.89.65:55566 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:32.907944 systemd-logind[1722]: Removed session 6. Oct 2 19:25:33.087000 audit[1989]: USER_ACCT pid=1989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:25:33.088554 sshd[1989]: Accepted publickey for core from 139.178.89.65 port 55566 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:25:33.090000 audit[1989]: CRED_ACQ pid=1989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:25:33.090000 audit[1989]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe8a0c0d0 a2=3 a3=1 items=0 ppid=1 pid=1989 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:33.090000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:25:33.092876 sshd[1989]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:33.100871 systemd-logind[1722]: New session 7 of user core. Oct 2 19:25:33.101770 systemd[1]: Started session-7.scope. Oct 2 19:25:33.110000 audit[1989]: USER_START pid=1989 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:25:33.117000 audit[1991]: CRED_ACQ pid=1991 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:25:33.222000 audit[1992]: USER_ACCT pid=1992 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:33.223864 sudo[1992]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:25:33.223000 audit[1992]: CRED_REFR pid=1992 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:33.224994 sudo[1992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:25:33.227000 audit[1992]: USER_START pid=1992 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:25:33.958647 systemd[1]: Starting docker.service... Oct 2 19:25:34.068440 env[2007]: time="2023-10-02T19:25:34.068340733Z" level=info msg="Starting up" Oct 2 19:25:34.072269 env[2007]: time="2023-10-02T19:25:34.072221722Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:25:34.072465 env[2007]: time="2023-10-02T19:25:34.072436423Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:25:34.072597 env[2007]: time="2023-10-02T19:25:34.072563355Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:25:34.072704 env[2007]: time="2023-10-02T19:25:34.072676943Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:25:34.077079 env[2007]: time="2023-10-02T19:25:34.076963327Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:25:34.077079 env[2007]: time="2023-10-02T19:25:34.077060584Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:25:34.077284 env[2007]: time="2023-10-02T19:25:34.077095312Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:25:34.077284 env[2007]: time="2023-10-02T19:25:34.077118218Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:25:34.126037 env[2007]: time="2023-10-02T19:25:34.125958479Z" level=info msg="Loading containers: start." Oct 2 19:25:34.232000 audit[2038]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2038 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.232000 audit[2038]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffc5104c90 a2=0 a3=1 items=0 ppid=2007 pid=2038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.232000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:25:34.240000 audit[2040]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2040 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.240000 audit[2040]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffdc140850 a2=0 a3=1 items=0 ppid=2007 pid=2040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.240000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:25:34.247000 audit[2042]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2042 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.247000 audit[2042]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffff567d180 a2=0 a3=1 items=0 ppid=2007 pid=2042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.247000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:25:34.254000 audit[2044]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2044 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.254000 audit[2044]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffb10e8b0 a2=0 a3=1 items=0 ppid=2007 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.254000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:25:34.263000 audit[2046]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2046 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.263000 audit[2046]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc6afacc0 a2=0 a3=1 items=0 ppid=2007 pid=2046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.263000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:25:34.297000 audit[2051]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2051 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.297000 audit[2051]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffecefb0b0 a2=0 a3=1 items=0 ppid=2007 pid=2051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.297000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:25:34.313000 audit[2053]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2053 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.313000 audit[2053]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe430b820 a2=0 a3=1 items=0 ppid=2007 pid=2053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.313000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:25:34.321000 audit[2055]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2055 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.321000 audit[2055]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffde61e8d0 a2=0 a3=1 items=0 ppid=2007 pid=2055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.321000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:25:34.328000 audit[2057]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2057 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.328000 audit[2057]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffff9e5f90 a2=0 a3=1 items=0 ppid=2007 pid=2057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.328000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:25:34.351000 audit[2061]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2061 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.351000 audit[2061]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffcf6b4cf0 a2=0 a3=1 items=0 ppid=2007 pid=2061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.351000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:25:34.355000 audit[2062]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2062 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.355000 audit[2062]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe1e74710 a2=0 a3=1 items=0 ppid=2007 pid=2062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.355000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:25:34.369040 kernel: Initializing XFRM netlink socket Oct 2 19:25:34.412153 env[2007]: time="2023-10-02T19:25:34.412106791Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:25:34.414434 (udev-worker)[2018]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:25:34.450000 audit[2070]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2070 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.450000 audit[2070]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffd9ff2de0 a2=0 a3=1 items=0 ppid=2007 pid=2070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.450000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:25:34.477000 audit[2073]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2073 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.477000 audit[2073]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffecfd3590 a2=0 a3=1 items=0 ppid=2007 pid=2073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.477000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:25:34.488000 audit[2076]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2076 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.488000 audit[2076]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd0d23440 a2=0 a3=1 items=0 ppid=2007 pid=2076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.488000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:25:34.497000 audit[2078]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2078 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.497000 audit[2078]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffe91cf280 a2=0 a3=1 items=0 ppid=2007 pid=2078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.497000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:25:34.504000 audit[2080]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2080 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.504000 audit[2080]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffe764e5c0 a2=0 a3=1 items=0 ppid=2007 pid=2080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.504000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:25:34.512000 audit[2082]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2082 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.512000 audit[2082]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=fffff201e400 a2=0 a3=1 items=0 ppid=2007 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.512000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:25:34.520000 audit[2084]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2084 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.520000 audit[2084]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffed6c5650 a2=0 a3=1 items=0 ppid=2007 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.520000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:25:34.538000 audit[2087]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2087 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.538000 audit[2087]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffce1894b0 a2=0 a3=1 items=0 ppid=2007 pid=2087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.538000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:25:34.546000 audit[2089]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2089 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.546000 audit[2089]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffe94ff4e0 a2=0 a3=1 items=0 ppid=2007 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.546000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:25:34.553000 audit[2091]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2091 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.553000 audit[2091]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffcc5d4fb0 a2=0 a3=1 items=0 ppid=2007 pid=2091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.553000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:25:34.560000 audit[2093]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2093 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.560000 audit[2093]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffffc8945e0 a2=0 a3=1 items=0 ppid=2007 pid=2093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.560000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:25:34.562930 systemd-networkd[1535]: docker0: Link UP Oct 2 19:25:34.582000 audit[2097]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2097 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.582000 audit[2097]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff4d9a240 a2=0 a3=1 items=0 ppid=2007 pid=2097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.582000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:25:34.586000 audit[2098]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2098 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:25:34.586000 audit[2098]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe837ae40 a2=0 a3=1 items=0 ppid=2007 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:34.586000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:25:34.588880 env[2007]: time="2023-10-02T19:25:34.588797417Z" level=info msg="Loading containers: done." Oct 2 19:25:34.616853 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1131146515-merged.mount: Deactivated successfully. Oct 2 19:25:34.634809 env[2007]: time="2023-10-02T19:25:34.634751888Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:25:34.635490 env[2007]: time="2023-10-02T19:25:34.635455485Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:25:34.635790 env[2007]: time="2023-10-02T19:25:34.635763671Z" level=info msg="Daemon has completed initialization" Oct 2 19:25:34.670345 systemd[1]: Started docker.service. Oct 2 19:25:34.669000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:34.679600 env[2007]: time="2023-10-02T19:25:34.679431307Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:25:34.728090 systemd[1]: Reloading. Oct 2 19:25:34.946249 /usr/lib/systemd/system-generators/torcx-generator[2145]: time="2023-10-02T19:25:34Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:25:34.946311 /usr/lib/systemd/system-generators/torcx-generator[2145]: time="2023-10-02T19:25:34Z" level=info msg="torcx already run" Oct 2 19:25:35.153693 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:25:35.153733 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:25:35.191909 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:25:35.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.352000 audit: BPF prog-id=37 op=LOAD Oct 2 19:25:35.353000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:25:35.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.353000 audit: BPF prog-id=38 op=LOAD Oct 2 19:25:35.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.353000 audit: BPF prog-id=39 op=LOAD Oct 2 19:25:35.353000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:25:35.353000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:25:35.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.359000 audit: BPF prog-id=40 op=LOAD Oct 2 19:25:35.359000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:25:35.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.360000 audit: BPF prog-id=41 op=LOAD Oct 2 19:25:35.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.360000 audit: BPF prog-id=42 op=LOAD Oct 2 19:25:35.360000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:25:35.360000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:25:35.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.362000 audit: BPF prog-id=43 op=LOAD Oct 2 19:25:35.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.363000 audit: BPF prog-id=44 op=LOAD Oct 2 19:25:35.363000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:25:35.363000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:25:35.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.366000 audit: BPF prog-id=45 op=LOAD Oct 2 19:25:35.366000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:25:35.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.368000 audit: BPF prog-id=46 op=LOAD Oct 2 19:25:35.368000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:25:35.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.369000 audit: BPF prog-id=47 op=LOAD Oct 2 19:25:35.369000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:25:35.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.369000 audit: BPF prog-id=48 op=LOAD Oct 2 19:25:35.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.370000 audit: BPF prog-id=49 op=LOAD Oct 2 19:25:35.370000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:25:35.370000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit: BPF prog-id=50 op=LOAD Oct 2 19:25:35.372000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit: BPF prog-id=51 op=LOAD Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.373000 audit: BPF prog-id=52 op=LOAD Oct 2 19:25:35.373000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:25:35.373000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:25:35.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.375000 audit: BPF prog-id=53 op=LOAD Oct 2 19:25:35.375000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:25:35.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:35.376000 audit: BPF prog-id=54 op=LOAD Oct 2 19:25:35.377000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:25:35.415613 systemd[1]: Started kubelet.service. Oct 2 19:25:35.419000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:35.588444 kubelet[2199]: E1002 19:25:35.588365 2199 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:25:35.592624 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:25:35.592945 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:25:35.592000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:25:36.038004 env[1738]: time="2023-10-02T19:25:36.037916069Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\"" Oct 2 19:25:36.664396 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1165412690.mount: Deactivated successfully. Oct 2 19:25:40.577900 env[1738]: time="2023-10-02T19:25:40.577839675Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:40.580632 env[1738]: time="2023-10-02T19:25:40.580582632Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:84fc12f356926a06f93f99d06ff6b5c8df1d39c609ddaae4aaf09048dc816c36,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:40.583641 env[1738]: time="2023-10-02T19:25:40.583594499Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:40.588370 env[1738]: time="2023-10-02T19:25:40.588302335Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5e7a0196a7908cb49bcbf751d2546a008c329ff1e70c26c1cd542e0ada4b623c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:40.589180 env[1738]: time="2023-10-02T19:25:40.589138322Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\" returns image reference \"sha256:84fc12f356926a06f93f99d06ff6b5c8df1d39c609ddaae4aaf09048dc816c36\"" Oct 2 19:25:40.619659 env[1738]: time="2023-10-02T19:25:40.619602981Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\"" Oct 2 19:25:44.803486 env[1738]: time="2023-10-02T19:25:44.803424168Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:44.807504 env[1738]: time="2023-10-02T19:25:44.807437583Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:66b19e3051492d4e2377e15803f07d9bd2a4578c7e26e5fa088582d59e08884b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:44.810695 env[1738]: time="2023-10-02T19:25:44.810635175Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:44.813955 env[1738]: time="2023-10-02T19:25:44.813903150Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:c76ca5b0cf607f82c54d51c3c6766da30c9a9f684065e1cac761ea9b07b74e97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:44.815498 env[1738]: time="2023-10-02T19:25:44.815449002Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\" returns image reference \"sha256:66b19e3051492d4e2377e15803f07d9bd2a4578c7e26e5fa088582d59e08884b\"" Oct 2 19:25:44.845402 env[1738]: time="2023-10-02T19:25:44.845311264Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\"" Oct 2 19:25:45.827762 kernel: kauditd_printk_skb: 292 callbacks suppressed Oct 2 19:25:45.827908 kernel: audit: type=1130 audit(1696274745.823:411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:45.823000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:45.824246 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:25:45.824599 systemd[1]: Stopped kubelet.service. Oct 2 19:25:45.827180 systemd[1]: Started kubelet.service. Oct 2 19:25:45.823000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:45.842134 kernel: audit: type=1131 audit(1696274745.823:412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:45.842253 kernel: audit: type=1130 audit(1696274745.826:413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:45.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:45.965796 kubelet[2228]: E1002 19:25:45.965727 2228 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:25:45.973293 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:25:45.973619 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:25:45.973000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:25:45.982030 kernel: audit: type=1131 audit(1696274745.973:414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:25:47.613941 env[1738]: time="2023-10-02T19:25:47.613881942Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:47.617065 env[1738]: time="2023-10-02T19:25:47.617016543Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1faa1d898c625343f7c70abbc8e9d160eb6dc3002ec2481cf8f4abd61dc34eed,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:47.620164 env[1738]: time="2023-10-02T19:25:47.620115146Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:47.623282 env[1738]: time="2023-10-02T19:25:47.623220934Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:bb227512d96e93dd3fe356cef552cc3f78905f36330b762adde23c3f0943d57b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:47.625063 env[1738]: time="2023-10-02T19:25:47.624958211Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\" returns image reference \"sha256:1faa1d898c625343f7c70abbc8e9d160eb6dc3002ec2481cf8f4abd61dc34eed\"" Oct 2 19:25:47.653397 env[1738]: time="2023-10-02T19:25:47.653325499Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\"" Oct 2 19:25:49.192670 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1683781779.mount: Deactivated successfully. Oct 2 19:25:49.962980 env[1738]: time="2023-10-02T19:25:49.962895473Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:49.966836 env[1738]: time="2023-10-02T19:25:49.966769119Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95195e68173b6cfcdd3125d7bbffa6759189df53b60ffe7a72256059cd5dd7af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:49.969570 env[1738]: time="2023-10-02T19:25:49.969519070Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:49.972119 env[1738]: time="2023-10-02T19:25:49.972058874Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:8e9eff2f6d0b398f9ac5f5a15c1cb7d5f468f28d64a78d593d57f72a969a54ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:49.973234 env[1738]: time="2023-10-02T19:25:49.973183181Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\" returns image reference \"sha256:95195e68173b6cfcdd3125d7bbffa6759189df53b60ffe7a72256059cd5dd7af\"" Oct 2 19:25:50.001868 env[1738]: time="2023-10-02T19:25:50.001797445Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:25:50.518004 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2946391916.mount: Deactivated successfully. Oct 2 19:25:50.526189 env[1738]: time="2023-10-02T19:25:50.526134038Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:50.530681 env[1738]: time="2023-10-02T19:25:50.530613345Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:50.534066 env[1738]: time="2023-10-02T19:25:50.533933257Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:50.542719 env[1738]: time="2023-10-02T19:25:50.542636663Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:50.543334 env[1738]: time="2023-10-02T19:25:50.543255532Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 19:25:50.572442 env[1738]: time="2023-10-02T19:25:50.572374858Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Oct 2 19:25:51.606479 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3610451128.mount: Deactivated successfully. Oct 2 19:25:52.065463 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Oct 2 19:25:52.064000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:52.075194 kernel: audit: type=1131 audit(1696274752.064:415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:52.101000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:25:52.101000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:25:52.108310 kernel: audit: type=1334 audit(1696274752.101:416): prog-id=39 op=UNLOAD Oct 2 19:25:52.108394 kernel: audit: type=1334 audit(1696274752.101:417): prog-id=38 op=UNLOAD Oct 2 19:25:52.108443 kernel: audit: type=1334 audit(1696274752.101:418): prog-id=37 op=UNLOAD Oct 2 19:25:52.101000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:25:56.073000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:56.074207 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:25:56.074593 systemd[1]: Stopped kubelet.service. Oct 2 19:25:56.082923 systemd[1]: Started kubelet.service. Oct 2 19:25:56.073000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:56.091561 kernel: audit: type=1130 audit(1696274756.073:419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:56.091678 kernel: audit: type=1131 audit(1696274756.073:420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:56.087000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:56.104807 kernel: audit: type=1130 audit(1696274756.087:421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:56.256740 kubelet[2252]: E1002 19:25:56.256656 2252 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:25:56.260173 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:25:56.260515 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:25:56.260000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:25:56.270024 kernel: audit: type=1131 audit(1696274756.260:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:25:56.845857 env[1738]: time="2023-10-02T19:25:56.845797694Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:56.848812 env[1738]: time="2023-10-02T19:25:56.848760747Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:56.852008 env[1738]: time="2023-10-02T19:25:56.851917828Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:56.855103 env[1738]: time="2023-10-02T19:25:56.855055512Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:56.856382 env[1738]: time="2023-10-02T19:25:56.856336104Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737\"" Oct 2 19:25:56.885139 env[1738]: time="2023-10-02T19:25:56.885077217Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:25:57.509751 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount843520398.mount: Deactivated successfully. Oct 2 19:25:58.646056 env[1738]: time="2023-10-02T19:25:58.645952375Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:58.649104 env[1738]: time="2023-10-02T19:25:58.649042638Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:58.651941 env[1738]: time="2023-10-02T19:25:58.651893290Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:58.654504 env[1738]: time="2023-10-02T19:25:58.654442146Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:58.655733 env[1738]: time="2023-10-02T19:25:58.655687446Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Oct 2 19:26:05.105108 systemd[1]: Stopped kubelet.service. Oct 2 19:26:05.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:05.104000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:05.121211 kernel: audit: type=1130 audit(1696274765.104:423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:05.121382 kernel: audit: type=1131 audit(1696274765.104:424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:05.161351 systemd[1]: Reloading. Oct 2 19:26:05.342636 /usr/lib/systemd/system-generators/torcx-generator[2347]: time="2023-10-02T19:26:05Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:26:05.342696 /usr/lib/systemd/system-generators/torcx-generator[2347]: time="2023-10-02T19:26:05Z" level=info msg="torcx already run" Oct 2 19:26:05.588905 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:26:05.588947 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:26:05.626856 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:26:05.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.806328 kernel: audit: type=1400 audit(1696274765.790:425): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.806407 kernel: audit: type=1400 audit(1696274765.790:426): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.813985 kernel: audit: type=1400 audit(1696274765.790:427): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.821659 kernel: audit: type=1400 audit(1696274765.790:428): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.829433 kernel: audit: type=1400 audit(1696274765.790:429): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.829534 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:26:05.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.839026 kernel: audit: type=1400 audit(1696274765.790:430): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.839103 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:26:05.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.797000 audit: BPF prog-id=55 op=LOAD Oct 2 19:26:05.797000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:26:05.798000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.798000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.798000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.798000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.798000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.798000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.798000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.798000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.805000 audit: BPF prog-id=56 op=LOAD Oct 2 19:26:05.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.805000 audit: BPF prog-id=57 op=LOAD Oct 2 19:26:05.805000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:26:05.805000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:26:05.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.813000 audit: BPF prog-id=58 op=LOAD Oct 2 19:26:05.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.813000 audit: BPF prog-id=59 op=LOAD Oct 2 19:26:05.813000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:26:05.813000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:26:05.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.820000 audit: BPF prog-id=60 op=LOAD Oct 2 19:26:05.820000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:26:05.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.841000 audit: BPF prog-id=61 op=LOAD Oct 2 19:26:05.841000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit: BPF prog-id=62 op=LOAD Oct 2 19:26:05.842000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit: BPF prog-id=63 op=LOAD Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.842000 audit: BPF prog-id=64 op=LOAD Oct 2 19:26:05.842000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:26:05.842000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:26:05.844000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.844000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.844000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.844000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.844000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.844000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.844000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.844000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.844000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.844000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.844000 audit: BPF prog-id=65 op=LOAD Oct 2 19:26:05.844000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:26:05.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.845000 audit: BPF prog-id=66 op=LOAD Oct 2 19:26:05.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.845000 audit: BPF prog-id=67 op=LOAD Oct 2 19:26:05.845000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:26:05.845000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:26:05.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.847000 audit: BPF prog-id=68 op=LOAD Oct 2 19:26:05.847000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:26:05.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:05.848000 audit: BPF prog-id=69 op=LOAD Oct 2 19:26:05.848000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:26:05.898264 systemd[1]: Started kubelet.service. Oct 2 19:26:05.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:06.043684 kubelet[2403]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:26:06.044282 kubelet[2403]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:26:06.044380 kubelet[2403]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:26:06.044782 kubelet[2403]: I1002 19:26:06.044724 2403 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:26:06.428076 update_engine[1723]: I1002 19:26:06.428014 1723 update_attempter.cc:505] Updating boot flags... Oct 2 19:26:08.522033 kubelet[2403]: I1002 19:26:08.521989 2403 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:26:08.522904 kubelet[2403]: I1002 19:26:08.522283 2403 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:26:08.523222 kubelet[2403]: I1002 19:26:08.523196 2403 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:26:08.531766 kubelet[2403]: E1002 19:26:08.531710 2403 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.29.2:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.29.2:6443: connect: connection refused Oct 2 19:26:08.531907 kubelet[2403]: I1002 19:26:08.531857 2403 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:26:08.535571 kubelet[2403]: W1002 19:26:08.535541 2403 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:26:08.537149 kubelet[2403]: I1002 19:26:08.537121 2403 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:26:08.537990 kubelet[2403]: I1002 19:26:08.537951 2403 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:26:08.538237 kubelet[2403]: I1002 19:26:08.538202 2403 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:26:08.538551 kubelet[2403]: I1002 19:26:08.538524 2403 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:26:08.538667 kubelet[2403]: I1002 19:26:08.538647 2403 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:26:08.539055 kubelet[2403]: I1002 19:26:08.539034 2403 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:26:08.545948 kubelet[2403]: I1002 19:26:08.545912 2403 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:26:08.546167 kubelet[2403]: I1002 19:26:08.546147 2403 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:26:08.546447 kubelet[2403]: I1002 19:26:08.546426 2403 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:26:08.546624 kubelet[2403]: I1002 19:26:08.546603 2403 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:26:08.552505 kubelet[2403]: W1002 19:26:08.552373 2403 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.29.2:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-29-2&limit=500&resourceVersion=0": dial tcp 172.31.29.2:6443: connect: connection refused Oct 2 19:26:08.552505 kubelet[2403]: E1002 19:26:08.552496 2403 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.29.2:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-29-2&limit=500&resourceVersion=0": dial tcp 172.31.29.2:6443: connect: connection refused Oct 2 19:26:08.552896 kubelet[2403]: I1002 19:26:08.552791 2403 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:26:08.553737 kubelet[2403]: W1002 19:26:08.553674 2403 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:26:08.554935 kubelet[2403]: I1002 19:26:08.554887 2403 server.go:1168] "Started kubelet" Oct 2 19:26:08.560000 audit[2403]: AVC avc: denied { mac_admin } for pid=2403 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:08.560000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:26:08.560000 audit[2403]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000baef30 a1=4000ab6de0 a2=4000baef00 a3=25 items=0 ppid=1 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:08.560000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:26:08.560000 audit[2403]: AVC avc: denied { mac_admin } for pid=2403 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:08.560000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:26:08.560000 audit[2403]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000da63a0 a1=4000ab6df8 a2=4000baefc0 a3=25 items=0 ppid=1 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:08.560000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:26:08.562350 kubelet[2403]: I1002 19:26:08.561696 2403 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:26:08.562350 kubelet[2403]: I1002 19:26:08.561895 2403 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:26:08.562350 kubelet[2403]: I1002 19:26:08.562189 2403 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:26:08.563955 kubelet[2403]: E1002 19:26:08.563903 2403 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:26:08.564157 kubelet[2403]: E1002 19:26:08.563980 2403 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:26:08.565680 kubelet[2403]: W1002 19:26:08.565572 2403 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.29.2:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.29.2:6443: connect: connection refused Oct 2 19:26:08.565866 kubelet[2403]: E1002 19:26:08.565691 2403 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.29.2:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.29.2:6443: connect: connection refused Oct 2 19:26:08.568252 kubelet[2403]: I1002 19:26:08.568198 2403 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:26:08.568601 kubelet[2403]: I1002 19:26:08.568573 2403 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:26:08.569959 kubelet[2403]: I1002 19:26:08.569921 2403 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:26:08.574388 kubelet[2403]: I1002 19:26:08.574349 2403 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:26:08.574000 audit[2595]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2595 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:08.574000 audit[2595]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe2550c50 a2=0 a3=1 items=0 ppid=2403 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:08.574000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:26:08.577022 kubelet[2403]: I1002 19:26:08.576989 2403 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:26:08.579196 kubelet[2403]: E1002 19:26:08.579036 2403 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-29-2.178a60ea2d2b89b3", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-29-2", UID:"ip-172-31-29-2", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-29-2"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 26, 8, 554854835, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 26, 8, 554854835, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.29.2:6443/api/v1/namespaces/default/events": dial tcp 172.31.29.2:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:26:08.579650 kubelet[2403]: W1002 19:26:08.579594 2403 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.29.2:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.29.2:6443: connect: connection refused Oct 2 19:26:08.579803 kubelet[2403]: E1002 19:26:08.579780 2403 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.29.2:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.29.2:6443: connect: connection refused Oct 2 19:26:08.580067 kubelet[2403]: E1002 19:26:08.580044 2403 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.29.2:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-2?timeout=10s\": dial tcp 172.31.29.2:6443: connect: connection refused" interval="200ms" Oct 2 19:26:08.579000 audit[2596]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2596 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:08.579000 audit[2596]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd43a4740 a2=0 a3=1 items=0 ppid=2403 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:08.579000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:26:08.587000 audit[2598]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2598 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:08.587000 audit[2598]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffffed7a8a0 a2=0 a3=1 items=0 ppid=2403 pid=2598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:08.587000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:26:08.594000 audit[2600]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2600 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:08.594000 audit[2600]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffcaf5a0a0 a2=0 a3=1 items=0 ppid=2403 pid=2600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:08.594000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:26:08.619000 audit[2607]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2607 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:08.619000 audit[2607]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffd18ef5d0 a2=0 a3=1 items=0 ppid=2403 pid=2607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:08.619000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:26:08.620934 kubelet[2403]: I1002 19:26:08.620888 2403 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:26:08.630000 audit[2608]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2608 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:08.630000 audit[2608]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff7e29ad0 a2=0 a3=1 items=0 ppid=2403 pid=2608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:08.630000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:26:08.631000 audit[2609]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2609 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:08.632847 kubelet[2403]: I1002 19:26:08.632796 2403 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:26:08.632926 kubelet[2403]: I1002 19:26:08.632890 2403 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:26:08.632926 kubelet[2403]: I1002 19:26:08.632922 2403 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:26:08.633065 kubelet[2403]: E1002 19:26:08.633028 2403 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:26:08.631000 audit[2609]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd3aefdb0 a2=0 a3=1 items=0 ppid=2403 pid=2609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:08.631000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:26:08.634085 kubelet[2403]: W1002 19:26:08.633677 2403 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.29.2:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.29.2:6443: connect: connection refused Oct 2 19:26:08.634085 kubelet[2403]: E1002 19:26:08.633769 2403 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.29.2:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.29.2:6443: connect: connection refused Oct 2 19:26:08.640096 kubelet[2403]: I1002 19:26:08.640049 2403 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:26:08.640096 kubelet[2403]: I1002 19:26:08.640087 2403 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:26:08.640284 kubelet[2403]: I1002 19:26:08.640121 2403 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:26:08.641000 audit[2610]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=2610 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:08.641000 audit[2610]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff5d7bc70 a2=0 a3=1 items=0 ppid=2403 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:08.641000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:26:08.646411 kubelet[2403]: I1002 19:26:08.646324 2403 policy_none.go:49] "None policy: Start" Oct 2 19:26:08.645000 audit[2612]: NETFILTER_CFG table=nat:34 family=10 entries=2 op=nft_register_chain pid=2612 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:08.645000 audit[2612]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffd08fc550 a2=0 a3=1 items=0 ppid=2403 pid=2612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:08.645000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:26:08.647895 kubelet[2403]: I1002 19:26:08.647849 2403 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:26:08.647895 kubelet[2403]: I1002 19:26:08.647899 2403 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:26:08.648000 audit[2611]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=2611 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:08.648000 audit[2611]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdb92fbb0 a2=0 a3=1 items=0 ppid=2403 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:08.648000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:26:08.654000 audit[2613]: NETFILTER_CFG table=filter:36 family=10 entries=2 op=nft_register_chain pid=2613 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:08.654000 audit[2613]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc7b88cb0 a2=0 a3=1 items=0 ppid=2403 pid=2613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:08.654000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:26:08.658540 systemd[1]: Created slice kubepods.slice. Oct 2 19:26:08.658000 audit[2614]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=2614 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:08.658000 audit[2614]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff95eb220 a2=0 a3=1 items=0 ppid=2403 pid=2614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:08.658000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:26:08.668339 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:26:08.675400 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:26:08.679259 kubelet[2403]: I1002 19:26:08.679207 2403 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-2" Oct 2 19:26:08.680242 kubelet[2403]: E1002 19:26:08.680211 2403 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.29.2:6443/api/v1/nodes\": dial tcp 172.31.29.2:6443: connect: connection refused" node="ip-172-31-29-2" Oct 2 19:26:08.687545 kubelet[2403]: I1002 19:26:08.687212 2403 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:26:08.686000 audit[2403]: AVC avc: denied { mac_admin } for pid=2403 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:08.686000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:26:08.686000 audit[2403]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000f268d0 a1=4000f2aa98 a2=4000f268a0 a3=25 items=0 ppid=1 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:08.686000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:26:08.689334 kubelet[2403]: I1002 19:26:08.687798 2403 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:26:08.689334 kubelet[2403]: I1002 19:26:08.688283 2403 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:26:08.691932 kubelet[2403]: E1002 19:26:08.691900 2403 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-29-2\" not found" Oct 2 19:26:08.733359 kubelet[2403]: I1002 19:26:08.733277 2403 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:26:08.735594 kubelet[2403]: I1002 19:26:08.735534 2403 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:26:08.738956 kubelet[2403]: I1002 19:26:08.738881 2403 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:26:08.750257 systemd[1]: Created slice kubepods-burstable-pod2d723c10c05328f30da4f6e1267a873b.slice. Oct 2 19:26:08.762161 systemd[1]: Created slice kubepods-burstable-pod9bee141acb7181383e1402b1d8f86b7d.slice. Oct 2 19:26:08.768800 systemd[1]: Created slice kubepods-burstable-podb5b440d2c602d3806b0d6bff26a1920b.slice. Oct 2 19:26:08.780142 kubelet[2403]: I1002 19:26:08.779955 2403 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9bee141acb7181383e1402b1d8f86b7d-ca-certs\") pod \"kube-controller-manager-ip-172-31-29-2\" (UID: \"9bee141acb7181383e1402b1d8f86b7d\") " pod="kube-system/kube-controller-manager-ip-172-31-29-2" Oct 2 19:26:08.780142 kubelet[2403]: I1002 19:26:08.780111 2403 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9bee141acb7181383e1402b1d8f86b7d-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-29-2\" (UID: \"9bee141acb7181383e1402b1d8f86b7d\") " pod="kube-system/kube-controller-manager-ip-172-31-29-2" Oct 2 19:26:08.782185 kubelet[2403]: E1002 19:26:08.781903 2403 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.29.2:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-2?timeout=10s\": dial tcp 172.31.29.2:6443: connect: connection refused" interval="400ms" Oct 2 19:26:08.782583 kubelet[2403]: I1002 19:26:08.782557 2403 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/9bee141acb7181383e1402b1d8f86b7d-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-29-2\" (UID: \"9bee141acb7181383e1402b1d8f86b7d\") " pod="kube-system/kube-controller-manager-ip-172-31-29-2" Oct 2 19:26:08.783073 kubelet[2403]: I1002 19:26:08.782989 2403 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9bee141acb7181383e1402b1d8f86b7d-k8s-certs\") pod \"kube-controller-manager-ip-172-31-29-2\" (UID: \"9bee141acb7181383e1402b1d8f86b7d\") " pod="kube-system/kube-controller-manager-ip-172-31-29-2" Oct 2 19:26:08.783469 kubelet[2403]: I1002 19:26:08.783375 2403 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/9bee141acb7181383e1402b1d8f86b7d-kubeconfig\") pod \"kube-controller-manager-ip-172-31-29-2\" (UID: \"9bee141acb7181383e1402b1d8f86b7d\") " pod="kube-system/kube-controller-manager-ip-172-31-29-2" Oct 2 19:26:08.783846 kubelet[2403]: I1002 19:26:08.783770 2403 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b5b440d2c602d3806b0d6bff26a1920b-kubeconfig\") pod \"kube-scheduler-ip-172-31-29-2\" (UID: \"b5b440d2c602d3806b0d6bff26a1920b\") " pod="kube-system/kube-scheduler-ip-172-31-29-2" Oct 2 19:26:08.784266 kubelet[2403]: I1002 19:26:08.784243 2403 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/2d723c10c05328f30da4f6e1267a873b-ca-certs\") pod \"kube-apiserver-ip-172-31-29-2\" (UID: \"2d723c10c05328f30da4f6e1267a873b\") " pod="kube-system/kube-apiserver-ip-172-31-29-2" Oct 2 19:26:08.784676 kubelet[2403]: I1002 19:26:08.784654 2403 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/2d723c10c05328f30da4f6e1267a873b-k8s-certs\") pod \"kube-apiserver-ip-172-31-29-2\" (UID: \"2d723c10c05328f30da4f6e1267a873b\") " pod="kube-system/kube-apiserver-ip-172-31-29-2" Oct 2 19:26:08.784874 kubelet[2403]: I1002 19:26:08.784853 2403 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/2d723c10c05328f30da4f6e1267a873b-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-29-2\" (UID: \"2d723c10c05328f30da4f6e1267a873b\") " pod="kube-system/kube-apiserver-ip-172-31-29-2" Oct 2 19:26:08.883073 kubelet[2403]: I1002 19:26:08.883039 2403 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-2" Oct 2 19:26:08.883705 kubelet[2403]: E1002 19:26:08.883678 2403 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.29.2:6443/api/v1/nodes\": dial tcp 172.31.29.2:6443: connect: connection refused" node="ip-172-31-29-2" Oct 2 19:26:09.063073 env[1738]: time="2023-10-02T19:26:09.062588997Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-29-2,Uid:2d723c10c05328f30da4f6e1267a873b,Namespace:kube-system,Attempt:0,}" Oct 2 19:26:09.068024 env[1738]: time="2023-10-02T19:26:09.067905505Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-29-2,Uid:9bee141acb7181383e1402b1d8f86b7d,Namespace:kube-system,Attempt:0,}" Oct 2 19:26:09.074986 env[1738]: time="2023-10-02T19:26:09.074604381Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-29-2,Uid:b5b440d2c602d3806b0d6bff26a1920b,Namespace:kube-system,Attempt:0,}" Oct 2 19:26:09.095410 kubelet[2403]: E1002 19:26:09.095255 2403 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-29-2.178a60ea2d2b89b3", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-29-2", UID:"ip-172-31-29-2", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-29-2"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 26, 8, 554854835, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 26, 8, 554854835, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.29.2:6443/api/v1/namespaces/default/events": dial tcp 172.31.29.2:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:26:09.183392 kubelet[2403]: E1002 19:26:09.183344 2403 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.29.2:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-2?timeout=10s\": dial tcp 172.31.29.2:6443: connect: connection refused" interval="800ms" Oct 2 19:26:09.286171 kubelet[2403]: I1002 19:26:09.286110 2403 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-2" Oct 2 19:26:09.286604 kubelet[2403]: E1002 19:26:09.286573 2403 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.29.2:6443/api/v1/nodes\": dial tcp 172.31.29.2:6443: connect: connection refused" node="ip-172-31-29-2" Oct 2 19:26:09.469395 kubelet[2403]: W1002 19:26:09.469301 2403 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.29.2:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.29.2:6443: connect: connection refused Oct 2 19:26:09.469395 kubelet[2403]: E1002 19:26:09.469364 2403 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.29.2:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.29.2:6443: connect: connection refused Oct 2 19:26:09.590565 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2860079904.mount: Deactivated successfully. Oct 2 19:26:09.602408 env[1738]: time="2023-10-02T19:26:09.602321434Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:09.604192 env[1738]: time="2023-10-02T19:26:09.604115393Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:09.611252 env[1738]: time="2023-10-02T19:26:09.611169182Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:09.613399 env[1738]: time="2023-10-02T19:26:09.613325043Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:09.615989 env[1738]: time="2023-10-02T19:26:09.615911703Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:09.619584 env[1738]: time="2023-10-02T19:26:09.619515948Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:09.624288 kubelet[2403]: W1002 19:26:09.624215 2403 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.29.2:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.29.2:6443: connect: connection refused Oct 2 19:26:09.624288 kubelet[2403]: E1002 19:26:09.624289 2403 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.29.2:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.29.2:6443: connect: connection refused Oct 2 19:26:09.628531 env[1738]: time="2023-10-02T19:26:09.628474710Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:09.630706 env[1738]: time="2023-10-02T19:26:09.630617437Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:09.634641 env[1738]: time="2023-10-02T19:26:09.634564038Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:09.636653 env[1738]: time="2023-10-02T19:26:09.636588332Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:09.638134 env[1738]: time="2023-10-02T19:26:09.638074606Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:09.644648 env[1738]: time="2023-10-02T19:26:09.644573713Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:09.705928 env[1738]: time="2023-10-02T19:26:09.705472241Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:26:09.705928 env[1738]: time="2023-10-02T19:26:09.705555162Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:26:09.705928 env[1738]: time="2023-10-02T19:26:09.705581946Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:26:09.706354 env[1738]: time="2023-10-02T19:26:09.706239491Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f9bc4b17e5d5f37ff7c402295f78eda4e703931c00d97701b7db0dc0e4b3b360 pid=2624 runtime=io.containerd.runc.v2 Oct 2 19:26:09.730150 env[1738]: time="2023-10-02T19:26:09.729929834Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:26:09.730406 env[1738]: time="2023-10-02T19:26:09.730343070Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:26:09.730576 env[1738]: time="2023-10-02T19:26:09.730520725Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:26:09.732250 env[1738]: time="2023-10-02T19:26:09.732148410Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/896e47406019d62ffc9f9122c43810795b3266802c11796687cf340bc9f9d1f4 pid=2651 runtime=io.containerd.runc.v2 Oct 2 19:26:09.739420 env[1738]: time="2023-10-02T19:26:09.739290932Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:26:09.739725 env[1738]: time="2023-10-02T19:26:09.739641740Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:26:09.739953 env[1738]: time="2023-10-02T19:26:09.739892063Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:26:09.740673 env[1738]: time="2023-10-02T19:26:09.740561217Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e8892991a05aca44be5885a82a784c0f70d82994b52c8a9bd1a9c508c3f8c753 pid=2647 runtime=io.containerd.runc.v2 Oct 2 19:26:09.779080 systemd[1]: Started cri-containerd-f9bc4b17e5d5f37ff7c402295f78eda4e703931c00d97701b7db0dc0e4b3b360.scope. Oct 2 19:26:09.784591 kubelet[2403]: W1002 19:26:09.782453 2403 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.29.2:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-29-2&limit=500&resourceVersion=0": dial tcp 172.31.29.2:6443: connect: connection refused Oct 2 19:26:09.784591 kubelet[2403]: E1002 19:26:09.782539 2403 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.29.2:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-29-2&limit=500&resourceVersion=0": dial tcp 172.31.29.2:6443: connect: connection refused Oct 2 19:26:09.805391 systemd[1]: Started cri-containerd-896e47406019d62ffc9f9122c43810795b3266802c11796687cf340bc9f9d1f4.scope. Oct 2 19:26:09.825035 systemd[1]: Started cri-containerd-e8892991a05aca44be5885a82a784c0f70d82994b52c8a9bd1a9c508c3f8c753.scope. Oct 2 19:26:09.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.854000 audit: BPF prog-id=70 op=LOAD Oct 2 19:26:09.855000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.855000 audit[2649]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2624 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:09.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639626334623137653564356633376666376334303232393566373865 Oct 2 19:26:09.855000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.855000 audit[2649]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2624 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:09.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639626334623137653564356633376666376334303232393566373865 Oct 2 19:26:09.856000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.856000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.856000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.856000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.856000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.856000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.856000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.856000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.856000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.856000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.856000 audit: BPF prog-id=71 op=LOAD Oct 2 19:26:09.856000 audit[2649]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2624 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:09.856000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639626334623137653564356633376666376334303232393566373865 Oct 2 19:26:09.857000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.857000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.857000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.857000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.857000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.857000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.857000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.857000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.857000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.857000 audit: BPF prog-id=72 op=LOAD Oct 2 19:26:09.857000 audit[2649]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2624 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:09.857000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639626334623137653564356633376666376334303232393566373865 Oct 2 19:26:09.859000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:26:09.859000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:26:09.859000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.859000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.859000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.859000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.859000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.859000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.859000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.859000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.859000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.859000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.859000 audit: BPF prog-id=73 op=LOAD Oct 2 19:26:09.859000 audit[2649]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2624 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:09.859000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639626334623137653564356633376666376334303232393566373865 Oct 2 19:26:09.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.891000 audit: BPF prog-id=74 op=LOAD Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2651 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:09.892000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839366534373430363031396436326666633966393132326334333831 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2651 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:09.892000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839366534373430363031396436326666633966393132326334333831 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit: BPF prog-id=75 op=LOAD Oct 2 19:26:09.892000 audit[2675]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2651 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:09.892000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839366534373430363031396436326666633966393132326334333831 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit: BPF prog-id=76 op=LOAD Oct 2 19:26:09.892000 audit[2675]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2651 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:09.892000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839366534373430363031396436326666633966393132326334333831 Oct 2 19:26:09.892000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:26:09.892000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.892000 audit: BPF prog-id=77 op=LOAD Oct 2 19:26:09.892000 audit[2675]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2651 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:09.892000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839366534373430363031396436326666633966393132326334333831 Oct 2 19:26:09.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.934000 audit: BPF prog-id=78 op=LOAD Oct 2 19:26:09.935000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.935000 audit[2677]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2647 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:09.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538383932393931613035616361343462653538383561383261373834 Oct 2 19:26:09.936000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.936000 audit[2677]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2647 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:09.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538383932393931613035616361343462653538383561383261373834 Oct 2 19:26:09.937000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.937000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.937000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.937000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.937000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.937000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.937000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.937000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.937000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.937000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.937000 audit: BPF prog-id=79 op=LOAD Oct 2 19:26:09.937000 audit[2677]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2647 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:09.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538383932393931613035616361343462653538383561383261373834 Oct 2 19:26:09.940735 kubelet[2403]: W1002 19:26:09.940679 2403 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.29.2:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.29.2:6443: connect: connection refused Oct 2 19:26:09.940861 kubelet[2403]: E1002 19:26:09.940768 2403 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.29.2:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.29.2:6443: connect: connection refused Oct 2 19:26:09.941893 env[1738]: time="2023-10-02T19:26:09.941834608Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-29-2,Uid:b5b440d2c602d3806b0d6bff26a1920b,Namespace:kube-system,Attempt:0,} returns sandbox id \"f9bc4b17e5d5f37ff7c402295f78eda4e703931c00d97701b7db0dc0e4b3b360\"" Oct 2 19:26:09.941000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.941000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.941000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.941000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.941000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.941000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.941000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.941000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.941000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.941000 audit: BPF prog-id=80 op=LOAD Oct 2 19:26:09.941000 audit[2677]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2647 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:09.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538383932393931613035616361343462653538383561383261373834 Oct 2 19:26:09.943000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:26:09.943000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:26:09.943000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.943000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.943000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.943000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.943000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.943000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.943000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.943000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.943000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.943000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:09.943000 audit: BPF prog-id=81 op=LOAD Oct 2 19:26:09.943000 audit[2677]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2647 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:09.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538383932393931613035616361343462653538383561383261373834 Oct 2 19:26:09.956446 env[1738]: time="2023-10-02T19:26:09.956379387Z" level=info msg="CreateContainer within sandbox \"f9bc4b17e5d5f37ff7c402295f78eda4e703931c00d97701b7db0dc0e4b3b360\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:26:09.991613 kubelet[2403]: E1002 19:26:09.985205 2403 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.29.2:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-2?timeout=10s\": dial tcp 172.31.29.2:6443: connect: connection refused" interval="1.6s" Oct 2 19:26:09.994981 env[1738]: time="2023-10-02T19:26:09.992797271Z" level=info msg="CreateContainer within sandbox \"f9bc4b17e5d5f37ff7c402295f78eda4e703931c00d97701b7db0dc0e4b3b360\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"c99a36d31dc75bc34bd4473dd519664fc51e1ca97130400348210382d40c6b19\"" Oct 2 19:26:09.995555 env[1738]: time="2023-10-02T19:26:09.995505834Z" level=info msg="StartContainer for \"c99a36d31dc75bc34bd4473dd519664fc51e1ca97130400348210382d40c6b19\"" Oct 2 19:26:09.998166 env[1738]: time="2023-10-02T19:26:09.998110802Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-29-2,Uid:2d723c10c05328f30da4f6e1267a873b,Namespace:kube-system,Attempt:0,} returns sandbox id \"896e47406019d62ffc9f9122c43810795b3266802c11796687cf340bc9f9d1f4\"" Oct 2 19:26:10.009258 env[1738]: time="2023-10-02T19:26:10.009189302Z" level=info msg="CreateContainer within sandbox \"896e47406019d62ffc9f9122c43810795b3266802c11796687cf340bc9f9d1f4\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:26:10.034582 env[1738]: time="2023-10-02T19:26:10.034518318Z" level=info msg="CreateContainer within sandbox \"896e47406019d62ffc9f9122c43810795b3266802c11796687cf340bc9f9d1f4\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"c76d6f93a033ae771e8da5096c3260a7144482c254c6a253655f6ab9d0807e2b\"" Oct 2 19:26:10.035637 env[1738]: time="2023-10-02T19:26:10.035591695Z" level=info msg="StartContainer for \"c76d6f93a033ae771e8da5096c3260a7144482c254c6a253655f6ab9d0807e2b\"" Oct 2 19:26:10.053824 env[1738]: time="2023-10-02T19:26:10.053766942Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-29-2,Uid:9bee141acb7181383e1402b1d8f86b7d,Namespace:kube-system,Attempt:0,} returns sandbox id \"e8892991a05aca44be5885a82a784c0f70d82994b52c8a9bd1a9c508c3f8c753\"" Oct 2 19:26:10.058794 env[1738]: time="2023-10-02T19:26:10.058706754Z" level=info msg="CreateContainer within sandbox \"e8892991a05aca44be5885a82a784c0f70d82994b52c8a9bd1a9c508c3f8c753\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:26:10.084596 systemd[1]: Started cri-containerd-c99a36d31dc75bc34bd4473dd519664fc51e1ca97130400348210382d40c6b19.scope. Oct 2 19:26:10.084838 env[1738]: time="2023-10-02T19:26:10.084560106Z" level=info msg="CreateContainer within sandbox \"e8892991a05aca44be5885a82a784c0f70d82994b52c8a9bd1a9c508c3f8c753\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"6402ac73baf90d884660577dd5b314a66933c4ca6ff62005ab87fce437bb73ab\"" Oct 2 19:26:10.102120 env[1738]: time="2023-10-02T19:26:10.099240824Z" level=info msg="StartContainer for \"6402ac73baf90d884660577dd5b314a66933c4ca6ff62005ab87fce437bb73ab\"" Oct 2 19:26:10.118078 kubelet[2403]: I1002 19:26:10.117672 2403 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-2" Oct 2 19:26:10.118257 kubelet[2403]: E1002 19:26:10.118219 2403 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.29.2:6443/api/v1/nodes\": dial tcp 172.31.29.2:6443: connect: connection refused" node="ip-172-31-29-2" Oct 2 19:26:10.154200 systemd[1]: Started cri-containerd-c76d6f93a033ae771e8da5096c3260a7144482c254c6a253655f6ab9d0807e2b.scope. Oct 2 19:26:10.174069 kernel: kauditd_printk_skb: 386 callbacks suppressed Oct 2 19:26:10.174195 kernel: audit: type=1400 audit(1696274770.163:666): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.183921 kernel: audit: type=1400 audit(1696274770.163:667): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.199346 kernel: audit: type=1400 audit(1696274770.163:668): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.214232 kernel: audit: type=1400 audit(1696274770.163:669): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.228676 kernel: audit: type=1400 audit(1696274770.163:670): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.228840 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:26:10.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.233477 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:26:10.233592 kernel: audit: backlog limit exceeded Oct 2 19:26:10.242772 kernel: audit: type=1400 audit(1696274770.163:671): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.243717 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:26:10.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.165000 audit: BPF prog-id=82 op=LOAD Oct 2 19:26:10.173000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.173000 audit[2748]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2624 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:10.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339396133366433316463373562633334626434343733646435313936 Oct 2 19:26:10.173000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.173000 audit[2748]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2624 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:10.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339396133366433316463373562633334626434343733646435313936 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit: BPF prog-id=83 op=LOAD Oct 2 19:26:10.174000 audit[2748]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2624 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:10.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339396133366433316463373562633334626434343733646435313936 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit: BPF prog-id=84 op=LOAD Oct 2 19:26:10.174000 audit[2748]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2624 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:10.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339396133366433316463373562633334626434343733646435313936 Oct 2 19:26:10.174000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:26:10.174000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { perfmon } for pid=2748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit[2748]: AVC avc: denied { bpf } for pid=2748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.174000 audit: BPF prog-id=85 op=LOAD Oct 2 19:26:10.174000 audit[2748]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2624 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:10.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339396133366433316463373562633334626434343733646435313936 Oct 2 19:26:10.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.268228 systemd[1]: Started cri-containerd-6402ac73baf90d884660577dd5b314a66933c4ca6ff62005ab87fce437bb73ab.scope. Oct 2 19:26:10.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.349000 audit: BPF prog-id=90 op=LOAD Oct 2 19:26:10.351000 audit[2791]: AVC avc: denied { bpf } for pid=2791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.351000 audit[2791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2647 pid=2791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:10.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634303261633733626166393064383834363630353737646435623331 Oct 2 19:26:10.351000 audit[2791]: AVC avc: denied { perfmon } for pid=2791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.351000 audit[2791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2647 pid=2791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:10.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634303261633733626166393064383834363630353737646435623331 Oct 2 19:26:10.351000 audit[2791]: AVC avc: denied { bpf } for pid=2791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.351000 audit[2791]: AVC avc: denied { bpf } for pid=2791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.351000 audit[2791]: AVC avc: denied { bpf } for pid=2791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.351000 audit[2791]: AVC avc: denied { perfmon } for pid=2791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.351000 audit[2791]: AVC avc: denied { perfmon } for pid=2791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.351000 audit[2791]: AVC avc: denied { perfmon } for pid=2791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.351000 audit[2791]: AVC avc: denied { perfmon } for pid=2791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.351000 audit[2791]: AVC avc: denied { perfmon } for pid=2791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.351000 audit[2791]: AVC avc: denied { bpf } for pid=2791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.351000 audit[2791]: AVC avc: denied { bpf } for pid=2791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.351000 audit: BPF prog-id=91 op=LOAD Oct 2 19:26:10.351000 audit[2791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2647 pid=2791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:10.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634303261633733626166393064383834363630353737646435623331 Oct 2 19:26:10.352000 audit[2791]: AVC avc: denied { bpf } for pid=2791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.352000 audit[2791]: AVC avc: denied { bpf } for pid=2791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.352000 audit[2791]: AVC avc: denied { perfmon } for pid=2791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.352000 audit[2791]: AVC avc: denied { perfmon } for pid=2791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.352000 audit[2791]: AVC avc: denied { perfmon } for pid=2791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.352000 audit[2791]: AVC avc: denied { perfmon } for pid=2791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.352000 audit[2791]: AVC avc: denied { perfmon } for pid=2791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.352000 audit[2791]: AVC avc: denied { bpf } for pid=2791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.352000 audit[2791]: AVC avc: denied { bpf } for pid=2791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.352000 audit: BPF prog-id=92 op=LOAD Oct 2 19:26:10.352000 audit[2791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2647 pid=2791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:10.352000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634303261633733626166393064383834363630353737646435623331 Oct 2 19:26:10.352000 audit: BPF prog-id=92 op=UNLOAD Oct 2 19:26:10.352000 audit: BPF prog-id=91 op=UNLOAD Oct 2 19:26:10.352000 audit[2791]: AVC avc: denied { bpf } for pid=2791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.352000 audit[2791]: AVC avc: denied { bpf } for pid=2791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.352000 audit[2791]: AVC avc: denied { bpf } for pid=2791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.352000 audit[2791]: AVC avc: denied { perfmon } for pid=2791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.352000 audit[2791]: AVC avc: denied { perfmon } for pid=2791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.352000 audit[2791]: AVC avc: denied { perfmon } for pid=2791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.352000 audit[2791]: AVC avc: denied { perfmon } for pid=2791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.352000 audit[2791]: AVC avc: denied { perfmon } for pid=2791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.352000 audit[2791]: AVC avc: denied { bpf } for pid=2791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.352000 audit[2791]: AVC avc: denied { bpf } for pid=2791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:10.352000 audit: BPF prog-id=93 op=LOAD Oct 2 19:26:10.352000 audit[2791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2647 pid=2791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:10.352000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634303261633733626166393064383834363630353737646435623331 Oct 2 19:26:10.360836 env[1738]: time="2023-10-02T19:26:10.360774596Z" level=info msg="StartContainer for \"c76d6f93a033ae771e8da5096c3260a7144482c254c6a253655f6ab9d0807e2b\" returns successfully" Oct 2 19:26:10.377309 env[1738]: time="2023-10-02T19:26:10.377221516Z" level=info msg="StartContainer for \"c99a36d31dc75bc34bd4473dd519664fc51e1ca97130400348210382d40c6b19\" returns successfully" Oct 2 19:26:10.426538 env[1738]: time="2023-10-02T19:26:10.426472936Z" level=info msg="StartContainer for \"6402ac73baf90d884660577dd5b314a66933c4ca6ff62005ab87fce437bb73ab\" returns successfully" Oct 2 19:26:10.643187 kubelet[2403]: E1002 19:26:10.643126 2403 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.29.2:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.29.2:6443: connect: connection refused Oct 2 19:26:11.720926 kubelet[2403]: I1002 19:26:11.720876 2403 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-2" Oct 2 19:26:14.016000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:14.016000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40010aa000 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:26:14.016000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:14.016000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:14.016000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40000a9500 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:26:14.016000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:15.451000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:15.454863 kernel: kauditd_printk_skb: 233 callbacks suppressed Oct 2 19:26:15.454934 kernel: audit: type=1400 audit(1696274775.451:713): avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:15.451000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4003de2030 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:26:15.477490 kernel: audit: type=1300 audit(1696274775.451:713): arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4003de2030 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:26:15.451000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:26:15.492670 kernel: audit: type=1327 audit(1696274775.451:713): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:26:15.451000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:15.504378 kernel: audit: type=1400 audit(1696274775.451:714): avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:15.451000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=400b530040 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:26:15.522340 kernel: audit: type=1300 audit(1696274775.451:714): arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=400b530040 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:26:15.451000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:26:15.544989 kernel: audit: type=1327 audit(1696274775.451:714): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:26:15.465000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:15.557656 kernel: audit: type=1400 audit(1696274775.465:715): avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:15.465000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4003ce59e0 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:26:15.572104 kernel: audit: type=1300 audit(1696274775.465:715): arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4003ce59e0 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:26:15.465000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:26:15.587253 kernel: audit: type=1327 audit(1696274775.465:715): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:26:15.478000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:15.602822 kernel: audit: type=1400 audit(1696274775.478:716): avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:15.478000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4003de21b0 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:26:15.478000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:26:15.485000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:15.485000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40065907a0 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:26:15.485000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:26:15.485000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:15.485000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4003e80480 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:26:15.485000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:26:15.850692 kubelet[2403]: E1002 19:26:15.850608 2403 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-29-2\" not found" node="ip-172-31-29-2" Oct 2 19:26:15.913209 kubelet[2403]: I1002 19:26:15.913171 2403 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-29-2" Oct 2 19:26:16.573050 kubelet[2403]: I1002 19:26:16.573007 2403 apiserver.go:52] "Watching apiserver" Oct 2 19:26:16.668409 kubelet[2403]: I1002 19:26:16.668361 2403 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:26:16.741013 kubelet[2403]: I1002 19:26:16.740945 2403 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:26:18.577312 systemd[1]: Reloading. Oct 2 19:26:18.811290 /usr/lib/systemd/system-generators/torcx-generator[2873]: time="2023-10-02T19:26:18Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:26:18.811361 /usr/lib/systemd/system-generators/torcx-generator[2873]: time="2023-10-02T19:26:18Z" level=info msg="torcx already run" Oct 2 19:26:19.091000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:19.091000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000e63a60 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:26:19.091000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:19.094000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:19.094000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000e63b80 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:26:19.094000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:19.108000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:19.108000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000f38300 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:26:19.108000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:19.112527 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:26:19.112568 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:26:19.115000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:19.115000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000f38420 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:26:19.115000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:19.160215 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:26:19.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.381000 audit: BPF prog-id=94 op=LOAD Oct 2 19:26:19.381000 audit: BPF prog-id=90 op=UNLOAD Oct 2 19:26:19.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.388000 audit: BPF prog-id=95 op=LOAD Oct 2 19:26:19.388000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:26:19.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.388000 audit: BPF prog-id=96 op=LOAD Oct 2 19:26:19.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.388000 audit: BPF prog-id=97 op=LOAD Oct 2 19:26:19.388000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:26:19.389000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:26:19.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.391000 audit: BPF prog-id=98 op=LOAD Oct 2 19:26:19.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.391000 audit: BPF prog-id=99 op=LOAD Oct 2 19:26:19.391000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:26:19.391000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:26:19.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.395000 audit: BPF prog-id=100 op=LOAD Oct 2 19:26:19.395000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:26:19.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.397000 audit: BPF prog-id=101 op=LOAD Oct 2 19:26:19.397000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:26:19.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.398000 audit: BPF prog-id=102 op=LOAD Oct 2 19:26:19.398000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:26:19.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.400000 audit: BPF prog-id=103 op=LOAD Oct 2 19:26:19.400000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:26:19.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.400000 audit: BPF prog-id=104 op=LOAD Oct 2 19:26:19.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.400000 audit: BPF prog-id=105 op=LOAD Oct 2 19:26:19.400000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:26:19.400000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:26:19.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.404000 audit: BPF prog-id=106 op=LOAD Oct 2 19:26:19.404000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:26:19.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.404000 audit: BPF prog-id=107 op=LOAD Oct 2 19:26:19.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.405000 audit: BPF prog-id=108 op=LOAD Oct 2 19:26:19.405000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:26:19.405000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:26:19.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.406000 audit: BPF prog-id=109 op=LOAD Oct 2 19:26:19.406000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:26:19.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.407000 audit: BPF prog-id=110 op=LOAD Oct 2 19:26:19.407000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:26:19.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.410000 audit: BPF prog-id=111 op=LOAD Oct 2 19:26:19.410000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:26:19.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.411000 audit: BPF prog-id=112 op=LOAD Oct 2 19:26:19.411000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:26:19.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.414000 audit: BPF prog-id=113 op=LOAD Oct 2 19:26:19.414000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:26:19.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.415000 audit: BPF prog-id=114 op=LOAD Oct 2 19:26:19.415000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:26:19.454744 systemd[1]: Stopping kubelet.service... Oct 2 19:26:19.480635 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:26:19.481092 systemd[1]: Stopped kubelet.service. Oct 2 19:26:19.479000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:19.481198 systemd[1]: kubelet.service: Consumed 2.973s CPU time. Oct 2 19:26:19.484000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:19.485826 systemd[1]: Started kubelet.service. Oct 2 19:26:19.634000 audit[2939]: USER_ACCT pid=2939 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:26:19.635000 audit[2939]: CRED_REFR pid=2939 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:26:19.635907 sudo[2939]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:26:19.637284 sudo[2939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:26:19.640000 audit[2939]: USER_START pid=2939 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:26:19.688710 kubelet[2929]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:26:19.689292 kubelet[2929]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:26:19.689393 kubelet[2929]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:26:19.689743 kubelet[2929]: I1002 19:26:19.689680 2929 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:26:19.703101 kubelet[2929]: I1002 19:26:19.703053 2929 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:26:19.703272 kubelet[2929]: I1002 19:26:19.703126 2929 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:26:19.703939 kubelet[2929]: I1002 19:26:19.703906 2929 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:26:19.710049 kubelet[2929]: I1002 19:26:19.710010 2929 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:26:19.714495 kubelet[2929]: I1002 19:26:19.714455 2929 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:26:19.718816 kubelet[2929]: W1002 19:26:19.718783 2929 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:26:19.720633 kubelet[2929]: I1002 19:26:19.720602 2929 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:26:19.721505 kubelet[2929]: I1002 19:26:19.721481 2929 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:26:19.721731 kubelet[2929]: I1002 19:26:19.721707 2929 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:26:19.722031 kubelet[2929]: I1002 19:26:19.722007 2929 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:26:19.722150 kubelet[2929]: I1002 19:26:19.722129 2929 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:26:19.722372 kubelet[2929]: I1002 19:26:19.722351 2929 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:26:19.730354 kubelet[2929]: I1002 19:26:19.730319 2929 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:26:19.730566 kubelet[2929]: I1002 19:26:19.730545 2929 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:26:19.730898 kubelet[2929]: I1002 19:26:19.730876 2929 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:26:19.731232 kubelet[2929]: I1002 19:26:19.731209 2929 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:26:19.741793 kubelet[2929]: I1002 19:26:19.741757 2929 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:26:19.743762 kubelet[2929]: I1002 19:26:19.743723 2929 server.go:1168] "Started kubelet" Oct 2 19:26:19.755979 kubelet[2929]: I1002 19:26:19.755921 2929 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:26:19.762000 audit[2929]: AVC avc: denied { mac_admin } for pid=2929 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.762000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:26:19.762000 audit[2929]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d88ff0 a1=4000d71f98 a2=4000d88fc0 a3=25 items=0 ppid=1 pid=2929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:19.762000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:26:19.771177 kubelet[2929]: I1002 19:26:19.771130 2929 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:26:19.789310 kubelet[2929]: I1002 19:26:19.756704 2929 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:26:19.789507 kubelet[2929]: I1002 19:26:19.764031 2929 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:26:19.789605 kubelet[2929]: E1002 19:26:19.784056 2929 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:26:19.789746 kubelet[2929]: E1002 19:26:19.789721 2929 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:26:19.791000 audit[2929]: AVC avc: denied { mac_admin } for pid=2929 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:19.791000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:26:19.791000 audit[2929]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400094b7e0 a1=4000dce348 a2=4000e52ae0 a3=25 items=0 ppid=1 pid=2929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:19.791000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:26:19.796085 kubelet[2929]: I1002 19:26:19.796049 2929 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:26:19.796269 kubelet[2929]: I1002 19:26:19.796248 2929 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:26:19.813148 kubelet[2929]: I1002 19:26:19.813106 2929 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:26:19.814068 kubelet[2929]: I1002 19:26:19.814021 2929 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:26:19.945432 kubelet[2929]: I1002 19:26:19.942913 2929 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-2" Oct 2 19:26:19.962009 kubelet[2929]: I1002 19:26:19.961947 2929 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-29-2" Oct 2 19:26:19.962392 kubelet[2929]: I1002 19:26:19.962367 2929 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-29-2" Oct 2 19:26:20.010823 kubelet[2929]: I1002 19:26:20.010785 2929 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:26:20.020498 kubelet[2929]: I1002 19:26:20.020466 2929 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:26:20.020763 kubelet[2929]: I1002 19:26:20.020740 2929 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:26:20.020925 kubelet[2929]: I1002 19:26:20.020903 2929 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:26:20.021150 kubelet[2929]: E1002 19:26:20.021130 2929 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:26:20.025947 kubelet[2929]: I1002 19:26:20.025912 2929 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:26:20.026231 kubelet[2929]: I1002 19:26:20.026206 2929 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:26:20.026411 kubelet[2929]: I1002 19:26:20.026388 2929 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:26:20.026747 kubelet[2929]: I1002 19:26:20.026725 2929 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:26:20.026884 kubelet[2929]: I1002 19:26:20.026863 2929 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:26:20.027031 kubelet[2929]: I1002 19:26:20.027011 2929 policy_none.go:49] "None policy: Start" Oct 2 19:26:20.037574 kubelet[2929]: I1002 19:26:20.037536 2929 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:26:20.037840 kubelet[2929]: I1002 19:26:20.037813 2929 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:26:20.038287 kubelet[2929]: I1002 19:26:20.038263 2929 state_mem.go:75] "Updated machine memory state" Oct 2 19:26:20.062758 kubelet[2929]: I1002 19:26:20.062725 2929 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:26:20.064000 audit[2929]: AVC avc: denied { mac_admin } for pid=2929 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:20.064000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:26:20.064000 audit[2929]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40014b4030 a1=4001265a28 a2=40014b4000 a3=25 items=0 ppid=1 pid=2929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:20.064000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:26:20.065653 kubelet[2929]: I1002 19:26:20.065618 2929 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:26:20.072147 kubelet[2929]: I1002 19:26:20.072115 2929 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:26:20.121754 kubelet[2929]: I1002 19:26:20.121709 2929 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:26:20.122073 kubelet[2929]: I1002 19:26:20.122048 2929 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:26:20.122267 kubelet[2929]: I1002 19:26:20.122244 2929 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:26:20.220837 kubelet[2929]: I1002 19:26:20.220709 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b5b440d2c602d3806b0d6bff26a1920b-kubeconfig\") pod \"kube-scheduler-ip-172-31-29-2\" (UID: \"b5b440d2c602d3806b0d6bff26a1920b\") " pod="kube-system/kube-scheduler-ip-172-31-29-2" Oct 2 19:26:20.220837 kubelet[2929]: I1002 19:26:20.220795 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/2d723c10c05328f30da4f6e1267a873b-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-29-2\" (UID: \"2d723c10c05328f30da4f6e1267a873b\") " pod="kube-system/kube-apiserver-ip-172-31-29-2" Oct 2 19:26:20.221087 kubelet[2929]: I1002 19:26:20.220844 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9bee141acb7181383e1402b1d8f86b7d-ca-certs\") pod \"kube-controller-manager-ip-172-31-29-2\" (UID: \"9bee141acb7181383e1402b1d8f86b7d\") " pod="kube-system/kube-controller-manager-ip-172-31-29-2" Oct 2 19:26:20.221087 kubelet[2929]: I1002 19:26:20.220892 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9bee141acb7181383e1402b1d8f86b7d-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-29-2\" (UID: \"9bee141acb7181383e1402b1d8f86b7d\") " pod="kube-system/kube-controller-manager-ip-172-31-29-2" Oct 2 19:26:20.221087 kubelet[2929]: I1002 19:26:20.220936 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9bee141acb7181383e1402b1d8f86b7d-k8s-certs\") pod \"kube-controller-manager-ip-172-31-29-2\" (UID: \"9bee141acb7181383e1402b1d8f86b7d\") " pod="kube-system/kube-controller-manager-ip-172-31-29-2" Oct 2 19:26:20.221087 kubelet[2929]: I1002 19:26:20.221021 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/9bee141acb7181383e1402b1d8f86b7d-kubeconfig\") pod \"kube-controller-manager-ip-172-31-29-2\" (UID: \"9bee141acb7181383e1402b1d8f86b7d\") " pod="kube-system/kube-controller-manager-ip-172-31-29-2" Oct 2 19:26:20.221087 kubelet[2929]: I1002 19:26:20.221074 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/2d723c10c05328f30da4f6e1267a873b-ca-certs\") pod \"kube-apiserver-ip-172-31-29-2\" (UID: \"2d723c10c05328f30da4f6e1267a873b\") " pod="kube-system/kube-apiserver-ip-172-31-29-2" Oct 2 19:26:20.221385 kubelet[2929]: I1002 19:26:20.221119 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/2d723c10c05328f30da4f6e1267a873b-k8s-certs\") pod \"kube-apiserver-ip-172-31-29-2\" (UID: \"2d723c10c05328f30da4f6e1267a873b\") " pod="kube-system/kube-apiserver-ip-172-31-29-2" Oct 2 19:26:20.221385 kubelet[2929]: I1002 19:26:20.221167 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/9bee141acb7181383e1402b1d8f86b7d-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-29-2\" (UID: \"9bee141acb7181383e1402b1d8f86b7d\") " pod="kube-system/kube-controller-manager-ip-172-31-29-2" Oct 2 19:26:20.667746 sudo[2939]: pam_unix(sudo:session): session closed for user root Oct 2 19:26:20.666000 audit[2939]: USER_END pid=2939 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:26:20.669937 kernel: kauditd_printk_skb: 281 callbacks suppressed Oct 2 19:26:20.670033 kernel: audit: type=1106 audit(1696274780.666:975): pid=2939 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:26:20.668000 audit[2939]: CRED_DISP pid=2939 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:26:20.687803 kernel: audit: type=1104 audit(1696274780.668:976): pid=2939 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:26:20.746415 kubelet[2929]: I1002 19:26:20.746365 2929 apiserver.go:52] "Watching apiserver" Oct 2 19:26:20.815159 kubelet[2929]: I1002 19:26:20.815089 2929 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:26:20.824681 kubelet[2929]: I1002 19:26:20.824634 2929 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:26:21.094184 kubelet[2929]: E1002 19:26:21.094126 2929 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-29-2\" already exists" pod="kube-system/kube-apiserver-ip-172-31-29-2" Oct 2 19:26:21.127591 kubelet[2929]: I1002 19:26:21.127555 2929 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-29-2" podStartSLOduration=1.127479387 podCreationTimestamp="2023-10-02 19:26:20 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:26:21.124191613 +0000 UTC m=+1.610275586" watchObservedRunningTime="2023-10-02 19:26:21.127479387 +0000 UTC m=+1.613563336" Oct 2 19:26:21.155155 kubelet[2929]: I1002 19:26:21.155102 2929 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-29-2" podStartSLOduration=1.155010053 podCreationTimestamp="2023-10-02 19:26:20 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:26:21.14130221 +0000 UTC m=+1.627386183" watchObservedRunningTime="2023-10-02 19:26:21.155010053 +0000 UTC m=+1.641094014" Oct 2 19:26:21.155522 kubelet[2929]: I1002 19:26:21.155477 2929 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-29-2" podStartSLOduration=1.155436157 podCreationTimestamp="2023-10-02 19:26:20 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:26:21.153614099 +0000 UTC m=+1.639698072" watchObservedRunningTime="2023-10-02 19:26:21.155436157 +0000 UTC m=+1.641520142" Oct 2 19:26:23.663442 sudo[1992]: pam_unix(sudo:session): session closed for user root Oct 2 19:26:23.662000 audit[1992]: USER_END pid=1992 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:26:23.662000 audit[1992]: CRED_DISP pid=1992 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:26:23.681214 kernel: audit: type=1106 audit(1696274783.662:977): pid=1992 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:26:23.681281 kernel: audit: type=1104 audit(1696274783.662:978): pid=1992 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:26:23.688309 sshd[1989]: pam_unix(sshd:session): session closed for user core Oct 2 19:26:23.689000 audit[1989]: USER_END pid=1989 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:26:23.707781 systemd-logind[1722]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:26:23.689000 audit[1989]: CRED_DISP pid=1989 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:26:23.710691 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:26:23.711070 systemd[1]: session-7.scope: Consumed 10.790s CPU time. Oct 2 19:26:23.713311 systemd-logind[1722]: Removed session 7. Oct 2 19:26:23.714505 systemd[1]: sshd@6-172.31.29.2:22-139.178.89.65:55566.service: Deactivated successfully. Oct 2 19:26:23.720150 kernel: audit: type=1106 audit(1696274783.689:979): pid=1989 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:26:23.720276 kernel: audit: type=1104 audit(1696274783.689:980): pid=1989 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:26:23.713000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.29.2:22-139.178.89.65:55566 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:23.729345 kernel: audit: type=1131 audit(1696274783.713:981): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.29.2:22-139.178.89.65:55566 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:29.763000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:26:29.763000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40008636c0 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:26:29.787266 kernel: audit: type=1400 audit(1696274789.763:982): avc: denied { watch } for pid=2810 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:26:29.787455 kernel: audit: type=1300 audit(1696274789.763:982): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40008636c0 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:26:29.787517 kernel: audit: type=1327 audit(1696274789.763:982): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:29.763000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:33.032150 kubelet[2929]: I1002 19:26:33.032023 2929 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:26:33.034003 env[1738]: time="2023-10-02T19:26:33.033918978Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:26:33.035017 kubelet[2929]: I1002 19:26:33.034954 2929 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:26:33.890583 kubelet[2929]: I1002 19:26:33.890492 2929 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:26:33.900612 kubelet[2929]: I1002 19:26:33.900574 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e5f52a30-0697-4145-a1c3-38b9abf8f4c9-lib-modules\") pod \"kube-proxy-6cd45\" (UID: \"e5f52a30-0697-4145-a1c3-38b9abf8f4c9\") " pod="kube-system/kube-proxy-6cd45" Oct 2 19:26:33.900897 kubelet[2929]: I1002 19:26:33.900870 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-n6zpt\" (UniqueName: \"kubernetes.io/projected/e5f52a30-0697-4145-a1c3-38b9abf8f4c9-kube-api-access-n6zpt\") pod \"kube-proxy-6cd45\" (UID: \"e5f52a30-0697-4145-a1c3-38b9abf8f4c9\") " pod="kube-system/kube-proxy-6cd45" Oct 2 19:26:33.901118 kubelet[2929]: I1002 19:26:33.901095 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/e5f52a30-0697-4145-a1c3-38b9abf8f4c9-kube-proxy\") pod \"kube-proxy-6cd45\" (UID: \"e5f52a30-0697-4145-a1c3-38b9abf8f4c9\") " pod="kube-system/kube-proxy-6cd45" Oct 2 19:26:33.901318 kubelet[2929]: I1002 19:26:33.901295 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e5f52a30-0697-4145-a1c3-38b9abf8f4c9-xtables-lock\") pod \"kube-proxy-6cd45\" (UID: \"e5f52a30-0697-4145-a1c3-38b9abf8f4c9\") " pod="kube-system/kube-proxy-6cd45" Oct 2 19:26:33.902485 systemd[1]: Created slice kubepods-besteffort-pode5f52a30_0697_4145_a1c3_38b9abf8f4c9.slice. Oct 2 19:26:33.949359 kubelet[2929]: I1002 19:26:33.949267 2929 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:26:33.960755 systemd[1]: Created slice kubepods-burstable-pod8e04169a_0e59_42fb_add0_aca7ef121ad5.slice. Oct 2 19:26:34.001839 kubelet[2929]: I1002 19:26:34.001776 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-lib-modules\") pod \"cilium-vcdqn\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " pod="kube-system/cilium-vcdqn" Oct 2 19:26:34.002060 kubelet[2929]: I1002 19:26:34.001881 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/8e04169a-0e59-42fb-add0-aca7ef121ad5-hubble-tls\") pod \"cilium-vcdqn\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " pod="kube-system/cilium-vcdqn" Oct 2 19:26:34.002060 kubelet[2929]: I1002 19:26:34.002001 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hgddn\" (UniqueName: \"kubernetes.io/projected/8e04169a-0e59-42fb-add0-aca7ef121ad5-kube-api-access-hgddn\") pod \"cilium-vcdqn\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " pod="kube-system/cilium-vcdqn" Oct 2 19:26:34.002060 kubelet[2929]: I1002 19:26:34.002051 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-xtables-lock\") pod \"cilium-vcdqn\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " pod="kube-system/cilium-vcdqn" Oct 2 19:26:34.002253 kubelet[2929]: I1002 19:26:34.002123 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/8e04169a-0e59-42fb-add0-aca7ef121ad5-clustermesh-secrets\") pod \"cilium-vcdqn\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " pod="kube-system/cilium-vcdqn" Oct 2 19:26:34.002253 kubelet[2929]: I1002 19:26:34.002210 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-cni-path\") pod \"cilium-vcdqn\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " pod="kube-system/cilium-vcdqn" Oct 2 19:26:34.002392 kubelet[2929]: I1002 19:26:34.002283 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-host-proc-sys-net\") pod \"cilium-vcdqn\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " pod="kube-system/cilium-vcdqn" Oct 2 19:26:34.002478 kubelet[2929]: I1002 19:26:34.002396 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-etc-cni-netd\") pod \"cilium-vcdqn\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " pod="kube-system/cilium-vcdqn" Oct 2 19:26:34.002560 kubelet[2929]: I1002 19:26:34.002484 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/8e04169a-0e59-42fb-add0-aca7ef121ad5-cilium-config-path\") pod \"cilium-vcdqn\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " pod="kube-system/cilium-vcdqn" Oct 2 19:26:34.002640 kubelet[2929]: I1002 19:26:34.002559 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-cilium-run\") pod \"cilium-vcdqn\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " pod="kube-system/cilium-vcdqn" Oct 2 19:26:34.002640 kubelet[2929]: I1002 19:26:34.002629 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-cilium-cgroup\") pod \"cilium-vcdqn\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " pod="kube-system/cilium-vcdqn" Oct 2 19:26:34.002824 kubelet[2929]: I1002 19:26:34.002754 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-hostproc\") pod \"cilium-vcdqn\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " pod="kube-system/cilium-vcdqn" Oct 2 19:26:34.002892 kubelet[2929]: I1002 19:26:34.002825 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-host-proc-sys-kernel\") pod \"cilium-vcdqn\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " pod="kube-system/cilium-vcdqn" Oct 2 19:26:34.002954 kubelet[2929]: I1002 19:26:34.002900 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-bpf-maps\") pod \"cilium-vcdqn\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " pod="kube-system/cilium-vcdqn" Oct 2 19:26:34.057810 kubelet[2929]: I1002 19:26:34.057739 2929 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:26:34.068612 systemd[1]: Created slice kubepods-besteffort-pod8f22e2d9_e393_4605_a9de_3312f567b207.slice. Oct 2 19:26:34.104787 kubelet[2929]: I1002 19:26:34.104302 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kskxg\" (UniqueName: \"kubernetes.io/projected/8f22e2d9-e393-4605-a9de-3312f567b207-kube-api-access-kskxg\") pod \"cilium-operator-574c4bb98d-xw4fr\" (UID: \"8f22e2d9-e393-4605-a9de-3312f567b207\") " pod="kube-system/cilium-operator-574c4bb98d-xw4fr" Oct 2 19:26:34.105305 kubelet[2929]: I1002 19:26:34.105237 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/8f22e2d9-e393-4605-a9de-3312f567b207-cilium-config-path\") pod \"cilium-operator-574c4bb98d-xw4fr\" (UID: \"8f22e2d9-e393-4605-a9de-3312f567b207\") " pod="kube-system/cilium-operator-574c4bb98d-xw4fr" Oct 2 19:26:34.217955 env[1738]: time="2023-10-02T19:26:34.217095394Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-6cd45,Uid:e5f52a30-0697-4145-a1c3-38b9abf8f4c9,Namespace:kube-system,Attempt:0,}" Oct 2 19:26:34.265928 env[1738]: time="2023-10-02T19:26:34.265800703Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-vcdqn,Uid:8e04169a-0e59-42fb-add0-aca7ef121ad5,Namespace:kube-system,Attempt:0,}" Oct 2 19:26:34.270492 env[1738]: time="2023-10-02T19:26:34.270375857Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:26:34.270693 env[1738]: time="2023-10-02T19:26:34.270529114Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:26:34.270693 env[1738]: time="2023-10-02T19:26:34.270594502Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:26:34.271568 env[1738]: time="2023-10-02T19:26:34.271481995Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/86394fe8f7373f4b4396aba87647f315df29da200d3edfba771162958a9d99bb pid=3010 runtime=io.containerd.runc.v2 Oct 2 19:26:34.310950 systemd[1]: Started cri-containerd-86394fe8f7373f4b4396aba87647f315df29da200d3edfba771162958a9d99bb.scope. Oct 2 19:26:34.325018 env[1738]: time="2023-10-02T19:26:34.324841073Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:26:34.325298 env[1738]: time="2023-10-02T19:26:34.324927513Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:26:34.325508 env[1738]: time="2023-10-02T19:26:34.325248393Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:26:34.326309 env[1738]: time="2023-10-02T19:26:34.326196749Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477 pid=3035 runtime=io.containerd.runc.v2 Oct 2 19:26:34.362231 systemd[1]: Started cri-containerd-73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477.scope. Oct 2 19:26:34.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.381565 env[1738]: time="2023-10-02T19:26:34.381510630Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-xw4fr,Uid:8f22e2d9-e393-4605-a9de-3312f567b207,Namespace:kube-system,Attempt:0,}" Oct 2 19:26:34.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.394173 kernel: audit: type=1400 audit(1696274794.371:983): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.394330 kernel: audit: type=1400 audit(1696274794.371:984): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.394386 kernel: audit: type=1400 audit(1696274794.371:985): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.412285 kernel: audit: type=1400 audit(1696274794.371:986): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.421211 kernel: audit: type=1400 audit(1696274794.371:987): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.445682 kernel: audit: type=1400 audit(1696274794.371:988): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.459208 kernel: audit: type=1400 audit(1696274794.371:989): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.379000 audit: BPF prog-id=115 op=LOAD Oct 2 19:26:34.381000 audit[3019]: AVC avc: denied { bpf } for pid=3019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.381000 audit[3019]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3010 pid=3019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:34.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836333934666538663733373366346234333936616261383736343766 Oct 2 19:26:34.381000 audit[3019]: AVC avc: denied { perfmon } for pid=3019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.381000 audit[3019]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3010 pid=3019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:34.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836333934666538663733373366346234333936616261383736343766 Oct 2 19:26:34.381000 audit[3019]: AVC avc: denied { bpf } for pid=3019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.381000 audit[3019]: AVC avc: denied { bpf } for pid=3019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.381000 audit[3019]: AVC avc: denied { bpf } for pid=3019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.381000 audit[3019]: AVC avc: denied { perfmon } for pid=3019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.381000 audit[3019]: AVC avc: denied { perfmon } for pid=3019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.381000 audit[3019]: AVC avc: denied { perfmon } for pid=3019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.381000 audit[3019]: AVC avc: denied { perfmon } for pid=3019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.381000 audit[3019]: AVC avc: denied { perfmon } for pid=3019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.381000 audit[3019]: AVC avc: denied { bpf } for pid=3019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.381000 audit[3019]: AVC avc: denied { bpf } for pid=3019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.381000 audit: BPF prog-id=116 op=LOAD Oct 2 19:26:34.381000 audit[3019]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3010 pid=3019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:34.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836333934666538663733373366346234333936616261383736343766 Oct 2 19:26:34.394000 audit[3019]: AVC avc: denied { bpf } for pid=3019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.394000 audit[3019]: AVC avc: denied { bpf } for pid=3019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.394000 audit[3019]: AVC avc: denied { perfmon } for pid=3019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.394000 audit[3019]: AVC avc: denied { perfmon } for pid=3019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.394000 audit[3019]: AVC avc: denied { perfmon } for pid=3019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.394000 audit[3019]: AVC avc: denied { perfmon } for pid=3019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.394000 audit[3019]: AVC avc: denied { perfmon } for pid=3019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.394000 audit[3019]: AVC avc: denied { bpf } for pid=3019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.394000 audit[3019]: AVC avc: denied { bpf } for pid=3019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.394000 audit: BPF prog-id=117 op=LOAD Oct 2 19:26:34.394000 audit[3019]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3010 pid=3019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:34.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836333934666538663733373366346234333936616261383736343766 Oct 2 19:26:34.401000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:26:34.401000 audit: BPF prog-id=116 op=UNLOAD Oct 2 19:26:34.402000 audit[3019]: AVC avc: denied { bpf } for pid=3019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.402000 audit[3019]: AVC avc: denied { bpf } for pid=3019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.402000 audit[3019]: AVC avc: denied { bpf } for pid=3019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.402000 audit[3019]: AVC avc: denied { perfmon } for pid=3019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.402000 audit[3019]: AVC avc: denied { perfmon } for pid=3019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.402000 audit[3019]: AVC avc: denied { perfmon } for pid=3019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.402000 audit[3019]: AVC avc: denied { perfmon } for pid=3019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.402000 audit[3019]: AVC avc: denied { perfmon } for pid=3019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.402000 audit[3019]: AVC avc: denied { bpf } for pid=3019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.402000 audit[3019]: AVC avc: denied { bpf } for pid=3019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.402000 audit: BPF prog-id=118 op=LOAD Oct 2 19:26:34.402000 audit[3019]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3010 pid=3019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:34.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836333934666538663733373366346234333936616261383736343766 Oct 2 19:26:34.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.467000 audit: BPF prog-id=119 op=LOAD Oct 2 19:26:34.472000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.472000 audit[3045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=3035 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:34.472000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733393231653039363833363032646233363137353634636531653731 Oct 2 19:26:34.473000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.473000 audit[3045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=3035 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:34.473000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733393231653039363833363032646233363137353634636531653731 Oct 2 19:26:34.473000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.473000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.473000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.473000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.473000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.473000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.473000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.473000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.473000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.473000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.473000 audit: BPF prog-id=120 op=LOAD Oct 2 19:26:34.473000 audit[3045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=3035 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:34.473000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733393231653039363833363032646233363137353634636531653731 Oct 2 19:26:34.475000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.475000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.475000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.475000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.475000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.475000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.475000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.475000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.475000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.475000 audit: BPF prog-id=121 op=LOAD Oct 2 19:26:34.475000 audit[3045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=3035 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:34.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733393231653039363833363032646233363137353634636531653731 Oct 2 19:26:34.476000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:26:34.476000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:26:34.476000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.476000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.476000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.476000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.476000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.476000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.476000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.476000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.476000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.476000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.476000 audit: BPF prog-id=122 op=LOAD Oct 2 19:26:34.476000 audit[3045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=3035 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:34.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733393231653039363833363032646233363137353634636531653731 Oct 2 19:26:34.481386 env[1738]: time="2023-10-02T19:26:34.481260014Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:26:34.481613 env[1738]: time="2023-10-02T19:26:34.481338557Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:26:34.481613 env[1738]: time="2023-10-02T19:26:34.481381273Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:26:34.483043 env[1738]: time="2023-10-02T19:26:34.482898487Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1775eb6c9d5fa3d380b614ea108bd6b26e37e1e9333a71767319b35a42175a3e pid=3074 runtime=io.containerd.runc.v2 Oct 2 19:26:34.504232 env[1738]: time="2023-10-02T19:26:34.504157200Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-6cd45,Uid:e5f52a30-0697-4145-a1c3-38b9abf8f4c9,Namespace:kube-system,Attempt:0,} returns sandbox id \"86394fe8f7373f4b4396aba87647f315df29da200d3edfba771162958a9d99bb\"" Oct 2 19:26:34.514473 env[1738]: time="2023-10-02T19:26:34.514413707Z" level=info msg="CreateContainer within sandbox \"86394fe8f7373f4b4396aba87647f315df29da200d3edfba771162958a9d99bb\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:26:34.529867 env[1738]: time="2023-10-02T19:26:34.529808598Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-vcdqn,Uid:8e04169a-0e59-42fb-add0-aca7ef121ad5,Namespace:kube-system,Attempt:0,} returns sandbox id \"73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477\"" Oct 2 19:26:34.536401 env[1738]: time="2023-10-02T19:26:34.536345397Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:26:34.547424 env[1738]: time="2023-10-02T19:26:34.547184805Z" level=info msg="CreateContainer within sandbox \"86394fe8f7373f4b4396aba87647f315df29da200d3edfba771162958a9d99bb\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"90fff2a5a86122ca0e0987f6baddb39e295c6137f3b8d3c29ba93dbab06e66ca\"" Oct 2 19:26:34.549246 env[1738]: time="2023-10-02T19:26:34.549198167Z" level=info msg="StartContainer for \"90fff2a5a86122ca0e0987f6baddb39e295c6137f3b8d3c29ba93dbab06e66ca\"" Oct 2 19:26:34.555648 systemd[1]: Started cri-containerd-1775eb6c9d5fa3d380b614ea108bd6b26e37e1e9333a71767319b35a42175a3e.scope. Oct 2 19:26:34.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.603000 audit: BPF prog-id=123 op=LOAD Oct 2 19:26:34.605000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.605000 audit[3091]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3074 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:34.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137373565623663396435666133643338306236313465613130386264 Oct 2 19:26:34.605000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.605000 audit[3091]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3074 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:34.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137373565623663396435666133643338306236313465613130386264 Oct 2 19:26:34.606000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.606000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.606000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.606000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.606000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.606000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.606000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.606000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.606000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.606000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.606000 audit: BPF prog-id=124 op=LOAD Oct 2 19:26:34.606000 audit[3091]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3074 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:34.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137373565623663396435666133643338306236313465613130386264 Oct 2 19:26:34.612000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.612000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.612000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.612000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.612000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.612000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.612000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.612000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.612000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.612000 audit: BPF prog-id=125 op=LOAD Oct 2 19:26:34.612000 audit[3091]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3074 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:34.612000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137373565623663396435666133643338306236313465613130386264 Oct 2 19:26:34.616000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:26:34.616000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:26:34.616000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.616000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.616000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.616000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.616000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.616000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.616000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.616000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.616000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.616000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.616000 audit: BPF prog-id=126 op=LOAD Oct 2 19:26:34.616000 audit[3091]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3074 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:34.616000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137373565623663396435666133643338306236313465613130386264 Oct 2 19:26:34.622530 systemd[1]: Started cri-containerd-90fff2a5a86122ca0e0987f6baddb39e295c6137f3b8d3c29ba93dbab06e66ca.scope. Oct 2 19:26:34.685382 env[1738]: time="2023-10-02T19:26:34.685324791Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-xw4fr,Uid:8f22e2d9-e393-4605-a9de-3312f567b207,Namespace:kube-system,Attempt:0,} returns sandbox id \"1775eb6c9d5fa3d380b614ea108bd6b26e37e1e9333a71767319b35a42175a3e\"" Oct 2 19:26:34.710000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.710000 audit[3113]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3010 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:34.710000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930666666326135613836313232636130653039383766366261646462 Oct 2 19:26:34.711000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.711000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.711000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.711000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.711000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.711000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.711000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.711000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.711000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.711000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.711000 audit: BPF prog-id=127 op=LOAD Oct 2 19:26:34.711000 audit[3113]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3010 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:34.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930666666326135613836313232636130653039383766366261646462 Oct 2 19:26:34.713000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.713000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.713000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.713000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.713000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.713000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.713000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.713000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.713000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.713000 audit: BPF prog-id=128 op=LOAD Oct 2 19:26:34.713000 audit[3113]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3010 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:34.713000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930666666326135613836313232636130653039383766366261646462 Oct 2 19:26:34.714000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:26:34.714000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:26:34.715000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.715000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.715000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.715000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.715000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.715000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.715000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.715000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.715000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.715000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:34.715000 audit: BPF prog-id=129 op=LOAD Oct 2 19:26:34.715000 audit[3113]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3010 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:34.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930666666326135613836313232636130653039383766366261646462 Oct 2 19:26:34.757472 env[1738]: time="2023-10-02T19:26:34.757289909Z" level=info msg="StartContainer for \"90fff2a5a86122ca0e0987f6baddb39e295c6137f3b8d3c29ba93dbab06e66ca\" returns successfully" Oct 2 19:26:34.935000 audit[3176]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=3176 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:34.938467 kernel: kauditd_printk_skb: 207 callbacks suppressed Oct 2 19:26:34.938619 kernel: audit: type=1325 audit(1696274794.935:1043): table=mangle:38 family=10 entries=1 op=nft_register_chain pid=3176 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:34.935000 audit[3176]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd1713cd0 a2=0 a3=ffff918516c0 items=0 ppid=3130 pid=3176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:34.961321 kernel: audit: type=1300 audit(1696274794.935:1043): arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd1713cd0 a2=0 a3=ffff918516c0 items=0 ppid=3130 pid=3176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:34.935000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:26:34.973063 kernel: audit: type=1327 audit(1696274794.935:1043): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:26:34.941000 audit[3177]: NETFILTER_CFG table=nat:39 family=10 entries=1 op=nft_register_chain pid=3177 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:34.984897 kernel: audit: type=1325 audit(1696274794.941:1044): table=nat:39 family=10 entries=1 op=nft_register_chain pid=3177 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:34.941000 audit[3177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcb595000 a2=0 a3=ffffae88e6c0 items=0 ppid=3130 pid=3177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.000013 kernel: audit: type=1300 audit(1696274794.941:1044): arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcb595000 a2=0 a3=ffffae88e6c0 items=0 ppid=3130 pid=3177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:34.941000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:26:35.010832 kernel: audit: type=1327 audit(1696274794.941:1044): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:26:34.946000 audit[3178]: NETFILTER_CFG table=filter:40 family=10 entries=1 op=nft_register_chain pid=3178 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:35.020016 kernel: audit: type=1325 audit(1696274794.946:1045): table=filter:40 family=10 entries=1 op=nft_register_chain pid=3178 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:34.946000 audit[3178]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcfc3e0f0 a2=0 a3=ffffabcf76c0 items=0 ppid=3130 pid=3178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.032239 kernel: audit: type=1300 audit(1696274794.946:1045): arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcfc3e0f0 a2=0 a3=ffffabcf76c0 items=0 ppid=3130 pid=3178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:34.946000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:26:35.042138 kernel: audit: type=1327 audit(1696274794.946:1045): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:26:34.961000 audit[3175]: NETFILTER_CFG table=mangle:41 family=2 entries=1 op=nft_register_chain pid=3175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:34.961000 audit[3175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe75d7560 a2=0 a3=ffff919b36c0 items=0 ppid=3130 pid=3175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.058125 kernel: audit: type=1325 audit(1696274794.961:1046): table=mangle:41 family=2 entries=1 op=nft_register_chain pid=3175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:34.961000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:26:35.069000 audit[3180]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_chain pid=3180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:35.069000 audit[3180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff8fddc60 a2=0 a3=ffffb9d476c0 items=0 ppid=3130 pid=3180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.069000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:26:35.090000 audit[3181]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=3181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:35.090000 audit[3181]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc4b7d7e0 a2=0 a3=ffffb54c16c0 items=0 ppid=3130 pid=3181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.090000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:26:35.096000 audit[3182]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:35.096000 audit[3182]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd5d7bbd0 a2=0 a3=ffff949f26c0 items=0 ppid=3130 pid=3182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.096000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:26:35.107000 audit[3184]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:35.107000 audit[3184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffd09cf3f0 a2=0 a3=ffffae6776c0 items=0 ppid=3130 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.107000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:26:35.154000 audit[3187]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3187 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:35.154000 audit[3187]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe117b9a0 a2=0 a3=ffffa44466c0 items=0 ppid=3130 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.154000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:26:35.162000 audit[3188]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:35.162000 audit[3188]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd7220f90 a2=0 a3=ffffb9be36c0 items=0 ppid=3130 pid=3188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.162000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:26:35.171000 audit[3190]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3190 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:35.171000 audit[3190]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdbf23c70 a2=0 a3=ffff839c06c0 items=0 ppid=3130 pid=3190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.171000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:26:35.174000 audit[3191]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:35.174000 audit[3191]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd5d6f870 a2=0 a3=ffff877a26c0 items=0 ppid=3130 pid=3191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.174000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:26:35.183000 audit[3193]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3193 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:35.183000 audit[3193]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffebf083d0 a2=0 a3=ffff95d246c0 items=0 ppid=3130 pid=3193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.183000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:26:35.195000 audit[3196]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3196 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:35.195000 audit[3196]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff3dd4750 a2=0 a3=ffff8f5306c0 items=0 ppid=3130 pid=3196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.195000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:26:35.199000 audit[3197]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3197 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:35.199000 audit[3197]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc5d72400 a2=0 a3=ffff8203b6c0 items=0 ppid=3130 pid=3197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.199000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:26:35.208000 audit[3199]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3199 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:35.208000 audit[3199]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdf40a4b0 a2=0 a3=ffff907b46c0 items=0 ppid=3130 pid=3199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.208000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:26:35.213000 audit[3200]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3200 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:35.213000 audit[3200]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc576f3a0 a2=0 a3=ffffb30df6c0 items=0 ppid=3130 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.213000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:26:35.226000 audit[3202]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3202 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:35.226000 audit[3202]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe30c2490 a2=0 a3=ffffa7f8e6c0 items=0 ppid=3130 pid=3202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.226000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:26:35.239000 audit[3205]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3205 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:35.239000 audit[3205]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdb150260 a2=0 a3=ffff90d966c0 items=0 ppid=3130 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.239000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:26:35.255000 audit[3208]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3208 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:35.255000 audit[3208]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc9b58e00 a2=0 a3=ffffad10b6c0 items=0 ppid=3130 pid=3208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.255000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:26:35.260000 audit[3209]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3209 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:35.260000 audit[3209]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff51be0b0 a2=0 a3=ffff864896c0 items=0 ppid=3130 pid=3209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.260000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:26:35.268000 audit[3211]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3211 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:35.268000 audit[3211]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffdb5e0a00 a2=0 a3=ffff9055c6c0 items=0 ppid=3130 pid=3211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.268000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:26:35.284000 audit[3214]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3214 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:35.284000 audit[3214]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffda887ba0 a2=0 a3=ffffb846a6c0 items=0 ppid=3130 pid=3214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.284000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:26:35.316000 audit[3219]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3219 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:35.316000 audit[3219]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe48b1400 a2=0 a3=ffff936d36c0 items=0 ppid=3130 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.316000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:26:35.325000 audit[3221]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3221 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:26:35.325000 audit[3221]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffcbe07950 a2=0 a3=ffff838696c0 items=0 ppid=3130 pid=3221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.325000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:26:35.362000 audit[3223]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3223 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:26:35.362000 audit[3223]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffc37c9e00 a2=0 a3=ffffb9d466c0 items=0 ppid=3130 pid=3223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.362000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:26:35.375000 audit[3223]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3223 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:26:35.375000 audit[3223]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffc37c9e00 a2=0 a3=ffffb9d466c0 items=0 ppid=3130 pid=3223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.375000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:26:35.379000 audit[3229]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3229 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:35.379000 audit[3229]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff9a2ceb0 a2=0 a3=ffff820706c0 items=0 ppid=3130 pid=3229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.379000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:26:35.387000 audit[3231]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:35.387000 audit[3231]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff148e9c0 a2=0 a3=ffffb975d6c0 items=0 ppid=3130 pid=3231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.387000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:26:35.399000 audit[3234]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:35.399000 audit[3234]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff0be2d00 a2=0 a3=ffffb37816c0 items=0 ppid=3130 pid=3234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.399000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:26:35.404000 audit[3235]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3235 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:35.404000 audit[3235]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdc802fd0 a2=0 a3=ffff9dc656c0 items=0 ppid=3130 pid=3235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.404000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:26:35.413000 audit[3237]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:35.413000 audit[3237]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc6a88840 a2=0 a3=ffff9fa706c0 items=0 ppid=3130 pid=3237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.413000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:26:35.419000 audit[3238]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3238 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:35.419000 audit[3238]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff5c3ce30 a2=0 a3=ffff99b246c0 items=0 ppid=3130 pid=3238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.419000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:26:35.428000 audit[3240]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:35.428000 audit[3240]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffeeeac9b0 a2=0 a3=ffff8ddaf6c0 items=0 ppid=3130 pid=3240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.428000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:26:35.440000 audit[3243]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3243 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:35.440000 audit[3243]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffe6afb4b0 a2=0 a3=ffff8bed96c0 items=0 ppid=3130 pid=3243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.440000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:26:35.444000 audit[3244]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3244 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:35.444000 audit[3244]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffffcf60a0 a2=0 a3=ffffa81d66c0 items=0 ppid=3130 pid=3244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.444000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:26:35.454000 audit[3246]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3246 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:35.454000 audit[3246]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffceca5140 a2=0 a3=ffff810826c0 items=0 ppid=3130 pid=3246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.454000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:26:35.458000 audit[3247]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3247 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:35.458000 audit[3247]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd0d01bd0 a2=0 a3=ffff8c16d6c0 items=0 ppid=3130 pid=3247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.458000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:26:35.472000 audit[3249]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3249 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:35.472000 audit[3249]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffde94f6c0 a2=0 a3=ffffaf2b96c0 items=0 ppid=3130 pid=3249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.472000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:26:35.490000 audit[3252]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3252 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:35.490000 audit[3252]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff3203350 a2=0 a3=ffff91d846c0 items=0 ppid=3130 pid=3252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.490000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:26:35.506000 audit[3255]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3255 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:35.506000 audit[3255]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffce17bf0 a2=0 a3=ffffadda96c0 items=0 ppid=3130 pid=3255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.506000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:26:35.510000 audit[3256]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3256 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:35.510000 audit[3256]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc8595880 a2=0 a3=ffffa40716c0 items=0 ppid=3130 pid=3256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.510000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:26:35.518000 audit[3258]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3258 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:35.518000 audit[3258]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffcc2dd940 a2=0 a3=ffff80ab86c0 items=0 ppid=3130 pid=3258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.518000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:26:35.529000 audit[3261]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3261 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:35.529000 audit[3261]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffe33e9890 a2=0 a3=ffffa75156c0 items=0 ppid=3130 pid=3261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.529000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:26:35.534000 audit[3262]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_chain pid=3262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:35.534000 audit[3262]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc29acee0 a2=0 a3=ffff820526c0 items=0 ppid=3130 pid=3262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.534000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:26:35.543000 audit[3264]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=3264 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:35.543000 audit[3264]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffea32d340 a2=0 a3=ffffb72b96c0 items=0 ppid=3130 pid=3264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.543000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:26:35.555000 audit[3267]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_rule pid=3267 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:35.555000 audit[3267]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff1d48250 a2=0 a3=ffff811156c0 items=0 ppid=3130 pid=3267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.555000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:26:35.559000 audit[3268]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=3268 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:35.559000 audit[3268]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc16b4ee0 a2=0 a3=ffffa90596c0 items=0 ppid=3130 pid=3268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.559000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:26:35.568000 audit[3270]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=3270 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:26:35.568000 audit[3270]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffc8a89960 a2=0 a3=ffff8df066c0 items=0 ppid=3130 pid=3270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.568000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:26:35.580000 audit[3272]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3272 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:26:35.580000 audit[3272]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=fffffe1186e0 a2=0 a3=ffff8d98f6c0 items=0 ppid=3130 pid=3272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.580000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:26:35.581000 audit[3272]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3272 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:26:35.581000 audit[3272]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=fffffe1186e0 a2=0 a3=ffff8d98f6c0 items=0 ppid=3130 pid=3272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:35.581000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:26:40.041543 kubelet[2929]: I1002 19:26:40.041480 2929 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-6cd45" podStartSLOduration=7.04142536 podCreationTimestamp="2023-10-02 19:26:33 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:26:35.143990569 +0000 UTC m=+15.630074530" watchObservedRunningTime="2023-10-02 19:26:40.04142536 +0000 UTC m=+20.527509333" Oct 2 19:26:41.491337 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount482460291.mount: Deactivated successfully. Oct 2 19:26:45.500143 env[1738]: time="2023-10-02T19:26:45.500081021Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:45.505385 env[1738]: time="2023-10-02T19:26:45.505333698Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:45.509946 env[1738]: time="2023-10-02T19:26:45.509895656Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:45.511220 env[1738]: time="2023-10-02T19:26:45.511171764Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 19:26:45.513746 env[1738]: time="2023-10-02T19:26:45.513665913Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:26:45.520950 env[1738]: time="2023-10-02T19:26:45.520869213Z" level=info msg="CreateContainer within sandbox \"73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:26:45.542574 env[1738]: time="2023-10-02T19:26:45.542491340Z" level=info msg="CreateContainer within sandbox \"73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93\"" Oct 2 19:26:45.545931 env[1738]: time="2023-10-02T19:26:45.545398437Z" level=info msg="StartContainer for \"618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93\"" Oct 2 19:26:45.605939 systemd[1]: run-containerd-runc-k8s.io-618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93-runc.WLLWDI.mount: Deactivated successfully. Oct 2 19:26:45.609264 systemd[1]: Started cri-containerd-618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93.scope. Oct 2 19:26:45.643669 systemd[1]: cri-containerd-618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93.scope: Deactivated successfully. Oct 2 19:26:45.657227 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93-rootfs.mount: Deactivated successfully. Oct 2 19:26:46.110081 env[1738]: time="2023-10-02T19:26:46.110012442Z" level=info msg="shim disconnected" id=618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93 Oct 2 19:26:46.110513 env[1738]: time="2023-10-02T19:26:46.110481905Z" level=warning msg="cleaning up after shim disconnected" id=618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93 namespace=k8s.io Oct 2 19:26:46.110650 env[1738]: time="2023-10-02T19:26:46.110621366Z" level=info msg="cleaning up dead shim" Oct 2 19:26:46.138449 env[1738]: time="2023-10-02T19:26:46.138381322Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:26:46Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3296 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:26:46Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:26:46.139316 env[1738]: time="2023-10-02T19:26:46.139172734Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:26:46.140151 env[1738]: time="2023-10-02T19:26:46.140085076Z" level=error msg="Failed to pipe stdout of container \"618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93\"" error="reading from a closed fifo" Oct 2 19:26:46.140345 env[1738]: time="2023-10-02T19:26:46.140299452Z" level=error msg="Failed to pipe stderr of container \"618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93\"" error="reading from a closed fifo" Oct 2 19:26:46.142866 env[1738]: time="2023-10-02T19:26:46.142748110Z" level=error msg="StartContainer for \"618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:26:46.143363 kubelet[2929]: E1002 19:26:46.143311 2929 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93" Oct 2 19:26:46.146539 kubelet[2929]: E1002 19:26:46.143480 2929 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:26:46.146539 kubelet[2929]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:26:46.146539 kubelet[2929]: rm /hostbin/cilium-mount Oct 2 19:26:46.146884 kubelet[2929]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-hgddn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:26:46.146884 kubelet[2929]: E1002 19:26:46.143545 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:26:46.200014 env[1738]: time="2023-10-02T19:26:46.198868280Z" level=info msg="CreateContainer within sandbox \"73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:26:46.234117 env[1738]: time="2023-10-02T19:26:46.233931556Z" level=info msg="CreateContainer within sandbox \"73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"7e38d4812a4475dcfb1883944f96557ada92362f959ca711a8df2e13d6269cec\"" Oct 2 19:26:46.235427 env[1738]: time="2023-10-02T19:26:46.235362124Z" level=info msg="StartContainer for \"7e38d4812a4475dcfb1883944f96557ada92362f959ca711a8df2e13d6269cec\"" Oct 2 19:26:46.286058 systemd[1]: Started cri-containerd-7e38d4812a4475dcfb1883944f96557ada92362f959ca711a8df2e13d6269cec.scope. Oct 2 19:26:46.326886 systemd[1]: cri-containerd-7e38d4812a4475dcfb1883944f96557ada92362f959ca711a8df2e13d6269cec.scope: Deactivated successfully. Oct 2 19:26:46.347658 env[1738]: time="2023-10-02T19:26:46.347554182Z" level=info msg="shim disconnected" id=7e38d4812a4475dcfb1883944f96557ada92362f959ca711a8df2e13d6269cec Oct 2 19:26:46.347658 env[1738]: time="2023-10-02T19:26:46.347635266Z" level=warning msg="cleaning up after shim disconnected" id=7e38d4812a4475dcfb1883944f96557ada92362f959ca711a8df2e13d6269cec namespace=k8s.io Oct 2 19:26:46.347658 env[1738]: time="2023-10-02T19:26:46.347660554Z" level=info msg="cleaning up dead shim" Oct 2 19:26:46.376992 env[1738]: time="2023-10-02T19:26:46.376801114Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:26:46Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3336 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:26:46Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/7e38d4812a4475dcfb1883944f96557ada92362f959ca711a8df2e13d6269cec/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:26:46.378403 env[1738]: time="2023-10-02T19:26:46.378287995Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:26:46.378942 env[1738]: time="2023-10-02T19:26:46.378878184Z" level=error msg="Failed to pipe stdout of container \"7e38d4812a4475dcfb1883944f96557ada92362f959ca711a8df2e13d6269cec\"" error="reading from a closed fifo" Oct 2 19:26:46.379265 env[1738]: time="2023-10-02T19:26:46.379200601Z" level=error msg="Failed to pipe stderr of container \"7e38d4812a4475dcfb1883944f96557ada92362f959ca711a8df2e13d6269cec\"" error="reading from a closed fifo" Oct 2 19:26:46.383692 env[1738]: time="2023-10-02T19:26:46.383623245Z" level=error msg="StartContainer for \"7e38d4812a4475dcfb1883944f96557ada92362f959ca711a8df2e13d6269cec\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:26:46.384428 kubelet[2929]: E1002 19:26:46.384366 2929 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="7e38d4812a4475dcfb1883944f96557ada92362f959ca711a8df2e13d6269cec" Oct 2 19:26:46.384607 kubelet[2929]: E1002 19:26:46.384523 2929 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:26:46.384607 kubelet[2929]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:26:46.384607 kubelet[2929]: rm /hostbin/cilium-mount Oct 2 19:26:46.384607 kubelet[2929]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-hgddn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:26:46.384607 kubelet[2929]: E1002 19:26:46.384581 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:26:46.906188 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount442483602.mount: Deactivated successfully. Oct 2 19:26:47.196081 kubelet[2929]: I1002 19:26:47.195899 2929 scope.go:115] "RemoveContainer" containerID="618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93" Oct 2 19:26:47.199182 kubelet[2929]: I1002 19:26:47.197442 2929 scope.go:115] "RemoveContainer" containerID="618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93" Oct 2 19:26:47.212346 env[1738]: time="2023-10-02T19:26:47.212201329Z" level=info msg="RemoveContainer for \"618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93\"" Oct 2 19:26:47.213340 env[1738]: time="2023-10-02T19:26:47.213296541Z" level=info msg="RemoveContainer for \"618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93\"" Oct 2 19:26:47.213645 env[1738]: time="2023-10-02T19:26:47.213594665Z" level=error msg="RemoveContainer for \"618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93\" failed" error="failed to set removing state for container \"618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93\": container is already in removing state" Oct 2 19:26:47.220443 kubelet[2929]: E1002 19:26:47.220204 2929 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93\": container is already in removing state" containerID="618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93" Oct 2 19:26:47.220443 kubelet[2929]: E1002 19:26:47.220283 2929 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93": container is already in removing state; Skipping pod "cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5)" Oct 2 19:26:47.220802 kubelet[2929]: E1002 19:26:47.220756 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5)\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:26:47.226323 env[1738]: time="2023-10-02T19:26:47.226254239Z" level=info msg="RemoveContainer for \"618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93\" returns successfully" Oct 2 19:26:48.102267 env[1738]: time="2023-10-02T19:26:48.102151434Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:48.106018 env[1738]: time="2023-10-02T19:26:48.105932796Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:48.108889 env[1738]: time="2023-10-02T19:26:48.108811745Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:26:48.110071 env[1738]: time="2023-10-02T19:26:48.110014298Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 19:26:48.115851 env[1738]: time="2023-10-02T19:26:48.115799548Z" level=info msg="CreateContainer within sandbox \"1775eb6c9d5fa3d380b614ea108bd6b26e37e1e9333a71767319b35a42175a3e\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:26:48.135113 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2108295188.mount: Deactivated successfully. Oct 2 19:26:48.148028 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1568507073.mount: Deactivated successfully. Oct 2 19:26:48.152956 env[1738]: time="2023-10-02T19:26:48.152896625Z" level=info msg="CreateContainer within sandbox \"1775eb6c9d5fa3d380b614ea108bd6b26e37e1e9333a71767319b35a42175a3e\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"d74ed593ee73bde63b523f5b932b1632da1c2b4864ecc1af740fe1cd6eeb5972\"" Oct 2 19:26:48.157018 env[1738]: time="2023-10-02T19:26:48.156314249Z" level=info msg="StartContainer for \"d74ed593ee73bde63b523f5b932b1632da1c2b4864ecc1af740fe1cd6eeb5972\"" Oct 2 19:26:48.209413 kubelet[2929]: E1002 19:26:48.207202 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5)\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:26:48.210462 systemd[1]: Started cri-containerd-d74ed593ee73bde63b523f5b932b1632da1c2b4864ecc1af740fe1cd6eeb5972.scope. Oct 2 19:26:48.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.270516 kernel: kauditd_printk_skb: 143 callbacks suppressed Oct 2 19:26:48.270601 kernel: audit: type=1400 audit(1696274808.267:1094): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.285814 kernel: audit: type=1400 audit(1696274808.271:1095): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.285954 kernel: audit: type=1400 audit(1696274808.271:1096): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.301073 kernel: audit: type=1400 audit(1696274808.271:1097): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.308768 kernel: audit: type=1400 audit(1696274808.271:1098): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.310294 kernel: audit: type=1400 audit(1696274808.271:1099): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.332501 kernel: audit: type=1400 audit(1696274808.271:1100): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.340395 kernel: audit: type=1400 audit(1696274808.271:1101): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.356907 kernel: audit: type=1400 audit(1696274808.271:1102): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.357084 kernel: audit: type=1400 audit(1696274808.276:1103): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.360558 env[1738]: time="2023-10-02T19:26:48.360425389Z" level=info msg="StartContainer for \"d74ed593ee73bde63b523f5b932b1632da1c2b4864ecc1af740fe1cd6eeb5972\" returns successfully" Oct 2 19:26:48.276000 audit: BPF prog-id=130 op=LOAD Oct 2 19:26:48.277000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.277000 audit[3358]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3074 pid=3358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:48.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437346564353933656537336264653633623532336635623933326231 Oct 2 19:26:48.278000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.278000 audit[3358]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3074 pid=3358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:48.278000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437346564353933656537336264653633623532336635623933326231 Oct 2 19:26:48.278000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.278000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.278000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.278000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.278000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.278000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.278000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.278000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.278000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.278000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.278000 audit: BPF prog-id=131 op=LOAD Oct 2 19:26:48.278000 audit[3358]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3074 pid=3358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:48.278000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437346564353933656537336264653633623532336635623933326231 Oct 2 19:26:48.285000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.285000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.285000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.285000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.285000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.285000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.285000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.285000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.285000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.285000 audit: BPF prog-id=132 op=LOAD Oct 2 19:26:48.285000 audit[3358]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3074 pid=3358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:48.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437346564353933656537336264653633623532336635623933326231 Oct 2 19:26:48.292000 audit: BPF prog-id=132 op=UNLOAD Oct 2 19:26:48.292000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:26:48.292000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.292000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.292000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.292000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.292000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.292000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.292000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.292000 audit[3358]: AVC avc: denied { perfmon } for pid=3358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.292000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.292000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:26:48.292000 audit: BPF prog-id=133 op=LOAD Oct 2 19:26:48.292000 audit[3358]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3074 pid=3358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:48.292000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437346564353933656537336264653633623532336635623933326231 Oct 2 19:26:48.442000 audit[3369]: AVC avc: denied { map_create } for pid=3369 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c538,c790 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c538,c790 tclass=bpf permissive=0 Oct 2 19:26:48.442000 audit[3369]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=4000535768 a2=48 a3=0 items=0 ppid=3074 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c538,c790 key=(null) Oct 2 19:26:48.442000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:26:49.216165 kubelet[2929]: W1002 19:26:49.216038 2929 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod8e04169a_0e59_42fb_add0_aca7ef121ad5.slice/cri-containerd-618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93.scope WatchSource:0}: container "618cd21ffec2cd45030a3ac7c5ad0a4c41a56f0419bfeb71a979f5ced7dc3c93" in namespace "k8s.io": not found Oct 2 19:26:52.326473 kubelet[2929]: W1002 19:26:52.326421 2929 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod8e04169a_0e59_42fb_add0_aca7ef121ad5.slice/cri-containerd-7e38d4812a4475dcfb1883944f96557ada92362f959ca711a8df2e13d6269cec.scope WatchSource:0}: task 7e38d4812a4475dcfb1883944f96557ada92362f959ca711a8df2e13d6269cec not found: not found Oct 2 19:27:03.026931 env[1738]: time="2023-10-02T19:27:03.026863082Z" level=info msg="CreateContainer within sandbox \"73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:27:03.047367 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2760122165.mount: Deactivated successfully. Oct 2 19:27:03.054354 env[1738]: time="2023-10-02T19:27:03.054271193Z" level=info msg="CreateContainer within sandbox \"73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc\"" Oct 2 19:27:03.057415 env[1738]: time="2023-10-02T19:27:03.056243182Z" level=info msg="StartContainer for \"cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc\"" Oct 2 19:27:03.109488 systemd[1]: Started cri-containerd-cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc.scope. Oct 2 19:27:03.156113 systemd[1]: cri-containerd-cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc.scope: Deactivated successfully. Oct 2 19:27:03.282101 env[1738]: time="2023-10-02T19:27:03.281906414Z" level=info msg="shim disconnected" id=cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc Oct 2 19:27:03.282502 env[1738]: time="2023-10-02T19:27:03.282459325Z" level=warning msg="cleaning up after shim disconnected" id=cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc namespace=k8s.io Oct 2 19:27:03.282698 env[1738]: time="2023-10-02T19:27:03.282668419Z" level=info msg="cleaning up dead shim" Oct 2 19:27:03.308492 env[1738]: time="2023-10-02T19:27:03.308427096Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:27:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3417 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:27:03Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:27:03.309281 env[1738]: time="2023-10-02T19:27:03.309195423Z" level=error msg="copy shim log" error="read /proc/self/fd/99: file already closed" Oct 2 19:27:03.312210 env[1738]: time="2023-10-02T19:27:03.309767017Z" level=error msg="Failed to pipe stdout of container \"cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc\"" error="reading from a closed fifo" Oct 2 19:27:03.312351 env[1738]: time="2023-10-02T19:27:03.312082067Z" level=error msg="Failed to pipe stderr of container \"cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc\"" error="reading from a closed fifo" Oct 2 19:27:03.314488 env[1738]: time="2023-10-02T19:27:03.314418428Z" level=error msg="StartContainer for \"cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:27:03.315067 kubelet[2929]: E1002 19:27:03.314944 2929 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc" Oct 2 19:27:03.315656 kubelet[2929]: E1002 19:27:03.315230 2929 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:27:03.315656 kubelet[2929]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:27:03.315656 kubelet[2929]: rm /hostbin/cilium-mount Oct 2 19:27:03.315656 kubelet[2929]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-hgddn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:27:03.315656 kubelet[2929]: E1002 19:27:03.315319 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:27:04.041335 systemd[1]: run-containerd-runc-k8s.io-cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc-runc.dcZxvi.mount: Deactivated successfully. Oct 2 19:27:04.041505 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc-rootfs.mount: Deactivated successfully. Oct 2 19:27:04.255930 kubelet[2929]: I1002 19:27:04.255896 2929 scope.go:115] "RemoveContainer" containerID="7e38d4812a4475dcfb1883944f96557ada92362f959ca711a8df2e13d6269cec" Oct 2 19:27:04.256832 kubelet[2929]: I1002 19:27:04.256770 2929 scope.go:115] "RemoveContainer" containerID="7e38d4812a4475dcfb1883944f96557ada92362f959ca711a8df2e13d6269cec" Oct 2 19:27:04.261751 env[1738]: time="2023-10-02T19:27:04.261681926Z" level=info msg="RemoveContainer for \"7e38d4812a4475dcfb1883944f96557ada92362f959ca711a8df2e13d6269cec\"" Oct 2 19:27:04.262694 env[1738]: time="2023-10-02T19:27:04.262636878Z" level=info msg="RemoveContainer for \"7e38d4812a4475dcfb1883944f96557ada92362f959ca711a8df2e13d6269cec\"" Oct 2 19:27:04.262825 env[1738]: time="2023-10-02T19:27:04.262758284Z" level=error msg="RemoveContainer for \"7e38d4812a4475dcfb1883944f96557ada92362f959ca711a8df2e13d6269cec\" failed" error="failed to set removing state for container \"7e38d4812a4475dcfb1883944f96557ada92362f959ca711a8df2e13d6269cec\": container is already in removing state" Oct 2 19:27:04.263135 kubelet[2929]: E1002 19:27:04.263092 2929 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"7e38d4812a4475dcfb1883944f96557ada92362f959ca711a8df2e13d6269cec\": container is already in removing state" containerID="7e38d4812a4475dcfb1883944f96557ada92362f959ca711a8df2e13d6269cec" Oct 2 19:27:04.263264 kubelet[2929]: E1002 19:27:04.263176 2929 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "7e38d4812a4475dcfb1883944f96557ada92362f959ca711a8df2e13d6269cec": container is already in removing state; Skipping pod "cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5)" Oct 2 19:27:04.264183 kubelet[2929]: E1002 19:27:04.264136 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5)\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:27:04.282010 env[1738]: time="2023-10-02T19:27:04.281911129Z" level=info msg="RemoveContainer for \"7e38d4812a4475dcfb1883944f96557ada92362f959ca711a8df2e13d6269cec\" returns successfully" Oct 2 19:27:04.292703 kubelet[2929]: I1002 19:27:04.292565 2929 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-574c4bb98d-xw4fr" podStartSLOduration=16.870266092 podCreationTimestamp="2023-10-02 19:26:34 +0000 UTC" firstStartedPulling="2023-10-02 19:26:34.688253288 +0000 UTC m=+15.174337237" lastFinishedPulling="2023-10-02 19:26:48.110492185 +0000 UTC m=+28.596576146" observedRunningTime="2023-10-02 19:26:49.376314854 +0000 UTC m=+29.862398803" watchObservedRunningTime="2023-10-02 19:27:04.292505001 +0000 UTC m=+44.778588986" Oct 2 19:27:06.387420 kubelet[2929]: W1002 19:27:06.387351 2929 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod8e04169a_0e59_42fb_add0_aca7ef121ad5.slice/cri-containerd-cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc.scope WatchSource:0}: task cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc not found: not found Oct 2 19:27:12.876000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.29.2:22-139.178.89.65:47214 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:12.877573 systemd[1]: Started sshd@7-172.31.29.2:22-139.178.89.65:47214.service. Oct 2 19:27:12.886998 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:27:12.887171 kernel: audit: type=1130 audit(1696274832.876:1113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.29.2:22-139.178.89.65:47214 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:13.060000 audit[3434]: USER_ACCT pid=3434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:13.068096 sshd[3434]: Accepted publickey for core from 139.178.89.65 port 47214 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:27:13.074086 kernel: audit: type=1101 audit(1696274833.060:1114): pid=3434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:13.075151 sshd[3434]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:27:13.072000 audit[3434]: CRED_ACQ pid=3434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:13.092193 kernel: audit: type=1103 audit(1696274833.072:1115): pid=3434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:13.092358 kernel: audit: type=1006 audit(1696274833.072:1116): pid=3434 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 19:27:13.072000 audit[3434]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5ce6ac0 a2=3 a3=1 items=0 ppid=1 pid=3434 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:13.103021 kernel: audit: type=1300 audit(1696274833.072:1116): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5ce6ac0 a2=3 a3=1 items=0 ppid=1 pid=3434 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:13.072000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:13.107073 kernel: audit: type=1327 audit(1696274833.072:1116): proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:13.112711 systemd-logind[1722]: New session 8 of user core. Oct 2 19:27:13.113717 systemd[1]: Started session-8.scope. Oct 2 19:27:13.122000 audit[3434]: USER_START pid=3434 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:13.137925 kernel: audit: type=1105 audit(1696274833.122:1117): pid=3434 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:13.138087 kernel: audit: type=1103 audit(1696274833.135:1118): pid=3436 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:13.135000 audit[3436]: CRED_ACQ pid=3436 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:13.430568 sshd[3434]: pam_unix(sshd:session): session closed for user core Oct 2 19:27:13.431000 audit[3434]: USER_END pid=3434 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:13.432000 audit[3434]: CRED_DISP pid=3434 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:13.445189 systemd[1]: sshd@7-172.31.29.2:22-139.178.89.65:47214.service: Deactivated successfully. Oct 2 19:27:13.455131 kernel: audit: type=1106 audit(1696274833.431:1119): pid=3434 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:13.455268 kernel: audit: type=1104 audit(1696274833.432:1120): pid=3434 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:13.446434 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:27:13.454536 systemd-logind[1722]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:27:13.444000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.29.2:22-139.178.89.65:47214 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:13.456757 systemd-logind[1722]: Removed session 8. Oct 2 19:27:14.017000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:14.017000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002623710 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:27:14.017000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:14.017000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:14.017000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001e3df60 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:27:14.017000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:15.452000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:15.452000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4006bf0e80 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:27:15.452000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:27:15.453000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:15.453000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40090facf0 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:27:15.453000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:27:15.467000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:15.467000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40090fae10 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:27:15.467000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:27:15.479000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:15.479000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40090faf60 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:27:15.479000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:27:15.486000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:15.486000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4009164cf0 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:27:15.486000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:27:15.487000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:15.487000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4006bf10a0 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:27:15.487000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:27:19.025015 kubelet[2929]: E1002 19:27:19.022812 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5)\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:27:19.092000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:19.095953 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:27:19.096103 kernel: audit: type=1400 audit(1696274839.092:1130): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:19.092000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002698000 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:27:19.118055 kernel: audit: type=1300 audit(1696274839.092:1130): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002698000 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:27:19.092000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:19.129045 kernel: audit: type=1327 audit(1696274839.092:1130): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:19.096000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:19.139003 kernel: audit: type=1400 audit(1696274839.096:1131): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:19.096000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400277e000 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:27:19.151658 kernel: audit: type=1300 audit(1696274839.096:1131): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400277e000 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:27:19.096000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:19.162256 kernel: audit: type=1327 audit(1696274839.096:1131): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:19.162465 kernel: audit: type=1400 audit(1696274839.119:1132): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:19.119000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:19.119000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400277e260 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:27:19.184508 kernel: audit: type=1300 audit(1696274839.119:1132): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400277e260 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:27:19.184670 kernel: audit: type=1327 audit(1696274839.119:1132): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:19.119000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:19.117000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:19.204833 kernel: audit: type=1400 audit(1696274839.117:1133): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:27:19.117000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002698240 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:27:19.117000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:27:23.460503 systemd[1]: Started sshd@8-172.31.29.2:22-139.178.89.65:44700.service. Oct 2 19:27:23.459000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.29.2:22-139.178.89.65:44700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:23.645000 audit[3449]: USER_ACCT pid=3449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:23.646345 sshd[3449]: Accepted publickey for core from 139.178.89.65 port 44700 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:27:23.647000 audit[3449]: CRED_ACQ pid=3449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:23.647000 audit[3449]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb496fe0 a2=3 a3=1 items=0 ppid=1 pid=3449 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:23.647000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:23.649627 sshd[3449]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:27:23.658790 systemd[1]: Started session-9.scope. Oct 2 19:27:23.660683 systemd-logind[1722]: New session 9 of user core. Oct 2 19:27:23.668000 audit[3449]: USER_START pid=3449 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:23.675000 audit[3451]: CRED_ACQ pid=3451 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:23.953566 sshd[3449]: pam_unix(sshd:session): session closed for user core Oct 2 19:27:23.955000 audit[3449]: USER_END pid=3449 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:23.955000 audit[3449]: CRED_DISP pid=3449 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:23.960258 systemd-logind[1722]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:27:23.960000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.29.2:22-139.178.89.65:44700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:23.961116 systemd[1]: sshd@8-172.31.29.2:22-139.178.89.65:44700.service: Deactivated successfully. Oct 2 19:27:23.962497 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:27:23.964731 systemd-logind[1722]: Removed session 9. Oct 2 19:27:33.027382 env[1738]: time="2023-10-02T19:27:33.027302458Z" level=info msg="CreateContainer within sandbox \"73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:27:33.049058 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1945624347.mount: Deactivated successfully. Oct 2 19:27:33.062738 env[1738]: time="2023-10-02T19:27:33.062666408Z" level=info msg="CreateContainer within sandbox \"73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945\"" Oct 2 19:27:33.064439 env[1738]: time="2023-10-02T19:27:33.064312774Z" level=info msg="StartContainer for \"6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945\"" Oct 2 19:27:33.124595 systemd[1]: Started cri-containerd-6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945.scope. Oct 2 19:27:33.162738 systemd[1]: cri-containerd-6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945.scope: Deactivated successfully. Oct 2 19:27:33.191888 env[1738]: time="2023-10-02T19:27:33.191821704Z" level=info msg="shim disconnected" id=6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945 Oct 2 19:27:33.192478 env[1738]: time="2023-10-02T19:27:33.192409886Z" level=warning msg="cleaning up after shim disconnected" id=6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945 namespace=k8s.io Oct 2 19:27:33.192642 env[1738]: time="2023-10-02T19:27:33.192614095Z" level=info msg="cleaning up dead shim" Oct 2 19:27:33.224889 env[1738]: time="2023-10-02T19:27:33.224821035Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:27:33Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3485 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:27:33Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:27:33.225594 env[1738]: time="2023-10-02T19:27:33.225515707Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:27:33.228894 env[1738]: time="2023-10-02T19:27:33.225950574Z" level=error msg="Failed to pipe stdout of container \"6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945\"" error="reading from a closed fifo" Oct 2 19:27:33.229189 env[1738]: time="2023-10-02T19:27:33.228803004Z" level=error msg="Failed to pipe stderr of container \"6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945\"" error="reading from a closed fifo" Oct 2 19:27:33.232038 env[1738]: time="2023-10-02T19:27:33.231825179Z" level=error msg="StartContainer for \"6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:27:33.233890 kubelet[2929]: E1002 19:27:33.233484 2929 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945" Oct 2 19:27:33.233890 kubelet[2929]: E1002 19:27:33.233621 2929 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:27:33.233890 kubelet[2929]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:27:33.233890 kubelet[2929]: rm /hostbin/cilium-mount Oct 2 19:27:33.233890 kubelet[2929]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-hgddn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:27:33.233890 kubelet[2929]: E1002 19:27:33.233680 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:27:33.331958 kubelet[2929]: I1002 19:27:33.331912 2929 scope.go:115] "RemoveContainer" containerID="cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc" Oct 2 19:27:33.334446 kubelet[2929]: I1002 19:27:33.332923 2929 scope.go:115] "RemoveContainer" containerID="cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc" Oct 2 19:27:33.349038 env[1738]: time="2023-10-02T19:27:33.348943570Z" level=info msg="RemoveContainer for \"cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc\"" Oct 2 19:27:33.353299 env[1738]: time="2023-10-02T19:27:33.353228546Z" level=info msg="RemoveContainer for \"cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc\"" Oct 2 19:27:33.354217 env[1738]: time="2023-10-02T19:27:33.354139812Z" level=error msg="RemoveContainer for \"cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc\" failed" error="failed to set removing state for container \"cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc\": container is already in removing state" Oct 2 19:27:33.354490 kubelet[2929]: E1002 19:27:33.354449 2929 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc\": container is already in removing state" containerID="cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc" Oct 2 19:27:33.354624 kubelet[2929]: E1002 19:27:33.354513 2929 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc": container is already in removing state; Skipping pod "cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5)" Oct 2 19:27:33.355035 kubelet[2929]: E1002 19:27:33.354995 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5)\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:27:33.358256 env[1738]: time="2023-10-02T19:27:33.358184074Z" level=info msg="RemoveContainer for \"cb739debfc35217c55d17df4daf65c7229abae73026172a386b6e96f91ca58bc\" returns successfully" Oct 2 19:27:33.995635 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:27:33.995802 kernel: audit: type=1130 audit(1696274853.983:1143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.29.2:22-139.178.89.65:43820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:33.983000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.29.2:22-139.178.89.65:43820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:33.984528 systemd[1]: Started sshd@9-172.31.29.2:22-139.178.89.65:43820.service. Oct 2 19:27:34.043383 systemd[1]: run-containerd-runc-k8s.io-6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945-runc.VbndkW.mount: Deactivated successfully. Oct 2 19:27:34.043572 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945-rootfs.mount: Deactivated successfully. Oct 2 19:27:34.171000 audit[3499]: USER_ACCT pid=3499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:34.176157 sshd[3499]: Accepted publickey for core from 139.178.89.65 port 43820 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:27:34.181410 sshd[3499]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:27:34.179000 audit[3499]: CRED_ACQ pid=3499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:34.193026 kernel: audit: type=1101 audit(1696274854.171:1144): pid=3499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:34.193179 kernel: audit: type=1103 audit(1696274854.179:1145): pid=3499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:34.199933 kernel: audit: type=1006 audit(1696274854.179:1146): pid=3499 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:27:34.179000 audit[3499]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2711fe0 a2=3 a3=1 items=0 ppid=1 pid=3499 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:34.179000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:34.214026 systemd-logind[1722]: New session 10 of user core. Oct 2 19:27:34.215014 systemd[1]: Started session-10.scope. Oct 2 19:27:34.219715 kernel: audit: type=1300 audit(1696274854.179:1146): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2711fe0 a2=3 a3=1 items=0 ppid=1 pid=3499 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:34.219838 kernel: audit: type=1327 audit(1696274854.179:1146): proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:34.227000 audit[3499]: USER_START pid=3499 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:34.244938 kernel: audit: type=1105 audit(1696274854.227:1147): pid=3499 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:34.245113 kernel: audit: type=1103 audit(1696274854.242:1148): pid=3501 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:34.242000 audit[3501]: CRED_ACQ pid=3501 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:34.516485 sshd[3499]: pam_unix(sshd:session): session closed for user core Oct 2 19:27:34.517000 audit[3499]: USER_END pid=3499 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:34.521916 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:27:34.523264 systemd[1]: sshd@9-172.31.29.2:22-139.178.89.65:43820.service: Deactivated successfully. Oct 2 19:27:34.518000 audit[3499]: CRED_DISP pid=3499 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:34.531136 kernel: audit: type=1106 audit(1696274854.517:1149): pid=3499 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:34.540697 systemd-logind[1722]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:27:34.522000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.29.2:22-139.178.89.65:43820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:34.542019 kernel: audit: type=1104 audit(1696274854.518:1150): pid=3499 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:34.542595 systemd-logind[1722]: Removed session 10. Oct 2 19:27:35.415615 update_engine[1723]: I1002 19:27:35.415547 1723 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 19:27:35.415615 update_engine[1723]: I1002 19:27:35.415611 1723 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 19:27:35.416272 update_engine[1723]: I1002 19:27:35.416003 1723 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 19:27:35.416828 update_engine[1723]: I1002 19:27:35.416775 1723 omaha_request_params.cc:62] Current group set to lts Oct 2 19:27:35.417173 update_engine[1723]: I1002 19:27:35.417007 1723 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 19:27:35.417173 update_engine[1723]: I1002 19:27:35.417030 1723 update_attempter.cc:638] Scheduling an action processor start. Oct 2 19:27:35.417173 update_engine[1723]: I1002 19:27:35.417061 1723 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 19:27:35.417173 update_engine[1723]: I1002 19:27:35.417109 1723 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 19:27:35.418645 update_engine[1723]: I1002 19:27:35.418599 1723 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 19:27:35.418804 update_engine[1723]: I1002 19:27:35.418637 1723 omaha_request_action.cc:269] Request: Oct 2 19:27:35.418804 update_engine[1723]: Oct 2 19:27:35.418804 update_engine[1723]: Oct 2 19:27:35.418804 update_engine[1723]: Oct 2 19:27:35.418804 update_engine[1723]: Oct 2 19:27:35.418804 update_engine[1723]: Oct 2 19:27:35.418804 update_engine[1723]: Oct 2 19:27:35.418804 update_engine[1723]: Oct 2 19:27:35.418804 update_engine[1723]: Oct 2 19:27:35.418804 update_engine[1723]: I1002 19:27:35.418676 1723 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 19:27:35.419758 locksmithd[1790]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 19:27:35.422166 update_engine[1723]: I1002 19:27:35.422113 1723 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 19:27:35.422452 update_engine[1723]: I1002 19:27:35.422401 1723 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 19:27:36.297556 kubelet[2929]: W1002 19:27:36.297487 2929 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod8e04169a_0e59_42fb_add0_aca7ef121ad5.slice/cri-containerd-6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945.scope WatchSource:0}: task 6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945 not found: not found Oct 2 19:27:36.642431 update_engine[1723]: I1002 19:27:36.642365 1723 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 19:27:36.642937 update_engine[1723]: I1002 19:27:36.642764 1723 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 19:27:36.643142 update_engine[1723]: I1002 19:27:36.643098 1723 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 19:27:36.976999 update_engine[1723]: I1002 19:27:36.976830 1723 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 19:27:36.979367 update_engine[1723]: I1002 19:27:36.979310 1723 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 19:27:36.979367 update_engine[1723]: I1002 19:27:36.979353 1723 omaha_request_action.cc:619] Omaha request response: Oct 2 19:27:36.979367 update_engine[1723]: Oct 2 19:27:36.987256 update_engine[1723]: I1002 19:27:36.987192 1723 omaha_request_action.cc:409] No update. Oct 2 19:27:36.987256 update_engine[1723]: I1002 19:27:36.987247 1723 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 19:27:36.987256 update_engine[1723]: I1002 19:27:36.987262 1723 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 19:27:36.987540 update_engine[1723]: I1002 19:27:36.987272 1723 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 19:27:36.987540 update_engine[1723]: I1002 19:27:36.987282 1723 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 19:27:36.987540 update_engine[1723]: I1002 19:27:36.987290 1723 update_attempter.cc:302] Processing Done. Oct 2 19:27:36.987540 update_engine[1723]: I1002 19:27:36.987313 1723 update_attempter.cc:338] No update. Oct 2 19:27:36.987540 update_engine[1723]: I1002 19:27:36.987330 1723 update_check_scheduler.cc:74] Next update check in 41m30s Oct 2 19:27:36.988001 locksmithd[1790]: LastCheckedTime=1696274856 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 19:27:44.545000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.29.2:22-139.178.89.65:55308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:44.546085 systemd[1]: Started sshd@10-172.31.29.2:22-139.178.89.65:55308.service. Oct 2 19:27:44.548657 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:27:44.548750 kernel: audit: type=1130 audit(1696274864.545:1152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.29.2:22-139.178.89.65:55308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:44.737000 audit[3514]: USER_ACCT pid=3514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:44.738525 sshd[3514]: Accepted publickey for core from 139.178.89.65 port 55308 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:27:44.750081 kernel: audit: type=1101 audit(1696274864.737:1153): pid=3514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:44.750000 audit[3514]: CRED_ACQ pid=3514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:44.752335 sshd[3514]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:27:44.767784 kernel: audit: type=1103 audit(1696274864.750:1154): pid=3514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:44.767925 kernel: audit: type=1006 audit(1696274864.750:1155): pid=3514 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:27:44.750000 audit[3514]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff69c8460 a2=3 a3=1 items=0 ppid=1 pid=3514 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:44.778705 kernel: audit: type=1300 audit(1696274864.750:1155): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff69c8460 a2=3 a3=1 items=0 ppid=1 pid=3514 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:44.750000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:44.782617 kernel: audit: type=1327 audit(1696274864.750:1155): proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:44.785067 systemd-logind[1722]: New session 11 of user core. Oct 2 19:27:44.788382 systemd[1]: Started session-11.scope. Oct 2 19:27:44.797000 audit[3514]: USER_START pid=3514 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:44.811014 kernel: audit: type=1105 audit(1696274864.797:1156): pid=3514 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:44.810000 audit[3516]: CRED_ACQ pid=3516 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:44.822017 kernel: audit: type=1103 audit(1696274864.810:1157): pid=3516 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:45.080311 sshd[3514]: pam_unix(sshd:session): session closed for user core Oct 2 19:27:45.081000 audit[3514]: USER_END pid=3514 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:45.094550 systemd[1]: sshd@10-172.31.29.2:22-139.178.89.65:55308.service: Deactivated successfully. Oct 2 19:27:45.082000 audit[3514]: CRED_DISP pid=3514 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:45.094994 kernel: audit: type=1106 audit(1696274865.081:1158): pid=3514 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:45.095868 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:27:45.094000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.29.2:22-139.178.89.65:55308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:45.107140 kernel: audit: type=1104 audit(1696274865.082:1159): pid=3514 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:45.107010 systemd-logind[1722]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:27:45.109129 systemd-logind[1722]: Removed session 11. Oct 2 19:27:47.024002 kubelet[2929]: E1002 19:27:47.023549 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5)\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:27:55.118903 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:27:55.119128 kernel: audit: type=1130 audit(1696274875.107:1161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.29.2:22-139.178.89.65:60570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:55.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.29.2:22-139.178.89.65:60570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:55.107821 systemd[1]: Started sshd@11-172.31.29.2:22-139.178.89.65:60570.service. Oct 2 19:27:55.287000 audit[3526]: USER_ACCT pid=3526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:55.288533 sshd[3526]: Accepted publickey for core from 139.178.89.65 port 60570 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:27:55.300184 kernel: audit: type=1101 audit(1696274875.287:1162): pid=3526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:55.301000 audit[3526]: CRED_ACQ pid=3526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:55.303379 sshd[3526]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:27:55.318337 kernel: audit: type=1103 audit(1696274875.301:1163): pid=3526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:55.318491 kernel: audit: type=1006 audit(1696274875.301:1164): pid=3526 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:27:55.301000 audit[3526]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3aef780 a2=3 a3=1 items=0 ppid=1 pid=3526 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:55.329475 kernel: audit: type=1300 audit(1696274875.301:1164): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3aef780 a2=3 a3=1 items=0 ppid=1 pid=3526 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:27:55.329618 kernel: audit: type=1327 audit(1696274875.301:1164): proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:55.301000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:27:55.336068 systemd-logind[1722]: New session 12 of user core. Oct 2 19:27:55.337755 systemd[1]: Started session-12.scope. Oct 2 19:27:55.347000 audit[3526]: USER_START pid=3526 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:55.354000 audit[3528]: CRED_ACQ pid=3528 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:55.370079 kernel: audit: type=1105 audit(1696274875.347:1165): pid=3526 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:55.370157 kernel: audit: type=1103 audit(1696274875.354:1166): pid=3528 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:55.628048 sshd[3526]: pam_unix(sshd:session): session closed for user core Oct 2 19:27:55.629000 audit[3526]: USER_END pid=3526 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:55.633723 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:27:55.634853 systemd[1]: sshd@11-172.31.29.2:22-139.178.89.65:60570.service: Deactivated successfully. Oct 2 19:27:55.630000 audit[3526]: CRED_DISP pid=3526 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:55.651603 kernel: audit: type=1106 audit(1696274875.629:1167): pid=3526 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:55.651732 kernel: audit: type=1104 audit(1696274875.630:1168): pid=3526 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:27:55.634000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.29.2:22-139.178.89.65:60570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:27:55.653106 systemd-logind[1722]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:27:55.655868 systemd-logind[1722]: Removed session 12. Oct 2 19:27:58.023718 kubelet[2929]: E1002 19:27:58.023663 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5)\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:28:05.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.29.2:22-139.178.89.65:44746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:05.662169 systemd[1]: Started sshd@12-172.31.29.2:22-139.178.89.65:44746.service. Oct 2 19:28:05.664818 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:28:05.664920 kernel: audit: type=1130 audit(1696274885.661:1170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.29.2:22-139.178.89.65:44746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:05.845000 audit[3540]: USER_ACCT pid=3540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:05.846692 sshd[3540]: Accepted publickey for core from 139.178.89.65 port 44746 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:28:05.859001 kernel: audit: type=1101 audit(1696274885.845:1171): pid=3540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:05.858000 audit[3540]: CRED_ACQ pid=3540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:05.860366 sshd[3540]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:28:05.876472 kernel: audit: type=1103 audit(1696274885.858:1172): pid=3540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:05.876606 kernel: audit: type=1006 audit(1696274885.858:1173): pid=3540 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:28:05.858000 audit[3540]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc188cca0 a2=3 a3=1 items=0 ppid=1 pid=3540 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:05.887604 kernel: audit: type=1300 audit(1696274885.858:1173): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc188cca0 a2=3 a3=1 items=0 ppid=1 pid=3540 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:05.858000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:05.891663 kernel: audit: type=1327 audit(1696274885.858:1173): proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:05.898134 systemd-logind[1722]: New session 13 of user core. Oct 2 19:28:05.899441 systemd[1]: Started session-13.scope. Oct 2 19:28:05.907000 audit[3540]: USER_START pid=3540 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:05.915000 audit[3542]: CRED_ACQ pid=3542 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:05.930024 kernel: audit: type=1105 audit(1696274885.907:1174): pid=3540 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:05.930151 kernel: audit: type=1103 audit(1696274885.915:1175): pid=3542 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:06.183257 sshd[3540]: pam_unix(sshd:session): session closed for user core Oct 2 19:28:06.184000 audit[3540]: USER_END pid=3540 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:06.184000 audit[3540]: CRED_DISP pid=3540 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:06.198335 systemd[1]: sshd@12-172.31.29.2:22-139.178.89.65:44746.service: Deactivated successfully. Oct 2 19:28:06.199598 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:28:06.206928 kernel: audit: type=1106 audit(1696274886.184:1176): pid=3540 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:06.207110 kernel: audit: type=1104 audit(1696274886.184:1177): pid=3540 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:06.207081 systemd-logind[1722]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:28:06.196000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.29.2:22-139.178.89.65:44746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:06.210031 systemd-logind[1722]: Removed session 13. Oct 2 19:28:13.022980 kubelet[2929]: E1002 19:28:13.022923 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5)\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:28:14.018000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:14.021084 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:28:14.021178 kernel: audit: type=1400 audit(1696274894.018:1179): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:14.018000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000db5e30 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:28:14.043119 kernel: audit: type=1300 audit(1696274894.018:1179): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000db5e30 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:28:14.043210 kernel: audit: type=1327 audit(1696274894.018:1179): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:14.018000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:14.018000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:14.062762 kernel: audit: type=1400 audit(1696274894.018:1180): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:14.062845 kernel: audit: type=1300 audit(1696274894.018:1180): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010ee560 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:28:14.018000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010ee560 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:28:14.018000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:14.085479 kernel: audit: type=1327 audit(1696274894.018:1180): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:15.454000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:15.454000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:15.474326 kernel: audit: type=1400 audit(1696274895.454:1181): avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:15.474469 kernel: audit: type=1400 audit(1696274895.454:1182): avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:15.454000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400d3e3f60 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:28:15.486730 kernel: audit: type=1300 audit(1696274895.454:1182): arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400d3e3f60 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:28:15.454000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:28:15.497821 kernel: audit: type=1327 audit(1696274895.454:1182): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:28:15.454000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400a6b24e0 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:28:15.454000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:28:15.467000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:15.467000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400a6b2540 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:28:15.467000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:28:15.486000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:15.486000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400a6b2660 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:28:15.486000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:28:15.488000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:15.488000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400d65a060 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:28:15.488000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:28:15.488000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:15.488000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400a4fe780 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:28:15.488000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:28:16.213398 systemd[1]: Started sshd@13-172.31.29.2:22-139.178.89.65:48782.service. Oct 2 19:28:16.212000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.29.2:22-139.178.89.65:48782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:16.398000 audit[3553]: USER_ACCT pid=3553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:16.399405 sshd[3553]: Accepted publickey for core from 139.178.89.65 port 48782 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:28:16.400000 audit[3553]: CRED_ACQ pid=3553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:16.401000 audit[3553]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee84b090 a2=3 a3=1 items=0 ppid=1 pid=3553 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:16.401000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:16.403382 sshd[3553]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:28:16.413196 systemd-logind[1722]: New session 14 of user core. Oct 2 19:28:16.413224 systemd[1]: Started session-14.scope. Oct 2 19:28:16.423000 audit[3553]: USER_START pid=3553 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:16.429000 audit[3555]: CRED_ACQ pid=3555 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:16.704912 sshd[3553]: pam_unix(sshd:session): session closed for user core Oct 2 19:28:16.706000 audit[3553]: USER_END pid=3553 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:16.706000 audit[3553]: CRED_DISP pid=3553 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:16.712466 systemd-logind[1722]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:28:16.713046 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:28:16.715333 systemd-logind[1722]: Removed session 14. Oct 2 19:28:16.715000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.29.2:22-139.178.89.65:48782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:16.716160 systemd[1]: sshd@13-172.31.29.2:22-139.178.89.65:48782.service: Deactivated successfully. Oct 2 19:28:19.097845 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:28:19.098016 kernel: audit: type=1400 audit(1696274899.094:1196): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:19.094000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:19.094000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000860520 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:28:19.119604 kernel: audit: type=1300 audit(1696274899.094:1196): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000860520 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:28:19.094000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:19.130224 kernel: audit: type=1327 audit(1696274899.094:1196): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:19.130370 kernel: audit: type=1400 audit(1696274899.098:1197): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:19.098000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:19.140008 kernel: audit: type=1300 audit(1696274899.098:1197): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010ee860 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:28:19.098000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010ee860 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:28:19.098000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:19.163517 kernel: audit: type=1327 audit(1696274899.098:1197): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:19.121000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:19.173636 kernel: audit: type=1400 audit(1696274899.121:1198): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:19.173713 kernel: audit: type=1300 audit(1696274899.121:1198): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000860640 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:28:19.121000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000860640 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:28:19.121000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:19.196618 kernel: audit: type=1327 audit(1696274899.121:1198): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:19.196694 kernel: audit: type=1400 audit(1696274899.121:1199): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:19.121000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:28:19.121000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000860660 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:28:19.121000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:28:19.885896 kubelet[2929]: E1002 19:28:19.885852 2929 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:28:20.129622 kubelet[2929]: E1002 19:28:20.129587 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:25.131152 kubelet[2929]: E1002 19:28:25.131090 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:26.737132 systemd[1]: Started sshd@14-172.31.29.2:22-139.178.89.65:38038.service. Oct 2 19:28:26.736000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.29.2:22-139.178.89.65:38038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:26.740005 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:28:26.740091 kernel: audit: type=1130 audit(1696274906.736:1200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.29.2:22-139.178.89.65:38038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:26.924000 audit[3567]: USER_ACCT pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:26.925926 sshd[3567]: Accepted publickey for core from 139.178.89.65 port 38038 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:28:26.938067 kernel: audit: type=1101 audit(1696274906.924:1201): pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:26.937000 audit[3567]: CRED_ACQ pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:26.939397 sshd[3567]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:28:26.949116 kernel: audit: type=1103 audit(1696274906.937:1202): pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:26.949215 kernel: audit: type=1006 audit(1696274906.937:1203): pid=3567 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:28:26.937000 audit[3567]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5572d20 a2=3 a3=1 items=0 ppid=1 pid=3567 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:26.965998 kernel: audit: type=1300 audit(1696274906.937:1203): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5572d20 a2=3 a3=1 items=0 ppid=1 pid=3567 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:26.937000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:26.969749 kernel: audit: type=1327 audit(1696274906.937:1203): proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:26.975121 systemd-logind[1722]: New session 15 of user core. Oct 2 19:28:26.975407 systemd[1]: Started session-15.scope. Oct 2 19:28:26.984000 audit[3567]: USER_START pid=3567 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:26.998311 kernel: audit: type=1105 audit(1696274906.984:1204): pid=3567 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:26.998000 audit[3569]: CRED_ACQ pid=3569 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:27.009030 kernel: audit: type=1103 audit(1696274906.998:1205): pid=3569 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:27.029497 env[1738]: time="2023-10-02T19:28:27.029297320Z" level=info msg="CreateContainer within sandbox \"73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:28:27.055310 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1663511218.mount: Deactivated successfully. Oct 2 19:28:27.064838 env[1738]: time="2023-10-02T19:28:27.064643174Z" level=info msg="CreateContainer within sandbox \"73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860\"" Oct 2 19:28:27.066608 env[1738]: time="2023-10-02T19:28:27.066528347Z" level=info msg="StartContainer for \"337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860\"" Oct 2 19:28:27.146134 systemd[1]: Started cri-containerd-337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860.scope. Oct 2 19:28:27.188417 systemd[1]: cri-containerd-337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860.scope: Deactivated successfully. Oct 2 19:28:27.219566 env[1738]: time="2023-10-02T19:28:27.219494817Z" level=info msg="shim disconnected" id=337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860 Oct 2 19:28:27.219911 env[1738]: time="2023-10-02T19:28:27.219875848Z" level=warning msg="cleaning up after shim disconnected" id=337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860 namespace=k8s.io Oct 2 19:28:27.220059 env[1738]: time="2023-10-02T19:28:27.220030372Z" level=info msg="cleaning up dead shim" Oct 2 19:28:27.247290 env[1738]: time="2023-10-02T19:28:27.247220738Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:28:27Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3601 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:28:27Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:28:27.248113 env[1738]: time="2023-10-02T19:28:27.248021671Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:28:27.249207 env[1738]: time="2023-10-02T19:28:27.248344737Z" level=error msg="Failed to pipe stdout of container \"337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860\"" error="reading from a closed fifo" Oct 2 19:28:27.249403 env[1738]: time="2023-10-02T19:28:27.249079844Z" level=error msg="Failed to pipe stderr of container \"337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860\"" error="reading from a closed fifo" Oct 2 19:28:27.251473 env[1738]: time="2023-10-02T19:28:27.251376147Z" level=error msg="StartContainer for \"337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:28:27.251773 kubelet[2929]: E1002 19:28:27.251737 2929 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860" Oct 2 19:28:27.252444 kubelet[2929]: E1002 19:28:27.251891 2929 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:28:27.252444 kubelet[2929]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:28:27.252444 kubelet[2929]: rm /hostbin/cilium-mount Oct 2 19:28:27.252444 kubelet[2929]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-hgddn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:28:27.252444 kubelet[2929]: E1002 19:28:27.251951 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:28:27.336322 sshd[3567]: pam_unix(sshd:session): session closed for user core Oct 2 19:28:27.337000 audit[3567]: USER_END pid=3567 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:27.350871 systemd[1]: sshd@14-172.31.29.2:22-139.178.89.65:38038.service: Deactivated successfully. Oct 2 19:28:27.339000 audit[3567]: CRED_DISP pid=3567 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:27.360757 kernel: audit: type=1106 audit(1696274907.337:1206): pid=3567 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:27.360938 kernel: audit: type=1104 audit(1696274907.339:1207): pid=3567 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:27.352233 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:28:27.350000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.29.2:22-139.178.89.65:38038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:27.361868 systemd-logind[1722]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:28:27.363663 systemd-logind[1722]: Removed session 15. Oct 2 19:28:27.461450 kubelet[2929]: I1002 19:28:27.461415 2929 scope.go:115] "RemoveContainer" containerID="6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945" Oct 2 19:28:27.463850 kubelet[2929]: I1002 19:28:27.463239 2929 scope.go:115] "RemoveContainer" containerID="6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945" Oct 2 19:28:27.474101 env[1738]: time="2023-10-02T19:28:27.470170307Z" level=info msg="RemoveContainer for \"6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945\"" Oct 2 19:28:27.474101 env[1738]: time="2023-10-02T19:28:27.471275321Z" level=info msg="RemoveContainer for \"6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945\"" Oct 2 19:28:27.474101 env[1738]: time="2023-10-02T19:28:27.471594055Z" level=error msg="RemoveContainer for \"6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945\" failed" error="failed to set removing state for container \"6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945\": container is already in removing state" Oct 2 19:28:27.474422 kubelet[2929]: E1002 19:28:27.472206 2929 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945\": container is already in removing state" containerID="6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945" Oct 2 19:28:27.474422 kubelet[2929]: E1002 19:28:27.472299 2929 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945": container is already in removing state; Skipping pod "cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5)" Oct 2 19:28:27.478463 kubelet[2929]: E1002 19:28:27.478401 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5)\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:28:27.483037 env[1738]: time="2023-10-02T19:28:27.482947588Z" level=info msg="RemoveContainer for \"6fbecb5f6ff2ecd8902eb88fa4608e37b4d69a8428e0558c3ec13a93fc4d8945\" returns successfully" Oct 2 19:28:28.045278 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860-rootfs.mount: Deactivated successfully. Oct 2 19:28:30.132704 kubelet[2929]: E1002 19:28:30.132649 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:30.324824 kubelet[2929]: W1002 19:28:30.324776 2929 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod8e04169a_0e59_42fb_add0_aca7ef121ad5.slice/cri-containerd-337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860.scope WatchSource:0}: task 337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860 not found: not found Oct 2 19:28:35.134142 kubelet[2929]: E1002 19:28:35.134104 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:37.366307 systemd[1]: Started sshd@15-172.31.29.2:22-139.178.89.65:38584.service. Oct 2 19:28:37.378046 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:28:37.378201 kernel: audit: type=1130 audit(1696274917.366:1209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.29.2:22-139.178.89.65:38584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:37.366000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.29.2:22-139.178.89.65:38584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:37.549000 audit[3617]: USER_ACCT pid=3617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:37.551070 sshd[3617]: Accepted publickey for core from 139.178.89.65 port 38584 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:28:37.554882 sshd[3617]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:28:37.562125 kernel: audit: type=1101 audit(1696274917.549:1210): pid=3617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:37.562259 kernel: audit: type=1103 audit(1696274917.553:1211): pid=3617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:37.553000 audit[3617]: CRED_ACQ pid=3617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:37.578574 kernel: audit: type=1006 audit(1696274917.553:1212): pid=3617 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:28:37.578776 kernel: audit: type=1300 audit(1696274917.553:1212): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff328c980 a2=3 a3=1 items=0 ppid=1 pid=3617 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:37.553000 audit[3617]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff328c980 a2=3 a3=1 items=0 ppid=1 pid=3617 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:37.553000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:37.593495 kernel: audit: type=1327 audit(1696274917.553:1212): proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:37.595247 systemd-logind[1722]: New session 16 of user core. Oct 2 19:28:37.598016 systemd[1]: Started session-16.scope. Oct 2 19:28:37.605000 audit[3617]: USER_START pid=3617 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:37.621568 kernel: audit: type=1105 audit(1696274917.605:1213): pid=3617 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:37.621705 kernel: audit: type=1103 audit(1696274917.619:1214): pid=3619 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:37.619000 audit[3619]: CRED_ACQ pid=3619 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:37.882343 sshd[3617]: pam_unix(sshd:session): session closed for user core Oct 2 19:28:37.883000 audit[3617]: USER_END pid=3617 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:37.896621 systemd[1]: sshd@15-172.31.29.2:22-139.178.89.65:38584.service: Deactivated successfully. Oct 2 19:28:37.883000 audit[3617]: CRED_DISP pid=3617 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:37.897106 kernel: audit: type=1106 audit(1696274917.883:1215): pid=3617 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:37.897995 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:28:37.896000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.29.2:22-139.178.89.65:38584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:37.908087 kernel: audit: type=1104 audit(1696274917.883:1216): pid=3617 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:37.908346 systemd-logind[1722]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:28:37.910045 systemd-logind[1722]: Removed session 16. Oct 2 19:28:39.022086 kubelet[2929]: E1002 19:28:39.022048 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5)\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:28:40.136219 kubelet[2929]: E1002 19:28:40.136185 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:45.138686 kubelet[2929]: E1002 19:28:45.138587 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:47.916871 systemd[1]: Started sshd@16-172.31.29.2:22-139.178.89.65:35738.service. Oct 2 19:28:47.928524 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:28:47.928657 kernel: audit: type=1130 audit(1696274927.916:1218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.29.2:22-139.178.89.65:35738 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:47.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.29.2:22-139.178.89.65:35738 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:48.099000 audit[3629]: USER_ACCT pid=3629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:48.100714 sshd[3629]: Accepted publickey for core from 139.178.89.65 port 35738 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:28:48.113003 kernel: audit: type=1101 audit(1696274928.099:1219): pid=3629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:48.112000 audit[3629]: CRED_ACQ pid=3629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:48.114316 sshd[3629]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:28:48.129724 kernel: audit: type=1103 audit(1696274928.112:1220): pid=3629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:48.129824 kernel: audit: type=1006 audit(1696274928.112:1221): pid=3629 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:28:48.112000 audit[3629]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb1e31b0 a2=3 a3=1 items=0 ppid=1 pid=3629 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:48.140446 kernel: audit: type=1300 audit(1696274928.112:1221): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb1e31b0 a2=3 a3=1 items=0 ppid=1 pid=3629 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:48.112000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:48.144258 kernel: audit: type=1327 audit(1696274928.112:1221): proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:48.150780 systemd-logind[1722]: New session 17 of user core. Oct 2 19:28:48.151540 systemd[1]: Started session-17.scope. Oct 2 19:28:48.161000 audit[3629]: USER_START pid=3629 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:48.176873 kernel: audit: type=1105 audit(1696274928.161:1222): pid=3629 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:48.177054 kernel: audit: type=1103 audit(1696274928.174:1223): pid=3631 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:48.174000 audit[3631]: CRED_ACQ pid=3631 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:48.444300 sshd[3629]: pam_unix(sshd:session): session closed for user core Oct 2 19:28:48.445000 audit[3629]: USER_END pid=3629 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:48.448000 audit[3629]: CRED_DISP pid=3629 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:48.458242 systemd[1]: sshd@16-172.31.29.2:22-139.178.89.65:35738.service: Deactivated successfully. Oct 2 19:28:48.467911 kernel: audit: type=1106 audit(1696274928.445:1224): pid=3629 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:48.468071 kernel: audit: type=1104 audit(1696274928.448:1225): pid=3629 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:48.459488 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:28:48.457000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.29.2:22-139.178.89.65:35738 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:48.469018 systemd-logind[1722]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:28:48.480373 systemd[1]: Started sshd@17-172.31.29.2:22-139.178.89.65:35742.service. Oct 2 19:28:48.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.29.2:22-139.178.89.65:35742 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:48.482192 systemd-logind[1722]: Removed session 17. Oct 2 19:28:48.665000 audit[3642]: USER_ACCT pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:48.666552 sshd[3642]: Accepted publickey for core from 139.178.89.65 port 35742 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:28:48.668000 audit[3642]: CRED_ACQ pid=3642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:48.668000 audit[3642]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe0f5d9e0 a2=3 a3=1 items=0 ppid=1 pid=3642 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:48.668000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:48.670381 sshd[3642]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:28:48.678598 systemd-logind[1722]: New session 18 of user core. Oct 2 19:28:48.679566 systemd[1]: Started session-18.scope. Oct 2 19:28:48.688000 audit[3642]: USER_START pid=3642 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:48.695000 audit[3644]: CRED_ACQ pid=3644 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:50.140060 kubelet[2929]: E1002 19:28:50.140010 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:28:50.256268 sshd[3642]: pam_unix(sshd:session): session closed for user core Oct 2 19:28:50.257000 audit[3642]: USER_END pid=3642 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:50.258000 audit[3642]: CRED_DISP pid=3642 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:50.261872 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:28:50.263000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.29.2:22-139.178.89.65:35742 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:50.263476 systemd-logind[1722]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:28:50.263860 systemd[1]: sshd@17-172.31.29.2:22-139.178.89.65:35742.service: Deactivated successfully. Oct 2 19:28:50.267353 systemd-logind[1722]: Removed session 18. Oct 2 19:28:50.285935 systemd[1]: Started sshd@18-172.31.29.2:22-139.178.89.65:35754.service. Oct 2 19:28:50.285000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.29.2:22-139.178.89.65:35754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:50.466000 audit[3651]: USER_ACCT pid=3651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:50.468085 sshd[3651]: Accepted publickey for core from 139.178.89.65 port 35754 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:28:50.469000 audit[3651]: CRED_ACQ pid=3651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:50.470000 audit[3651]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff62b6c90 a2=3 a3=1 items=0 ppid=1 pid=3651 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:28:50.470000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:28:50.471763 sshd[3651]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:28:50.480897 systemd[1]: Started session-19.scope. Oct 2 19:28:50.482436 systemd-logind[1722]: New session 19 of user core. Oct 2 19:28:50.490000 audit[3651]: USER_START pid=3651 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:50.497000 audit[3653]: CRED_ACQ pid=3653 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:50.780448 sshd[3651]: pam_unix(sshd:session): session closed for user core Oct 2 19:28:50.782000 audit[3651]: USER_END pid=3651 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:50.782000 audit[3651]: CRED_DISP pid=3651 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:28:50.787311 systemd-logind[1722]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:28:50.788642 systemd[1]: sshd@18-172.31.29.2:22-139.178.89.65:35754.service: Deactivated successfully. Oct 2 19:28:50.788000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.29.2:22-139.178.89.65:35754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:28:50.790055 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:28:50.792082 systemd-logind[1722]: Removed session 19. Oct 2 19:28:53.022430 kubelet[2929]: E1002 19:28:53.022390 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5)\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:28:55.141247 kubelet[2929]: E1002 19:28:55.141191 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:00.142950 kubelet[2929]: E1002 19:29:00.142907 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:00.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.29.2:22-139.178.89.65:41810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:00.812608 systemd[1]: Started sshd@19-172.31.29.2:22-139.178.89.65:41810.service. Oct 2 19:29:00.822026 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:29:00.822198 kernel: audit: type=1130 audit(1696274940.811:1245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.29.2:22-139.178.89.65:41810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:01.001000 audit[3663]: USER_ACCT pid=3663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:01.006435 sshd[3663]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:29:01.007689 sshd[3663]: Accepted publickey for core from 139.178.89.65 port 41810 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:29:01.003000 audit[3663]: CRED_ACQ pid=3663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:01.023518 kernel: audit: type=1101 audit(1696274941.001:1246): pid=3663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:01.023630 kernel: audit: type=1103 audit(1696274941.003:1247): pid=3663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:01.030321 kernel: audit: type=1006 audit(1696274941.003:1248): pid=3663 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:29:01.003000 audit[3663]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd532f070 a2=3 a3=1 items=0 ppid=1 pid=3663 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:01.042597 kernel: audit: type=1300 audit(1696274941.003:1248): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd532f070 a2=3 a3=1 items=0 ppid=1 pid=3663 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:01.042722 kernel: audit: type=1327 audit(1696274941.003:1248): proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:01.003000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:01.037233 systemd[1]: Started session-20.scope. Oct 2 19:29:01.041791 systemd-logind[1722]: New session 20 of user core. Oct 2 19:29:01.050000 audit[3663]: USER_START pid=3663 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:01.057000 audit[3665]: CRED_ACQ pid=3665 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:01.073863 kernel: audit: type=1105 audit(1696274941.050:1249): pid=3663 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:01.073988 kernel: audit: type=1103 audit(1696274941.057:1250): pid=3665 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:01.327299 sshd[3663]: pam_unix(sshd:session): session closed for user core Oct 2 19:29:01.329000 audit[3663]: USER_END pid=3663 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:01.342239 systemd[1]: sshd@19-172.31.29.2:22-139.178.89.65:41810.service: Deactivated successfully. Oct 2 19:29:01.329000 audit[3663]: CRED_DISP pid=3663 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:01.353026 kernel: audit: type=1106 audit(1696274941.329:1251): pid=3663 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:01.353162 kernel: audit: type=1104 audit(1696274941.329:1252): pid=3663 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:01.343584 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:29:01.353602 systemd-logind[1722]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:29:01.341000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.29.2:22-139.178.89.65:41810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:01.355815 systemd-logind[1722]: Removed session 20. Oct 2 19:29:04.025008 kubelet[2929]: E1002 19:29:04.024953 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5)\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:29:05.144810 kubelet[2929]: E1002 19:29:05.144735 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:10.147289 kubelet[2929]: E1002 19:29:10.147251 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:11.358069 systemd[1]: Started sshd@20-172.31.29.2:22-139.178.89.65:36656.service. Oct 2 19:29:11.362539 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:29:11.362670 kernel: audit: type=1130 audit(1696274951.357:1254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.29.2:22-139.178.89.65:36656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:11.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.29.2:22-139.178.89.65:36656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:11.540000 audit[3677]: USER_ACCT pid=3677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:11.542278 sshd[3677]: Accepted publickey for core from 139.178.89.65 port 36656 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:29:11.554019 kernel: audit: type=1101 audit(1696274951.540:1255): pid=3677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:11.556055 sshd[3677]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:29:11.554000 audit[3677]: CRED_ACQ pid=3677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:11.573375 kernel: audit: type=1103 audit(1696274951.554:1256): pid=3677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:11.573541 kernel: audit: type=1006 audit(1696274951.554:1257): pid=3677 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:29:11.554000 audit[3677]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd3c118b0 a2=3 a3=1 items=0 ppid=1 pid=3677 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:11.584619 kernel: audit: type=1300 audit(1696274951.554:1257): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd3c118b0 a2=3 a3=1 items=0 ppid=1 pid=3677 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:11.588833 kernel: audit: type=1327 audit(1696274951.554:1257): proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:11.554000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:11.595102 systemd-logind[1722]: New session 21 of user core. Oct 2 19:29:11.597087 systemd[1]: Started session-21.scope. Oct 2 19:29:11.606000 audit[3677]: USER_START pid=3677 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:11.613000 audit[3679]: CRED_ACQ pid=3679 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:11.629055 kernel: audit: type=1105 audit(1696274951.606:1258): pid=3677 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:11.629224 kernel: audit: type=1103 audit(1696274951.613:1259): pid=3679 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:11.893683 sshd[3677]: pam_unix(sshd:session): session closed for user core Oct 2 19:29:11.894000 audit[3677]: USER_END pid=3677 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:11.901126 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:29:11.902458 systemd[1]: sshd@20-172.31.29.2:22-139.178.89.65:36656.service: Deactivated successfully. Oct 2 19:29:11.897000 audit[3677]: CRED_DISP pid=3677 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:11.908139 systemd-logind[1722]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:29:11.917471 kernel: audit: type=1106 audit(1696274951.894:1260): pid=3677 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:11.917613 kernel: audit: type=1104 audit(1696274951.897:1261): pid=3677 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:11.901000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.29.2:22-139.178.89.65:36656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:11.918657 systemd-logind[1722]: Removed session 21. Oct 2 19:29:14.019000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:14.019000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:14.019000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002484320 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:29:14.019000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:14.019000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001c92c00 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:29:14.019000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:15.149756 kubelet[2929]: E1002 19:29:15.149713 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:15.454000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:15.454000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:15.454000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4008957d60 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:29:15.454000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:29:15.454000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400d186a50 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:29:15.454000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:29:15.468000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:15.468000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400d04aea0 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:29:15.468000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:29:15.487000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:15.487000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400d186ab0 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:29:15.487000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:29:15.488000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:15.488000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4008957f40 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:29:15.488000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:29:15.488000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:15.488000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400d186ae0 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:29:15.488000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:29:18.022897 kubelet[2929]: E1002 19:29:18.022856 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5)\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:29:19.097000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:19.100062 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:29:19.100186 kernel: audit: type=1400 audit(1696274959.097:1271): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:19.099000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:19.119384 kernel: audit: type=1400 audit(1696274959.099:1272): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:19.119494 kernel: audit: type=1300 audit(1696274959.099:1272): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40022ae100 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:29:19.099000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40022ae100 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:29:19.099000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:19.142488 kernel: audit: type=1327 audit(1696274959.099:1272): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:19.097000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002484000 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:29:19.155183 kernel: audit: type=1300 audit(1696274959.097:1271): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002484000 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:29:19.155272 kernel: audit: type=1327 audit(1696274959.097:1271): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:19.097000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:19.121000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:19.175429 kernel: audit: type=1400 audit(1696274959.121:1273): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:19.175521 kernel: audit: type=1300 audit(1696274959.121:1273): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40022ae240 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:29:19.121000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40022ae240 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:29:19.121000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:19.198619 kernel: audit: type=1327 audit(1696274959.121:1273): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:19.198719 kernel: audit: type=1400 audit(1696274959.121:1274): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:19.121000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:29:19.121000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002484020 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:29:19.121000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:29:20.150949 kubelet[2929]: E1002 19:29:20.150893 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:21.924952 systemd[1]: Started sshd@21-172.31.29.2:22-139.178.89.65:53390.service. Oct 2 19:29:21.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.29.2:22-139.178.89.65:53390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:22.107000 audit[3691]: USER_ACCT pid=3691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:22.109207 sshd[3691]: Accepted publickey for core from 139.178.89.65 port 53390 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:29:22.109000 audit[3691]: CRED_ACQ pid=3691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:22.110000 audit[3691]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4a34350 a2=3 a3=1 items=0 ppid=1 pid=3691 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:22.110000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:22.112041 sshd[3691]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:29:22.121663 systemd[1]: Started session-22.scope. Oct 2 19:29:22.123544 systemd-logind[1722]: New session 22 of user core. Oct 2 19:29:22.134000 audit[3691]: USER_START pid=3691 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:22.140000 audit[3693]: CRED_ACQ pid=3693 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:22.414908 sshd[3691]: pam_unix(sshd:session): session closed for user core Oct 2 19:29:22.415000 audit[3691]: USER_END pid=3691 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:22.416000 audit[3691]: CRED_DISP pid=3691 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:22.421406 systemd-logind[1722]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:29:22.421827 systemd[1]: sshd@21-172.31.29.2:22-139.178.89.65:53390.service: Deactivated successfully. Oct 2 19:29:22.421000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.29.2:22-139.178.89.65:53390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:22.423352 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:29:22.424851 systemd-logind[1722]: Removed session 22. Oct 2 19:29:25.152382 kubelet[2929]: E1002 19:29:25.152346 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:30.154839 kubelet[2929]: E1002 19:29:30.154802 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:32.444000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.29.2:22-139.178.89.65:52456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:32.445602 systemd[1]: Started sshd@22-172.31.29.2:22-139.178.89.65:52456.service. Oct 2 19:29:32.448997 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:29:32.449180 kernel: audit: type=1130 audit(1696274972.444:1284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.29.2:22-139.178.89.65:52456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:32.631000 audit[3703]: USER_ACCT pid=3703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:32.634104 sshd[3703]: Accepted publickey for core from 139.178.89.65 port 52456 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:29:32.645003 kernel: audit: type=1101 audit(1696274972.631:1285): pid=3703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:32.644000 audit[3703]: CRED_ACQ pid=3703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:32.646839 sshd[3703]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:29:32.663192 kernel: audit: type=1103 audit(1696274972.644:1286): pid=3703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:32.663336 kernel: audit: type=1006 audit(1696274972.644:1287): pid=3703 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:29:32.644000 audit[3703]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8f34c30 a2=3 a3=1 items=0 ppid=1 pid=3703 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:32.675106 kernel: audit: type=1300 audit(1696274972.644:1287): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8f34c30 a2=3 a3=1 items=0 ppid=1 pid=3703 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:32.644000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:32.679062 kernel: audit: type=1327 audit(1696274972.644:1287): proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:32.683288 systemd-logind[1722]: New session 23 of user core. Oct 2 19:29:32.684784 systemd[1]: Started session-23.scope. Oct 2 19:29:32.695000 audit[3703]: USER_START pid=3703 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:32.710179 kernel: audit: type=1105 audit(1696274972.695:1288): pid=3703 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:32.710320 kernel: audit: type=1103 audit(1696274972.708:1289): pid=3705 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:32.708000 audit[3705]: CRED_ACQ pid=3705 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:32.991322 sshd[3703]: pam_unix(sshd:session): session closed for user core Oct 2 19:29:32.992000 audit[3703]: USER_END pid=3703 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:33.006351 systemd[1]: sshd@22-172.31.29.2:22-139.178.89.65:52456.service: Deactivated successfully. Oct 2 19:29:32.994000 audit[3703]: CRED_DISP pid=3703 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:33.017716 kernel: audit: type=1106 audit(1696274972.992:1290): pid=3703 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:33.017907 kernel: audit: type=1104 audit(1696274972.994:1291): pid=3703 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:33.007763 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:29:33.016848 systemd-logind[1722]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:29:33.005000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.29.2:22-139.178.89.65:52456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:33.020801 systemd-logind[1722]: Removed session 23. Oct 2 19:29:33.023549 kubelet[2929]: E1002 19:29:33.022933 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5)\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:29:35.156290 kubelet[2929]: E1002 19:29:35.156211 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:40.158437 kubelet[2929]: E1002 19:29:40.158401 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:43.020509 systemd[1]: Started sshd@23-172.31.29.2:22-139.178.89.65:52920.service. Oct 2 19:29:43.019000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.29.2:22-139.178.89.65:52920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:43.023991 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:29:43.024119 kernel: audit: type=1130 audit(1696274983.019:1293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.29.2:22-139.178.89.65:52920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:43.201000 audit[3717]: USER_ACCT pid=3717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:43.202421 sshd[3717]: Accepted publickey for core from 139.178.89.65 port 52920 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:29:43.213039 kernel: audit: type=1101 audit(1696274983.201:1294): pid=3717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:43.214000 audit[3717]: CRED_ACQ pid=3717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:43.216349 sshd[3717]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:29:43.232117 kernel: audit: type=1103 audit(1696274983.214:1295): pid=3717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:43.232268 kernel: audit: type=1006 audit(1696274983.214:1296): pid=3717 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:29:43.214000 audit[3717]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4445d20 a2=3 a3=1 items=0 ppid=1 pid=3717 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:43.243390 kernel: audit: type=1300 audit(1696274983.214:1296): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4445d20 a2=3 a3=1 items=0 ppid=1 pid=3717 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:43.214000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:43.248030 kernel: audit: type=1327 audit(1696274983.214:1296): proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:43.251596 systemd-logind[1722]: New session 24 of user core. Oct 2 19:29:43.253196 systemd[1]: Started session-24.scope. Oct 2 19:29:43.261000 audit[3717]: USER_START pid=3717 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:43.275160 kernel: audit: type=1105 audit(1696274983.261:1297): pid=3717 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:43.274000 audit[3719]: CRED_ACQ pid=3719 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:43.286082 kernel: audit: type=1103 audit(1696274983.274:1298): pid=3719 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:43.542305 sshd[3717]: pam_unix(sshd:session): session closed for user core Oct 2 19:29:43.543000 audit[3717]: USER_END pid=3717 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:43.548997 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:29:43.550618 systemd[1]: sshd@23-172.31.29.2:22-139.178.89.65:52920.service: Deactivated successfully. Oct 2 19:29:43.545000 audit[3717]: CRED_DISP pid=3717 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:43.566078 kernel: audit: type=1106 audit(1696274983.543:1299): pid=3717 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:43.566193 kernel: audit: type=1104 audit(1696274983.545:1300): pid=3717 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:43.566148 systemd-logind[1722]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:29:43.550000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.29.2:22-139.178.89.65:52920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:43.567855 systemd-logind[1722]: Removed session 24. Oct 2 19:29:45.160039 kubelet[2929]: E1002 19:29:45.160005 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:47.022314 kubelet[2929]: E1002 19:29:47.022181 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5)\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:29:50.162580 kubelet[2929]: E1002 19:29:50.162523 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:29:53.572000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.29.2:22-139.178.89.65:43210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:53.573382 systemd[1]: Started sshd@24-172.31.29.2:22-139.178.89.65:43210.service. Oct 2 19:29:53.576994 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:29:53.577116 kernel: audit: type=1130 audit(1696274993.572:1302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.29.2:22-139.178.89.65:43210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:53.756000 audit[3729]: USER_ACCT pid=3729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:53.760568 sshd[3729]: Accepted publickey for core from 139.178.89.65 port 43210 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:29:53.762709 sshd[3729]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:29:53.760000 audit[3729]: CRED_ACQ pid=3729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:53.777990 kernel: audit: type=1101 audit(1696274993.756:1303): pid=3729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:53.778111 kernel: audit: type=1103 audit(1696274993.760:1304): pid=3729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:53.784360 kernel: audit: type=1006 audit(1696274993.760:1305): pid=3729 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:29:53.760000 audit[3729]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc7e509f0 a2=3 a3=1 items=0 ppid=1 pid=3729 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:53.795573 kernel: audit: type=1300 audit(1696274993.760:1305): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc7e509f0 a2=3 a3=1 items=0 ppid=1 pid=3729 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:29:53.760000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:53.800167 kernel: audit: type=1327 audit(1696274993.760:1305): proctitle=737368643A20636F7265205B707269765D Oct 2 19:29:53.804164 systemd-logind[1722]: New session 25 of user core. Oct 2 19:29:53.806040 systemd[1]: Started session-25.scope. Oct 2 19:29:53.815000 audit[3729]: USER_START pid=3729 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:53.822000 audit[3731]: CRED_ACQ pid=3731 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:53.837044 kernel: audit: type=1105 audit(1696274993.815:1306): pid=3729 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:53.837138 kernel: audit: type=1103 audit(1696274993.822:1307): pid=3731 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:54.101362 sshd[3729]: pam_unix(sshd:session): session closed for user core Oct 2 19:29:54.102000 audit[3729]: USER_END pid=3729 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:54.108390 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:29:54.109660 systemd[1]: sshd@24-172.31.29.2:22-139.178.89.65:43210.service: Deactivated successfully. Oct 2 19:29:54.104000 audit[3729]: CRED_DISP pid=3729 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:54.123974 kernel: audit: type=1106 audit(1696274994.102:1308): pid=3729 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:54.124104 kernel: audit: type=1104 audit(1696274994.104:1309): pid=3729 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:29:54.124065 systemd-logind[1722]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:29:54.109000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.29.2:22-139.178.89.65:43210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:29:54.125674 systemd-logind[1722]: Removed session 25. Oct 2 19:29:55.164702 kubelet[2929]: E1002 19:29:55.164659 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:30:00.028400 env[1738]: time="2023-10-02T19:30:00.027291379Z" level=info msg="CreateContainer within sandbox \"73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:30:00.052873 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4093591788.mount: Deactivated successfully. Oct 2 19:30:00.065701 env[1738]: time="2023-10-02T19:30:00.065635700Z" level=info msg="CreateContainer within sandbox \"73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"7c6510d0cc3ba71e02d2c306d030517c479974293b26478b4c1b245b3c23f3e9\"" Oct 2 19:30:00.066828 env[1738]: time="2023-10-02T19:30:00.066780355Z" level=info msg="StartContainer for \"7c6510d0cc3ba71e02d2c306d030517c479974293b26478b4c1b245b3c23f3e9\"" Oct 2 19:30:00.115806 systemd[1]: Started cri-containerd-7c6510d0cc3ba71e02d2c306d030517c479974293b26478b4c1b245b3c23f3e9.scope. Oct 2 19:30:00.156474 systemd[1]: cri-containerd-7c6510d0cc3ba71e02d2c306d030517c479974293b26478b4c1b245b3c23f3e9.scope: Deactivated successfully. Oct 2 19:30:00.166342 kubelet[2929]: E1002 19:30:00.166298 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:30:00.184385 env[1738]: time="2023-10-02T19:30:00.184316479Z" level=info msg="shim disconnected" id=7c6510d0cc3ba71e02d2c306d030517c479974293b26478b4c1b245b3c23f3e9 Oct 2 19:30:00.184723 env[1738]: time="2023-10-02T19:30:00.184690075Z" level=warning msg="cleaning up after shim disconnected" id=7c6510d0cc3ba71e02d2c306d030517c479974293b26478b4c1b245b3c23f3e9 namespace=k8s.io Oct 2 19:30:00.184843 env[1738]: time="2023-10-02T19:30:00.184815415Z" level=info msg="cleaning up dead shim" Oct 2 19:30:00.225373 env[1738]: time="2023-10-02T19:30:00.225302370Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:30:00Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3762 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:30:00Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/7c6510d0cc3ba71e02d2c306d030517c479974293b26478b4c1b245b3c23f3e9/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:30:00.226068 env[1738]: time="2023-10-02T19:30:00.225988313Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:30:00.226376 env[1738]: time="2023-10-02T19:30:00.226304201Z" level=error msg="Failed to pipe stdout of container \"7c6510d0cc3ba71e02d2c306d030517c479974293b26478b4c1b245b3c23f3e9\"" error="reading from a closed fifo" Oct 2 19:30:00.226535 env[1738]: time="2023-10-02T19:30:00.226408169Z" level=error msg="Failed to pipe stderr of container \"7c6510d0cc3ba71e02d2c306d030517c479974293b26478b4c1b245b3c23f3e9\"" error="reading from a closed fifo" Oct 2 19:30:00.228720 env[1738]: time="2023-10-02T19:30:00.228635427Z" level=error msg="StartContainer for \"7c6510d0cc3ba71e02d2c306d030517c479974293b26478b4c1b245b3c23f3e9\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:30:00.229083 kubelet[2929]: E1002 19:30:00.228949 2929 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="7c6510d0cc3ba71e02d2c306d030517c479974293b26478b4c1b245b3c23f3e9" Oct 2 19:30:00.229242 kubelet[2929]: E1002 19:30:00.229148 2929 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:30:00.229242 kubelet[2929]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:30:00.229242 kubelet[2929]: rm /hostbin/cilium-mount Oct 2 19:30:00.229242 kubelet[2929]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-hgddn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:30:00.229242 kubelet[2929]: E1002 19:30:00.229209 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:30:00.692564 kubelet[2929]: I1002 19:30:00.692100 2929 scope.go:115] "RemoveContainer" containerID="337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860" Oct 2 19:30:00.692564 kubelet[2929]: I1002 19:30:00.692523 2929 scope.go:115] "RemoveContainer" containerID="337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860" Oct 2 19:30:00.696366 env[1738]: time="2023-10-02T19:30:00.696310255Z" level=info msg="RemoveContainer for \"337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860\"" Oct 2 19:30:00.696560 env[1738]: time="2023-10-02T19:30:00.695200124Z" level=info msg="RemoveContainer for \"337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860\"" Oct 2 19:30:00.698063 env[1738]: time="2023-10-02T19:30:00.696754159Z" level=error msg="RemoveContainer for \"337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860\" failed" error="failed to set removing state for container \"337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860\": container is already in removing state" Oct 2 19:30:00.698959 kubelet[2929]: E1002 19:30:00.698858 2929 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860\": container is already in removing state" containerID="337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860" Oct 2 19:30:00.698959 kubelet[2929]: I1002 19:30:00.698926 2929 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860} err="rpc error: code = Unknown desc = failed to set removing state for container \"337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860\": container is already in removing state" Oct 2 19:30:00.707100 env[1738]: time="2023-10-02T19:30:00.707024673Z" level=info msg="RemoveContainer for \"337670ed6bc9cfe2fcfd99fef7fbdc46347b8fc7742fd0968d21c4380df9f860\" returns successfully" Oct 2 19:30:00.708148 kubelet[2929]: E1002 19:30:00.707885 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5)\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:30:01.048253 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-7c6510d0cc3ba71e02d2c306d030517c479974293b26478b4c1b245b3c23f3e9-rootfs.mount: Deactivated successfully. Oct 2 19:30:03.289901 kubelet[2929]: W1002 19:30:03.289848 2929 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod8e04169a_0e59_42fb_add0_aca7ef121ad5.slice/cri-containerd-7c6510d0cc3ba71e02d2c306d030517c479974293b26478b4c1b245b3c23f3e9.scope WatchSource:0}: task 7c6510d0cc3ba71e02d2c306d030517c479974293b26478b4c1b245b3c23f3e9 not found: not found Oct 2 19:30:04.131122 systemd[1]: Started sshd@25-172.31.29.2:22-139.178.89.65:43918.service. Oct 2 19:30:04.134438 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:30:04.134517 kernel: audit: type=1130 audit(1696275004.130:1311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.29.2:22-139.178.89.65:43918 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:04.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.29.2:22-139.178.89.65:43918 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:04.318000 audit[3775]: USER_ACCT pid=3775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:04.320245 sshd[3775]: Accepted publickey for core from 139.178.89.65 port 43918 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:30:04.337008 kernel: audit: type=1101 audit(1696275004.318:1312): pid=3775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:04.336000 audit[3775]: CRED_ACQ pid=3775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:04.340733 sshd[3775]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:30:04.354628 kernel: audit: type=1103 audit(1696275004.336:1313): pid=3775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:04.354776 kernel: audit: type=1006 audit(1696275004.339:1314): pid=3775 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:30:04.354844 kernel: audit: type=1300 audit(1696275004.339:1314): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0ac6750 a2=3 a3=1 items=0 ppid=1 pid=3775 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:04.339000 audit[3775]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0ac6750 a2=3 a3=1 items=0 ppid=1 pid=3775 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:04.369365 kernel: audit: type=1327 audit(1696275004.339:1314): proctitle=737368643A20636F7265205B707269765D Oct 2 19:30:04.339000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:30:04.371748 systemd-logind[1722]: New session 26 of user core. Oct 2 19:30:04.372800 systemd[1]: Started session-26.scope. Oct 2 19:30:04.382000 audit[3775]: USER_START pid=3775 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:04.397000 audit[3777]: CRED_ACQ pid=3777 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:04.408294 kernel: audit: type=1105 audit(1696275004.382:1315): pid=3775 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:04.408472 kernel: audit: type=1103 audit(1696275004.397:1316): pid=3777 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:04.665313 sshd[3775]: pam_unix(sshd:session): session closed for user core Oct 2 19:30:04.667000 audit[3775]: USER_END pid=3775 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:04.671253 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:30:04.672668 systemd[1]: sshd@25-172.31.29.2:22-139.178.89.65:43918.service: Deactivated successfully. Oct 2 19:30:04.667000 audit[3775]: CRED_DISP pid=3775 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:04.681123 systemd-logind[1722]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:30:04.683501 systemd-logind[1722]: Removed session 26. Oct 2 19:30:04.688771 kernel: audit: type=1106 audit(1696275004.667:1317): pid=3775 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:04.688922 kernel: audit: type=1104 audit(1696275004.667:1318): pid=3775 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:04.672000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.29.2:22-139.178.89.65:43918 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:05.167875 kubelet[2929]: E1002 19:30:05.167841 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:30:10.170269 kubelet[2929]: E1002 19:30:10.170231 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:30:14.020000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:14.023294 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:30:14.023387 kernel: audit: type=1400 audit(1696275014.020:1320): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:14.028268 kubelet[2929]: E1002 19:30:14.028226 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5)\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:30:14.020000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:14.043077 kernel: audit: type=1400 audit(1696275014.020:1321): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:14.020000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001f62b40 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:30:14.056223 kernel: audit: type=1300 audit(1696275014.020:1321): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001f62b40 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:30:14.056397 kernel: audit: type=1327 audit(1696275014.020:1321): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:30:14.020000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:30:14.020000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001e7b680 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:30:14.081595 kernel: audit: type=1300 audit(1696275014.020:1320): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001e7b680 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:30:14.020000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:30:14.093427 kernel: audit: type=1327 audit(1696275014.020:1320): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:30:14.696391 systemd[1]: Started sshd@26-172.31.29.2:22-139.178.89.65:54968.service. Oct 2 19:30:14.695000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.29.2:22-139.178.89.65:54968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:14.707044 kernel: audit: type=1130 audit(1696275014.695:1322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.29.2:22-139.178.89.65:54968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:14.883000 audit[3789]: USER_ACCT pid=3789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:14.885311 sshd[3789]: Accepted publickey for core from 139.178.89.65 port 54968 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:30:14.896044 kernel: audit: type=1101 audit(1696275014.883:1323): pid=3789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:14.897000 audit[3789]: CRED_ACQ pid=3789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:14.898774 sshd[3789]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:30:14.916596 kernel: audit: type=1103 audit(1696275014.897:1324): pid=3789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:14.916737 kernel: audit: type=1006 audit(1696275014.897:1325): pid=3789 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:30:14.897000 audit[3789]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb02b200 a2=3 a3=1 items=0 ppid=1 pid=3789 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:14.897000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:30:14.915785 systemd[1]: Started session-27.scope. Oct 2 19:30:14.917031 systemd-logind[1722]: New session 27 of user core. Oct 2 19:30:14.926000 audit[3789]: USER_START pid=3789 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:14.932000 audit[3791]: CRED_ACQ pid=3791 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:15.172712 kubelet[2929]: E1002 19:30:15.172626 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:30:15.191633 sshd[3789]: pam_unix(sshd:session): session closed for user core Oct 2 19:30:15.192000 audit[3789]: USER_END pid=3789 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:15.192000 audit[3789]: CRED_DISP pid=3789 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:15.198000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.29.2:22-139.178.89.65:54968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:15.198155 systemd-logind[1722]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:30:15.198879 systemd[1]: sshd@26-172.31.29.2:22-139.178.89.65:54968.service: Deactivated successfully. Oct 2 19:30:15.200331 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:30:15.203146 systemd-logind[1722]: Removed session 27. Oct 2 19:30:15.455000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:15.455000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400e366a00 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:30:15.455000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:30:15.456000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:15.456000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40117affb0 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:30:15.456000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:30:15.469000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:15.469000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4011ac5860 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:30:15.469000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:30:15.488000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:15.488000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4011b4a120 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:30:15.488000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:30:15.489000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:15.489000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:15.489000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400ddbdae0 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:30:15.489000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:30:15.489000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4011ac5950 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:30:15.489000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:30:19.100000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:19.126677 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:30:19.126788 kernel: audit: type=1400 audit(1696275019.100:1337): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:19.126846 kernel: audit: type=1300 audit(1696275019.100:1337): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f38a40 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:30:19.126899 kernel: audit: type=1327 audit(1696275019.100:1337): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:30:19.100000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f38a40 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:30:19.100000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:30:19.101000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:19.146989 kernel: audit: type=1400 audit(1696275019.101:1338): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:19.147096 kernel: audit: type=1300 audit(1696275019.101:1338): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f38b60 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:30:19.101000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f38b60 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:30:19.101000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:30:19.170176 kernel: audit: type=1327 audit(1696275019.101:1338): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:30:19.170284 kernel: audit: type=1400 audit(1696275019.124:1339): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:19.124000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:19.179801 kernel: audit: type=1300 audit(1696275019.124:1339): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f38c80 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:30:19.124000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f38c80 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:30:19.124000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:30:19.202859 kernel: audit: type=1327 audit(1696275019.124:1339): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:30:19.124000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:19.213449 kernel: audit: type=1400 audit(1696275019.124:1340): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:30:19.124000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400026b360 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:30:19.124000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:30:20.174155 kubelet[2929]: E1002 19:30:20.174099 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:30:22.262255 amazon-ssm-agent[1710]: 2023-10-02 19:30:22 INFO Backing off health check to every 600 seconds for 1800 seconds. Oct 2 19:30:22.362631 amazon-ssm-agent[1710]: 2023-10-02 19:30:22 ERROR Health ping failed with error - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-04418a715ef7cb675 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-04418a715ef7cb675 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:30:22.362631 amazon-ssm-agent[1710]: status code: 400, request id: 31e14fe8-36f7-42f6-be6a-c1e74d177e83 Oct 2 19:30:25.023246 kubelet[2929]: E1002 19:30:25.023208 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-vcdqn_kube-system(8e04169a-0e59-42fb-add0-aca7ef121ad5)\"" pod="kube-system/cilium-vcdqn" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 Oct 2 19:30:25.175069 kubelet[2929]: E1002 19:30:25.175021 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:30:25.224093 systemd[1]: Started sshd@27-172.31.29.2:22-139.178.89.65:53878.service. Oct 2 19:30:25.242858 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:30:25.243046 kernel: audit: type=1130 audit(1696275025.230:1341): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.29.2:22-139.178.89.65:53878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:25.230000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.29.2:22-139.178.89.65:53878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:25.416000 audit[3805]: USER_ACCT pid=3805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:25.420675 sshd[3805]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:30:25.425702 sshd[3805]: Accepted publickey for core from 139.178.89.65 port 53878 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:30:25.418000 audit[3805]: CRED_ACQ pid=3805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:25.437676 kernel: audit: type=1101 audit(1696275025.416:1342): pid=3805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:25.437782 kernel: audit: type=1103 audit(1696275025.418:1343): pid=3805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:25.444361 kernel: audit: type=1006 audit(1696275025.419:1344): pid=3805 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:30:25.446464 kernel: audit: type=1300 audit(1696275025.419:1344): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdaad8300 a2=3 a3=1 items=0 ppid=1 pid=3805 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:25.419000 audit[3805]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdaad8300 a2=3 a3=1 items=0 ppid=1 pid=3805 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:25.452506 systemd[1]: Started session-28.scope. Oct 2 19:30:25.455143 systemd-logind[1722]: New session 28 of user core. Oct 2 19:30:25.419000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:30:25.460349 kernel: audit: type=1327 audit(1696275025.419:1344): proctitle=737368643A20636F7265205B707269765D Oct 2 19:30:25.465000 audit[3805]: USER_START pid=3805 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:25.472000 audit[3808]: CRED_ACQ pid=3808 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:25.487331 kernel: audit: type=1105 audit(1696275025.465:1345): pid=3805 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:25.487448 kernel: audit: type=1103 audit(1696275025.472:1346): pid=3808 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:25.739327 sshd[3805]: pam_unix(sshd:session): session closed for user core Oct 2 19:30:25.741000 audit[3805]: USER_END pid=3805 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:25.745819 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:30:25.747231 systemd[1]: sshd@27-172.31.29.2:22-139.178.89.65:53878.service: Deactivated successfully. Oct 2 19:30:25.742000 audit[3805]: CRED_DISP pid=3805 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:25.764304 kernel: audit: type=1106 audit(1696275025.741:1347): pid=3805 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:25.764445 kernel: audit: type=1104 audit(1696275025.742:1348): pid=3805 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:25.746000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.29.2:22-139.178.89.65:53878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:25.764880 systemd-logind[1722]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:30:25.775280 systemd[1]: Started sshd@28-172.31.29.2:22-139.178.89.65:58274.service. Oct 2 19:30:25.774000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.29.2:22-139.178.89.65:58274 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:25.778680 systemd-logind[1722]: Removed session 28. Oct 2 19:30:25.961000 audit[3818]: USER_ACCT pid=3818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:25.962362 sshd[3818]: Accepted publickey for core from 139.178.89.65 port 58274 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:30:25.963000 audit[3818]: CRED_ACQ pid=3818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:25.964000 audit[3818]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdfd92130 a2=3 a3=1 items=0 ppid=1 pid=3818 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:25.964000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:30:25.966407 sshd[3818]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:30:25.974931 systemd-logind[1722]: New session 29 of user core. Oct 2 19:30:25.975867 systemd[1]: Started session-29.scope. Oct 2 19:30:25.985000 audit[3818]: USER_START pid=3818 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:25.991000 audit[3820]: CRED_ACQ pid=3820 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:29.114096 env[1738]: time="2023-10-02T19:30:29.113956030Z" level=info msg="StopPodSandbox for \"73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477\"" Oct 2 19:30:29.114758 env[1738]: time="2023-10-02T19:30:29.114148419Z" level=info msg="Container to stop \"7c6510d0cc3ba71e02d2c306d030517c479974293b26478b4c1b245b3c23f3e9\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:30:29.117554 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477-shm.mount: Deactivated successfully. Oct 2 19:30:29.137036 env[1738]: time="2023-10-02T19:30:29.136667769Z" level=info msg="StopContainer for \"d74ed593ee73bde63b523f5b932b1632da1c2b4864ecc1af740fe1cd6eeb5972\" with timeout 30 (s)" Oct 2 19:30:29.137254 env[1738]: time="2023-10-02T19:30:29.137185715Z" level=info msg="Stop container \"d74ed593ee73bde63b523f5b932b1632da1c2b4864ecc1af740fe1cd6eeb5972\" with signal terminated" Oct 2 19:30:29.161811 systemd[1]: cri-containerd-73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477.scope: Deactivated successfully. Oct 2 19:30:29.161000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:30:29.165000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:30:29.197568 systemd[1]: cri-containerd-d74ed593ee73bde63b523f5b932b1632da1c2b4864ecc1af740fe1cd6eeb5972.scope: Deactivated successfully. Oct 2 19:30:29.197000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:30:29.200000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:30:29.243275 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477-rootfs.mount: Deactivated successfully. Oct 2 19:30:29.272848 env[1738]: time="2023-10-02T19:30:29.271618446Z" level=info msg="shim disconnected" id=73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477 Oct 2 19:30:29.272848 env[1738]: time="2023-10-02T19:30:29.271796699Z" level=warning msg="cleaning up after shim disconnected" id=73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477 namespace=k8s.io Oct 2 19:30:29.272848 env[1738]: time="2023-10-02T19:30:29.271996948Z" level=info msg="cleaning up dead shim" Oct 2 19:30:29.281748 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d74ed593ee73bde63b523f5b932b1632da1c2b4864ecc1af740fe1cd6eeb5972-rootfs.mount: Deactivated successfully. Oct 2 19:30:29.293512 env[1738]: time="2023-10-02T19:30:29.293399477Z" level=info msg="shim disconnected" id=d74ed593ee73bde63b523f5b932b1632da1c2b4864ecc1af740fe1cd6eeb5972 Oct 2 19:30:29.293512 env[1738]: time="2023-10-02T19:30:29.293472211Z" level=warning msg="cleaning up after shim disconnected" id=d74ed593ee73bde63b523f5b932b1632da1c2b4864ecc1af740fe1cd6eeb5972 namespace=k8s.io Oct 2 19:30:29.293512 env[1738]: time="2023-10-02T19:30:29.293494868Z" level=info msg="cleaning up dead shim" Oct 2 19:30:29.313562 env[1738]: time="2023-10-02T19:30:29.313491069Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:30:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3867 runtime=io.containerd.runc.v2\n" Oct 2 19:30:29.314183 env[1738]: time="2023-10-02T19:30:29.314133793Z" level=info msg="TearDown network for sandbox \"73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477\" successfully" Oct 2 19:30:29.314298 env[1738]: time="2023-10-02T19:30:29.314183535Z" level=info msg="StopPodSandbox for \"73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477\" returns successfully" Oct 2 19:30:29.347233 env[1738]: time="2023-10-02T19:30:29.347143947Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:30:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3876 runtime=io.containerd.runc.v2\n" Oct 2 19:30:29.350343 env[1738]: time="2023-10-02T19:30:29.350209114Z" level=info msg="StopContainer for \"d74ed593ee73bde63b523f5b932b1632da1c2b4864ecc1af740fe1cd6eeb5972\" returns successfully" Oct 2 19:30:29.351254 env[1738]: time="2023-10-02T19:30:29.351198995Z" level=info msg="StopPodSandbox for \"1775eb6c9d5fa3d380b614ea108bd6b26e37e1e9333a71767319b35a42175a3e\"" Oct 2 19:30:29.351396 env[1738]: time="2023-10-02T19:30:29.351296834Z" level=info msg="Container to stop \"d74ed593ee73bde63b523f5b932b1632da1c2b4864ecc1af740fe1cd6eeb5972\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:30:29.354251 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1775eb6c9d5fa3d380b614ea108bd6b26e37e1e9333a71767319b35a42175a3e-shm.mount: Deactivated successfully. Oct 2 19:30:29.373000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:30:29.374130 systemd[1]: cri-containerd-1775eb6c9d5fa3d380b614ea108bd6b26e37e1e9333a71767319b35a42175a3e.scope: Deactivated successfully. Oct 2 19:30:29.377000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:30:29.427938 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1775eb6c9d5fa3d380b614ea108bd6b26e37e1e9333a71767319b35a42175a3e-rootfs.mount: Deactivated successfully. Oct 2 19:30:29.442457 env[1738]: time="2023-10-02T19:30:29.442389113Z" level=info msg="shim disconnected" id=1775eb6c9d5fa3d380b614ea108bd6b26e37e1e9333a71767319b35a42175a3e Oct 2 19:30:29.442954 env[1738]: time="2023-10-02T19:30:29.442900722Z" level=warning msg="cleaning up after shim disconnected" id=1775eb6c9d5fa3d380b614ea108bd6b26e37e1e9333a71767319b35a42175a3e namespace=k8s.io Oct 2 19:30:29.443470 env[1738]: time="2023-10-02T19:30:29.443436908Z" level=info msg="cleaning up dead shim" Oct 2 19:30:29.473693 env[1738]: time="2023-10-02T19:30:29.473630073Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:30:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3912 runtime=io.containerd.runc.v2\n" Oct 2 19:30:29.474514 env[1738]: time="2023-10-02T19:30:29.474469074Z" level=info msg="TearDown network for sandbox \"1775eb6c9d5fa3d380b614ea108bd6b26e37e1e9333a71767319b35a42175a3e\" successfully" Oct 2 19:30:29.474703 env[1738]: time="2023-10-02T19:30:29.474667967Z" level=info msg="StopPodSandbox for \"1775eb6c9d5fa3d380b614ea108bd6b26e37e1e9333a71767319b35a42175a3e\" returns successfully" Oct 2 19:30:29.479166 kubelet[2929]: I1002 19:30:29.478229 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-etc-cni-netd\") pod \"8e04169a-0e59-42fb-add0-aca7ef121ad5\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " Oct 2 19:30:29.479166 kubelet[2929]: I1002 19:30:29.478328 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/8e04169a-0e59-42fb-add0-aca7ef121ad5-hubble-tls\") pod \"8e04169a-0e59-42fb-add0-aca7ef121ad5\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " Oct 2 19:30:29.479166 kubelet[2929]: I1002 19:30:29.478400 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/8e04169a-0e59-42fb-add0-aca7ef121ad5-clustermesh-secrets\") pod \"8e04169a-0e59-42fb-add0-aca7ef121ad5\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " Oct 2 19:30:29.479166 kubelet[2929]: I1002 19:30:29.478470 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-cilium-cgroup\") pod \"8e04169a-0e59-42fb-add0-aca7ef121ad5\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " Oct 2 19:30:29.479166 kubelet[2929]: I1002 19:30:29.478539 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-bpf-maps\") pod \"8e04169a-0e59-42fb-add0-aca7ef121ad5\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " Oct 2 19:30:29.479166 kubelet[2929]: I1002 19:30:29.478587 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-hostproc\") pod \"8e04169a-0e59-42fb-add0-aca7ef121ad5\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " Oct 2 19:30:29.479166 kubelet[2929]: I1002 19:30:29.478658 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-lib-modules\") pod \"8e04169a-0e59-42fb-add0-aca7ef121ad5\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " Oct 2 19:30:29.479166 kubelet[2929]: I1002 19:30:29.478730 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-xtables-lock\") pod \"8e04169a-0e59-42fb-add0-aca7ef121ad5\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " Oct 2 19:30:29.479166 kubelet[2929]: I1002 19:30:29.478823 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-host-proc-sys-net\") pod \"8e04169a-0e59-42fb-add0-aca7ef121ad5\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " Oct 2 19:30:29.479166 kubelet[2929]: I1002 19:30:29.478870 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-host-proc-sys-kernel\") pod \"8e04169a-0e59-42fb-add0-aca7ef121ad5\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " Oct 2 19:30:29.479166 kubelet[2929]: I1002 19:30:29.478944 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/8e04169a-0e59-42fb-add0-aca7ef121ad5-cilium-config-path\") pod \"8e04169a-0e59-42fb-add0-aca7ef121ad5\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " Oct 2 19:30:29.479166 kubelet[2929]: I1002 19:30:29.479019 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-cilium-run\") pod \"8e04169a-0e59-42fb-add0-aca7ef121ad5\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " Oct 2 19:30:29.479166 kubelet[2929]: I1002 19:30:29.479089 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-hgddn\" (UniqueName: \"kubernetes.io/projected/8e04169a-0e59-42fb-add0-aca7ef121ad5-kube-api-access-hgddn\") pod \"8e04169a-0e59-42fb-add0-aca7ef121ad5\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " Oct 2 19:30:29.479166 kubelet[2929]: I1002 19:30:29.479133 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-cni-path\") pod \"8e04169a-0e59-42fb-add0-aca7ef121ad5\" (UID: \"8e04169a-0e59-42fb-add0-aca7ef121ad5\") " Oct 2 19:30:29.481563 kubelet[2929]: I1002 19:30:29.480127 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-cni-path" (OuterVolumeSpecName: "cni-path") pod "8e04169a-0e59-42fb-add0-aca7ef121ad5" (UID: "8e04169a-0e59-42fb-add0-aca7ef121ad5"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:29.481563 kubelet[2929]: I1002 19:30:29.480225 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "8e04169a-0e59-42fb-add0-aca7ef121ad5" (UID: "8e04169a-0e59-42fb-add0-aca7ef121ad5"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:29.482711 kubelet[2929]: I1002 19:30:29.482656 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "8e04169a-0e59-42fb-add0-aca7ef121ad5" (UID: "8e04169a-0e59-42fb-add0-aca7ef121ad5"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:29.483015 kubelet[2929]: I1002 19:30:29.482984 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "8e04169a-0e59-42fb-add0-aca7ef121ad5" (UID: "8e04169a-0e59-42fb-add0-aca7ef121ad5"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:29.483145 kubelet[2929]: I1002 19:30:29.483104 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "8e04169a-0e59-42fb-add0-aca7ef121ad5" (UID: "8e04169a-0e59-42fb-add0-aca7ef121ad5"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:29.483145 kubelet[2929]: I1002 19:30:29.483009 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "8e04169a-0e59-42fb-add0-aca7ef121ad5" (UID: "8e04169a-0e59-42fb-add0-aca7ef121ad5"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:29.483310 kubelet[2929]: I1002 19:30:29.483050 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-hostproc" (OuterVolumeSpecName: "hostproc") pod "8e04169a-0e59-42fb-add0-aca7ef121ad5" (UID: "8e04169a-0e59-42fb-add0-aca7ef121ad5"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:29.483310 kubelet[2929]: I1002 19:30:29.483078 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "8e04169a-0e59-42fb-add0-aca7ef121ad5" (UID: "8e04169a-0e59-42fb-add0-aca7ef121ad5"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:29.483310 kubelet[2929]: I1002 19:30:29.483203 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "8e04169a-0e59-42fb-add0-aca7ef121ad5" (UID: "8e04169a-0e59-42fb-add0-aca7ef121ad5"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:29.483536 kubelet[2929]: W1002 19:30:29.483477 2929 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/8e04169a-0e59-42fb-add0-aca7ef121ad5/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:30:29.483690 kubelet[2929]: I1002 19:30:29.483662 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "8e04169a-0e59-42fb-add0-aca7ef121ad5" (UID: "8e04169a-0e59-42fb-add0-aca7ef121ad5"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:30:29.489632 kubelet[2929]: I1002 19:30:29.489559 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/8e04169a-0e59-42fb-add0-aca7ef121ad5-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "8e04169a-0e59-42fb-add0-aca7ef121ad5" (UID: "8e04169a-0e59-42fb-add0-aca7ef121ad5"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:30:29.511866 kubelet[2929]: I1002 19:30:29.511765 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/8e04169a-0e59-42fb-add0-aca7ef121ad5-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "8e04169a-0e59-42fb-add0-aca7ef121ad5" (UID: "8e04169a-0e59-42fb-add0-aca7ef121ad5"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:30:29.513663 kubelet[2929]: I1002 19:30:29.513616 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/8e04169a-0e59-42fb-add0-aca7ef121ad5-kube-api-access-hgddn" (OuterVolumeSpecName: "kube-api-access-hgddn") pod "8e04169a-0e59-42fb-add0-aca7ef121ad5" (UID: "8e04169a-0e59-42fb-add0-aca7ef121ad5"). InnerVolumeSpecName "kube-api-access-hgddn". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:30:29.514325 kubelet[2929]: I1002 19:30:29.514286 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/8e04169a-0e59-42fb-add0-aca7ef121ad5-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "8e04169a-0e59-42fb-add0-aca7ef121ad5" (UID: "8e04169a-0e59-42fb-add0-aca7ef121ad5"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:30:29.580573 kubelet[2929]: I1002 19:30:29.580517 2929 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-bpf-maps\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:30:29.580573 kubelet[2929]: I1002 19:30:29.580573 2929 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-hostproc\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:30:29.580808 kubelet[2929]: I1002 19:30:29.580605 2929 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-lib-modules\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:30:29.580808 kubelet[2929]: I1002 19:30:29.580629 2929 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-xtables-lock\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:30:29.580808 kubelet[2929]: I1002 19:30:29.580655 2929 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-host-proc-sys-net\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:30:29.580808 kubelet[2929]: I1002 19:30:29.580681 2929 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-host-proc-sys-kernel\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:30:29.580808 kubelet[2929]: I1002 19:30:29.580704 2929 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/8e04169a-0e59-42fb-add0-aca7ef121ad5-cilium-config-path\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:30:29.580808 kubelet[2929]: I1002 19:30:29.580727 2929 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-cilium-run\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:30:29.580808 kubelet[2929]: I1002 19:30:29.580754 2929 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-hgddn\" (UniqueName: \"kubernetes.io/projected/8e04169a-0e59-42fb-add0-aca7ef121ad5-kube-api-access-hgddn\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:30:29.580808 kubelet[2929]: I1002 19:30:29.580777 2929 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-cni-path\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:30:29.580808 kubelet[2929]: I1002 19:30:29.580800 2929 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-etc-cni-netd\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:30:29.581458 kubelet[2929]: I1002 19:30:29.580823 2929 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/8e04169a-0e59-42fb-add0-aca7ef121ad5-cilium-cgroup\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:30:29.581458 kubelet[2929]: I1002 19:30:29.580846 2929 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/8e04169a-0e59-42fb-add0-aca7ef121ad5-hubble-tls\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:30:29.581458 kubelet[2929]: I1002 19:30:29.580869 2929 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/8e04169a-0e59-42fb-add0-aca7ef121ad5-clustermesh-secrets\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:30:29.681289 kubelet[2929]: I1002 19:30:29.681129 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/8f22e2d9-e393-4605-a9de-3312f567b207-cilium-config-path\") pod \"8f22e2d9-e393-4605-a9de-3312f567b207\" (UID: \"8f22e2d9-e393-4605-a9de-3312f567b207\") " Oct 2 19:30:29.681289 kubelet[2929]: I1002 19:30:29.681217 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-kskxg\" (UniqueName: \"kubernetes.io/projected/8f22e2d9-e393-4605-a9de-3312f567b207-kube-api-access-kskxg\") pod \"8f22e2d9-e393-4605-a9de-3312f567b207\" (UID: \"8f22e2d9-e393-4605-a9de-3312f567b207\") " Oct 2 19:30:29.681903 kubelet[2929]: W1002 19:30:29.681856 2929 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/8f22e2d9-e393-4605-a9de-3312f567b207/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:30:29.687392 kubelet[2929]: I1002 19:30:29.687339 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/8f22e2d9-e393-4605-a9de-3312f567b207-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "8f22e2d9-e393-4605-a9de-3312f567b207" (UID: "8f22e2d9-e393-4605-a9de-3312f567b207"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:30:29.693607 kubelet[2929]: I1002 19:30:29.693537 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/8f22e2d9-e393-4605-a9de-3312f567b207-kube-api-access-kskxg" (OuterVolumeSpecName: "kube-api-access-kskxg") pod "8f22e2d9-e393-4605-a9de-3312f567b207" (UID: "8f22e2d9-e393-4605-a9de-3312f567b207"). InnerVolumeSpecName "kube-api-access-kskxg". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:30:29.768080 kubelet[2929]: I1002 19:30:29.768021 2929 scope.go:115] "RemoveContainer" containerID="7c6510d0cc3ba71e02d2c306d030517c479974293b26478b4c1b245b3c23f3e9" Oct 2 19:30:29.771757 env[1738]: time="2023-10-02T19:30:29.771346549Z" level=info msg="RemoveContainer for \"7c6510d0cc3ba71e02d2c306d030517c479974293b26478b4c1b245b3c23f3e9\"" Oct 2 19:30:29.777098 env[1738]: time="2023-10-02T19:30:29.777016576Z" level=info msg="RemoveContainer for \"7c6510d0cc3ba71e02d2c306d030517c479974293b26478b4c1b245b3c23f3e9\" returns successfully" Oct 2 19:30:29.779013 systemd[1]: Removed slice kubepods-burstable-pod8e04169a_0e59_42fb_add0_aca7ef121ad5.slice. Oct 2 19:30:29.781036 kubelet[2929]: I1002 19:30:29.780990 2929 scope.go:115] "RemoveContainer" containerID="d74ed593ee73bde63b523f5b932b1632da1c2b4864ecc1af740fe1cd6eeb5972" Oct 2 19:30:29.786957 kubelet[2929]: I1002 19:30:29.786918 2929 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/8f22e2d9-e393-4605-a9de-3312f567b207-cilium-config-path\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:30:29.787240 kubelet[2929]: I1002 19:30:29.787217 2929 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-kskxg\" (UniqueName: \"kubernetes.io/projected/8f22e2d9-e393-4605-a9de-3312f567b207-kube-api-access-kskxg\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:30:29.794496 systemd[1]: Removed slice kubepods-besteffort-pod8f22e2d9_e393_4605_a9de_3312f567b207.slice. Oct 2 19:30:29.797036 env[1738]: time="2023-10-02T19:30:29.796749850Z" level=info msg="RemoveContainer for \"d74ed593ee73bde63b523f5b932b1632da1c2b4864ecc1af740fe1cd6eeb5972\"" Oct 2 19:30:29.804052 env[1738]: time="2023-10-02T19:30:29.803481772Z" level=info msg="RemoveContainer for \"d74ed593ee73bde63b523f5b932b1632da1c2b4864ecc1af740fe1cd6eeb5972\" returns successfully" Oct 2 19:30:29.804574 kubelet[2929]: I1002 19:30:29.804447 2929 scope.go:115] "RemoveContainer" containerID="d74ed593ee73bde63b523f5b932b1632da1c2b4864ecc1af740fe1cd6eeb5972" Oct 2 19:30:29.806665 env[1738]: time="2023-10-02T19:30:29.806546111Z" level=error msg="ContainerStatus for \"d74ed593ee73bde63b523f5b932b1632da1c2b4864ecc1af740fe1cd6eeb5972\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"d74ed593ee73bde63b523f5b932b1632da1c2b4864ecc1af740fe1cd6eeb5972\": not found" Oct 2 19:30:29.808724 kubelet[2929]: E1002 19:30:29.808655 2929 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"d74ed593ee73bde63b523f5b932b1632da1c2b4864ecc1af740fe1cd6eeb5972\": not found" containerID="d74ed593ee73bde63b523f5b932b1632da1c2b4864ecc1af740fe1cd6eeb5972" Oct 2 19:30:29.809202 kubelet[2929]: I1002 19:30:29.809139 2929 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:d74ed593ee73bde63b523f5b932b1632da1c2b4864ecc1af740fe1cd6eeb5972} err="failed to get container status \"d74ed593ee73bde63b523f5b932b1632da1c2b4864ecc1af740fe1cd6eeb5972\": rpc error: code = NotFound desc = an error occurred when try to find container \"d74ed593ee73bde63b523f5b932b1632da1c2b4864ecc1af740fe1cd6eeb5972\": not found" Oct 2 19:30:30.026596 kubelet[2929]: I1002 19:30:30.026483 2929 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=8e04169a-0e59-42fb-add0-aca7ef121ad5 path="/var/lib/kubelet/pods/8e04169a-0e59-42fb-add0-aca7ef121ad5/volumes" Oct 2 19:30:30.028131 kubelet[2929]: I1002 19:30:30.028100 2929 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=8f22e2d9-e393-4605-a9de-3312f567b207 path="/var/lib/kubelet/pods/8f22e2d9-e393-4605-a9de-3312f567b207/volumes" Oct 2 19:30:30.116915 systemd[1]: var-lib-kubelet-pods-8f22e2d9\x2de393\x2d4605\x2da9de\x2d3312f567b207-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dkskxg.mount: Deactivated successfully. Oct 2 19:30:30.117134 systemd[1]: var-lib-kubelet-pods-8e04169a\x2d0e59\x2d42fb\x2dadd0\x2daca7ef121ad5-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dhgddn.mount: Deactivated successfully. Oct 2 19:30:30.117272 systemd[1]: var-lib-kubelet-pods-8e04169a\x2d0e59\x2d42fb\x2dadd0\x2daca7ef121ad5-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:30:30.117406 systemd[1]: var-lib-kubelet-pods-8e04169a\x2d0e59\x2d42fb\x2dadd0\x2daca7ef121ad5-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:30:30.176711 kubelet[2929]: E1002 19:30:30.176674 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:30:31.082681 sshd[3818]: pam_unix(sshd:session): session closed for user core Oct 2 19:30:31.084000 audit[3818]: USER_END pid=3818 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:31.087807 kernel: kauditd_printk_skb: 15 callbacks suppressed Oct 2 19:30:31.087905 kernel: audit: type=1106 audit(1696275031.084:1362): pid=3818 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:31.090811 systemd-logind[1722]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:30:31.093728 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:30:31.094095 systemd[1]: session-29.scope: Consumed 2.408s CPU time. Oct 2 19:30:31.096017 systemd-logind[1722]: Removed session 29. Oct 2 19:30:31.097376 systemd[1]: sshd@28-172.31.29.2:22-139.178.89.65:58274.service: Deactivated successfully. Oct 2 19:30:31.084000 audit[3818]: CRED_DISP pid=3818 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:31.108801 kernel: audit: type=1104 audit(1696275031.084:1363): pid=3818 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:31.108996 kernel: audit: type=1131 audit(1696275031.096:1364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.29.2:22-139.178.89.65:58274 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:31.096000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.29.2:22-139.178.89.65:58274 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:31.119040 systemd[1]: Started sshd@29-172.31.29.2:22-139.178.89.65:58288.service. Oct 2 19:30:31.131871 kernel: audit: type=1130 audit(1696275031.120:1365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.29.2:22-139.178.89.65:58288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:31.120000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.29.2:22-139.178.89.65:58288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:31.305000 audit[3931]: USER_ACCT pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:31.307061 sshd[3931]: Accepted publickey for core from 139.178.89.65 port 58288 ssh2: RSA SHA256:UWiPcUSyDphe9v2WN1dtuuOFHMYWuZ3ahwMZ2IbYxYo Oct 2 19:30:31.319012 kernel: audit: type=1101 audit(1696275031.305:1366): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:31.318000 audit[3931]: CRED_ACQ pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:31.320887 sshd[3931]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:30:31.335696 kernel: audit: type=1103 audit(1696275031.318:1367): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:31.335828 kernel: audit: type=1006 audit(1696275031.318:1368): pid=3931 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 19:30:31.318000 audit[3931]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe905bb40 a2=3 a3=1 items=0 ppid=1 pid=3931 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:31.346454 kernel: audit: type=1300 audit(1696275031.318:1368): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe905bb40 a2=3 a3=1 items=0 ppid=1 pid=3931 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:31.318000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:30:31.350216 kernel: audit: type=1327 audit(1696275031.318:1368): proctitle=737368643A20636F7265205B707269765D Oct 2 19:30:31.355064 systemd-logind[1722]: New session 30 of user core. Oct 2 19:30:31.358261 systemd[1]: Started session-30.scope. Oct 2 19:30:31.366000 audit[3931]: USER_START pid=3931 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:31.380041 kernel: audit: type=1105 audit(1696275031.366:1369): pid=3931 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:31.382000 audit[3933]: CRED_ACQ pid=3933 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:30:33.083386 kubelet[2929]: I1002 19:30:33.083320 2929 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:30:33.084227 kubelet[2929]: E1002 19:30:33.084180 2929 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="8e04169a-0e59-42fb-add0-aca7ef121ad5" containerName="mount-cgroup" Oct 2 19:30:33.084487 kubelet[2929]: E1002 19:30:33.084459 2929 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="8e04169a-0e59-42fb-add0-aca7ef121ad5" containerName="mount-cgroup" Oct 2 19:30:33.084655 kubelet[2929]: E1002 19:30:33.084633 2929 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="8e04169a-0e59-42fb-add0-aca7ef121ad5" containerName="mount-cgroup" Oct 2 19:30:33.084824 kubelet[2929]: E1002 19:30:33.084803 2929 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="8f22e2d9-e393-4605-a9de-3312f567b207" containerName="cilium-operator" Oct 2 19:30:33.085023 kubelet[2929]: E1002 19:30:33.085000 2929 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="8e04169a-0e59-42fb-add0-aca7ef121ad5" containerName="mount-cgroup" Oct 2 19:30:33.085240 kubelet[2929]: I1002 19:30:33.085196 2929 memory_manager.go:346] "RemoveStaleState removing state" podUID="8e04169a-0e59-42fb-add0-aca7ef121ad5" containerName="mount-cgroup" Oct 2 19:30:33.085397 kubelet[2929]: I1002 19:30:33.085376 2929 memory_manager.go:346] "RemoveStaleState removing state" podUID="8e04169a-0e59-42fb-add0-aca7ef121ad5" containerName="mount-cgroup" Oct 2 19:30:33.085536 kubelet[2929]: I1002 19:30:33.085516 2929 memory_manager.go:346] "RemoveStaleState removing state" podUID="8e04169a-0e59-42fb-add0-aca7ef121ad5" containerName="mount-cgroup" Oct 2 19:30:33.085706 kubelet[2929]: I1002 19:30:33.085685 2929 memory_manager.go:346] "RemoveStaleState removing state" podUID="8e04169a-0e59-42fb-add0-aca7ef121ad5" containerName="mount-cgroup" Oct 2 19:30:33.085862 kubelet[2929]: I1002 19:30:33.085841 2929 memory_manager.go:346] "RemoveStaleState removing state" podUID="8e04169a-0e59-42fb-add0-aca7ef121ad5" containerName="mount-cgroup" Oct 2 19:30:33.086150 kubelet[2929]: I1002 19:30:33.086112 2929 memory_manager.go:346] "RemoveStaleState removing state" podUID="8f22e2d9-e393-4605-a9de-3312f567b207" containerName="cilium-operator" Oct 2 19:30:33.086399 kubelet[2929]: E1002 19:30:33.086351 2929 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="8e04169a-0e59-42fb-add0-aca7ef121ad5" containerName="mount-cgroup" Oct 2 19:30:33.086582 kubelet[2929]: E1002 19:30:33.086543 2929 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="8e04169a-0e59-42fb-add0-aca7ef121ad5" containerName="mount-cgroup" Oct 2 19:30:33.086889 kubelet[2929]: I1002 19:30:33.086827 2929 memory_manager.go:346] "RemoveStaleState removing state" podUID="8e04169a-0e59-42fb-add0-aca7ef121ad5" containerName="mount-cgroup" Oct 2 19:30:33.098867 systemd[1]: Created slice kubepods-burstable-pod5b24b48d_df2a_4f2d_8d5f_85ced43127c5.slice. Oct 2 19:30:33.208277 kubelet[2929]: I1002 19:30:33.208238 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-host-proc-sys-kernel\") pod \"cilium-v9msc\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " pod="kube-system/cilium-v9msc" Oct 2 19:30:33.208579 kubelet[2929]: I1002 19:30:33.208531 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-cilium-run\") pod \"cilium-v9msc\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " pod="kube-system/cilium-v9msc" Oct 2 19:30:33.208846 kubelet[2929]: I1002 19:30:33.208770 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-etc-cni-netd\") pod \"cilium-v9msc\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " pod="kube-system/cilium-v9msc" Oct 2 19:30:33.209159 kubelet[2929]: I1002 19:30:33.209112 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-host-proc-sys-net\") pod \"cilium-v9msc\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " pod="kube-system/cilium-v9msc" Oct 2 19:30:33.209516 kubelet[2929]: I1002 19:30:33.209423 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-clustermesh-secrets\") pod \"cilium-v9msc\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " pod="kube-system/cilium-v9msc" Oct 2 19:30:33.209937 kubelet[2929]: I1002 19:30:33.209907 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-xtables-lock\") pod \"cilium-v9msc\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " pod="kube-system/cilium-v9msc" Oct 2 19:30:33.210254 kubelet[2929]: I1002 19:30:33.210158 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-cilium-config-path\") pod \"cilium-v9msc\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " pod="kube-system/cilium-v9msc" Oct 2 19:30:33.210553 kubelet[2929]: I1002 19:30:33.210505 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-cilium-ipsec-secrets\") pod \"cilium-v9msc\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " pod="kube-system/cilium-v9msc" Oct 2 19:30:33.210867 kubelet[2929]: I1002 19:30:33.210829 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-cilium-cgroup\") pod \"cilium-v9msc\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " pod="kube-system/cilium-v9msc" Oct 2 19:30:33.211310 kubelet[2929]: I1002 19:30:33.211283 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-lib-modules\") pod \"cilium-v9msc\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " pod="kube-system/cilium-v9msc" Oct 2 19:30:33.211604 kubelet[2929]: I1002 19:30:33.211579 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-bpf-maps\") pod \"cilium-v9msc\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " pod="kube-system/cilium-v9msc" Oct 2 19:30:33.211892 kubelet[2929]: I1002 19:30:33.211862 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-hostproc\") pod \"cilium-v9msc\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " pod="kube-system/cilium-v9msc" Oct 2 19:30:33.212234 kubelet[2929]: I1002 19:30:33.212209 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-cni-path\") pod \"cilium-v9msc\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " pod="kube-system/cilium-v9msc" Oct 2 19:30:33.212505 kubelet[2929]: I1002 19:30:33.212480 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-hubble-tls\") pod \"cilium-v9msc\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " pod="kube-system/cilium-v9msc" Oct 2 19:30:33.212753 kubelet[2929]: I1002 19:30:33.212729 2929 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6gvgc\" (UniqueName: \"kubernetes.io/projected/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-kube-api-access-6gvgc\") pod \"cilium-v9msc\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " pod="kube-system/cilium-v9msc" Oct 2 19:30:33.408322 env[1738]: time="2023-10-02T19:30:33.407957416Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-v9msc,Uid:5b24b48d-df2a-4f2d-8d5f-85ced43127c5,Namespace:kube-system,Attempt:0,}" Oct 2 19:30:33.453091 env[1738]: time="2023-10-02T19:30:33.452474804Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:30:33.453091 env[1738]: time="2023-10-02T19:30:33.452549759Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:30:33.453091 env[1738]: time="2023-10-02T19:30:33.452575295Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:30:33.455465 env[1738]: time="2023-10-02T19:30:33.453452724Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dc1c85727bc813e41328ba632bc7a9172dc574630be33bf0ba8ed451f0a1d86b pid=3950 runtime=io.containerd.runc.v2 Oct 2 19:30:33.482075 systemd[1]: Started cri-containerd-dc1c85727bc813e41328ba632bc7a9172dc574630be33bf0ba8ed451f0a1d86b.scope. Oct 2 19:30:33.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.521000 audit: BPF prog-id=134 op=LOAD Oct 2 19:30:33.522000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.522000 audit[3959]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3950 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:33.522000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463316338353732376263383133653431333238626136333262633761 Oct 2 19:30:33.523000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.523000 audit[3959]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3950 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:33.523000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463316338353732376263383133653431333238626136333262633761 Oct 2 19:30:33.523000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.523000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.523000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.523000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.523000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.523000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.523000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.523000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.523000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.523000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.523000 audit: BPF prog-id=135 op=LOAD Oct 2 19:30:33.523000 audit[3959]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3950 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:33.523000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463316338353732376263383133653431333238626136333262633761 Oct 2 19:30:33.525000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.525000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.525000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.525000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.525000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.525000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.525000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.525000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.525000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.525000 audit: BPF prog-id=136 op=LOAD Oct 2 19:30:33.525000 audit[3959]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3950 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:33.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463316338353732376263383133653431333238626136333262633761 Oct 2 19:30:33.526000 audit: BPF prog-id=136 op=UNLOAD Oct 2 19:30:33.526000 audit: BPF prog-id=135 op=UNLOAD Oct 2 19:30:33.526000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.526000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.526000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.526000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.526000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.526000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.526000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.526000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.526000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.526000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:30:33.526000 audit: BPF prog-id=137 op=LOAD Oct 2 19:30:33.526000 audit[3959]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3950 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:33.526000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463316338353732376263383133653431333238626136333262633761 Oct 2 19:30:33.574756 env[1738]: time="2023-10-02T19:30:33.574686069Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-v9msc,Uid:5b24b48d-df2a-4f2d-8d5f-85ced43127c5,Namespace:kube-system,Attempt:0,} returns sandbox id \"dc1c85727bc813e41328ba632bc7a9172dc574630be33bf0ba8ed451f0a1d86b\"" Oct 2 19:30:33.582191 env[1738]: time="2023-10-02T19:30:33.582136338Z" level=info msg="CreateContainer within sandbox \"dc1c85727bc813e41328ba632bc7a9172dc574630be33bf0ba8ed451f0a1d86b\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:30:33.602423 env[1738]: time="2023-10-02T19:30:33.602337250Z" level=info msg="CreateContainer within sandbox \"dc1c85727bc813e41328ba632bc7a9172dc574630be33bf0ba8ed451f0a1d86b\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"43286ec8ced4e84f9f842345095f3a36c23d55d682205ae9b3e33f90d36ad6d5\"" Oct 2 19:30:33.605378 env[1738]: time="2023-10-02T19:30:33.605278798Z" level=info msg="StartContainer for \"43286ec8ced4e84f9f842345095f3a36c23d55d682205ae9b3e33f90d36ad6d5\"" Oct 2 19:30:33.663834 systemd[1]: Started cri-containerd-43286ec8ced4e84f9f842345095f3a36c23d55d682205ae9b3e33f90d36ad6d5.scope. Oct 2 19:30:33.737209 systemd[1]: cri-containerd-43286ec8ced4e84f9f842345095f3a36c23d55d682205ae9b3e33f90d36ad6d5.scope: Deactivated successfully. Oct 2 19:30:33.776276 env[1738]: time="2023-10-02T19:30:33.776177942Z" level=info msg="shim disconnected" id=43286ec8ced4e84f9f842345095f3a36c23d55d682205ae9b3e33f90d36ad6d5 Oct 2 19:30:33.776551 env[1738]: time="2023-10-02T19:30:33.776276801Z" level=warning msg="cleaning up after shim disconnected" id=43286ec8ced4e84f9f842345095f3a36c23d55d682205ae9b3e33f90d36ad6d5 namespace=k8s.io Oct 2 19:30:33.776551 env[1738]: time="2023-10-02T19:30:33.776300010Z" level=info msg="cleaning up dead shim" Oct 2 19:30:33.807270 env[1738]: time="2023-10-02T19:30:33.807178719Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:30:33Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4012 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:30:33Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/43286ec8ced4e84f9f842345095f3a36c23d55d682205ae9b3e33f90d36ad6d5/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:30:33.808129 env[1738]: time="2023-10-02T19:30:33.807912036Z" level=error msg="copy shim log" error="read /proc/self/fd/33: file already closed" Oct 2 19:30:33.808358 env[1738]: time="2023-10-02T19:30:33.808300872Z" level=error msg="Failed to pipe stderr of container \"43286ec8ced4e84f9f842345095f3a36c23d55d682205ae9b3e33f90d36ad6d5\"" error="reading from a closed fifo" Oct 2 19:30:33.808632 env[1738]: time="2023-10-02T19:30:33.808583564Z" level=error msg="Failed to pipe stdout of container \"43286ec8ced4e84f9f842345095f3a36c23d55d682205ae9b3e33f90d36ad6d5\"" error="reading from a closed fifo" Oct 2 19:30:33.811148 env[1738]: time="2023-10-02T19:30:33.811059571Z" level=error msg="StartContainer for \"43286ec8ced4e84f9f842345095f3a36c23d55d682205ae9b3e33f90d36ad6d5\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:30:33.812040 kubelet[2929]: E1002 19:30:33.811456 2929 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="43286ec8ced4e84f9f842345095f3a36c23d55d682205ae9b3e33f90d36ad6d5" Oct 2 19:30:33.812040 kubelet[2929]: E1002 19:30:33.811597 2929 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:30:33.812040 kubelet[2929]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:30:33.812040 kubelet[2929]: rm /hostbin/cilium-mount Oct 2 19:30:33.812040 kubelet[2929]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-6gvgc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-v9msc_kube-system(5b24b48d-df2a-4f2d-8d5f-85ced43127c5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:30:33.812040 kubelet[2929]: E1002 19:30:33.811658 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-v9msc" podUID=5b24b48d-df2a-4f2d-8d5f-85ced43127c5 Oct 2 19:30:34.799366 env[1738]: time="2023-10-02T19:30:34.799305667Z" level=info msg="CreateContainer within sandbox \"dc1c85727bc813e41328ba632bc7a9172dc574630be33bf0ba8ed451f0a1d86b\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:30:34.821792 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount751727047.mount: Deactivated successfully. Oct 2 19:30:34.833082 env[1738]: time="2023-10-02T19:30:34.833015689Z" level=info msg="CreateContainer within sandbox \"dc1c85727bc813e41328ba632bc7a9172dc574630be33bf0ba8ed451f0a1d86b\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303\"" Oct 2 19:30:34.834035 env[1738]: time="2023-10-02T19:30:34.833959756Z" level=info msg="StartContainer for \"d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303\"" Oct 2 19:30:34.890263 systemd[1]: Started cri-containerd-d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303.scope. Oct 2 19:30:34.931287 systemd[1]: cri-containerd-d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303.scope: Deactivated successfully. Oct 2 19:30:34.952482 env[1738]: time="2023-10-02T19:30:34.952411249Z" level=info msg="shim disconnected" id=d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303 Oct 2 19:30:34.952843 env[1738]: time="2023-10-02T19:30:34.952809733Z" level=warning msg="cleaning up after shim disconnected" id=d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303 namespace=k8s.io Oct 2 19:30:34.953007 env[1738]: time="2023-10-02T19:30:34.952939793Z" level=info msg="cleaning up dead shim" Oct 2 19:30:34.980284 env[1738]: time="2023-10-02T19:30:34.980215994Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:30:34Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4049 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:30:34Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:30:34.981052 env[1738]: time="2023-10-02T19:30:34.980924470Z" level=error msg="copy shim log" error="read /proc/self/fd/33: file already closed" Oct 2 19:30:34.982145 env[1738]: time="2023-10-02T19:30:34.981647576Z" level=error msg="Failed to pipe stdout of container \"d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303\"" error="reading from a closed fifo" Oct 2 19:30:34.982338 env[1738]: time="2023-10-02T19:30:34.982051603Z" level=error msg="Failed to pipe stderr of container \"d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303\"" error="reading from a closed fifo" Oct 2 19:30:34.984741 env[1738]: time="2023-10-02T19:30:34.984672744Z" level=error msg="StartContainer for \"d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:30:34.985492 kubelet[2929]: E1002 19:30:34.985232 2929 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303" Oct 2 19:30:34.985492 kubelet[2929]: E1002 19:30:34.985387 2929 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:30:34.985492 kubelet[2929]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:30:34.985492 kubelet[2929]: rm /hostbin/cilium-mount Oct 2 19:30:34.985492 kubelet[2929]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-6gvgc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-v9msc_kube-system(5b24b48d-df2a-4f2d-8d5f-85ced43127c5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:30:34.985492 kubelet[2929]: E1002 19:30:34.985445 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-v9msc" podUID=5b24b48d-df2a-4f2d-8d5f-85ced43127c5 Oct 2 19:30:35.178342 kubelet[2929]: E1002 19:30:35.178244 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:30:35.334537 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303-rootfs.mount: Deactivated successfully. Oct 2 19:30:35.797227 kubelet[2929]: I1002 19:30:35.797192 2929 scope.go:115] "RemoveContainer" containerID="43286ec8ced4e84f9f842345095f3a36c23d55d682205ae9b3e33f90d36ad6d5" Oct 2 19:30:35.799344 kubelet[2929]: I1002 19:30:35.799301 2929 scope.go:115] "RemoveContainer" containerID="43286ec8ced4e84f9f842345095f3a36c23d55d682205ae9b3e33f90d36ad6d5" Oct 2 19:30:35.803246 env[1738]: time="2023-10-02T19:30:35.803084043Z" level=info msg="RemoveContainer for \"43286ec8ced4e84f9f842345095f3a36c23d55d682205ae9b3e33f90d36ad6d5\"" Oct 2 19:30:35.804833 env[1738]: time="2023-10-02T19:30:35.804761945Z" level=info msg="RemoveContainer for \"43286ec8ced4e84f9f842345095f3a36c23d55d682205ae9b3e33f90d36ad6d5\"" Oct 2 19:30:35.805021 env[1738]: time="2023-10-02T19:30:35.804905793Z" level=error msg="RemoveContainer for \"43286ec8ced4e84f9f842345095f3a36c23d55d682205ae9b3e33f90d36ad6d5\" failed" error="failed to set removing state for container \"43286ec8ced4e84f9f842345095f3a36c23d55d682205ae9b3e33f90d36ad6d5\": container is already in removing state" Oct 2 19:30:35.805791 kubelet[2929]: E1002 19:30:35.805756 2929 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"43286ec8ced4e84f9f842345095f3a36c23d55d682205ae9b3e33f90d36ad6d5\": container is already in removing state" containerID="43286ec8ced4e84f9f842345095f3a36c23d55d682205ae9b3e33f90d36ad6d5" Oct 2 19:30:35.806162 kubelet[2929]: E1002 19:30:35.806133 2929 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "43286ec8ced4e84f9f842345095f3a36c23d55d682205ae9b3e33f90d36ad6d5": container is already in removing state; Skipping pod "cilium-v9msc_kube-system(5b24b48d-df2a-4f2d-8d5f-85ced43127c5)" Oct 2 19:30:35.806765 kubelet[2929]: E1002 19:30:35.806739 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-v9msc_kube-system(5b24b48d-df2a-4f2d-8d5f-85ced43127c5)\"" pod="kube-system/cilium-v9msc" podUID=5b24b48d-df2a-4f2d-8d5f-85ced43127c5 Oct 2 19:30:35.814617 env[1738]: time="2023-10-02T19:30:35.814544747Z" level=info msg="RemoveContainer for \"43286ec8ced4e84f9f842345095f3a36c23d55d682205ae9b3e33f90d36ad6d5\" returns successfully" Oct 2 19:30:36.802894 kubelet[2929]: E1002 19:30:36.802840 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-v9msc_kube-system(5b24b48d-df2a-4f2d-8d5f-85ced43127c5)\"" pod="kube-system/cilium-v9msc" podUID=5b24b48d-df2a-4f2d-8d5f-85ced43127c5 Oct 2 19:30:36.882099 kubelet[2929]: W1002 19:30:36.881916 2929 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod5b24b48d_df2a_4f2d_8d5f_85ced43127c5.slice/cri-containerd-43286ec8ced4e84f9f842345095f3a36c23d55d682205ae9b3e33f90d36ad6d5.scope WatchSource:0}: container "43286ec8ced4e84f9f842345095f3a36c23d55d682205ae9b3e33f90d36ad6d5" in namespace "k8s.io": not found Oct 2 19:30:39.991889 kubelet[2929]: W1002 19:30:39.991825 2929 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod5b24b48d_df2a_4f2d_8d5f_85ced43127c5.slice/cri-containerd-d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303.scope WatchSource:0}: task d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303 not found: not found Oct 2 19:30:40.179881 kubelet[2929]: E1002 19:30:40.179847 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:30:45.181785 kubelet[2929]: E1002 19:30:45.181729 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:30:50.184111 kubelet[2929]: E1002 19:30:50.184056 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:30:52.026895 env[1738]: time="2023-10-02T19:30:52.026821242Z" level=info msg="CreateContainer within sandbox \"dc1c85727bc813e41328ba632bc7a9172dc574630be33bf0ba8ed451f0a1d86b\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:30:52.050154 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2657918879.mount: Deactivated successfully. Oct 2 19:30:52.051684 env[1738]: time="2023-10-02T19:30:52.051561717Z" level=info msg="CreateContainer within sandbox \"dc1c85727bc813e41328ba632bc7a9172dc574630be33bf0ba8ed451f0a1d86b\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e\"" Oct 2 19:30:52.054033 env[1738]: time="2023-10-02T19:30:52.052884362Z" level=info msg="StartContainer for \"8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e\"" Oct 2 19:30:52.102809 systemd[1]: Started cri-containerd-8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e.scope. Oct 2 19:30:52.146177 systemd[1]: cri-containerd-8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e.scope: Deactivated successfully. Oct 2 19:30:52.166509 env[1738]: time="2023-10-02T19:30:52.166418912Z" level=info msg="shim disconnected" id=8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e Oct 2 19:30:52.166509 env[1738]: time="2023-10-02T19:30:52.166499304Z" level=warning msg="cleaning up after shim disconnected" id=8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e namespace=k8s.io Oct 2 19:30:52.166875 env[1738]: time="2023-10-02T19:30:52.166521841Z" level=info msg="cleaning up dead shim" Oct 2 19:30:52.193615 env[1738]: time="2023-10-02T19:30:52.193543007Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:30:52Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4089 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:30:52Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:30:52.194084 env[1738]: time="2023-10-02T19:30:52.194001665Z" level=error msg="copy shim log" error="read /proc/self/fd/33: file already closed" Oct 2 19:30:52.194508 env[1738]: time="2023-10-02T19:30:52.194453735Z" level=error msg="Failed to pipe stderr of container \"8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e\"" error="reading from a closed fifo" Oct 2 19:30:52.196190 env[1738]: time="2023-10-02T19:30:52.196132842Z" level=error msg="Failed to pipe stdout of container \"8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e\"" error="reading from a closed fifo" Oct 2 19:30:52.201647 env[1738]: time="2023-10-02T19:30:52.201523733Z" level=error msg="StartContainer for \"8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:30:52.202061 kubelet[2929]: E1002 19:30:52.202024 2929 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e" Oct 2 19:30:52.204626 kubelet[2929]: E1002 19:30:52.202168 2929 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:30:52.204626 kubelet[2929]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:30:52.204626 kubelet[2929]: rm /hostbin/cilium-mount Oct 2 19:30:52.204626 kubelet[2929]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-6gvgc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-v9msc_kube-system(5b24b48d-df2a-4f2d-8d5f-85ced43127c5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:30:52.204626 kubelet[2929]: E1002 19:30:52.202231 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-v9msc" podUID=5b24b48d-df2a-4f2d-8d5f-85ced43127c5 Oct 2 19:30:52.842647 kubelet[2929]: I1002 19:30:52.842593 2929 scope.go:115] "RemoveContainer" containerID="d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303" Oct 2 19:30:52.843295 kubelet[2929]: I1002 19:30:52.843266 2929 scope.go:115] "RemoveContainer" containerID="d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303" Oct 2 19:30:52.847486 env[1738]: time="2023-10-02T19:30:52.847407649Z" level=info msg="RemoveContainer for \"d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303\"" Oct 2 19:30:52.848788 env[1738]: time="2023-10-02T19:30:52.848739390Z" level=info msg="RemoveContainer for \"d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303\"" Oct 2 19:30:52.849179 env[1738]: time="2023-10-02T19:30:52.849130474Z" level=error msg="RemoveContainer for \"d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303\" failed" error="failed to set removing state for container \"d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303\": container is already in removing state" Oct 2 19:30:52.849590 kubelet[2929]: E1002 19:30:52.849550 2929 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303\": container is already in removing state" containerID="d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303" Oct 2 19:30:52.849835 kubelet[2929]: E1002 19:30:52.849811 2929 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303": container is already in removing state; Skipping pod "cilium-v9msc_kube-system(5b24b48d-df2a-4f2d-8d5f-85ced43127c5)" Oct 2 19:30:52.850506 kubelet[2929]: E1002 19:30:52.850478 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-v9msc_kube-system(5b24b48d-df2a-4f2d-8d5f-85ced43127c5)\"" pod="kube-system/cilium-v9msc" podUID=5b24b48d-df2a-4f2d-8d5f-85ced43127c5 Oct 2 19:30:52.852593 env[1738]: time="2023-10-02T19:30:52.852533654Z" level=info msg="RemoveContainer for \"d0d81983f9b1a4fea79f59fce371566bf287e3f7d7caac02393498df6a841303\" returns successfully" Oct 2 19:30:53.040839 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e-rootfs.mount: Deactivated successfully. Oct 2 19:30:55.185587 kubelet[2929]: E1002 19:30:55.185534 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:30:55.272517 kubelet[2929]: W1002 19:30:55.272425 2929 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod5b24b48d_df2a_4f2d_8d5f_85ced43127c5.slice/cri-containerd-8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e.scope WatchSource:0}: task 8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e not found: not found Oct 2 19:31:00.187611 kubelet[2929]: E1002 19:31:00.187558 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:31:05.189953 kubelet[2929]: E1002 19:31:05.189908 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:31:07.023054 kubelet[2929]: E1002 19:31:07.023014 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-v9msc_kube-system(5b24b48d-df2a-4f2d-8d5f-85ced43127c5)\"" pod="kube-system/cilium-v9msc" podUID=5b24b48d-df2a-4f2d-8d5f-85ced43127c5 Oct 2 19:31:10.191689 kubelet[2929]: E1002 19:31:10.191626 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:31:14.027999 kernel: kauditd_printk_skb: 58 callbacks suppressed Oct 2 19:31:14.028196 kernel: audit: type=1400 audit(1696275074.021:1389): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:14.021000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:14.021000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001f624e0 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:31:14.046761 kernel: audit: type=1300 audit(1696275074.021:1389): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001f624e0 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:31:14.021000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:14.057523 kernel: audit: type=1327 audit(1696275074.021:1389): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:14.021000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:14.067173 kernel: audit: type=1400 audit(1696275074.021:1390): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:14.067296 kernel: audit: type=1300 audit(1696275074.021:1390): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001e7bea0 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:31:14.021000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001e7bea0 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:31:14.021000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:14.090015 kernel: audit: type=1327 audit(1696275074.021:1390): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:15.193232 kubelet[2929]: E1002 19:31:15.193183 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:31:15.456000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:15.456000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4008e6ebc0 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:31:15.478790 kernel: audit: type=1400 audit(1696275075.456:1391): avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:15.480012 kernel: audit: type=1300 audit(1696275075.456:1391): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4008e6ebc0 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:31:15.480105 kernel: audit: type=1327 audit(1696275075.456:1391): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:31:15.456000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:31:15.465000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:15.499379 kernel: audit: type=1400 audit(1696275075.465:1392): avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:15.465000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400ab70930 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:31:15.465000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:31:15.477000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:15.477000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400b32b9b0 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:31:15.477000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:31:15.489000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:15.489000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400b32b9e0 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:31:15.489000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:31:15.490000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:15.490000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4008e6ecc0 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:31:15.490000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:31:15.491000 audit[2793]: AVC avc: denied { watch } for pid=2793 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:15.491000 audit[2793]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400b32bad0 a2=fc6 a3=0 items=0 ppid=2651 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c152,c384 key=(null) Oct 2 19:31:15.491000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:31:18.025463 env[1738]: time="2023-10-02T19:31:18.025322972Z" level=info msg="CreateContainer within sandbox \"dc1c85727bc813e41328ba632bc7a9172dc574630be33bf0ba8ed451f0a1d86b\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:31:18.045907 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2784914102.mount: Deactivated successfully. Oct 2 19:31:18.055843 env[1738]: time="2023-10-02T19:31:18.055734614Z" level=info msg="CreateContainer within sandbox \"dc1c85727bc813e41328ba632bc7a9172dc574630be33bf0ba8ed451f0a1d86b\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"ffb56a29a5e6d52c832905ab2c0abe1be4d44b72b40c3760696e2b25bc60812f\"" Oct 2 19:31:18.059008 env[1738]: time="2023-10-02T19:31:18.057191632Z" level=info msg="StartContainer for \"ffb56a29a5e6d52c832905ab2c0abe1be4d44b72b40c3760696e2b25bc60812f\"" Oct 2 19:31:18.110642 systemd[1]: Started cri-containerd-ffb56a29a5e6d52c832905ab2c0abe1be4d44b72b40c3760696e2b25bc60812f.scope. Oct 2 19:31:18.153183 systemd[1]: cri-containerd-ffb56a29a5e6d52c832905ab2c0abe1be4d44b72b40c3760696e2b25bc60812f.scope: Deactivated successfully. Oct 2 19:31:18.180266 env[1738]: time="2023-10-02T19:31:18.180176581Z" level=info msg="shim disconnected" id=ffb56a29a5e6d52c832905ab2c0abe1be4d44b72b40c3760696e2b25bc60812f Oct 2 19:31:18.180543 env[1738]: time="2023-10-02T19:31:18.180266994Z" level=warning msg="cleaning up after shim disconnected" id=ffb56a29a5e6d52c832905ab2c0abe1be4d44b72b40c3760696e2b25bc60812f namespace=k8s.io Oct 2 19:31:18.180543 env[1738]: time="2023-10-02T19:31:18.180291271Z" level=info msg="cleaning up dead shim" Oct 2 19:31:18.209127 env[1738]: time="2023-10-02T19:31:18.209040229Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:31:18Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4130 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:31:18Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ffb56a29a5e6d52c832905ab2c0abe1be4d44b72b40c3760696e2b25bc60812f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:31:18.209599 env[1738]: time="2023-10-02T19:31:18.209509909Z" level=error msg="copy shim log" error="read /proc/self/fd/33: file already closed" Oct 2 19:31:18.210145 env[1738]: time="2023-10-02T19:31:18.210092658Z" level=error msg="Failed to pipe stderr of container \"ffb56a29a5e6d52c832905ab2c0abe1be4d44b72b40c3760696e2b25bc60812f\"" error="reading from a closed fifo" Oct 2 19:31:18.211608 env[1738]: time="2023-10-02T19:31:18.211545140Z" level=error msg="Failed to pipe stdout of container \"ffb56a29a5e6d52c832905ab2c0abe1be4d44b72b40c3760696e2b25bc60812f\"" error="reading from a closed fifo" Oct 2 19:31:18.214395 env[1738]: time="2023-10-02T19:31:18.214326869Z" level=error msg="StartContainer for \"ffb56a29a5e6d52c832905ab2c0abe1be4d44b72b40c3760696e2b25bc60812f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:31:18.215147 kubelet[2929]: E1002 19:31:18.214823 2929 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ffb56a29a5e6d52c832905ab2c0abe1be4d44b72b40c3760696e2b25bc60812f" Oct 2 19:31:18.215147 kubelet[2929]: E1002 19:31:18.215045 2929 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:31:18.215147 kubelet[2929]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:31:18.215147 kubelet[2929]: rm /hostbin/cilium-mount Oct 2 19:31:18.215147 kubelet[2929]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-6gvgc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-v9msc_kube-system(5b24b48d-df2a-4f2d-8d5f-85ced43127c5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:31:18.215147 kubelet[2929]: E1002 19:31:18.215111 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-v9msc" podUID=5b24b48d-df2a-4f2d-8d5f-85ced43127c5 Oct 2 19:31:18.908441 kubelet[2929]: I1002 19:31:18.908400 2929 scope.go:115] "RemoveContainer" containerID="8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e" Oct 2 19:31:18.909815 kubelet[2929]: I1002 19:31:18.909769 2929 scope.go:115] "RemoveContainer" containerID="8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e" Oct 2 19:31:18.911949 env[1738]: time="2023-10-02T19:31:18.911691741Z" level=info msg="RemoveContainer for \"8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e\"" Oct 2 19:31:18.913223 env[1738]: time="2023-10-02T19:31:18.913155335Z" level=info msg="RemoveContainer for \"8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e\"" Oct 2 19:31:18.913432 env[1738]: time="2023-10-02T19:31:18.913278977Z" level=error msg="RemoveContainer for \"8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e\" failed" error="failed to set removing state for container \"8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e\": container is already in removing state" Oct 2 19:31:18.916126 kubelet[2929]: E1002 19:31:18.913761 2929 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e\": container is already in removing state" containerID="8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e" Oct 2 19:31:18.916126 kubelet[2929]: E1002 19:31:18.913820 2929 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e": container is already in removing state; Skipping pod "cilium-v9msc_kube-system(5b24b48d-df2a-4f2d-8d5f-85ced43127c5)" Oct 2 19:31:18.916126 kubelet[2929]: E1002 19:31:18.914308 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-v9msc_kube-system(5b24b48d-df2a-4f2d-8d5f-85ced43127c5)\"" pod="kube-system/cilium-v9msc" podUID=5b24b48d-df2a-4f2d-8d5f-85ced43127c5 Oct 2 19:31:18.919803 env[1738]: time="2023-10-02T19:31:18.919701139Z" level=info msg="RemoveContainer for \"8f12520c712372805d3bbac68cd000844be40d388e925f4d081085829599492e\" returns successfully" Oct 2 19:31:19.040790 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ffb56a29a5e6d52c832905ab2c0abe1be4d44b72b40c3760696e2b25bc60812f-rootfs.mount: Deactivated successfully. Oct 2 19:31:19.100000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:19.103817 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:31:19.103944 kernel: audit: type=1400 audit(1696275079.100:1397): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:19.101000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:19.123202 kernel: audit: type=1400 audit(1696275079.101:1398): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:19.123298 kernel: audit: type=1300 audit(1696275079.101:1398): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f38a40 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:31:19.101000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f38a40 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:31:19.101000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:19.146446 kernel: audit: type=1327 audit(1696275079.101:1398): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:19.146552 kernel: audit: type=1300 audit(1696275079.100:1397): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40008b53c0 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:31:19.100000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40008b53c0 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:31:19.100000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:19.169647 kernel: audit: type=1327 audit(1696275079.100:1397): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:19.169842 kernel: audit: type=1400 audit(1696275079.127:1399): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:19.127000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:19.179396 kernel: audit: type=1300 audit(1696275079.127:1399): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40008b53e0 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:31:19.127000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40008b53e0 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:31:19.127000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:19.202585 kernel: audit: type=1327 audit(1696275079.127:1399): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:19.202696 kernel: audit: type=1400 audit(1696275079.128:1400): avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:19.128000 audit[2810]: AVC avc: denied { watch } for pid=2810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:19.128000 audit[2810]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40008b5400 a2=fc6 a3=0 items=0 ppid=2647 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c269,c354 key=(null) Oct 2 19:31:19.128000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:19.841334 env[1738]: time="2023-10-02T19:31:19.841261589Z" level=info msg="StopPodSandbox for \"73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477\"" Oct 2 19:31:19.842193 env[1738]: time="2023-10-02T19:31:19.842093963Z" level=info msg="TearDown network for sandbox \"73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477\" successfully" Oct 2 19:31:19.842389 env[1738]: time="2023-10-02T19:31:19.842337852Z" level=info msg="StopPodSandbox for \"73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477\" returns successfully" Oct 2 19:31:19.843373 env[1738]: time="2023-10-02T19:31:19.843301585Z" level=info msg="RemovePodSandbox for \"73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477\"" Oct 2 19:31:19.843784 env[1738]: time="2023-10-02T19:31:19.843695229Z" level=info msg="Forcibly stopping sandbox \"73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477\"" Oct 2 19:31:19.844175 env[1738]: time="2023-10-02T19:31:19.844120783Z" level=info msg="TearDown network for sandbox \"73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477\" successfully" Oct 2 19:31:19.849846 env[1738]: time="2023-10-02T19:31:19.849752814Z" level=info msg="RemovePodSandbox \"73921e09683602db3617564ce1e71f4b38e1e36c8fcdb15356fa1188602af477\" returns successfully" Oct 2 19:31:19.850735 env[1738]: time="2023-10-02T19:31:19.850691826Z" level=info msg="StopPodSandbox for \"1775eb6c9d5fa3d380b614ea108bd6b26e37e1e9333a71767319b35a42175a3e\"" Oct 2 19:31:19.851104 env[1738]: time="2023-10-02T19:31:19.851017463Z" level=info msg="TearDown network for sandbox \"1775eb6c9d5fa3d380b614ea108bd6b26e37e1e9333a71767319b35a42175a3e\" successfully" Oct 2 19:31:19.851240 env[1738]: time="2023-10-02T19:31:19.851207456Z" level=info msg="StopPodSandbox for \"1775eb6c9d5fa3d380b614ea108bd6b26e37e1e9333a71767319b35a42175a3e\" returns successfully" Oct 2 19:31:19.851822 env[1738]: time="2023-10-02T19:31:19.851784254Z" level=info msg="RemovePodSandbox for \"1775eb6c9d5fa3d380b614ea108bd6b26e37e1e9333a71767319b35a42175a3e\"" Oct 2 19:31:19.852184 env[1738]: time="2023-10-02T19:31:19.852108066Z" level=info msg="Forcibly stopping sandbox \"1775eb6c9d5fa3d380b614ea108bd6b26e37e1e9333a71767319b35a42175a3e\"" Oct 2 19:31:19.852496 env[1738]: time="2023-10-02T19:31:19.852435095Z" level=info msg="TearDown network for sandbox \"1775eb6c9d5fa3d380b614ea108bd6b26e37e1e9333a71767319b35a42175a3e\" successfully" Oct 2 19:31:19.857159 env[1738]: time="2023-10-02T19:31:19.857063023Z" level=info msg="RemovePodSandbox \"1775eb6c9d5fa3d380b614ea108bd6b26e37e1e9333a71767319b35a42175a3e\" returns successfully" Oct 2 19:31:20.022822 kubelet[2929]: W1002 19:31:20.022771 2929 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:31:20.196192 kubelet[2929]: E1002 19:31:20.195017 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:31:21.286922 kubelet[2929]: W1002 19:31:21.286853 2929 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod5b24b48d_df2a_4f2d_8d5f_85ced43127c5.slice/cri-containerd-ffb56a29a5e6d52c832905ab2c0abe1be4d44b72b40c3760696e2b25bc60812f.scope WatchSource:0}: task ffb56a29a5e6d52c832905ab2c0abe1be4d44b72b40c3760696e2b25bc60812f not found: not found Oct 2 19:31:25.197584 kubelet[2929]: E1002 19:31:25.197501 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:31:30.023511 kubelet[2929]: E1002 19:31:30.023450 2929 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-v9msc_kube-system(5b24b48d-df2a-4f2d-8d5f-85ced43127c5)\"" pod="kube-system/cilium-v9msc" podUID=5b24b48d-df2a-4f2d-8d5f-85ced43127c5 Oct 2 19:31:30.199627 kubelet[2929]: E1002 19:31:30.199577 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:31:34.824219 env[1738]: time="2023-10-02T19:31:34.824159206Z" level=info msg="StopPodSandbox for \"dc1c85727bc813e41328ba632bc7a9172dc574630be33bf0ba8ed451f0a1d86b\"" Oct 2 19:31:34.825115 env[1738]: time="2023-10-02T19:31:34.825067260Z" level=info msg="Container to stop \"ffb56a29a5e6d52c832905ab2c0abe1be4d44b72b40c3760696e2b25bc60812f\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:31:34.827919 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-dc1c85727bc813e41328ba632bc7a9172dc574630be33bf0ba8ed451f0a1d86b-shm.mount: Deactivated successfully. Oct 2 19:31:34.862294 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:31:34.862444 kernel: audit: type=1334 audit(1696275094.855:1401): prog-id=134 op=UNLOAD Oct 2 19:31:34.855000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:31:34.856066 systemd[1]: cri-containerd-dc1c85727bc813e41328ba632bc7a9172dc574630be33bf0ba8ed451f0a1d86b.scope: Deactivated successfully. Oct 2 19:31:34.862000 audit: BPF prog-id=137 op=UNLOAD Oct 2 19:31:34.870004 kernel: audit: type=1334 audit(1696275094.862:1402): prog-id=137 op=UNLOAD Oct 2 19:31:34.941314 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-dc1c85727bc813e41328ba632bc7a9172dc574630be33bf0ba8ed451f0a1d86b-rootfs.mount: Deactivated successfully. Oct 2 19:31:34.944720 sshd[3931]: pam_unix(sshd:session): session closed for user core Oct 2 19:31:34.947000 audit[3931]: USER_END pid=3931 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:31:34.958184 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:31:34.958565 systemd[1]: session-30.scope: Consumed 2.190s CPU time. Oct 2 19:31:34.959539 systemd[1]: sshd@29-172.31.29.2:22-139.178.89.65:58288.service: Deactivated successfully. Oct 2 19:31:34.954000 audit[3931]: CRED_DISP pid=3931 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:31:34.965457 systemd-logind[1722]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:31:34.967505 systemd-logind[1722]: Removed session 30. Oct 2 19:31:34.973302 kernel: audit: type=1106 audit(1696275094.947:1403): pid=3931 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:31:34.973495 kernel: audit: type=1104 audit(1696275094.954:1404): pid=3931 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:31:34.959000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.29.2:22-139.178.89.65:58288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:34.984306 kernel: audit: type=1131 audit(1696275094.959:1405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.29.2:22-139.178.89.65:58288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:34.994444 env[1738]: time="2023-10-02T19:31:34.994372701Z" level=info msg="shim disconnected" id=dc1c85727bc813e41328ba632bc7a9172dc574630be33bf0ba8ed451f0a1d86b Oct 2 19:31:34.994695 env[1738]: time="2023-10-02T19:31:34.994445893Z" level=warning msg="cleaning up after shim disconnected" id=dc1c85727bc813e41328ba632bc7a9172dc574630be33bf0ba8ed451f0a1d86b namespace=k8s.io Oct 2 19:31:34.994695 env[1738]: time="2023-10-02T19:31:34.994468778Z" level=info msg="cleaning up dead shim" Oct 2 19:31:35.022539 env[1738]: time="2023-10-02T19:31:35.022464753Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:31:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4167 runtime=io.containerd.runc.v2\n" Oct 2 19:31:35.023104 env[1738]: time="2023-10-02T19:31:35.023056626Z" level=info msg="TearDown network for sandbox \"dc1c85727bc813e41328ba632bc7a9172dc574630be33bf0ba8ed451f0a1d86b\" successfully" Oct 2 19:31:35.023229 env[1738]: time="2023-10-02T19:31:35.023104665Z" level=info msg="StopPodSandbox for \"dc1c85727bc813e41328ba632bc7a9172dc574630be33bf0ba8ed451f0a1d86b\" returns successfully" Oct 2 19:31:35.185621 kubelet[2929]: I1002 19:31:35.183828 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-cilium-ipsec-secrets\") pod \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " Oct 2 19:31:35.186381 kubelet[2929]: I1002 19:31:35.186351 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-host-proc-sys-kernel\") pod \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " Oct 2 19:31:35.186570 kubelet[2929]: I1002 19:31:35.186547 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-cilium-config-path\") pod \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " Oct 2 19:31:35.186756 kubelet[2929]: I1002 19:31:35.186735 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-host-proc-sys-net\") pod \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " Oct 2 19:31:35.186912 kubelet[2929]: I1002 19:31:35.186890 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-6gvgc\" (UniqueName: \"kubernetes.io/projected/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-kube-api-access-6gvgc\") pod \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " Oct 2 19:31:35.187100 kubelet[2929]: I1002 19:31:35.187079 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-cilium-run\") pod \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " Oct 2 19:31:35.187254 kubelet[2929]: I1002 19:31:35.187233 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-bpf-maps\") pod \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " Oct 2 19:31:35.187405 kubelet[2929]: I1002 19:31:35.187384 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-hostproc\") pod \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " Oct 2 19:31:35.188022 kubelet[2929]: I1002 19:31:35.187951 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-clustermesh-secrets\") pod \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " Oct 2 19:31:35.188142 kubelet[2929]: I1002 19:31:35.188044 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-cilium-cgroup\") pod \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " Oct 2 19:31:35.188142 kubelet[2929]: I1002 19:31:35.188089 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-cni-path\") pod \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " Oct 2 19:31:35.188142 kubelet[2929]: I1002 19:31:35.188132 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-hubble-tls\") pod \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " Oct 2 19:31:35.188342 kubelet[2929]: I1002 19:31:35.188173 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-etc-cni-netd\") pod \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " Oct 2 19:31:35.188342 kubelet[2929]: I1002 19:31:35.188210 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-xtables-lock\") pod \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " Oct 2 19:31:35.188342 kubelet[2929]: I1002 19:31:35.188248 2929 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-lib-modules\") pod \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\" (UID: \"5b24b48d-df2a-4f2d-8d5f-85ced43127c5\") " Oct 2 19:31:35.188342 kubelet[2929]: I1002 19:31:35.188317 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "5b24b48d-df2a-4f2d-8d5f-85ced43127c5" (UID: "5b24b48d-df2a-4f2d-8d5f-85ced43127c5"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:31:35.188592 kubelet[2929]: I1002 19:31:35.187521 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-hostproc" (OuterVolumeSpecName: "hostproc") pod "5b24b48d-df2a-4f2d-8d5f-85ced43127c5" (UID: "5b24b48d-df2a-4f2d-8d5f-85ced43127c5"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:31:35.188592 kubelet[2929]: I1002 19:31:35.187553 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "5b24b48d-df2a-4f2d-8d5f-85ced43127c5" (UID: "5b24b48d-df2a-4f2d-8d5f-85ced43127c5"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:31:35.188592 kubelet[2929]: W1002 19:31:35.187787 2929 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/5b24b48d-df2a-4f2d-8d5f-85ced43127c5/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:31:35.190334 kubelet[2929]: I1002 19:31:35.190290 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-cni-path" (OuterVolumeSpecName: "cni-path") pod "5b24b48d-df2a-4f2d-8d5f-85ced43127c5" (UID: "5b24b48d-df2a-4f2d-8d5f-85ced43127c5"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:31:35.193511 kubelet[2929]: I1002 19:31:35.187832 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "5b24b48d-df2a-4f2d-8d5f-85ced43127c5" (UID: "5b24b48d-df2a-4f2d-8d5f-85ced43127c5"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:31:35.196322 kubelet[2929]: I1002 19:31:35.187863 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "5b24b48d-df2a-4f2d-8d5f-85ced43127c5" (UID: "5b24b48d-df2a-4f2d-8d5f-85ced43127c5"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:31:35.199277 kubelet[2929]: I1002 19:31:35.187890 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "5b24b48d-df2a-4f2d-8d5f-85ced43127c5" (UID: "5b24b48d-df2a-4f2d-8d5f-85ced43127c5"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:31:35.199610 kubelet[2929]: I1002 19:31:35.193419 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "5b24b48d-df2a-4f2d-8d5f-85ced43127c5" (UID: "5b24b48d-df2a-4f2d-8d5f-85ced43127c5"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:31:35.200055 kubelet[2929]: I1002 19:31:35.193461 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "5b24b48d-df2a-4f2d-8d5f-85ced43127c5" (UID: "5b24b48d-df2a-4f2d-8d5f-85ced43127c5"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:31:35.200253 kubelet[2929]: I1002 19:31:35.199185 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "5b24b48d-df2a-4f2d-8d5f-85ced43127c5" (UID: "5b24b48d-df2a-4f2d-8d5f-85ced43127c5"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:31:35.200564 kubelet[2929]: I1002 19:31:35.200530 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "5b24b48d-df2a-4f2d-8d5f-85ced43127c5" (UID: "5b24b48d-df2a-4f2d-8d5f-85ced43127c5"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:31:35.205030 kubelet[2929]: E1002 19:31:35.204951 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:31:35.214495 systemd[1]: var-lib-kubelet-pods-5b24b48d\x2ddf2a\x2d4f2d\x2d8d5f\x2d85ced43127c5-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d6gvgc.mount: Deactivated successfully. Oct 2 19:31:35.220607 systemd[1]: var-lib-kubelet-pods-5b24b48d\x2ddf2a\x2d4f2d\x2d8d5f\x2d85ced43127c5-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:31:35.228975 kubelet[2929]: I1002 19:31:35.225017 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-kube-api-access-6gvgc" (OuterVolumeSpecName: "kube-api-access-6gvgc") pod "5b24b48d-df2a-4f2d-8d5f-85ced43127c5" (UID: "5b24b48d-df2a-4f2d-8d5f-85ced43127c5"). InnerVolumeSpecName "kube-api-access-6gvgc". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:31:35.228975 kubelet[2929]: I1002 19:31:35.225257 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "5b24b48d-df2a-4f2d-8d5f-85ced43127c5" (UID: "5b24b48d-df2a-4f2d-8d5f-85ced43127c5"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:31:35.234868 systemd[1]: var-lib-kubelet-pods-5b24b48d\x2ddf2a\x2d4f2d\x2d8d5f\x2d85ced43127c5-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:31:35.239281 kubelet[2929]: I1002 19:31:35.239210 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "5b24b48d-df2a-4f2d-8d5f-85ced43127c5" (UID: "5b24b48d-df2a-4f2d-8d5f-85ced43127c5"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:31:35.241328 kubelet[2929]: I1002 19:31:35.241264 2929 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "5b24b48d-df2a-4f2d-8d5f-85ced43127c5" (UID: "5b24b48d-df2a-4f2d-8d5f-85ced43127c5"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:31:35.288710 kubelet[2929]: I1002 19:31:35.288668 2929 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-host-proc-sys-net\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:31:35.288943 kubelet[2929]: I1002 19:31:35.288922 2929 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-6gvgc\" (UniqueName: \"kubernetes.io/projected/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-kube-api-access-6gvgc\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:31:35.289178 kubelet[2929]: I1002 19:31:35.289158 2929 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-cilium-run\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:31:35.289326 kubelet[2929]: I1002 19:31:35.289307 2929 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-bpf-maps\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:31:35.289531 kubelet[2929]: I1002 19:31:35.289512 2929 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-hostproc\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:31:35.289689 kubelet[2929]: I1002 19:31:35.289670 2929 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-clustermesh-secrets\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:31:35.289837 kubelet[2929]: I1002 19:31:35.289818 2929 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-cilium-cgroup\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:31:35.290004 kubelet[2929]: I1002 19:31:35.289984 2929 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-cni-path\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:31:35.290139 kubelet[2929]: I1002 19:31:35.290120 2929 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-hubble-tls\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:31:35.290287 kubelet[2929]: I1002 19:31:35.290268 2929 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-etc-cni-netd\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:31:35.290432 kubelet[2929]: I1002 19:31:35.290413 2929 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-xtables-lock\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:31:35.290584 kubelet[2929]: I1002 19:31:35.290565 2929 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-lib-modules\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:31:35.290721 kubelet[2929]: I1002 19:31:35.290702 2929 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-host-proc-sys-kernel\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:31:35.290864 kubelet[2929]: I1002 19:31:35.290846 2929 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-cilium-ipsec-secrets\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:31:35.291041 kubelet[2929]: I1002 19:31:35.291021 2929 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/5b24b48d-df2a-4f2d-8d5f-85ced43127c5-cilium-config-path\") on node \"ip-172-31-29-2\" DevicePath \"\"" Oct 2 19:31:35.827820 systemd[1]: var-lib-kubelet-pods-5b24b48d\x2ddf2a\x2d4f2d\x2d8d5f\x2d85ced43127c5-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:31:35.975026 kubelet[2929]: I1002 19:31:35.974719 2929 scope.go:115] "RemoveContainer" containerID="ffb56a29a5e6d52c832905ab2c0abe1be4d44b72b40c3760696e2b25bc60812f" Oct 2 19:31:35.979488 env[1738]: time="2023-10-02T19:31:35.978831873Z" level=info msg="RemoveContainer for \"ffb56a29a5e6d52c832905ab2c0abe1be4d44b72b40c3760696e2b25bc60812f\"" Oct 2 19:31:35.989265 env[1738]: time="2023-10-02T19:31:35.989162348Z" level=info msg="RemoveContainer for \"ffb56a29a5e6d52c832905ab2c0abe1be4d44b72b40c3760696e2b25bc60812f\" returns successfully" Oct 2 19:31:35.995516 systemd[1]: Removed slice kubepods-burstable-pod5b24b48d_df2a_4f2d_8d5f_85ced43127c5.slice. Oct 2 19:31:38.027334 kubelet[2929]: I1002 19:31:38.027277 2929 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=5b24b48d-df2a-4f2d-8d5f-85ced43127c5 path="/var/lib/kubelet/pods/5b24b48d-df2a-4f2d-8d5f-85ced43127c5/volumes" Oct 2 19:31:40.207146 kubelet[2929]: E1002 19:31:40.207091 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:31:45.208538 kubelet[2929]: E1002 19:31:45.208482 2929 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized"