Oct 2 19:37:15.158084 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Oct 2 19:37:15.158121 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 19:37:15.158143 kernel: efi: EFI v2.70 by EDK II Oct 2 19:37:15.158158 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7ac1aa98 MEMRESERVE=0x71accf98 Oct 2 19:37:15.158172 kernel: ACPI: Early table checksum verification disabled Oct 2 19:37:15.158186 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Oct 2 19:37:15.158201 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Oct 2 19:37:15.158216 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Oct 2 19:37:15.158229 kernel: ACPI: DSDT 0x0000000078640000 00154F (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Oct 2 19:37:15.158243 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Oct 2 19:37:15.158261 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Oct 2 19:37:15.158275 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Oct 2 19:37:15.158289 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Oct 2 19:37:15.158302 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Oct 2 19:37:15.158319 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Oct 2 19:37:15.158338 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Oct 2 19:37:15.158353 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Oct 2 19:37:15.158367 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Oct 2 19:37:15.158382 kernel: printk: bootconsole [uart0] enabled Oct 2 19:37:15.158396 kernel: NUMA: Failed to initialise from firmware Oct 2 19:37:15.158411 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 19:37:15.158425 kernel: NUMA: NODE_DATA [mem 0x4b5841900-0x4b5846fff] Oct 2 19:37:15.158439 kernel: Zone ranges: Oct 2 19:37:15.158454 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Oct 2 19:37:15.158468 kernel: DMA32 empty Oct 2 19:37:15.158482 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Oct 2 19:37:15.158500 kernel: Movable zone start for each node Oct 2 19:37:15.158515 kernel: Early memory node ranges Oct 2 19:37:15.158529 kernel: node 0: [mem 0x0000000040000000-0x00000000786effff] Oct 2 19:37:15.158543 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Oct 2 19:37:15.158558 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Oct 2 19:37:15.158572 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Oct 2 19:37:15.158586 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Oct 2 19:37:15.158600 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Oct 2 19:37:15.158615 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 19:37:15.158629 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Oct 2 19:37:15.158643 kernel: psci: probing for conduit method from ACPI. Oct 2 19:37:15.158657 kernel: psci: PSCIv1.0 detected in firmware. Oct 2 19:37:15.158676 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 19:37:15.158690 kernel: psci: Trusted OS migration not required Oct 2 19:37:15.158711 kernel: psci: SMC Calling Convention v1.1 Oct 2 19:37:15.158727 kernel: ACPI: SRAT not present Oct 2 19:37:15.158742 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 19:37:15.158761 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 19:37:15.158776 kernel: pcpu-alloc: [0] 0 [0] 1 Oct 2 19:37:15.158791 kernel: Detected PIPT I-cache on CPU0 Oct 2 19:37:15.158806 kernel: CPU features: detected: GIC system register CPU interface Oct 2 19:37:15.158821 kernel: CPU features: detected: Spectre-v2 Oct 2 19:37:15.158836 kernel: CPU features: detected: Spectre-v3a Oct 2 19:37:15.158851 kernel: CPU features: detected: Spectre-BHB Oct 2 19:37:15.158866 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 19:37:15.158881 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 19:37:15.158896 kernel: CPU features: detected: ARM erratum 1742098 Oct 2 19:37:15.160996 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Oct 2 19:37:15.161022 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Oct 2 19:37:15.161038 kernel: Policy zone: Normal Oct 2 19:37:15.161057 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:37:15.161073 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:37:15.161089 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:37:15.161104 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:37:15.161119 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:37:15.161134 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Oct 2 19:37:15.161151 kernel: Memory: 3826444K/4030464K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 204020K reserved, 0K cma-reserved) Oct 2 19:37:15.161166 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:37:15.161185 kernel: trace event string verifier disabled Oct 2 19:37:15.161200 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 19:37:15.161216 kernel: rcu: RCU event tracing is enabled. Oct 2 19:37:15.161232 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:37:15.161247 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 19:37:15.161262 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:37:15.161278 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:37:15.161293 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:37:15.161308 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 19:37:15.161323 kernel: GICv3: 96 SPIs implemented Oct 2 19:37:15.161338 kernel: GICv3: 0 Extended SPIs implemented Oct 2 19:37:15.161353 kernel: GICv3: Distributor has no Range Selector support Oct 2 19:37:15.161372 kernel: Root IRQ handler: gic_handle_irq Oct 2 19:37:15.161387 kernel: GICv3: 16 PPIs implemented Oct 2 19:37:15.161402 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Oct 2 19:37:15.161417 kernel: ACPI: SRAT not present Oct 2 19:37:15.161431 kernel: ITS [mem 0x10080000-0x1009ffff] Oct 2 19:37:15.161447 kernel: ITS@0x0000000010080000: allocated 8192 Devices @4000a0000 (indirect, esz 8, psz 64K, shr 1) Oct 2 19:37:15.161462 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000b0000 (flat, esz 8, psz 64K, shr 1) Oct 2 19:37:15.161477 kernel: GICv3: using LPI property table @0x00000004000c0000 Oct 2 19:37:15.161492 kernel: ITS: Using hypervisor restricted LPI range [128] Oct 2 19:37:15.161507 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Oct 2 19:37:15.161522 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Oct 2 19:37:15.161541 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Oct 2 19:37:15.161557 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Oct 2 19:37:15.161572 kernel: Console: colour dummy device 80x25 Oct 2 19:37:15.161588 kernel: printk: console [tty1] enabled Oct 2 19:37:15.161603 kernel: ACPI: Core revision 20210730 Oct 2 19:37:15.161619 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Oct 2 19:37:15.161635 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:37:15.161651 kernel: LSM: Security Framework initializing Oct 2 19:37:15.161666 kernel: SELinux: Initializing. Oct 2 19:37:15.161682 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:37:15.161701 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:37:15.161716 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:37:15.161732 kernel: Platform MSI: ITS@0x10080000 domain created Oct 2 19:37:15.161747 kernel: PCI/MSI: ITS@0x10080000 domain created Oct 2 19:37:15.161762 kernel: Remapping and enabling EFI services. Oct 2 19:37:15.161778 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:37:15.161793 kernel: Detected PIPT I-cache on CPU1 Oct 2 19:37:15.161808 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Oct 2 19:37:15.161824 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Oct 2 19:37:15.161843 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Oct 2 19:37:15.161858 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:37:15.161874 kernel: SMP: Total of 2 processors activated. Oct 2 19:37:15.161889 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 19:37:15.161929 kernel: CPU features: detected: 32-bit EL1 Support Oct 2 19:37:15.161950 kernel: CPU features: detected: CRC32 instructions Oct 2 19:37:15.161966 kernel: CPU: All CPU(s) started at EL1 Oct 2 19:37:15.161982 kernel: alternatives: patching kernel code Oct 2 19:37:15.161997 kernel: devtmpfs: initialized Oct 2 19:37:15.162018 kernel: KASLR disabled due to lack of seed Oct 2 19:37:15.162034 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:37:15.162050 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:37:15.162076 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:37:15.162096 kernel: SMBIOS 3.0.0 present. Oct 2 19:37:15.162112 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Oct 2 19:37:15.162128 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:37:15.162144 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 19:37:15.162160 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 19:37:15.162177 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 19:37:15.162193 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:37:15.162209 kernel: audit: type=2000 audit(0.248:1): state=initialized audit_enabled=0 res=1 Oct 2 19:37:15.162229 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:37:15.162245 kernel: cpuidle: using governor menu Oct 2 19:37:15.162261 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 19:37:15.162278 kernel: ASID allocator initialised with 32768 entries Oct 2 19:37:15.162294 kernel: ACPI: bus type PCI registered Oct 2 19:37:15.162314 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:37:15.162330 kernel: Serial: AMBA PL011 UART driver Oct 2 19:37:15.162346 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:37:15.162362 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 19:37:15.162378 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:37:15.162394 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 19:37:15.162410 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:37:15.162426 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 19:37:15.162442 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:37:15.162462 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:37:15.162478 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:37:15.162494 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:37:15.162510 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:37:15.162526 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:37:15.162542 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:37:15.162558 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:37:15.162574 kernel: ACPI: Interpreter enabled Oct 2 19:37:15.162590 kernel: ACPI: Using GIC for interrupt routing Oct 2 19:37:15.162609 kernel: ACPI: MCFG table detected, 1 entries Oct 2 19:37:15.162625 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Oct 2 19:37:15.163059 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:37:15.163283 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 2 19:37:15.163476 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 2 19:37:15.163666 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Oct 2 19:37:15.163855 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Oct 2 19:37:15.163883 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Oct 2 19:37:15.163919 kernel: acpiphp: Slot [1] registered Oct 2 19:37:15.163939 kernel: acpiphp: Slot [2] registered Oct 2 19:37:15.163956 kernel: acpiphp: Slot [3] registered Oct 2 19:37:15.163973 kernel: acpiphp: Slot [4] registered Oct 2 19:37:15.163989 kernel: acpiphp: Slot [5] registered Oct 2 19:37:15.164004 kernel: acpiphp: Slot [6] registered Oct 2 19:37:15.164020 kernel: acpiphp: Slot [7] registered Oct 2 19:37:15.164036 kernel: acpiphp: Slot [8] registered Oct 2 19:37:15.164057 kernel: acpiphp: Slot [9] registered Oct 2 19:37:15.164073 kernel: acpiphp: Slot [10] registered Oct 2 19:37:15.164089 kernel: acpiphp: Slot [11] registered Oct 2 19:37:15.164105 kernel: acpiphp: Slot [12] registered Oct 2 19:37:15.164121 kernel: acpiphp: Slot [13] registered Oct 2 19:37:15.164136 kernel: acpiphp: Slot [14] registered Oct 2 19:37:15.164152 kernel: acpiphp: Slot [15] registered Oct 2 19:37:15.164168 kernel: acpiphp: Slot [16] registered Oct 2 19:37:15.164184 kernel: acpiphp: Slot [17] registered Oct 2 19:37:15.164200 kernel: acpiphp: Slot [18] registered Oct 2 19:37:15.164220 kernel: acpiphp: Slot [19] registered Oct 2 19:37:15.164235 kernel: acpiphp: Slot [20] registered Oct 2 19:37:15.164251 kernel: acpiphp: Slot [21] registered Oct 2 19:37:15.164267 kernel: acpiphp: Slot [22] registered Oct 2 19:37:15.164283 kernel: acpiphp: Slot [23] registered Oct 2 19:37:15.164299 kernel: acpiphp: Slot [24] registered Oct 2 19:37:15.164314 kernel: acpiphp: Slot [25] registered Oct 2 19:37:15.164330 kernel: acpiphp: Slot [26] registered Oct 2 19:37:15.164346 kernel: acpiphp: Slot [27] registered Oct 2 19:37:15.164366 kernel: acpiphp: Slot [28] registered Oct 2 19:37:15.164382 kernel: acpiphp: Slot [29] registered Oct 2 19:37:15.164398 kernel: acpiphp: Slot [30] registered Oct 2 19:37:15.164414 kernel: acpiphp: Slot [31] registered Oct 2 19:37:15.164430 kernel: PCI host bridge to bus 0000:00 Oct 2 19:37:15.164628 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Oct 2 19:37:15.164804 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 2 19:37:15.165018 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Oct 2 19:37:15.165200 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Oct 2 19:37:15.165414 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Oct 2 19:37:15.165625 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Oct 2 19:37:15.165822 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Oct 2 19:37:15.172191 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Oct 2 19:37:15.172451 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Oct 2 19:37:15.172694 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 19:37:15.172959 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Oct 2 19:37:15.173184 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Oct 2 19:37:15.173425 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Oct 2 19:37:15.173672 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Oct 2 19:37:15.173928 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 19:37:15.174174 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Oct 2 19:37:15.174386 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Oct 2 19:37:15.174588 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Oct 2 19:37:15.174780 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Oct 2 19:37:15.175011 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Oct 2 19:37:15.175230 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Oct 2 19:37:15.175415 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 2 19:37:15.175596 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Oct 2 19:37:15.175624 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 2 19:37:15.175642 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 2 19:37:15.175658 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 2 19:37:15.175675 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 2 19:37:15.175691 kernel: iommu: Default domain type: Translated Oct 2 19:37:15.175707 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 19:37:15.175724 kernel: vgaarb: loaded Oct 2 19:37:15.175740 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:37:15.175756 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:37:15.175776 kernel: PTP clock support registered Oct 2 19:37:15.175792 kernel: Registered efivars operations Oct 2 19:37:15.175809 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 19:37:15.175825 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:37:15.175842 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:37:15.175858 kernel: pnp: PnP ACPI init Oct 2 19:37:15.177753 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Oct 2 19:37:15.177791 kernel: pnp: PnP ACPI: found 1 devices Oct 2 19:37:15.177808 kernel: NET: Registered PF_INET protocol family Oct 2 19:37:15.177833 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:37:15.177850 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:37:15.177866 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:37:15.177883 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:37:15.177916 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:37:15.177938 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:37:15.177954 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:37:15.177972 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:37:15.177988 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:37:15.178009 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:37:15.178026 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Oct 2 19:37:15.178042 kernel: kvm [1]: HYP mode not available Oct 2 19:37:15.178059 kernel: Initialise system trusted keyrings Oct 2 19:37:15.178075 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:37:15.178092 kernel: Key type asymmetric registered Oct 2 19:37:15.178107 kernel: Asymmetric key parser 'x509' registered Oct 2 19:37:15.178124 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:37:15.178140 kernel: io scheduler mq-deadline registered Oct 2 19:37:15.178160 kernel: io scheduler kyber registered Oct 2 19:37:15.178176 kernel: io scheduler bfq registered Oct 2 19:37:15.178379 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Oct 2 19:37:15.178404 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 2 19:37:15.178421 kernel: ACPI: button: Power Button [PWRB] Oct 2 19:37:15.178438 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:37:15.178454 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Oct 2 19:37:15.178650 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Oct 2 19:37:15.178679 kernel: printk: console [ttyS0] disabled Oct 2 19:37:15.178697 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Oct 2 19:37:15.178713 kernel: printk: console [ttyS0] enabled Oct 2 19:37:15.178729 kernel: printk: bootconsole [uart0] disabled Oct 2 19:37:15.178746 kernel: thunder_xcv, ver 1.0 Oct 2 19:37:15.178761 kernel: thunder_bgx, ver 1.0 Oct 2 19:37:15.178777 kernel: nicpf, ver 1.0 Oct 2 19:37:15.178794 kernel: nicvf, ver 1.0 Oct 2 19:37:15.179072 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 19:37:15.179283 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T19:37:14 UTC (1696275434) Oct 2 19:37:15.179309 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:37:15.179325 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:37:15.179342 kernel: Segment Routing with IPv6 Oct 2 19:37:15.179358 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:37:15.179374 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:37:15.179390 kernel: Key type dns_resolver registered Oct 2 19:37:15.179406 kernel: registered taskstats version 1 Oct 2 19:37:15.179427 kernel: Loading compiled-in X.509 certificates Oct 2 19:37:15.179444 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 19:37:15.179460 kernel: Key type .fscrypt registered Oct 2 19:37:15.179476 kernel: Key type fscrypt-provisioning registered Oct 2 19:37:15.179493 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:37:15.179509 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:37:15.179525 kernel: ima: No architecture policies found Oct 2 19:37:15.179541 kernel: Freeing unused kernel memory: 34560K Oct 2 19:37:15.179557 kernel: Run /init as init process Oct 2 19:37:15.179576 kernel: with arguments: Oct 2 19:37:15.179592 kernel: /init Oct 2 19:37:15.179608 kernel: with environment: Oct 2 19:37:15.179623 kernel: HOME=/ Oct 2 19:37:15.179639 kernel: TERM=linux Oct 2 19:37:15.179655 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:37:15.179675 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:37:15.179696 systemd[1]: Detected virtualization amazon. Oct 2 19:37:15.179718 systemd[1]: Detected architecture arm64. Oct 2 19:37:15.179735 systemd[1]: Running in initrd. Oct 2 19:37:15.179752 systemd[1]: No hostname configured, using default hostname. Oct 2 19:37:15.179769 systemd[1]: Hostname set to . Oct 2 19:37:15.179787 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:37:15.179805 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:37:15.179822 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:37:15.179840 systemd[1]: Reached target cryptsetup.target. Oct 2 19:37:15.179860 systemd[1]: Reached target paths.target. Oct 2 19:37:15.179878 systemd[1]: Reached target slices.target. Oct 2 19:37:15.179895 systemd[1]: Reached target swap.target. Oct 2 19:37:15.187055 systemd[1]: Reached target timers.target. Oct 2 19:37:15.187078 systemd[1]: Listening on iscsid.socket. Oct 2 19:37:15.187096 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:37:15.187133 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:37:15.187154 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:37:15.187181 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:37:15.187199 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:37:15.187217 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:37:15.187235 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:37:15.187252 systemd[1]: Reached target sockets.target. Oct 2 19:37:15.187270 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:37:15.187288 systemd[1]: Finished network-cleanup.service. Oct 2 19:37:15.187306 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:37:15.187323 systemd[1]: Starting systemd-journald.service... Oct 2 19:37:15.187345 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:37:15.187363 systemd[1]: Starting systemd-resolved.service... Oct 2 19:37:15.187380 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:37:15.187398 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:37:15.187416 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:37:15.187433 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:37:15.187451 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:37:15.187470 kernel: audit: type=1130 audit(1696275435.140:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.187493 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:37:15.187515 systemd-journald[308]: Journal started Oct 2 19:37:15.187620 systemd-journald[308]: Runtime Journal (/run/log/journal/ec2194c1e180e5c5d18921e5269471d4) is 8.0M, max 75.4M, 67.4M free. Oct 2 19:37:15.140000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.150269 systemd-modules-load[309]: Inserted module 'overlay' Oct 2 19:37:15.197328 systemd[1]: Started systemd-journald.service. Oct 2 19:37:15.196000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.204682 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:37:15.205000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.215696 kernel: audit: type=1130 audit(1696275435.196:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.215736 kernel: audit: type=1130 audit(1696275435.205:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.215760 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:37:15.234946 kernel: Bridge firewalling registered Oct 2 19:37:15.239663 systemd-resolved[310]: Positive Trust Anchors: Oct 2 19:37:15.239691 systemd-resolved[310]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:37:15.239747 systemd-resolved[310]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:37:15.245236 systemd-modules-load[309]: Inserted module 'br_netfilter' Oct 2 19:37:15.257234 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:37:15.259000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.275652 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:37:15.285936 kernel: audit: type=1130 audit(1696275435.259:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.299932 kernel: SCSI subsystem initialized Oct 2 19:37:15.324442 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:37:15.324506 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:37:15.327754 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:37:15.328689 dracut-cmdline[325]: dracut-dracut-053 Oct 2 19:37:15.336876 systemd-modules-load[309]: Inserted module 'dm_multipath' Oct 2 19:37:15.341078 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:37:15.341000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.352847 dracut-cmdline[325]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:37:15.367244 kernel: audit: type=1130 audit(1696275435.341:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.373653 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:37:15.404366 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:37:15.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.416936 kernel: audit: type=1130 audit(1696275435.406:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.606932 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:37:15.617935 kernel: iscsi: registered transport (tcp) Oct 2 19:37:15.644794 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:37:15.644864 kernel: QLogic iSCSI HBA Driver Oct 2 19:37:15.837708 systemd-resolved[310]: Defaulting to hostname 'linux'. Oct 2 19:37:15.840118 kernel: random: crng init done Oct 2 19:37:15.841196 systemd[1]: Started systemd-resolved.service. Oct 2 19:37:15.839000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.842862 systemd[1]: Reached target nss-lookup.target. Oct 2 19:37:15.853111 kernel: audit: type=1130 audit(1696275435.839:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.908640 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:37:15.910000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.915476 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:37:15.924168 kernel: audit: type=1130 audit(1696275435.910:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:16.008938 kernel: raid6: neonx8 gen() 6200 MB/s Oct 2 19:37:16.026930 kernel: raid6: neonx8 xor() 4757 MB/s Oct 2 19:37:16.044927 kernel: raid6: neonx4 gen() 6465 MB/s Oct 2 19:37:16.062937 kernel: raid6: neonx4 xor() 4935 MB/s Oct 2 19:37:16.080925 kernel: raid6: neonx2 gen() 5759 MB/s Oct 2 19:37:16.098930 kernel: raid6: neonx2 xor() 4539 MB/s Oct 2 19:37:16.116929 kernel: raid6: neonx1 gen() 4458 MB/s Oct 2 19:37:16.134938 kernel: raid6: neonx1 xor() 3672 MB/s Oct 2 19:37:16.152936 kernel: raid6: int64x8 gen() 3396 MB/s Oct 2 19:37:16.170934 kernel: raid6: int64x8 xor() 2097 MB/s Oct 2 19:37:16.188932 kernel: raid6: int64x4 gen() 3777 MB/s Oct 2 19:37:16.206942 kernel: raid6: int64x4 xor() 2196 MB/s Oct 2 19:37:16.224932 kernel: raid6: int64x2 gen() 3590 MB/s Oct 2 19:37:16.242932 kernel: raid6: int64x2 xor() 1953 MB/s Oct 2 19:37:16.260932 kernel: raid6: int64x1 gen() 2765 MB/s Oct 2 19:37:16.280441 kernel: raid6: int64x1 xor() 1453 MB/s Oct 2 19:37:16.280470 kernel: raid6: using algorithm neonx4 gen() 6465 MB/s Oct 2 19:37:16.280494 kernel: raid6: .... xor() 4935 MB/s, rmw enabled Oct 2 19:37:16.282248 kernel: raid6: using neon recovery algorithm Oct 2 19:37:16.300939 kernel: xor: measuring software checksum speed Oct 2 19:37:16.305444 kernel: 8regs : 9341 MB/sec Oct 2 19:37:16.305483 kernel: 32regs : 11107 MB/sec Oct 2 19:37:16.309960 kernel: arm64_neon : 9567 MB/sec Oct 2 19:37:16.309991 kernel: xor: using function: 32regs (11107 MB/sec) Oct 2 19:37:16.399945 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 19:37:16.437094 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:37:16.436000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:16.448927 kernel: audit: type=1130 audit(1696275436.436:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:16.446000 audit: BPF prog-id=7 op=LOAD Oct 2 19:37:16.446000 audit: BPF prog-id=8 op=LOAD Oct 2 19:37:16.448468 systemd[1]: Starting systemd-udevd.service... Oct 2 19:37:16.485448 systemd-udevd[509]: Using default interface naming scheme 'v252'. Oct 2 19:37:16.496440 systemd[1]: Started systemd-udevd.service. Oct 2 19:37:16.497000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:16.503674 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:37:16.566545 dracut-pre-trigger[520]: rd.md=0: removing MD RAID activation Oct 2 19:37:16.676670 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:37:16.677000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:16.680442 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:37:16.792231 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:37:16.792000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:16.938504 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 2 19:37:16.938567 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Oct 2 19:37:16.952517 kernel: ena 0000:00:05.0: ENA device version: 0.10 Oct 2 19:37:16.952828 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Oct 2 19:37:16.961934 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:87:90:44:b1:33 Oct 2 19:37:16.964530 (udev-worker)[574]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:37:16.967289 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Oct 2 19:37:16.967329 kernel: nvme nvme0: pci function 0000:00:04.0 Oct 2 19:37:16.977936 kernel: nvme nvme0: 2/0/0 default/read/poll queues Oct 2 19:37:16.984513 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 19:37:16.984573 kernel: GPT:9289727 != 16777215 Oct 2 19:37:16.984596 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 19:37:16.987516 kernel: GPT:9289727 != 16777215 Oct 2 19:37:16.990866 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 19:37:16.992577 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:37:17.069941 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (571) Oct 2 19:37:17.162349 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:37:17.266723 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:37:17.301141 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:37:17.313510 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:37:17.317620 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:37:17.323808 systemd[1]: Starting disk-uuid.service... Oct 2 19:37:17.349456 disk-uuid[674]: Primary Header is updated. Oct 2 19:37:17.349456 disk-uuid[674]: Secondary Entries is updated. Oct 2 19:37:17.349456 disk-uuid[674]: Secondary Header is updated. Oct 2 19:37:17.358941 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:37:17.388944 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:37:17.396940 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:37:18.389530 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:37:18.389602 disk-uuid[675]: The operation has completed successfully. Oct 2 19:37:18.665414 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:37:18.665989 systemd[1]: Finished disk-uuid.service. Oct 2 19:37:18.680687 kernel: kauditd_printk_skb: 5 callbacks suppressed Oct 2 19:37:18.680742 kernel: audit: type=1130 audit(1696275438.668:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.668000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.668000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.688102 systemd[1]: Starting verity-setup.service... Oct 2 19:37:18.691931 kernel: audit: type=1131 audit(1696275438.668:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.742196 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 19:37:18.862023 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:37:18.867068 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:37:18.877250 systemd[1]: Finished verity-setup.service. Oct 2 19:37:18.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.887962 kernel: audit: type=1130 audit(1696275438.879:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.968968 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:37:18.969323 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:37:18.972250 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:37:18.976210 systemd[1]: Starting ignition-setup.service... Oct 2 19:37:18.979319 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:37:19.016235 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:37:19.016302 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:37:19.016326 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:37:19.027948 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:37:19.060562 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:37:19.122579 systemd[1]: Finished ignition-setup.service. Oct 2 19:37:19.123000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.125810 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:37:19.141989 kernel: audit: type=1130 audit(1696275439.123:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.329806 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:37:19.332000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.338000 audit: BPF prog-id=9 op=LOAD Oct 2 19:37:19.343748 kernel: audit: type=1130 audit(1696275439.332:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.343806 kernel: audit: type=1334 audit(1696275439.338:21): prog-id=9 op=LOAD Oct 2 19:37:19.341783 systemd[1]: Starting systemd-networkd.service... Oct 2 19:37:19.398347 systemd-networkd[1186]: lo: Link UP Oct 2 19:37:19.398371 systemd-networkd[1186]: lo: Gained carrier Oct 2 19:37:19.402042 systemd-networkd[1186]: Enumeration completed Oct 2 19:37:19.416221 kernel: audit: type=1130 audit(1696275439.403:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.403000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.402571 systemd-networkd[1186]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:37:19.402709 systemd[1]: Started systemd-networkd.service. Oct 2 19:37:19.404570 systemd[1]: Reached target network.target. Oct 2 19:37:19.416149 systemd[1]: Starting iscsiuio.service... Oct 2 19:37:19.439820 systemd[1]: Started iscsiuio.service. Oct 2 19:37:19.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.450589 systemd-networkd[1186]: eth0: Link UP Oct 2 19:37:19.452096 systemd-networkd[1186]: eth0: Gained carrier Oct 2 19:37:19.452647 systemd[1]: Starting iscsid.service... Oct 2 19:37:19.468700 kernel: audit: type=1130 audit(1696275439.440:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.469575 iscsid[1191]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:37:19.469575 iscsid[1191]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:37:19.469575 iscsid[1191]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:37:19.469575 iscsid[1191]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:37:19.469575 iscsid[1191]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:37:19.486000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.499319 iscsid[1191]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:37:19.511315 kernel: audit: type=1130 audit(1696275439.486:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.483176 systemd[1]: Started iscsid.service. Oct 2 19:37:19.497715 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:37:19.523136 systemd-networkd[1186]: eth0: DHCPv4 address 172.31.16.28/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:37:19.541766 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:37:19.545144 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:37:19.559260 kernel: audit: type=1130 audit(1696275439.543:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.545271 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:37:19.561150 systemd[1]: Reached target remote-fs.target. Oct 2 19:37:19.567285 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:37:19.596752 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:37:19.598000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.940505 ignition[1112]: Ignition 2.14.0 Oct 2 19:37:19.940531 ignition[1112]: Stage: fetch-offline Oct 2 19:37:19.941002 ignition[1112]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:37:19.942187 ignition[1112]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:37:19.963045 ignition[1112]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:37:19.963878 ignition[1112]: Ignition finished successfully Oct 2 19:37:19.969035 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:37:19.969000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.973896 systemd[1]: Starting ignition-fetch.service... Oct 2 19:37:20.003186 ignition[1210]: Ignition 2.14.0 Oct 2 19:37:20.003215 ignition[1210]: Stage: fetch Oct 2 19:37:20.003564 ignition[1210]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:37:20.003623 ignition[1210]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:37:20.018310 ignition[1210]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:37:20.020958 ignition[1210]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:37:20.029273 ignition[1210]: INFO : PUT result: OK Oct 2 19:37:20.032730 ignition[1210]: DEBUG : parsed url from cmdline: "" Oct 2 19:37:20.032730 ignition[1210]: INFO : no config URL provided Oct 2 19:37:20.032730 ignition[1210]: INFO : reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:37:20.038525 ignition[1210]: INFO : no config at "/usr/lib/ignition/user.ign" Oct 2 19:37:20.038525 ignition[1210]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:37:20.043290 ignition[1210]: INFO : PUT result: OK Oct 2 19:37:20.043290 ignition[1210]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Oct 2 19:37:20.043290 ignition[1210]: INFO : GET result: OK Oct 2 19:37:20.063999 ignition[1210]: DEBUG : parsing config with SHA512: 3247e3b297e9bd137e506d1ea20df4b84feacdc2300f91c479ee9683b9af8d6a887baa25a59508be1ad709d417db36d8cb54a095d6952290c6b634cec8176228 Oct 2 19:37:20.104217 unknown[1210]: fetched base config from "system" Oct 2 19:37:20.106092 unknown[1210]: fetched base config from "system" Oct 2 19:37:20.107917 unknown[1210]: fetched user config from "aws" Oct 2 19:37:20.110503 ignition[1210]: fetch: fetch complete Oct 2 19:37:20.110530 ignition[1210]: fetch: fetch passed Oct 2 19:37:20.110623 ignition[1210]: Ignition finished successfully Oct 2 19:37:20.117281 systemd[1]: Finished ignition-fetch.service. Oct 2 19:37:20.119000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:20.121949 systemd[1]: Starting ignition-kargs.service... Oct 2 19:37:20.159293 ignition[1216]: Ignition 2.14.0 Oct 2 19:37:20.159771 ignition[1216]: Stage: kargs Oct 2 19:37:20.160160 ignition[1216]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:37:20.160217 ignition[1216]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:37:20.175831 ignition[1216]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:37:20.178585 ignition[1216]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:37:20.181661 ignition[1216]: INFO : PUT result: OK Oct 2 19:37:20.190622 ignition[1216]: kargs: kargs passed Oct 2 19:37:20.190953 ignition[1216]: Ignition finished successfully Oct 2 19:37:20.195660 systemd[1]: Finished ignition-kargs.service. Oct 2 19:37:20.196000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:20.200849 systemd[1]: Starting ignition-disks.service... Oct 2 19:37:20.230138 ignition[1222]: Ignition 2.14.0 Oct 2 19:37:20.230167 ignition[1222]: Stage: disks Oct 2 19:37:20.230521 ignition[1222]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:37:20.230578 ignition[1222]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:37:20.246380 ignition[1222]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:37:20.248767 ignition[1222]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:37:20.252458 ignition[1222]: INFO : PUT result: OK Oct 2 19:37:20.256891 ignition[1222]: disks: disks passed Oct 2 19:37:20.256993 ignition[1222]: Ignition finished successfully Oct 2 19:37:20.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:20.259263 systemd[1]: Finished ignition-disks.service. Oct 2 19:37:20.263686 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:37:20.266214 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:37:20.267858 systemd[1]: Reached target local-fs.target. Oct 2 19:37:20.269433 systemd[1]: Reached target sysinit.target. Oct 2 19:37:20.271031 systemd[1]: Reached target basic.target. Oct 2 19:37:20.273980 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:37:20.345817 systemd-fsck[1230]: ROOT: clean, 603/553520 files, 56011/553472 blocks Oct 2 19:37:20.357458 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:37:20.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:20.362230 systemd[1]: Mounting sysroot.mount... Oct 2 19:37:20.394518 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:37:20.395429 systemd[1]: Mounted sysroot.mount. Oct 2 19:37:20.398607 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:37:20.418524 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:37:20.420688 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:37:20.420780 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:37:20.420845 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:37:20.445799 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:37:20.467432 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:37:20.472203 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:37:20.496970 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1247) Oct 2 19:37:20.499686 initrd-setup-root[1252]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:37:20.509819 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:37:20.509855 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:37:20.509878 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:37:20.520935 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:37:20.523018 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:37:20.548940 initrd-setup-root[1278]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:37:20.568141 initrd-setup-root[1286]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:37:20.587055 initrd-setup-root[1294]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:37:20.836538 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:37:20.834000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:20.840625 systemd[1]: Starting ignition-mount.service... Oct 2 19:37:20.849643 systemd[1]: Starting sysroot-boot.service... Oct 2 19:37:20.868096 systemd-networkd[1186]: eth0: Gained IPv6LL Oct 2 19:37:20.882594 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:37:20.882774 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:37:20.924434 systemd[1]: Finished sysroot-boot.service. Oct 2 19:37:20.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:20.937486 ignition[1314]: INFO : Ignition 2.14.0 Oct 2 19:37:20.939404 ignition[1314]: INFO : Stage: mount Oct 2 19:37:20.941210 ignition[1314]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:37:20.943737 ignition[1314]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:37:20.960149 ignition[1314]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:37:20.962662 ignition[1314]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:37:20.966077 ignition[1314]: INFO : PUT result: OK Oct 2 19:37:20.974578 ignition[1314]: INFO : mount: mount passed Oct 2 19:37:20.976191 ignition[1314]: INFO : Ignition finished successfully Oct 2 19:37:20.980510 systemd[1]: Finished ignition-mount.service. Oct 2 19:37:20.980000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:20.985149 systemd[1]: Starting ignition-files.service... Oct 2 19:37:21.007167 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:37:21.030945 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1324) Oct 2 19:37:21.036566 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:37:21.036601 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:37:21.038743 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:37:21.045922 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:37:21.051520 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:37:21.084156 ignition[1343]: INFO : Ignition 2.14.0 Oct 2 19:37:21.084156 ignition[1343]: INFO : Stage: files Oct 2 19:37:21.087544 ignition[1343]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:37:21.087544 ignition[1343]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:37:21.104979 ignition[1343]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:37:21.107516 ignition[1343]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:37:21.111049 ignition[1343]: INFO : PUT result: OK Oct 2 19:37:21.116397 ignition[1343]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:37:21.120042 ignition[1343]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:37:21.120042 ignition[1343]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:37:21.192071 ignition[1343]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:37:21.195295 ignition[1343]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:37:21.199462 unknown[1343]: wrote ssh authorized keys file for user: core Oct 2 19:37:21.201658 ignition[1343]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:37:21.205130 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 19:37:21.208971 ignition[1343]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-arm64-v1.1.1.tgz: attempt #1 Oct 2 19:37:21.375329 ignition[1343]: INFO : GET result: OK Oct 2 19:37:21.844083 ignition[1343]: DEBUG : file matches expected sum of: 6b5df61a53601926e4b5a9174828123d555f592165439f541bc117c68781f41c8bd30dccd52367e406d104df849bcbcfb72d9c4bafda4b045c59ce95d0ca0742 Oct 2 19:37:21.848804 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 19:37:21.848804 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 19:37:21.848804 ignition[1343]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-arm64.tar.gz: attempt #1 Oct 2 19:37:22.077212 ignition[1343]: INFO : GET result: OK Oct 2 19:37:22.351617 ignition[1343]: DEBUG : file matches expected sum of: 4c7e4541123cbd6f1d6fec1f827395cd58d65716c0998de790f965485738b6d6257c0dc46fd7f66403166c299f6d5bf9ff30b6e1ff9afbb071f17005e834518c Oct 2 19:37:22.356722 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 19:37:22.356722 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:37:22.356722 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:37:22.356722 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:37:22.370848 ignition[1343]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:37:22.381617 ignition[1343]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3375865763" Oct 2 19:37:22.388367 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1343) Oct 2 19:37:22.388404 ignition[1343]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3375865763": device or resource busy Oct 2 19:37:22.388404 ignition[1343]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3375865763", trying btrfs: device or resource busy Oct 2 19:37:22.388404 ignition[1343]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3375865763" Oct 2 19:37:22.404578 ignition[1343]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3375865763" Oct 2 19:37:22.408636 ignition[1343]: INFO : op(3): [started] unmounting "/mnt/oem3375865763" Oct 2 19:37:22.412886 systemd[1]: mnt-oem3375865763.mount: Deactivated successfully. Oct 2 19:37:22.415419 ignition[1343]: INFO : op(3): [finished] unmounting "/mnt/oem3375865763" Oct 2 19:37:22.417658 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:37:22.421270 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:37:22.424673 ignition[1343]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubeadm: attempt #1 Oct 2 19:37:22.543600 ignition[1343]: INFO : GET result: OK Oct 2 19:37:24.117650 ignition[1343]: DEBUG : file matches expected sum of: 46c9f489062bdb84574703f7339d140d7e42c9c71b367cd860071108a3c1d38fabda2ef69f9c0ff88f7c80e88d38f96ab2248d4c9a6c9c60b0a4c20fd640d0db Oct 2 19:37:24.123034 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:37:24.123034 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:37:24.123034 ignition[1343]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubelet: attempt #1 Oct 2 19:37:24.182627 ignition[1343]: INFO : GET result: OK Oct 2 19:37:27.989929 ignition[1343]: DEBUG : file matches expected sum of: 0e4ee1f23bf768c49d09beb13a6b5fad6efc8e3e685e7c5610188763e3af55923fb46158b5e76973a0f9a055f9b30d525b467c53415f965536adc2f04d9cf18d Oct 2 19:37:27.995269 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:37:27.995269 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:37:27.995269 ignition[1343]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubectl: attempt #1 Oct 2 19:37:28.067562 ignition[1343]: INFO : GET result: OK Oct 2 19:37:29.490881 ignition[1343]: DEBUG : file matches expected sum of: 3672fda0beebbbd636a2088f427463cbad32683ea4fbb1df61650552e63846b6a47db803ccb70c3db0a8f24746a23a5632bdc15a3fb78f4f7d833e7f86763c2a Oct 2 19:37:29.495950 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:37:29.495950 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:37:29.495950 ignition[1343]: INFO : GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 19:37:29.578670 ignition[1343]: INFO : GET result: OK Oct 2 19:37:29.709448 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:37:29.713001 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:37:29.713001 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:37:29.713001 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:37:29.713001 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:37:29.727509 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:37:29.727509 ignition[1343]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:37:29.749362 ignition[1343]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3031977769" Oct 2 19:37:29.749362 ignition[1343]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3031977769": device or resource busy Oct 2 19:37:29.755405 ignition[1343]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3031977769", trying btrfs: device or resource busy Oct 2 19:37:29.755405 ignition[1343]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3031977769" Oct 2 19:37:29.755405 ignition[1343]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3031977769" Oct 2 19:37:29.767411 ignition[1343]: INFO : op(6): [started] unmounting "/mnt/oem3031977769" Oct 2 19:37:29.770988 ignition[1343]: INFO : op(6): [finished] unmounting "/mnt/oem3031977769" Oct 2 19:37:29.773168 systemd[1]: mnt-oem3031977769.mount: Deactivated successfully. Oct 2 19:37:29.777028 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:37:29.780827 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:37:29.784268 ignition[1343]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:37:29.796325 ignition[1343]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1116253904" Oct 2 19:37:29.799337 ignition[1343]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1116253904": device or resource busy Oct 2 19:37:29.799337 ignition[1343]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1116253904", trying btrfs: device or resource busy Oct 2 19:37:29.799337 ignition[1343]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1116253904" Oct 2 19:37:29.837585 ignition[1343]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1116253904" Oct 2 19:37:29.837585 ignition[1343]: INFO : op(9): [started] unmounting "/mnt/oem1116253904" Oct 2 19:37:29.837585 ignition[1343]: INFO : op(9): [finished] unmounting "/mnt/oem1116253904" Oct 2 19:37:29.837585 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:37:29.837585 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:37:29.837585 ignition[1343]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:37:29.810998 systemd[1]: mnt-oem1116253904.mount: Deactivated successfully. Oct 2 19:37:29.884076 ignition[1343]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem832350161" Oct 2 19:37:29.884076 ignition[1343]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem832350161": device or resource busy Oct 2 19:37:29.884076 ignition[1343]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem832350161", trying btrfs: device or resource busy Oct 2 19:37:29.884076 ignition[1343]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem832350161" Oct 2 19:37:29.884076 ignition[1343]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem832350161" Oct 2 19:37:29.884076 ignition[1343]: INFO : op(c): [started] unmounting "/mnt/oem832350161" Oct 2 19:37:29.884076 ignition[1343]: INFO : op(c): [finished] unmounting "/mnt/oem832350161" Oct 2 19:37:29.884076 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:37:29.884076 ignition[1343]: INFO : files: op(10): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:37:29.884076 ignition[1343]: INFO : files: op(10): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:37:29.884076 ignition[1343]: INFO : files: op(11): [started] processing unit "amazon-ssm-agent.service" Oct 2 19:37:29.884076 ignition[1343]: INFO : files: op(11): op(12): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:37:29.884076 ignition[1343]: INFO : files: op(11): op(12): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:37:29.884076 ignition[1343]: INFO : files: op(11): [finished] processing unit "amazon-ssm-agent.service" Oct 2 19:37:29.884076 ignition[1343]: INFO : files: op(13): [started] processing unit "nvidia.service" Oct 2 19:37:29.884076 ignition[1343]: INFO : files: op(13): [finished] processing unit "nvidia.service" Oct 2 19:37:29.884076 ignition[1343]: INFO : files: op(14): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:37:29.884076 ignition[1343]: INFO : files: op(14): op(15): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:37:29.884076 ignition[1343]: INFO : files: op(14): op(15): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:37:29.884076 ignition[1343]: INFO : files: op(14): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:37:29.884076 ignition[1343]: INFO : files: op(16): [started] processing unit "prepare-critools.service" Oct 2 19:37:29.967156 kernel: kauditd_printk_skb: 9 callbacks suppressed Oct 2 19:37:29.967199 kernel: audit: type=1130 audit(1696275449.932:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:29.932000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:29.920706 systemd[1]: Finished ignition-files.service. Oct 2 19:37:29.968793 ignition[1343]: INFO : files: op(16): op(17): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:37:29.968793 ignition[1343]: INFO : files: op(16): op(17): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:37:29.968793 ignition[1343]: INFO : files: op(16): [finished] processing unit "prepare-critools.service" Oct 2 19:37:29.968793 ignition[1343]: INFO : files: op(18): [started] setting preset to enabled for "nvidia.service" Oct 2 19:37:29.968793 ignition[1343]: INFO : files: op(18): [finished] setting preset to enabled for "nvidia.service" Oct 2 19:37:29.968793 ignition[1343]: INFO : files: op(19): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:37:29.968793 ignition[1343]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:37:29.968793 ignition[1343]: INFO : files: op(1a): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:37:29.968793 ignition[1343]: INFO : files: op(1a): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:37:29.968793 ignition[1343]: INFO : files: op(1b): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:37:29.968793 ignition[1343]: INFO : files: op(1b): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:37:29.968793 ignition[1343]: INFO : files: op(1c): [started] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:37:29.968793 ignition[1343]: INFO : files: op(1c): [finished] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:37:29.968793 ignition[1343]: INFO : files: createResultFile: createFiles: op(1d): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:37:29.968793 ignition[1343]: INFO : files: createResultFile: createFiles: op(1d): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:37:29.968793 ignition[1343]: INFO : files: files passed Oct 2 19:37:29.968793 ignition[1343]: INFO : Ignition finished successfully Oct 2 19:37:30.056014 kernel: audit: type=1130 audit(1696275450.033:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.056059 kernel: audit: type=1131 audit(1696275450.033:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.033000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:29.943211 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:37:29.978708 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:37:29.980522 systemd[1]: Starting ignition-quench.service... Oct 2 19:37:30.022358 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:37:30.022542 systemd[1]: Finished ignition-quench.service. Oct 2 19:37:30.080567 initrd-setup-root-after-ignition[1368]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:37:30.085590 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:37:30.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.086398 systemd[1]: Reached target ignition-complete.target. Oct 2 19:37:30.095704 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:37:30.120092 kernel: audit: type=1130 audit(1696275450.083:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.150441 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:37:30.152463 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:37:30.170163 kernel: audit: type=1130 audit(1696275450.153:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.170200 kernel: audit: type=1131 audit(1696275450.153:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.153000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.153000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.154411 systemd[1]: Reached target initrd-fs.target. Oct 2 19:37:30.171795 systemd[1]: Reached target initrd.target. Oct 2 19:37:30.176379 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:37:30.180349 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:37:30.218749 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:37:30.222000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.225360 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:37:30.234677 kernel: audit: type=1130 audit(1696275450.222:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.254526 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:37:30.258157 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:37:30.261838 systemd[1]: Stopped target timers.target. Oct 2 19:37:30.264966 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:37:30.265595 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:37:30.268000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.277702 systemd[1]: Stopped target initrd.target. Oct 2 19:37:30.279244 kernel: audit: type=1131 audit(1696275450.268:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.281075 systemd[1]: Stopped target basic.target. Oct 2 19:37:30.284222 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:37:30.287873 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:37:30.291436 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:37:30.295120 systemd[1]: Stopped target remote-fs.target. Oct 2 19:37:30.298359 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:37:30.301864 systemd[1]: Stopped target sysinit.target. Oct 2 19:37:30.304953 systemd[1]: Stopped target local-fs.target. Oct 2 19:37:30.308056 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:37:30.311411 systemd[1]: Stopped target swap.target. Oct 2 19:37:30.314288 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:37:30.316337 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:37:30.317000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.319663 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:37:30.331694 kernel: audit: type=1131 audit(1696275450.317:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.331328 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:37:30.331582 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:37:30.337000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.338779 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:37:30.339053 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:37:30.346983 kernel: audit: type=1131 audit(1696275450.337:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.349000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.351883 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:37:30.353939 systemd[1]: Stopped ignition-files.service. Oct 2 19:37:30.355000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.358570 systemd[1]: Stopping ignition-mount.service... Oct 2 19:37:30.374827 systemd[1]: Stopping iscsid.service... Oct 2 19:37:30.381028 iscsid[1191]: iscsid shutting down. Oct 2 19:37:30.383725 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:37:30.387144 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:37:30.396229 ignition[1381]: INFO : Ignition 2.14.0 Oct 2 19:37:30.398020 ignition[1381]: INFO : Stage: umount Oct 2 19:37:30.398020 ignition[1381]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:37:30.398020 ignition[1381]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:37:30.421337 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:37:30.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.425284 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:37:30.436412 ignition[1381]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:37:30.438863 ignition[1381]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:37:30.441881 ignition[1381]: INFO : PUT result: OK Oct 2 19:37:30.443786 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:37:30.452887 ignition[1381]: INFO : umount: umount passed Oct 2 19:37:30.454827 ignition[1381]: INFO : Ignition finished successfully Oct 2 19:37:30.455000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.460300 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:37:30.462401 systemd[1]: Stopped iscsid.service. Oct 2 19:37:30.464000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.466558 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:37:30.469282 systemd[1]: Stopped ignition-mount.service. Oct 2 19:37:30.471000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.474149 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:37:30.476347 systemd[1]: Stopped ignition-disks.service. Oct 2 19:37:30.478000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.480013 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:37:30.480125 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:37:30.495000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.497356 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:37:30.498000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.497445 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:37:30.500432 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:37:30.500518 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:37:30.504000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.508947 systemd[1]: Stopped target paths.target. Oct 2 19:37:30.511891 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:37:30.517008 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:37:30.520818 systemd[1]: Stopped target slices.target. Oct 2 19:37:30.523943 systemd[1]: Stopped target sockets.target. Oct 2 19:37:30.527080 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:37:30.527272 systemd[1]: Closed iscsid.socket. Oct 2 19:37:30.531692 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:37:30.531889 systemd[1]: Stopped ignition-setup.service. Oct 2 19:37:30.535000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.537171 systemd[1]: Stopping iscsiuio.service... Oct 2 19:37:30.543504 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:37:30.543970 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:37:30.547000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.547000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.549596 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:37:30.549931 systemd[1]: Stopped iscsiuio.service. Oct 2 19:37:30.552000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.555743 systemd[1]: Stopped target network.target. Oct 2 19:37:30.558923 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:37:30.559444 systemd[1]: Closed iscsiuio.socket. Oct 2 19:37:30.563753 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:37:30.567036 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:37:30.572288 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:37:30.573000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.575000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.579000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.572474 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:37:30.583000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.574648 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:37:30.574839 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:37:30.577120 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:37:30.577137 systemd-networkd[1186]: eth0: DHCPv6 lease lost Oct 2 19:37:30.577214 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:37:30.581778 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:37:30.582420 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:37:30.583000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:37:30.585711 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:37:30.585796 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:37:30.604228 systemd[1]: Stopping network-cleanup.service... Oct 2 19:37:30.597000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:37:30.611363 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:37:30.611611 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:37:30.616000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.617891 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:37:30.619462 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:37:30.618000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.623258 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:37:30.623366 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:37:30.624000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.627434 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:37:30.641593 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:37:30.643659 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:37:30.646000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.648461 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:37:30.648564 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:37:30.653715 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:37:30.653804 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:37:30.657313 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:37:30.661000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.658819 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:37:30.662284 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:37:30.664000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.662368 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:37:30.667119 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:37:30.669000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.667206 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:37:30.675035 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:37:30.697479 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 19:37:30.698000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.697595 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 19:37:30.703612 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:37:30.704000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.703703 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:37:30.707345 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:37:30.707421 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:37:30.713000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.715500 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:37:30.717466 systemd[1]: Stopped network-cleanup.service. Oct 2 19:37:30.716000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.720886 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:37:30.723099 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:37:30.725000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.725000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:30.726842 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:37:30.731582 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:37:30.752602 systemd[1]: mnt-oem832350161.mount: Deactivated successfully. Oct 2 19:37:30.752787 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:37:30.752921 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:37:30.753036 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 2 19:37:30.757237 systemd[1]: Switching root. Oct 2 19:37:30.787024 systemd-journald[308]: Journal stopped Oct 2 19:37:37.183170 systemd-journald[308]: Received SIGTERM from PID 1 (systemd). Oct 2 19:37:37.183760 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:37:37.183870 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:37:37.183976 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:37:37.184012 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:37:37.184112 kernel: SELinux: policy capability open_perms=1 Oct 2 19:37:37.184143 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:37:37.184174 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:37:37.184204 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:37:37.184235 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:37:37.184268 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:37:37.184298 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:37:37.184395 systemd[1]: Successfully loaded SELinux policy in 109.927ms. Oct 2 19:37:37.194980 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 19.816ms. Oct 2 19:37:37.195062 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:37:37.195096 systemd[1]: Detected virtualization amazon. Oct 2 19:37:37.195129 systemd[1]: Detected architecture arm64. Oct 2 19:37:37.195163 systemd[1]: Detected first boot. Oct 2 19:37:37.195204 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:37:37.195302 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:37:37.195339 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:37:37.195378 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:37:37.195414 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:37:37.195511 kernel: kauditd_printk_skb: 40 callbacks suppressed Oct 2 19:37:37.195546 kernel: audit: type=1334 audit(1696275456.663:85): prog-id=12 op=LOAD Oct 2 19:37:37.195577 kernel: audit: type=1334 audit(1696275456.663:86): prog-id=3 op=UNLOAD Oct 2 19:37:37.195676 kernel: audit: type=1334 audit(1696275456.663:87): prog-id=13 op=LOAD Oct 2 19:37:37.195709 kernel: audit: type=1334 audit(1696275456.663:88): prog-id=14 op=LOAD Oct 2 19:37:37.195741 kernel: audit: type=1334 audit(1696275456.663:89): prog-id=4 op=UNLOAD Oct 2 19:37:37.195772 kernel: audit: type=1334 audit(1696275456.663:90): prog-id=5 op=UNLOAD Oct 2 19:37:37.195802 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:37:37.195835 kernel: audit: type=1334 audit(1696275456.666:91): prog-id=15 op=LOAD Oct 2 19:37:37.195864 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:37:37.195894 kernel: audit: type=1334 audit(1696275456.666:92): prog-id=12 op=UNLOAD Oct 2 19:37:37.195955 kernel: audit: type=1334 audit(1696275456.668:93): prog-id=16 op=LOAD Oct 2 19:37:37.195987 kernel: audit: type=1334 audit(1696275456.671:94): prog-id=17 op=LOAD Oct 2 19:37:37.196022 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:37:37.196053 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:37:37.196085 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:37:37.196116 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 19:37:37.196150 systemd[1]: Created slice system-getty.slice. Oct 2 19:37:37.196250 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:37:37.196287 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:37:37.196318 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:37:37.196349 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:37:37.196381 systemd[1]: Created slice user.slice. Oct 2 19:37:37.196412 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:37:37.196444 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:37:37.196475 systemd[1]: Set up automount boot.automount. Oct 2 19:37:37.196507 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:37:37.196539 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:37:37.196575 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:37:37.196605 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:37:37.196637 systemd[1]: Reached target integritysetup.target. Oct 2 19:37:37.196667 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:37:37.196698 systemd[1]: Reached target remote-fs.target. Oct 2 19:37:37.196728 systemd[1]: Reached target slices.target. Oct 2 19:37:37.196764 systemd[1]: Reached target swap.target. Oct 2 19:37:37.196797 systemd[1]: Reached target torcx.target. Oct 2 19:37:37.196829 systemd[1]: Reached target veritysetup.target. Oct 2 19:37:37.196863 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:37:37.218968 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:37:37.219038 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:37:37.219076 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:37:37.219107 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:37:37.219138 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:37:37.219169 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:37:37.219200 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:37:37.219234 systemd[1]: Mounting media.mount... Oct 2 19:37:37.219265 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:37:37.219301 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:37:37.219335 systemd[1]: Mounting tmp.mount... Oct 2 19:37:37.219364 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:37:37.219397 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:37:37.219426 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:37:37.219456 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:37:37.219485 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:37:37.219515 systemd[1]: Starting modprobe@drm.service... Oct 2 19:37:37.219544 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:37:37.219578 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:37:37.219610 systemd[1]: Starting modprobe@loop.service... Oct 2 19:37:37.219641 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:37:37.219672 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:37:37.219705 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:37:37.219735 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:37:37.219766 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:37:37.219797 systemd[1]: Stopped systemd-journald.service. Oct 2 19:37:37.219829 kernel: loop: module loaded Oct 2 19:37:37.219861 systemd[1]: Starting systemd-journald.service... Oct 2 19:37:37.219890 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:37:37.219941 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:37:37.219974 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:37:37.220004 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:37:37.220035 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:37:37.220067 systemd[1]: Stopped verity-setup.service. Oct 2 19:37:37.221715 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:37:37.221752 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:37:37.221788 systemd[1]: Mounted media.mount. Oct 2 19:37:37.221818 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:37:37.221849 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:37:37.221880 systemd[1]: Mounted tmp.mount. Oct 2 19:37:37.221927 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:37:37.221961 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:37:37.221992 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:37:37.222022 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:37:37.222052 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:37:37.222089 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:37:37.222122 systemd[1]: Finished modprobe@drm.service. Oct 2 19:37:37.222161 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:37:37.222194 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:37:37.222224 kernel: fuse: init (API version 7.34) Oct 2 19:37:37.222256 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:37:37.222286 systemd[1]: Finished modprobe@loop.service. Oct 2 19:37:37.222316 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:37:37.222346 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:37:37.222376 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:37:37.222411 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:37:37.222446 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:37:37.222477 systemd[1]: Reached target network-pre.target. Oct 2 19:37:37.222507 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:37:37.222541 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:37:37.222573 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:37:37.222603 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:37:37.222634 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:37:37.222664 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:37:37.222698 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:37:37.222733 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:37:37.222772 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:37:37.222802 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:37:37.222835 systemd-journald[1488]: Journal started Oct 2 19:37:37.222950 systemd-journald[1488]: Runtime Journal (/run/log/journal/ec2194c1e180e5c5d18921e5269471d4) is 8.0M, max 75.4M, 67.4M free. Oct 2 19:37:31.756000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:37:31.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:37:31.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:37:31.920000 audit: BPF prog-id=10 op=LOAD Oct 2 19:37:31.920000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:37:31.920000 audit: BPF prog-id=11 op=LOAD Oct 2 19:37:31.920000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:37:36.663000 audit: BPF prog-id=12 op=LOAD Oct 2 19:37:36.663000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:37:36.663000 audit: BPF prog-id=13 op=LOAD Oct 2 19:37:36.663000 audit: BPF prog-id=14 op=LOAD Oct 2 19:37:36.663000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:37:36.663000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:37:36.666000 audit: BPF prog-id=15 op=LOAD Oct 2 19:37:36.666000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:37:36.668000 audit: BPF prog-id=16 op=LOAD Oct 2 19:37:36.671000 audit: BPF prog-id=17 op=LOAD Oct 2 19:37:36.671000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:37:36.671000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:37:36.674000 audit: BPF prog-id=18 op=LOAD Oct 2 19:37:36.674000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:37:36.676000 audit: BPF prog-id=19 op=LOAD Oct 2 19:37:36.679000 audit: BPF prog-id=20 op=LOAD Oct 2 19:37:37.230439 systemd[1]: Started systemd-journald.service. Oct 2 19:37:36.679000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:37:36.679000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:37:36.680000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:36.689000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:37:36.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:36.698000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:36.962000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:36.969000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:36.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:36.975000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:36.978000 audit: BPF prog-id=21 op=LOAD Oct 2 19:37:36.979000 audit: BPF prog-id=22 op=LOAD Oct 2 19:37:36.979000 audit: BPF prog-id=23 op=LOAD Oct 2 19:37:36.979000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:37:36.979000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:37:37.026000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:37.059000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:37.068000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:37.068000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:37.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:37.078000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:37.087000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:37.087000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:37.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:37.096000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:37.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:37.105000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:37.115000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:37.115000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:37.120000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:37.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:37.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:37.178000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:37:37.178000 audit[1488]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=4 a1=fffffd2713d0 a2=4000 a3=1 items=0 ppid=1 pid=1488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:37.178000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:37:37.228000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:36.663113 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:37:32.097773 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2023-10-02T19:37:32Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:37:36.681716 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:37:32.109127 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2023-10-02T19:37:32Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:37:32.109177 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2023-10-02T19:37:32Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:37:32.109242 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2023-10-02T19:37:32Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:37:32.109267 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2023-10-02T19:37:32Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:37:32.109332 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2023-10-02T19:37:32Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:37:32.109363 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2023-10-02T19:37:32Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:37:37.238859 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:37:32.109755 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2023-10-02T19:37:32Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:37:32.109831 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2023-10-02T19:37:32Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:37:32.109866 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2023-10-02T19:37:32Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:37:32.110793 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2023-10-02T19:37:32Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:37:32.110870 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2023-10-02T19:37:32Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:37:32.110937 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2023-10-02T19:37:32Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:37:32.110979 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2023-10-02T19:37:32Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:37:32.111023 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2023-10-02T19:37:32Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:37:32.111082 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2023-10-02T19:37:32Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:37:35.744285 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2023-10-02T19:37:35Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:37:35.744822 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2023-10-02T19:37:35Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:37:35.745072 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2023-10-02T19:37:35Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:37:35.745501 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2023-10-02T19:37:35Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:37:35.745605 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2023-10-02T19:37:35Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:37:35.745742 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2023-10-02T19:37:35Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:37:37.270000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:37.269484 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:37:37.271590 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:37:37.311098 systemd-journald[1488]: Time spent on flushing to /var/log/journal/ec2194c1e180e5c5d18921e5269471d4 is 71.085ms for 1165 entries. Oct 2 19:37:37.311098 systemd-journald[1488]: System Journal (/var/log/journal/ec2194c1e180e5c5d18921e5269471d4) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:37:37.390793 systemd-journald[1488]: Received client request to flush runtime journal. Oct 2 19:37:37.352000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:37.374000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:37.351801 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:37:37.373364 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:37:37.377403 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:37:37.394000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:37.393317 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:37:37.419271 udevadm[1521]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 19:37:37.437985 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:37:37.438000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:37.442050 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:37:37.562596 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:37:37.563000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:37.566676 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:37:37.677111 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:37:37.678000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:38.181189 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:37:38.183000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:38.184000 audit: BPF prog-id=24 op=LOAD Oct 2 19:37:38.184000 audit: BPF prog-id=25 op=LOAD Oct 2 19:37:38.184000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:37:38.184000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:37:38.186618 systemd[1]: Starting systemd-udevd.service... Oct 2 19:37:38.232856 systemd-udevd[1535]: Using default interface naming scheme 'v252'. Oct 2 19:37:38.266356 systemd[1]: Started systemd-udevd.service. Oct 2 19:37:38.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:38.269000 audit: BPF prog-id=26 op=LOAD Oct 2 19:37:38.271226 systemd[1]: Starting systemd-networkd.service... Oct 2 19:37:38.314000 audit: BPF prog-id=27 op=LOAD Oct 2 19:37:38.314000 audit: BPF prog-id=28 op=LOAD Oct 2 19:37:38.314000 audit: BPF prog-id=29 op=LOAD Oct 2 19:37:38.319244 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:37:38.383098 (udev-worker)[1536]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:37:38.402083 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:37:38.515436 systemd[1]: Started systemd-userdbd.service. Oct 2 19:37:38.516000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:38.714083 systemd-networkd[1541]: lo: Link UP Oct 2 19:37:38.714107 systemd-networkd[1541]: lo: Gained carrier Oct 2 19:37:38.715038 systemd-networkd[1541]: Enumeration completed Oct 2 19:37:38.716000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:38.715218 systemd[1]: Started systemd-networkd.service. Oct 2 19:37:38.715307 systemd-networkd[1541]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:37:38.719444 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:37:38.725925 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:37:38.727069 systemd-networkd[1541]: eth0: Link UP Oct 2 19:37:38.727503 systemd-networkd[1541]: eth0: Gained carrier Oct 2 19:37:38.742933 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1545) Oct 2 19:37:38.762219 systemd-networkd[1541]: eth0: DHCPv4 address 172.31.16.28/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:37:38.948016 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:37:38.951000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:38.950575 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:37:38.954620 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:37:39.044304 lvm[1654]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:37:39.079937 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:37:39.080000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:39.082034 systemd[1]: Reached target cryptsetup.target. Oct 2 19:37:39.086023 systemd[1]: Starting lvm2-activation.service... Oct 2 19:37:39.100593 lvm[1655]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:37:39.135941 systemd[1]: Finished lvm2-activation.service. Oct 2 19:37:39.136000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:39.137922 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:37:39.139701 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:37:39.139756 systemd[1]: Reached target local-fs.target. Oct 2 19:37:39.141580 systemd[1]: Reached target machines.target. Oct 2 19:37:39.145801 systemd[1]: Starting ldconfig.service... Oct 2 19:37:39.149878 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:37:39.150012 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:37:39.152196 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:37:39.157185 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:37:39.163738 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:37:39.166024 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:37:39.166146 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:37:39.168485 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:37:39.213392 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1657 (bootctl) Oct 2 19:37:39.215580 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:37:39.221515 systemd-tmpfiles[1660]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:37:39.227582 systemd-tmpfiles[1660]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:37:39.233679 systemd-tmpfiles[1660]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:37:39.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:39.237302 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:37:39.404341 systemd-fsck[1665]: fsck.fat 4.2 (2021-01-31) Oct 2 19:37:39.404341 systemd-fsck[1665]: /dev/nvme0n1p1: 236 files, 113463/258078 clusters Oct 2 19:37:39.409292 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:37:39.410000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:39.414370 systemd[1]: Mounting boot.mount... Oct 2 19:37:39.450501 systemd[1]: Mounted boot.mount. Oct 2 19:37:39.481507 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:37:39.482000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:39.642951 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:37:39.644000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:39.647702 systemd[1]: Starting audit-rules.service... Oct 2 19:37:39.651413 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:37:39.656587 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:37:39.659000 audit: BPF prog-id=30 op=LOAD Oct 2 19:37:39.662410 systemd[1]: Starting systemd-resolved.service... Oct 2 19:37:39.665000 audit: BPF prog-id=31 op=LOAD Oct 2 19:37:39.670301 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:37:39.674243 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:37:39.705776 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:37:39.706000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:39.707970 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:37:39.716000 audit[1684]: SYSTEM_BOOT pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:37:39.725664 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:37:39.726000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:39.777549 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:37:39.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:39.844228 systemd-resolved[1682]: Positive Trust Anchors: Oct 2 19:37:39.844741 systemd-resolved[1682]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:37:39.844896 systemd-resolved[1682]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:37:39.881520 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:37:39.882000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:39.883519 systemd[1]: Reached target time-set.target. Oct 2 19:37:39.900702 systemd-resolved[1682]: Defaulting to hostname 'linux'. Oct 2 19:37:39.906096 systemd[1]: Started systemd-resolved.service. Oct 2 19:37:39.908025 systemd[1]: Reached target network.target. Oct 2 19:37:39.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:39.909849 systemd[1]: Reached target nss-lookup.target. Oct 2 19:37:39.996000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:37:39.996000 audit[1700]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff72368b0 a2=420 a3=0 items=0 ppid=1679 pid=1700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:39.996000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:37:39.998068 augenrules[1700]: No rules Oct 2 19:37:39.999871 systemd[1]: Finished audit-rules.service. Oct 2 19:37:40.052239 systemd-timesyncd[1683]: Contacted time server 216.31.17.12:123 (0.flatcar.pool.ntp.org). Oct 2 19:37:40.052358 systemd-timesyncd[1683]: Initial clock synchronization to Mon 2023-10-02 19:37:39.899846 UTC. Oct 2 19:37:40.516144 systemd-networkd[1541]: eth0: Gained IPv6LL Oct 2 19:37:40.520951 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:37:40.523193 systemd[1]: Reached target network-online.target. Oct 2 19:37:40.697697 ldconfig[1656]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:37:40.793681 systemd[1]: Finished ldconfig.service. Oct 2 19:37:40.797813 systemd[1]: Starting systemd-update-done.service... Oct 2 19:37:40.821674 systemd[1]: Finished systemd-update-done.service. Oct 2 19:37:40.823812 systemd[1]: Reached target sysinit.target. Oct 2 19:37:40.825638 systemd[1]: Started motdgen.path. Oct 2 19:37:40.827214 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:37:40.829730 systemd[1]: Started logrotate.timer. Oct 2 19:37:40.831524 systemd[1]: Started mdadm.timer. Oct 2 19:37:40.832976 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:37:40.834726 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:37:40.834774 systemd[1]: Reached target paths.target. Oct 2 19:37:40.836303 systemd[1]: Reached target timers.target. Oct 2 19:37:40.838308 systemd[1]: Listening on dbus.socket. Oct 2 19:37:40.841635 systemd[1]: Starting docker.socket... Oct 2 19:37:40.853320 systemd[1]: Listening on sshd.socket. Oct 2 19:37:40.856217 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:37:40.857078 systemd[1]: Listening on docker.socket. Oct 2 19:37:40.858970 systemd[1]: Reached target sockets.target. Oct 2 19:37:40.860861 systemd[1]: Reached target basic.target. Oct 2 19:37:40.862716 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:37:40.862948 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:37:40.865243 systemd[1]: Started amazon-ssm-agent.service. Oct 2 19:37:40.869850 systemd[1]: Starting containerd.service... Oct 2 19:37:40.876101 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 19:37:40.882741 systemd[1]: Starting dbus.service... Oct 2 19:37:40.886266 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:37:40.900467 systemd[1]: Starting extend-filesystems.service... Oct 2 19:37:40.907755 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:37:40.917071 systemd[1]: Starting motdgen.service... Oct 2 19:37:40.922347 systemd[1]: Started nvidia.service. Oct 2 19:37:40.926528 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:37:40.938780 systemd[1]: Starting prepare-critools.service... Oct 2 19:37:40.942858 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:37:40.946777 systemd[1]: Starting sshd-keygen.service... Oct 2 19:37:40.954089 systemd[1]: Starting systemd-logind.service... Oct 2 19:37:40.956921 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:37:40.957064 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:37:40.958516 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:37:40.960279 systemd[1]: Starting update-engine.service... Oct 2 19:37:40.965456 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:37:41.064020 jq[1717]: false Oct 2 19:37:41.088549 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:37:41.088938 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:37:41.096297 jq[1728]: true Oct 2 19:37:41.127027 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:37:41.127387 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:37:41.144407 tar[1730]: ./ Oct 2 19:37:41.144407 tar[1730]: ./macvlan Oct 2 19:37:41.155002 tar[1734]: crictl Oct 2 19:37:41.172288 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:37:41.180106 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:37:41.238945 dbus-daemon[1716]: [system] SELinux support is enabled Oct 2 19:37:41.239227 systemd[1]: Started dbus.service. Oct 2 19:37:41.244352 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:37:41.244401 systemd[1]: Reached target system-config.target. Oct 2 19:37:41.246359 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:37:41.246399 systemd[1]: Reached target user-config.target. Oct 2 19:37:41.252961 dbus-daemon[1716]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.0' (uid=244 pid=1541 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Oct 2 19:37:41.256412 dbus-daemon[1716]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 19:37:41.262159 systemd[1]: Starting systemd-hostnamed.service... Oct 2 19:37:41.290627 jq[1741]: true Oct 2 19:37:41.292299 amazon-ssm-agent[1713]: 2023/10/02 19:37:41 Failed to load instance info from vault. RegistrationKey does not exist. Oct 2 19:37:41.305190 amazon-ssm-agent[1713]: Initializing new seelog logger Oct 2 19:37:41.305435 amazon-ssm-agent[1713]: New Seelog Logger Creation Complete Oct 2 19:37:41.305585 amazon-ssm-agent[1713]: 2023/10/02 19:37:41 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:37:41.305585 amazon-ssm-agent[1713]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:37:41.309142 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:37:41.309785 systemd[1]: Finished motdgen.service. Oct 2 19:37:41.312246 amazon-ssm-agent[1713]: 2023/10/02 19:37:41 processing appconfig overrides Oct 2 19:37:41.342013 extend-filesystems[1719]: Found nvme0n1 Oct 2 19:37:41.347222 extend-filesystems[1719]: Found nvme0n1p1 Oct 2 19:37:41.352084 extend-filesystems[1719]: Found nvme0n1p2 Oct 2 19:37:41.354012 extend-filesystems[1719]: Found nvme0n1p3 Oct 2 19:37:41.356270 extend-filesystems[1719]: Found usr Oct 2 19:37:41.358092 extend-filesystems[1719]: Found nvme0n1p4 Oct 2 19:37:41.360164 extend-filesystems[1719]: Found nvme0n1p6 Oct 2 19:37:41.364321 extend-filesystems[1719]: Found nvme0n1p7 Oct 2 19:37:41.369376 extend-filesystems[1719]: Found nvme0n1p9 Oct 2 19:37:41.372426 extend-filesystems[1719]: Checking size of /dev/nvme0n1p9 Oct 2 19:37:41.404041 update_engine[1727]: I1002 19:37:41.403487 1727 main.cc:92] Flatcar Update Engine starting Oct 2 19:37:41.455653 systemd[1]: Started update-engine.service. Oct 2 19:37:41.460279 systemd[1]: Started locksmithd.service. Oct 2 19:37:41.464332 update_engine[1727]: I1002 19:37:41.464018 1727 update_check_scheduler.cc:74] Next update check in 11m23s Oct 2 19:37:41.505869 extend-filesystems[1719]: Resized partition /dev/nvme0n1p9 Oct 2 19:37:41.547137 extend-filesystems[1786]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 19:37:41.563938 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Oct 2 19:37:41.612108 tar[1730]: ./static Oct 2 19:37:41.645950 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Oct 2 19:37:41.682414 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 19:37:41.724382 systemd-logind[1726]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 19:37:41.731706 extend-filesystems[1786]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Oct 2 19:37:41.731706 extend-filesystems[1786]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 2 19:37:41.731706 extend-filesystems[1786]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Oct 2 19:37:41.730675 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:37:41.757231 env[1737]: time="2023-10-02T19:37:41.728304174Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:37:41.757593 bash[1795]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:37:41.757745 extend-filesystems[1719]: Resized filesystem in /dev/nvme0n1p9 Oct 2 19:37:41.730728 systemd-logind[1726]: New seat seat0. Oct 2 19:37:41.731074 systemd[1]: Finished extend-filesystems.service. Oct 2 19:37:41.740583 systemd[1]: Started systemd-logind.service. Oct 2 19:37:41.760812 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:37:41.856090 tar[1730]: ./vlan Oct 2 19:37:41.895168 dbus-daemon[1716]: [system] Successfully activated service 'org.freedesktop.hostname1' Oct 2 19:37:41.895418 systemd[1]: Started systemd-hostnamed.service. Oct 2 19:37:41.903166 dbus-daemon[1716]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1757 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Oct 2 19:37:41.907773 systemd[1]: Starting polkit.service... Oct 2 19:37:41.986046 env[1737]: time="2023-10-02T19:37:41.985970159Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:37:41.986313 env[1737]: time="2023-10-02T19:37:41.986223533Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:37:41.988343 polkitd[1809]: Started polkitd version 121 Oct 2 19:37:41.991509 env[1737]: time="2023-10-02T19:37:41.991430778Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:37:41.991509 env[1737]: time="2023-10-02T19:37:41.991500561Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:37:41.991983 env[1737]: time="2023-10-02T19:37:41.991931934Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:37:41.992061 env[1737]: time="2023-10-02T19:37:41.991980068Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:37:41.992061 env[1737]: time="2023-10-02T19:37:41.992012593Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:37:41.992061 env[1737]: time="2023-10-02T19:37:41.992037208Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:37:41.992246 env[1737]: time="2023-10-02T19:37:41.992206661Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:37:42.000267 env[1737]: time="2023-10-02T19:37:42.000199920Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:37:42.000566 env[1737]: time="2023-10-02T19:37:42.000506748Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:37:42.000644 env[1737]: time="2023-10-02T19:37:42.000562887Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:37:42.000748 env[1737]: time="2023-10-02T19:37:42.000706631Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:37:42.000826 env[1737]: time="2023-10-02T19:37:42.000743277Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:37:42.015030 env[1737]: time="2023-10-02T19:37:42.014964722Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:37:42.015180 env[1737]: time="2023-10-02T19:37:42.015037459Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:37:42.015180 env[1737]: time="2023-10-02T19:37:42.015074016Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:37:42.015180 env[1737]: time="2023-10-02T19:37:42.015144664Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:37:42.015382 env[1737]: time="2023-10-02T19:37:42.015184430Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:37:42.015382 env[1737]: time="2023-10-02T19:37:42.015217011Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:37:42.015382 env[1737]: time="2023-10-02T19:37:42.015249355Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:37:42.015884 env[1737]: time="2023-10-02T19:37:42.015767668Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:37:42.015884 env[1737]: time="2023-10-02T19:37:42.015823223Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:37:42.015884 env[1737]: time="2023-10-02T19:37:42.015857113Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:37:42.016087 env[1737]: time="2023-10-02T19:37:42.015913990Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:37:42.016087 env[1737]: time="2023-10-02T19:37:42.015949639Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:37:42.016228 env[1737]: time="2023-10-02T19:37:42.016183436Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:37:42.016417 env[1737]: time="2023-10-02T19:37:42.016373443Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:37:42.016912 env[1737]: time="2023-10-02T19:37:42.016851104Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:37:42.024597 polkitd[1809]: Loading rules from directory /etc/polkit-1/rules.d Oct 2 19:37:42.024720 polkitd[1809]: Loading rules from directory /usr/share/polkit-1/rules.d Oct 2 19:37:42.024955 env[1737]: time="2023-10-02T19:37:42.024872464Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:37:42.025049 env[1737]: time="2023-10-02T19:37:42.024970417Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:37:42.025165 env[1737]: time="2023-10-02T19:37:42.025126262Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:37:42.025237 env[1737]: time="2023-10-02T19:37:42.025169699Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:37:42.025237 env[1737]: time="2023-10-02T19:37:42.025210245Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:37:42.025352 env[1737]: time="2023-10-02T19:37:42.025240300Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:37:42.025352 env[1737]: time="2023-10-02T19:37:42.025270886Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:37:42.025352 env[1737]: time="2023-10-02T19:37:42.025300563Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:37:42.025352 env[1737]: time="2023-10-02T19:37:42.025332153Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:37:42.025544 env[1737]: time="2023-10-02T19:37:42.025366751Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:37:42.025544 env[1737]: time="2023-10-02T19:37:42.025401148Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:37:42.025726 env[1737]: time="2023-10-02T19:37:42.025672093Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:37:42.025726 env[1737]: time="2023-10-02T19:37:42.025706656Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:37:42.025824 env[1737]: time="2023-10-02T19:37:42.025736027Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:37:42.025824 env[1737]: time="2023-10-02T19:37:42.025764902Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:37:42.025824 env[1737]: time="2023-10-02T19:37:42.025802580Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:37:42.026016 env[1737]: time="2023-10-02T19:37:42.025828753Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:37:42.026016 env[1737]: time="2023-10-02T19:37:42.025862147Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:37:42.026016 env[1737]: time="2023-10-02T19:37:42.025955275Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:37:42.026425 env[1737]: time="2023-10-02T19:37:42.026318155Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:37:42.028007 env[1737]: time="2023-10-02T19:37:42.026426846Z" level=info msg="Connect containerd service" Oct 2 19:37:42.028007 env[1737]: time="2023-10-02T19:37:42.026501082Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:37:42.035245 env[1737]: time="2023-10-02T19:37:42.035147829Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:37:42.035843 env[1737]: time="2023-10-02T19:37:42.035792958Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:37:42.035951 env[1737]: time="2023-10-02T19:37:42.035931386Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:37:42.038213 env[1737]: time="2023-10-02T19:37:42.036030815Z" level=info msg="containerd successfully booted in 0.361896s" Oct 2 19:37:42.036147 systemd[1]: Started containerd.service. Oct 2 19:37:42.045701 polkitd[1809]: Finished loading, compiling and executing 2 rules Oct 2 19:37:42.046486 dbus-daemon[1716]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Oct 2 19:37:42.047952 polkitd[1809]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Oct 2 19:37:42.046752 systemd[1]: Started polkit.service. Oct 2 19:37:42.051048 env[1737]: time="2023-10-02T19:37:42.050964231Z" level=info msg="Start subscribing containerd event" Oct 2 19:37:42.051198 env[1737]: time="2023-10-02T19:37:42.051064674Z" level=info msg="Start recovering state" Oct 2 19:37:42.051198 env[1737]: time="2023-10-02T19:37:42.051182500Z" level=info msg="Start event monitor" Oct 2 19:37:42.051387 env[1737]: time="2023-10-02T19:37:42.051330427Z" level=info msg="Start snapshots syncer" Oct 2 19:37:42.051387 env[1737]: time="2023-10-02T19:37:42.051365651Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:37:42.051497 env[1737]: time="2023-10-02T19:37:42.051388071Z" level=info msg="Start streaming server" Oct 2 19:37:42.077805 tar[1730]: ./portmap Oct 2 19:37:42.091893 systemd-hostnamed[1757]: Hostname set to (transient) Oct 2 19:37:42.091894 systemd-resolved[1682]: System hostname changed to 'ip-172-31-16-28'. Oct 2 19:37:42.195308 coreos-metadata[1715]: Oct 02 19:37:42.194 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Oct 2 19:37:42.199894 coreos-metadata[1715]: Oct 02 19:37:42.196 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Oct 2 19:37:42.201189 coreos-metadata[1715]: Oct 02 19:37:42.200 INFO Fetch successful Oct 2 19:37:42.202140 coreos-metadata[1715]: Oct 02 19:37:42.201 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 19:37:42.202468 coreos-metadata[1715]: Oct 02 19:37:42.202 INFO Fetch successful Oct 2 19:37:42.207619 unknown[1715]: wrote ssh authorized keys file for user: core Oct 2 19:37:42.223085 tar[1730]: ./host-local Oct 2 19:37:42.249791 update-ssh-keys[1840]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:37:42.251241 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 19:37:42.319238 amazon-ssm-agent[1713]: 2023-10-02 19:37:42 INFO Entering SSM Agent hibernate - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-086c5b064cef02769 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-086c5b064cef02769 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:37:42.319238 amazon-ssm-agent[1713]: status code: 400, request id: 0a4b694c-2522-4d1b-a9f3-da546bf44910 Oct 2 19:37:42.320181 amazon-ssm-agent[1713]: 2023-10-02 19:37:42 INFO Agent is in hibernate mode. Reducing logging. Logging will be reduced to one log per backoff period Oct 2 19:37:42.343791 tar[1730]: ./vrf Oct 2 19:37:42.445016 tar[1730]: ./bridge Oct 2 19:37:42.557932 tar[1730]: ./tuning Oct 2 19:37:42.654509 tar[1730]: ./firewall Oct 2 19:37:42.767570 tar[1730]: ./host-device Oct 2 19:37:42.916036 tar[1730]: ./sbr Oct 2 19:37:43.008680 tar[1730]: ./loopback Oct 2 19:37:43.111265 tar[1730]: ./dhcp Oct 2 19:37:43.254057 systemd[1]: Finished prepare-critools.service. Oct 2 19:37:43.311314 tar[1730]: ./ptp Oct 2 19:37:43.372966 tar[1730]: ./ipvlan Oct 2 19:37:43.433674 tar[1730]: ./bandwidth Oct 2 19:37:43.516937 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:37:43.564787 locksmithd[1776]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:37:44.262881 sshd_keygen[1749]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:37:44.319489 systemd[1]: Finished sshd-keygen.service. Oct 2 19:37:44.323962 systemd[1]: Starting issuegen.service... Oct 2 19:37:44.343218 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:37:44.343586 systemd[1]: Finished issuegen.service. Oct 2 19:37:44.348031 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:37:44.370247 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:37:44.374745 systemd[1]: Started getty@tty1.service. Oct 2 19:37:44.379599 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:37:44.382245 systemd[1]: Reached target getty.target. Oct 2 19:37:44.384092 systemd[1]: Reached target multi-user.target. Oct 2 19:37:44.388472 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:37:44.412187 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:37:44.412565 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:37:44.414829 systemd[1]: Startup finished in 1.187s (kernel) + 17.009s (initrd) + 12.805s (userspace) = 31.001s. Oct 2 19:37:50.344563 systemd[1]: Created slice system-sshd.slice. Oct 2 19:37:50.346831 systemd[1]: Started sshd@0-172.31.16.28:22-139.178.89.65:44096.service. Oct 2 19:37:50.562359 sshd[1926]: Accepted publickey for core from 139.178.89.65 port 44096 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:37:50.568194 sshd[1926]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:50.585156 systemd[1]: Created slice user-500.slice. Oct 2 19:37:50.587459 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:37:50.595006 systemd-logind[1726]: New session 1 of user core. Oct 2 19:37:50.613732 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:37:50.617600 systemd[1]: Starting user@500.service... Oct 2 19:37:50.629089 (systemd)[1929]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:50.825931 systemd[1929]: Queued start job for default target default.target. Oct 2 19:37:50.827857 systemd[1929]: Reached target paths.target. Oct 2 19:37:50.827949 systemd[1929]: Reached target sockets.target. Oct 2 19:37:50.827983 systemd[1929]: Reached target timers.target. Oct 2 19:37:50.828014 systemd[1929]: Reached target basic.target. Oct 2 19:37:50.828109 systemd[1929]: Reached target default.target. Oct 2 19:37:50.828173 systemd[1929]: Startup finished in 181ms. Oct 2 19:37:50.828704 systemd[1]: Started user@500.service. Oct 2 19:37:50.830722 systemd[1]: Started session-1.scope. Oct 2 19:37:50.982253 systemd[1]: Started sshd@1-172.31.16.28:22-139.178.89.65:44112.service. Oct 2 19:37:51.169729 sshd[1938]: Accepted publickey for core from 139.178.89.65 port 44112 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:37:51.172887 sshd[1938]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:51.182074 systemd[1]: Started session-2.scope. Oct 2 19:37:51.182956 systemd-logind[1726]: New session 2 of user core. Oct 2 19:37:51.329529 sshd[1938]: pam_unix(sshd:session): session closed for user core Oct 2 19:37:51.337191 systemd[1]: sshd@1-172.31.16.28:22-139.178.89.65:44112.service: Deactivated successfully. Oct 2 19:37:51.338541 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:37:51.339993 systemd-logind[1726]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:37:51.341480 systemd-logind[1726]: Removed session 2. Oct 2 19:37:51.362387 systemd[1]: Started sshd@2-172.31.16.28:22-139.178.89.65:44116.service. Oct 2 19:37:51.545356 sshd[1944]: Accepted publickey for core from 139.178.89.65 port 44116 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:37:51.549185 sshd[1944]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:51.557649 systemd[1]: Started session-3.scope. Oct 2 19:37:51.558623 systemd-logind[1726]: New session 3 of user core. Oct 2 19:37:51.690484 sshd[1944]: pam_unix(sshd:session): session closed for user core Oct 2 19:37:51.696214 systemd[1]: sshd@2-172.31.16.28:22-139.178.89.65:44116.service: Deactivated successfully. Oct 2 19:37:51.697460 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:37:51.698511 systemd-logind[1726]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:37:51.700115 systemd-logind[1726]: Removed session 3. Oct 2 19:37:51.722414 systemd[1]: Started sshd@3-172.31.16.28:22-139.178.89.65:44132.service. Oct 2 19:37:51.902782 sshd[1950]: Accepted publickey for core from 139.178.89.65 port 44132 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:37:51.905956 sshd[1950]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:51.914051 systemd-logind[1726]: New session 4 of user core. Oct 2 19:37:51.914968 systemd[1]: Started session-4.scope. Oct 2 19:37:52.059260 sshd[1950]: pam_unix(sshd:session): session closed for user core Oct 2 19:37:52.065043 systemd-logind[1726]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:37:52.065597 systemd[1]: sshd@3-172.31.16.28:22-139.178.89.65:44132.service: Deactivated successfully. Oct 2 19:37:52.066788 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:37:52.068333 systemd-logind[1726]: Removed session 4. Oct 2 19:37:52.092485 systemd[1]: Started sshd@4-172.31.16.28:22-139.178.89.65:44144.service. Oct 2 19:37:52.272346 sshd[1956]: Accepted publickey for core from 139.178.89.65 port 44144 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:37:52.275515 sshd[1956]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:52.284073 systemd-logind[1726]: New session 5 of user core. Oct 2 19:37:52.284493 systemd[1]: Started session-5.scope. Oct 2 19:37:52.413796 sudo[1959]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:37:52.414823 sudo[1959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:37:52.432144 dbus-daemon[1716]: avc: received setenforce notice (enforcing=1) Oct 2 19:37:52.435159 sudo[1959]: pam_unix(sudo:session): session closed for user root Oct 2 19:37:52.459490 sshd[1956]: pam_unix(sshd:session): session closed for user core Oct 2 19:37:52.466711 systemd[1]: sshd@4-172.31.16.28:22-139.178.89.65:44144.service: Deactivated successfully. Oct 2 19:37:52.467521 systemd-logind[1726]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:37:52.468118 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:37:52.470480 systemd-logind[1726]: Removed session 5. Oct 2 19:37:52.489647 systemd[1]: Started sshd@5-172.31.16.28:22-139.178.89.65:44158.service. Oct 2 19:37:52.670761 sshd[1963]: Accepted publickey for core from 139.178.89.65 port 44158 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:37:52.674663 sshd[1963]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:52.683387 systemd[1]: Started session-6.scope. Oct 2 19:37:52.683996 systemd-logind[1726]: New session 6 of user core. Oct 2 19:37:52.804293 sudo[1967]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:37:52.805464 sudo[1967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:37:52.812687 sudo[1967]: pam_unix(sudo:session): session closed for user root Oct 2 19:37:52.826217 sudo[1966]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:37:52.826703 sudo[1966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:37:52.850036 systemd[1]: Stopping audit-rules.service... Oct 2 19:37:52.853000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:37:52.855449 auditctl[1970]: No rules Oct 2 19:37:52.856892 kernel: kauditd_printk_skb: 79 callbacks suppressed Oct 2 19:37:52.856988 kernel: audit: type=1305 audit(1696275472.853:170): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:37:52.859516 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:37:52.860062 systemd[1]: Stopped audit-rules.service. Oct 2 19:37:52.853000 audit[1970]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc81d8c00 a2=420 a3=0 items=0 ppid=1 pid=1970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:52.863602 systemd[1]: Starting audit-rules.service... Oct 2 19:37:52.873552 kernel: audit: type=1300 audit(1696275472.853:170): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc81d8c00 a2=420 a3=0 items=0 ppid=1 pid=1970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:52.853000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:37:52.877734 kernel: audit: type=1327 audit(1696275472.853:170): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:37:52.877824 kernel: audit: type=1131 audit(1696275472.859:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:52.859000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:52.929490 augenrules[1987]: No rules Oct 2 19:37:52.931411 systemd[1]: Finished audit-rules.service. Oct 2 19:37:52.929000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:52.940460 sudo[1966]: pam_unix(sudo:session): session closed for user root Oct 2 19:37:52.939000 audit[1966]: USER_END pid=1966 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:37:52.950304 kernel: audit: type=1130 audit(1696275472.929:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:52.950411 kernel: audit: type=1106 audit(1696275472.939:173): pid=1966 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:37:52.939000 audit[1966]: CRED_DISP pid=1966 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:37:52.959092 kernel: audit: type=1104 audit(1696275472.939:174): pid=1966 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:37:52.971713 sshd[1963]: pam_unix(sshd:session): session closed for user core Oct 2 19:37:52.972000 audit[1963]: USER_END pid=1963 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:52.972000 audit[1963]: CRED_DISP pid=1963 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:52.990078 kernel: audit: type=1106 audit(1696275472.972:175): pid=1963 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:52.990177 kernel: audit: type=1104 audit(1696275472.972:176): pid=1963 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:52.987933 systemd-logind[1726]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:37:52.988307 systemd[1]: sshd@5-172.31.16.28:22-139.178.89.65:44158.service: Deactivated successfully. Oct 2 19:37:52.989476 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:37:52.987000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.16.28:22-139.178.89.65:44158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:53.001717 systemd[1]: Started sshd@6-172.31.16.28:22-139.178.89.65:44166.service. Oct 2 19:37:53.008795 kernel: audit: type=1131 audit(1696275472.987:177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.16.28:22-139.178.89.65:44158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:53.010984 systemd-logind[1726]: Removed session 6. Oct 2 19:37:53.008000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.16.28:22-139.178.89.65:44166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:53.182000 audit[1993]: USER_ACCT pid=1993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:53.185153 sshd[1993]: Accepted publickey for core from 139.178.89.65 port 44166 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:37:53.185000 audit[1993]: CRED_ACQ pid=1993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:53.185000 audit[1993]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb0de090 a2=3 a3=1 items=0 ppid=1 pid=1993 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:53.185000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:37:53.188116 sshd[1993]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:53.196486 systemd[1]: Started session-7.scope. Oct 2 19:37:53.197248 systemd-logind[1726]: New session 7 of user core. Oct 2 19:37:53.205000 audit[1993]: USER_START pid=1993 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:53.211000 audit[1995]: CRED_ACQ pid=1995 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:53.314000 audit[1996]: USER_ACCT pid=1996 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:37:53.315962 sudo[1996]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:37:53.315000 audit[1996]: CRED_REFR pid=1996 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:37:53.317010 sudo[1996]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:37:53.320000 audit[1996]: USER_START pid=1996 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:37:54.038946 systemd[1]: Starting docker.service... Oct 2 19:37:54.152417 env[2011]: time="2023-10-02T19:37:54.152350513Z" level=info msg="Starting up" Oct 2 19:37:54.155737 env[2011]: time="2023-10-02T19:37:54.155663582Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:37:54.155737 env[2011]: time="2023-10-02T19:37:54.155712139Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:37:54.155969 env[2011]: time="2023-10-02T19:37:54.155752634Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:37:54.155969 env[2011]: time="2023-10-02T19:37:54.155777092Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:37:54.160490 env[2011]: time="2023-10-02T19:37:54.160448442Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:37:54.160685 env[2011]: time="2023-10-02T19:37:54.160656865Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:37:54.160851 env[2011]: time="2023-10-02T19:37:54.160807977Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:37:54.161001 env[2011]: time="2023-10-02T19:37:54.160972304Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:37:54.171972 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport1612918881-merged.mount: Deactivated successfully. Oct 2 19:37:54.216840 env[2011]: time="2023-10-02T19:37:54.216782915Z" level=info msg="Loading containers: start." Oct 2 19:37:54.322000 audit[2042]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2042 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.322000 audit[2042]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=fffff4a54760 a2=0 a3=1 items=0 ppid=2011 pid=2042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.322000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:37:54.329000 audit[2044]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2044 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.329000 audit[2044]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=fffff5e12b80 a2=0 a3=1 items=0 ppid=2011 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.329000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:37:54.336000 audit[2046]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2046 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.336000 audit[2046]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffe0eeb90 a2=0 a3=1 items=0 ppid=2011 pid=2046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.336000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:37:54.343000 audit[2048]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2048 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.343000 audit[2048]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd3af7c50 a2=0 a3=1 items=0 ppid=2011 pid=2048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.343000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:37:54.352000 audit[2050]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2050 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.352000 audit[2050]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe21b8710 a2=0 a3=1 items=0 ppid=2011 pid=2050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.352000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:37:54.388000 audit[2055]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2055 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.388000 audit[2055]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc771a390 a2=0 a3=1 items=0 ppid=2011 pid=2055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.388000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:37:54.403000 audit[2057]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2057 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.403000 audit[2057]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe2e25bd0 a2=0 a3=1 items=0 ppid=2011 pid=2057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.403000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:37:54.410000 audit[2059]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2059 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.410000 audit[2059]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffddca65a0 a2=0 a3=1 items=0 ppid=2011 pid=2059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.410000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:37:54.416000 audit[2061]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2061 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.416000 audit[2061]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=fffffa8e44b0 a2=0 a3=1 items=0 ppid=2011 pid=2061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.416000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:37:54.437000 audit[2065]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2065 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.437000 audit[2065]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe7e0cd30 a2=0 a3=1 items=0 ppid=2011 pid=2065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.437000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:37:54.441000 audit[2066]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2066 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.441000 audit[2066]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffdca95700 a2=0 a3=1 items=0 ppid=2011 pid=2066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.441000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:37:54.455962 kernel: Initializing XFRM netlink socket Oct 2 19:37:54.502298 env[2011]: time="2023-10-02T19:37:54.502239144Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:37:54.504151 (udev-worker)[2022]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:37:54.536000 audit[2075]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2075 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.536000 audit[2075]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffd094a040 a2=0 a3=1 items=0 ppid=2011 pid=2075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.536000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:37:54.559000 audit[2078]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2078 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.559000 audit[2078]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=fffff4081c20 a2=0 a3=1 items=0 ppid=2011 pid=2078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.559000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:37:54.569000 audit[2081]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2081 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.569000 audit[2081]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffffa6a1ce0 a2=0 a3=1 items=0 ppid=2011 pid=2081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.569000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:37:54.576000 audit[2083]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2083 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.576000 audit[2083]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffffdfa5cc0 a2=0 a3=1 items=0 ppid=2011 pid=2083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.576000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:37:54.584000 audit[2085]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2085 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.584000 audit[2085]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffd4634bf0 a2=0 a3=1 items=0 ppid=2011 pid=2085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.584000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:37:54.592000 audit[2087]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2087 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.592000 audit[2087]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffcd2b4900 a2=0 a3=1 items=0 ppid=2011 pid=2087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.592000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:37:54.599000 audit[2089]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2089 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.599000 audit[2089]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffd771e760 a2=0 a3=1 items=0 ppid=2011 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.599000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:37:54.617000 audit[2092]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2092 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.617000 audit[2092]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffe2f50710 a2=0 a3=1 items=0 ppid=2011 pid=2092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.617000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:37:54.626000 audit[2094]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2094 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.626000 audit[2094]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffef2cc8d0 a2=0 a3=1 items=0 ppid=2011 pid=2094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.626000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:37:54.633000 audit[2096]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2096 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.633000 audit[2096]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffd0bd7c40 a2=0 a3=1 items=0 ppid=2011 pid=2096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.633000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:37:54.640000 audit[2098]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2098 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.640000 audit[2098]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd2ac17e0 a2=0 a3=1 items=0 ppid=2011 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.640000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:37:54.642293 systemd-networkd[1541]: docker0: Link UP Oct 2 19:37:54.663000 audit[2102]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2102 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.663000 audit[2102]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff6597db0 a2=0 a3=1 items=0 ppid=2011 pid=2102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.663000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:37:54.667000 audit[2103]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2103 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:54.667000 audit[2103]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffdf077570 a2=0 a3=1 items=0 ppid=2011 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:54.667000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:37:54.668980 env[2011]: time="2023-10-02T19:37:54.668939113Z" level=info msg="Loading containers: done." Oct 2 19:37:54.694579 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck719863303-merged.mount: Deactivated successfully. Oct 2 19:37:54.714337 env[2011]: time="2023-10-02T19:37:54.714283704Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:37:54.715058 env[2011]: time="2023-10-02T19:37:54.715028569Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:37:54.715414 env[2011]: time="2023-10-02T19:37:54.715388654Z" level=info msg="Daemon has completed initialization" Oct 2 19:37:54.748601 systemd[1]: Started docker.service. Oct 2 19:37:54.747000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:54.764787 env[2011]: time="2023-10-02T19:37:54.764691219Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:37:54.813596 systemd[1]: Reloading. Oct 2 19:37:54.988381 /usr/lib/systemd/system-generators/torcx-generator[2152]: time="2023-10-02T19:37:54Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:37:54.989593 /usr/lib/systemd/system-generators/torcx-generator[2152]: time="2023-10-02T19:37:54Z" level=info msg="torcx already run" Oct 2 19:37:55.234843 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:37:55.235422 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:37:55.277703 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:37:55.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.427000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.429000 audit: BPF prog-id=40 op=LOAD Oct 2 19:37:55.429000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:37:55.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.431000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.431000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.431000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.431000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.431000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.431000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.432000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.432000 audit: BPF prog-id=41 op=LOAD Oct 2 19:37:55.432000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:37:55.432000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.432000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.432000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.432000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.433000 audit: BPF prog-id=42 op=LOAD Oct 2 19:37:55.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.434000 audit: BPF prog-id=43 op=LOAD Oct 2 19:37:55.434000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:37:55.434000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:37:55.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.440000 audit: BPF prog-id=44 op=LOAD Oct 2 19:37:55.440000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:37:55.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.445000 audit: BPF prog-id=45 op=LOAD Oct 2 19:37:55.445000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:37:55.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.447000 audit: BPF prog-id=46 op=LOAD Oct 2 19:37:55.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.448000 audit: BPF prog-id=47 op=LOAD Oct 2 19:37:55.448000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:37:55.448000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:37:55.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.450000 audit: BPF prog-id=48 op=LOAD Oct 2 19:37:55.450000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:37:55.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.451000 audit: BPF prog-id=49 op=LOAD Oct 2 19:37:55.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.453000 audit: BPF prog-id=50 op=LOAD Oct 2 19:37:55.453000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:37:55.453000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:37:55.458000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.458000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.458000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.458000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.459000 audit: BPF prog-id=51 op=LOAD Oct 2 19:37:55.460000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:37:55.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.461000 audit: BPF prog-id=52 op=LOAD Oct 2 19:37:55.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.462000 audit: BPF prog-id=53 op=LOAD Oct 2 19:37:55.462000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:37:55.462000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:37:55.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.465000 audit: BPF prog-id=54 op=LOAD Oct 2 19:37:55.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.466000 audit: BPF prog-id=55 op=LOAD Oct 2 19:37:55.466000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:37:55.466000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:37:55.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.469000 audit: BPF prog-id=56 op=LOAD Oct 2 19:37:55.469000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:37:55.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:55.473000 audit: BPF prog-id=57 op=LOAD Oct 2 19:37:55.473000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:37:55.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:55.504364 systemd[1]: Started kubelet.service. Oct 2 19:37:55.721666 kubelet[2204]: E1002 19:37:55.721586 2204 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:37:55.727154 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:37:55.727449 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:37:55.726000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:37:56.116594 env[1737]: time="2023-10-02T19:37:56.116438170Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 19:37:56.725161 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2659271912.mount: Deactivated successfully. Oct 2 19:38:00.616932 env[1737]: time="2023-10-02T19:38:00.616851336Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:00.619861 env[1737]: time="2023-10-02T19:38:00.619772820Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:00.624992 env[1737]: time="2023-10-02T19:38:00.623679184Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:00.627918 env[1737]: time="2023-10-02T19:38:00.627810090Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:00.629957 env[1737]: time="2023-10-02T19:38:00.629860188Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99\"" Oct 2 19:38:00.659088 env[1737]: time="2023-10-02T19:38:00.659038824Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 19:38:04.668381 env[1737]: time="2023-10-02T19:38:04.668309204Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:04.672430 env[1737]: time="2023-10-02T19:38:04.672341471Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:04.677875 env[1737]: time="2023-10-02T19:38:04.676190421Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:04.680977 env[1737]: time="2023-10-02T19:38:04.680034946Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:04.681816 env[1737]: time="2023-10-02T19:38:04.681774215Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013\"" Oct 2 19:38:04.712831 env[1737]: time="2023-10-02T19:38:04.712782519Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 19:38:05.894546 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:38:05.905014 kernel: kauditd_printk_skb: 292 callbacks suppressed Oct 2 19:38:05.905099 kernel: audit: type=1130 audit(1696275485.893:420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:05.893000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:05.894866 systemd[1]: Stopped kubelet.service. Oct 2 19:38:05.897474 systemd[1]: Started kubelet.service. Oct 2 19:38:05.913304 kernel: audit: type=1131 audit(1696275485.894:421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:05.894000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:05.896000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:05.921306 kernel: audit: type=1130 audit(1696275485.896:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:06.049215 kubelet[2233]: E1002 19:38:06.049143 2233 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:38:06.058361 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:38:06.058682 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:38:06.058000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:38:06.067940 kernel: audit: type=1131 audit(1696275486.058:423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:38:07.193047 env[1737]: time="2023-10-02T19:38:07.192980179Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:07.195798 env[1737]: time="2023-10-02T19:38:07.195734782Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:07.199087 env[1737]: time="2023-10-02T19:38:07.199037341Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:07.202258 env[1737]: time="2023-10-02T19:38:07.202198576Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:07.203998 env[1737]: time="2023-10-02T19:38:07.203952814Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803\"" Oct 2 19:38:07.233155 env[1737]: time="2023-10-02T19:38:07.233066402Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 19:38:08.647685 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount132043428.mount: Deactivated successfully. Oct 2 19:38:09.308470 env[1737]: time="2023-10-02T19:38:09.308383224Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:09.311666 env[1737]: time="2023-10-02T19:38:09.311604785Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:09.314297 env[1737]: time="2023-10-02T19:38:09.314249144Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:09.316579 env[1737]: time="2023-10-02T19:38:09.316520436Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:09.317619 env[1737]: time="2023-10-02T19:38:09.317571040Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343\"" Oct 2 19:38:09.347856 env[1737]: time="2023-10-02T19:38:09.347796830Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:38:09.851347 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount526228096.mount: Deactivated successfully. Oct 2 19:38:09.860836 env[1737]: time="2023-10-02T19:38:09.860760170Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:09.864690 env[1737]: time="2023-10-02T19:38:09.864631538Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:09.867266 env[1737]: time="2023-10-02T19:38:09.867207288Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:09.870029 env[1737]: time="2023-10-02T19:38:09.869983623Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:09.871076 env[1737]: time="2023-10-02T19:38:09.871035511Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 19:38:09.900096 env[1737]: time="2023-10-02T19:38:09.900047233Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 19:38:10.924889 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2546523514.mount: Deactivated successfully. Oct 2 19:38:12.104718 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Oct 2 19:38:12.104000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:12.113938 kernel: audit: type=1131 audit(1696275492.104:424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:12.140000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:38:12.140000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:38:12.146281 kernel: audit: type=1334 audit(1696275492.140:425): prog-id=53 op=UNLOAD Oct 2 19:38:12.146368 kernel: audit: type=1334 audit(1696275492.140:426): prog-id=52 op=UNLOAD Oct 2 19:38:12.146410 kernel: audit: type=1334 audit(1696275492.140:427): prog-id=51 op=UNLOAD Oct 2 19:38:12.140000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:38:13.940587 env[1737]: time="2023-10-02T19:38:13.940530572Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:13.944934 env[1737]: time="2023-10-02T19:38:13.944865844Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:13.948058 env[1737]: time="2023-10-02T19:38:13.947995104Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:13.950957 env[1737]: time="2023-10-02T19:38:13.950886830Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:13.952383 env[1737]: time="2023-10-02T19:38:13.952340517Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb\"" Oct 2 19:38:13.981263 env[1737]: time="2023-10-02T19:38:13.981206370Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 19:38:14.610195 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3612298802.mount: Deactivated successfully. Oct 2 19:38:15.346632 env[1737]: time="2023-10-02T19:38:15.346577486Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:15.351046 env[1737]: time="2023-10-02T19:38:15.350999907Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:15.354047 env[1737]: time="2023-10-02T19:38:15.353988046Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:15.356877 env[1737]: time="2023-10-02T19:38:15.356816203Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:15.358121 env[1737]: time="2023-10-02T19:38:15.358077648Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\"" Oct 2 19:38:16.144527 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:38:16.144868 systemd[1]: Stopped kubelet.service. Oct 2 19:38:16.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:16.144000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:16.162860 kernel: audit: type=1130 audit(1696275496.143:428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:16.163039 kernel: audit: type=1131 audit(1696275496.144:429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:16.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:16.163408 systemd[1]: Started kubelet.service. Oct 2 19:38:16.171887 kernel: audit: type=1130 audit(1696275496.162:430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:16.338348 kubelet[2312]: E1002 19:38:16.338278 2312 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:38:16.342744 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:38:16.343114 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:38:16.342000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:38:16.352135 kernel: audit: type=1131 audit(1696275496.342:431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:38:22.610656 systemd[1]: Stopped kubelet.service. Oct 2 19:38:22.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.627895 kernel: audit: type=1130 audit(1696275502.610:432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.628053 kernel: audit: type=1131 audit(1696275502.614:433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.657529 systemd[1]: Reloading. Oct 2 19:38:22.837618 /usr/lib/systemd/system-generators/torcx-generator[2348]: time="2023-10-02T19:38:22Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:38:22.837680 /usr/lib/systemd/system-generators/torcx-generator[2348]: time="2023-10-02T19:38:22Z" level=info msg="torcx already run" Oct 2 19:38:23.087457 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:38:23.087496 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:38:23.129666 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:38:23.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.293701 kernel: audit: type=1400 audit(1696275503.277:434): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.293791 kernel: audit: type=1400 audit(1696275503.277:435): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.301343 kernel: audit: type=1400 audit(1696275503.277:436): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.308961 kernel: audit: type=1400 audit(1696275503.277:437): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.316648 kernel: audit: type=1400 audit(1696275503.277:438): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.326295 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:38:23.326368 kernel: audit: type=1400 audit(1696275503.277:439): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.326411 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:38:23.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.285000 audit: BPF prog-id=58 op=LOAD Oct 2 19:38:23.285000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:38:23.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.292000 audit: BPF prog-id=59 op=LOAD Oct 2 19:38:23.292000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:38:23.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.293000 audit: BPF prog-id=60 op=LOAD Oct 2 19:38:23.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.300000 audit: BPF prog-id=61 op=LOAD Oct 2 19:38:23.300000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:38:23.300000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:38:23.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.308000 audit: BPF prog-id=62 op=LOAD Oct 2 19:38:23.308000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:38:23.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.315000 audit: BPF prog-id=63 op=LOAD Oct 2 19:38:23.315000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:38:23.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.328000 audit: BPF prog-id=64 op=LOAD Oct 2 19:38:23.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.328000 audit: BPF prog-id=65 op=LOAD Oct 2 19:38:23.328000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:38:23.328000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit: BPF prog-id=66 op=LOAD Oct 2 19:38:23.329000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit: BPF prog-id=67 op=LOAD Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.329000 audit: BPF prog-id=68 op=LOAD Oct 2 19:38:23.329000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:38:23.329000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:38:23.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.336000 audit: BPF prog-id=69 op=LOAD Oct 2 19:38:23.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.336000 audit: BPF prog-id=70 op=LOAD Oct 2 19:38:23.336000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:38:23.336000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:38:23.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.340000 audit: BPF prog-id=71 op=LOAD Oct 2 19:38:23.340000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:38:23.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:23.343000 audit: BPF prog-id=72 op=LOAD Oct 2 19:38:23.343000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:38:23.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:23.391093 systemd[1]: Started kubelet.service. Oct 2 19:38:23.537538 kubelet[2404]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:38:23.538065 kubelet[2404]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:38:23.538423 kubelet[2404]: I1002 19:38:23.538363 2404 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:38:23.540716 kubelet[2404]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:38:23.540888 kubelet[2404]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:38:24.775660 kubelet[2404]: I1002 19:38:24.775622 2404 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:38:24.776268 kubelet[2404]: I1002 19:38:24.776246 2404 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:38:24.776686 kubelet[2404]: I1002 19:38:24.776662 2404 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:38:24.784326 kubelet[2404]: E1002 19:38:24.784279 2404 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.16.28:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.16.28:6443: connect: connection refused Oct 2 19:38:24.784467 kubelet[2404]: I1002 19:38:24.784345 2404 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:38:24.787963 kubelet[2404]: W1002 19:38:24.787933 2404 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:38:24.789452 kubelet[2404]: I1002 19:38:24.789415 2404 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:38:24.790287 kubelet[2404]: I1002 19:38:24.790264 2404 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:38:24.790513 kubelet[2404]: I1002 19:38:24.790484 2404 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:38:24.790849 kubelet[2404]: I1002 19:38:24.790828 2404 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:38:24.791023 kubelet[2404]: I1002 19:38:24.791003 2404 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:38:24.791360 kubelet[2404]: I1002 19:38:24.791340 2404 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:38:24.798501 kubelet[2404]: I1002 19:38:24.798449 2404 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:38:24.798501 kubelet[2404]: I1002 19:38:24.798495 2404 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:38:24.798734 kubelet[2404]: I1002 19:38:24.798688 2404 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:38:24.798734 kubelet[2404]: I1002 19:38:24.798713 2404 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:38:24.800732 kubelet[2404]: W1002 19:38:24.800664 2404 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.16.28:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.16.28:6443: connect: connection refused Oct 2 19:38:24.800973 kubelet[2404]: E1002 19:38:24.800951 2404 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.16.28:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.16.28:6443: connect: connection refused Oct 2 19:38:24.801204 kubelet[2404]: W1002 19:38:24.801157 2404 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.16.28:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-16-28&limit=500&resourceVersion=0": dial tcp 172.31.16.28:6443: connect: connection refused Oct 2 19:38:24.801331 kubelet[2404]: E1002 19:38:24.801309 2404 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.16.28:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-16-28&limit=500&resourceVersion=0": dial tcp 172.31.16.28:6443: connect: connection refused Oct 2 19:38:24.801703 kubelet[2404]: I1002 19:38:24.801678 2404 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:38:24.802977 kubelet[2404]: W1002 19:38:24.802948 2404 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:38:24.804022 kubelet[2404]: I1002 19:38:24.803987 2404 server.go:1186] "Started kubelet" Oct 2 19:38:24.811783 kubelet[2404]: E1002 19:38:24.811293 2404 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-28.178a6195990924df", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-28", UID:"ip-172-31-16-28", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-28"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 803947743, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 803947743, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.16.28:6443/api/v1/namespaces/default/events": dial tcp 172.31.16.28:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:38:24.811783 kubelet[2404]: I1002 19:38:24.811726 2404 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:38:24.815176 kubelet[2404]: I1002 19:38:24.815113 2404 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:38:24.815000 audit[2404]: AVC avc: denied { mac_admin } for pid=2404 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:24.815000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:38:24.815000 audit[2404]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c77b30 a1=4000c6ebe8 a2=4000c77b00 a3=25 items=0 ppid=1 pid=2404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.815000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:38:24.817712 kubelet[2404]: I1002 19:38:24.817660 2404 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:38:24.816000 audit[2404]: AVC avc: denied { mac_admin } for pid=2404 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:24.816000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:38:24.816000 audit[2404]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000f32720 a1=4000c6ec00 a2=4000c77bc0 a3=25 items=0 ppid=1 pid=2404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.816000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:38:24.818169 kubelet[2404]: I1002 19:38:24.817807 2404 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:38:24.818169 kubelet[2404]: I1002 19:38:24.817984 2404 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:38:24.820270 kubelet[2404]: I1002 19:38:24.820214 2404 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:38:24.820465 kubelet[2404]: E1002 19:38:24.820421 2404 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:38:24.820465 kubelet[2404]: E1002 19:38:24.820463 2404 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:38:24.821423 kubelet[2404]: I1002 19:38:24.821375 2404 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:38:24.824236 kubelet[2404]: W1002 19:38:24.824139 2404 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.16.28:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.16.28:6443: connect: connection refused Oct 2 19:38:24.824236 kubelet[2404]: E1002 19:38:24.824234 2404 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.16.28:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.16.28:6443: connect: connection refused Oct 2 19:38:24.824434 kubelet[2404]: E1002 19:38:24.824344 2404 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://172.31.16.28:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-16-28?timeout=10s": dial tcp 172.31.16.28:6443: connect: connection refused Oct 2 19:38:24.838000 audit[2415]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2415 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.838000 audit[2415]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffffd0b0610 a2=0 a3=1 items=0 ppid=2404 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.838000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:38:24.850000 audit[2418]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.850000 audit[2418]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd6a4cde0 a2=0 a3=1 items=0 ppid=2404 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.850000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:38:24.858000 audit[2420]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2420 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.858000 audit[2420]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff6330d90 a2=0 a3=1 items=0 ppid=2404 pid=2420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.858000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:38:24.870000 audit[2422]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2422 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.870000 audit[2422]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff40d1510 a2=0 a3=1 items=0 ppid=2404 pid=2422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.870000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:38:24.880083 kubelet[2404]: I1002 19:38:24.880030 2404 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:38:24.880083 kubelet[2404]: I1002 19:38:24.880088 2404 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:38:24.880296 kubelet[2404]: I1002 19:38:24.880121 2404 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:38:24.888150 kubelet[2404]: I1002 19:38:24.888109 2404 policy_none.go:49] "None policy: Start" Oct 2 19:38:24.892687 kubelet[2404]: I1002 19:38:24.892621 2404 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:38:24.892687 kubelet[2404]: I1002 19:38:24.892667 2404 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:38:24.896000 audit[2426]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2426 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.896000 audit[2426]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffec74f850 a2=0 a3=1 items=0 ppid=2404 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.896000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:38:24.902856 systemd[1]: Created slice kubepods.slice. Oct 2 19:38:24.903000 audit[2427]: NETFILTER_CFG table=nat:31 family=2 entries=1 op=nft_register_chain pid=2427 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.903000 audit[2427]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc8e31ff0 a2=0 a3=1 items=0 ppid=2404 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.903000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:38:24.923070 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:38:24.926194 kubelet[2404]: I1002 19:38:24.926099 2404 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-16-28" Oct 2 19:38:24.928428 kubelet[2404]: E1002 19:38:24.928346 2404 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.16.28:6443/api/v1/nodes\": dial tcp 172.31.16.28:6443: connect: connection refused" node="ip-172-31-16-28" Oct 2 19:38:24.932139 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:38:24.931000 audit[2430]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_rule pid=2430 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.931000 audit[2430]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe05fe8b0 a2=0 a3=1 items=0 ppid=2404 pid=2430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.931000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:38:24.940791 kubelet[2404]: I1002 19:38:24.940725 2404 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:38:24.939000 audit[2404]: AVC avc: denied { mac_admin } for pid=2404 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:24.939000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:38:24.939000 audit[2404]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c4e930 a1=4000be79f8 a2=4000c4e900 a3=25 items=0 ppid=1 pid=2404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.939000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:38:24.941270 kubelet[2404]: I1002 19:38:24.940918 2404 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:38:24.941270 kubelet[2404]: I1002 19:38:24.941207 2404 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:38:24.943944 kubelet[2404]: E1002 19:38:24.943404 2404 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-16-28\" not found" Oct 2 19:38:24.953000 audit[2435]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2435 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.953000 audit[2435]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=ffffdab0dcd0 a2=0 a3=1 items=0 ppid=2404 pid=2435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.953000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:38:24.957000 audit[2436]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.957000 audit[2436]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffdecb0ef0 a2=0 a3=1 items=0 ppid=2404 pid=2436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.957000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:38:24.960000 audit[2437]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=2437 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.960000 audit[2437]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe6d1cdd0 a2=0 a3=1 items=0 ppid=2404 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.960000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:38:24.968000 audit[2439]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=2439 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.968000 audit[2439]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffff5ee2740 a2=0 a3=1 items=0 ppid=2404 pid=2439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.968000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:38:24.976000 audit[2441]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_rule pid=2441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.976000 audit[2441]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffed211b70 a2=0 a3=1 items=0 ppid=2404 pid=2441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.976000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:38:24.983000 audit[2443]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_rule pid=2443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.983000 audit[2443]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=fffff6864c90 a2=0 a3=1 items=0 ppid=2404 pid=2443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.983000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:38:24.991000 audit[2445]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=2445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.991000 audit[2445]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=fffffbc943a0 a2=0 a3=1 items=0 ppid=2404 pid=2445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.991000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:38:25.000000 audit[2447]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=2447 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:25.000000 audit[2447]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=540 a0=3 a1=fffff4673460 a2=0 a3=1 items=0 ppid=2404 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.000000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:38:25.001829 kubelet[2404]: I1002 19:38:25.001794 2404 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:38:25.004000 audit[2448]: NETFILTER_CFG table=mangle:41 family=10 entries=2 op=nft_register_chain pid=2448 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:25.004000 audit[2448]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffcffe27f0 a2=0 a3=1 items=0 ppid=2404 pid=2448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.004000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:38:25.004000 audit[2449]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=2449 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:25.004000 audit[2449]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff6cfce20 a2=0 a3=1 items=0 ppid=2404 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.004000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:38:25.007000 audit[2450]: NETFILTER_CFG table=nat:43 family=2 entries=1 op=nft_register_chain pid=2450 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:25.007000 audit[2450]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff376d970 a2=0 a3=1 items=0 ppid=2404 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.007000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:38:25.008000 audit[2451]: NETFILTER_CFG table=nat:44 family=10 entries=2 op=nft_register_chain pid=2451 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:25.008000 audit[2451]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffc8ece110 a2=0 a3=1 items=0 ppid=2404 pid=2451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.008000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:38:25.011000 audit[2453]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=2453 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:25.011000 audit[2453]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffecaf5e10 a2=0 a3=1 items=0 ppid=2404 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.011000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:38:25.015000 audit[2454]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_rule pid=2454 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:25.015000 audit[2454]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe38fb600 a2=0 a3=1 items=0 ppid=2404 pid=2454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.015000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:38:25.019000 audit[2455]: NETFILTER_CFG table=filter:47 family=10 entries=2 op=nft_register_chain pid=2455 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:25.019000 audit[2455]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=fffffc0368b0 a2=0 a3=1 items=0 ppid=2404 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.019000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:38:25.025008 kubelet[2404]: E1002 19:38:25.024880 2404 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://172.31.16.28:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-16-28?timeout=10s": dial tcp 172.31.16.28:6443: connect: connection refused Oct 2 19:38:25.027000 audit[2457]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_rule pid=2457 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:25.027000 audit[2457]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=fffffaa17e40 a2=0 a3=1 items=0 ppid=2404 pid=2457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.027000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:38:25.036000 audit[2458]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=2458 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:25.036000 audit[2458]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc7c78f90 a2=0 a3=1 items=0 ppid=2404 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.036000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:38:25.041000 audit[2459]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_chain pid=2459 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:25.041000 audit[2459]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd3f0d620 a2=0 a3=1 items=0 ppid=2404 pid=2459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.041000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:38:25.049000 audit[2461]: NETFILTER_CFG table=nat:51 family=10 entries=1 op=nft_register_rule pid=2461 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:25.049000 audit[2461]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffef40d620 a2=0 a3=1 items=0 ppid=2404 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.049000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:38:25.058000 audit[2463]: NETFILTER_CFG table=nat:52 family=10 entries=2 op=nft_register_chain pid=2463 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:25.058000 audit[2463]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffff689a90 a2=0 a3=1 items=0 ppid=2404 pid=2463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.058000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:38:25.068000 audit[2465]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_rule pid=2465 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:25.068000 audit[2465]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=ffffeca20f00 a2=0 a3=1 items=0 ppid=2404 pid=2465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.068000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:38:25.077000 audit[2467]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=2467 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:25.077000 audit[2467]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=fffff997c220 a2=0 a3=1 items=0 ppid=2404 pid=2467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.077000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:38:25.088000 audit[2469]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=2469 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:25.088000 audit[2469]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=556 a0=3 a1=ffffde2d0f40 a2=0 a3=1 items=0 ppid=2404 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.088000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:38:25.091001 kubelet[2404]: I1002 19:38:25.090963 2404 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:38:25.091001 kubelet[2404]: I1002 19:38:25.091007 2404 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:38:25.091217 kubelet[2404]: I1002 19:38:25.091047 2404 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:38:25.091217 kubelet[2404]: E1002 19:38:25.091136 2404 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:38:25.092139 kubelet[2404]: W1002 19:38:25.092097 2404 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.16.28:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.16.28:6443: connect: connection refused Oct 2 19:38:25.092331 kubelet[2404]: E1002 19:38:25.092309 2404 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.16.28:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.16.28:6443: connect: connection refused Oct 2 19:38:25.094000 audit[2470]: NETFILTER_CFG table=mangle:56 family=10 entries=1 op=nft_register_chain pid=2470 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:25.094000 audit[2470]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff6ec8300 a2=0 a3=1 items=0 ppid=2404 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.094000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:38:25.098000 audit[2471]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_chain pid=2471 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:25.098000 audit[2471]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe9af33b0 a2=0 a3=1 items=0 ppid=2404 pid=2471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.098000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:38:25.102000 audit[2472]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=2472 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:25.102000 audit[2472]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc9f2cb80 a2=0 a3=1 items=0 ppid=2404 pid=2472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.102000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:38:25.130560 kubelet[2404]: I1002 19:38:25.130528 2404 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-16-28" Oct 2 19:38:25.131255 kubelet[2404]: E1002 19:38:25.131224 2404 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.16.28:6443/api/v1/nodes\": dial tcp 172.31.16.28:6443: connect: connection refused" node="ip-172-31-16-28" Oct 2 19:38:25.191320 kubelet[2404]: I1002 19:38:25.191267 2404 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:38:25.193186 kubelet[2404]: I1002 19:38:25.193152 2404 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:38:25.195698 kubelet[2404]: I1002 19:38:25.195650 2404 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:38:25.197515 kubelet[2404]: I1002 19:38:25.197468 2404 status_manager.go:698] "Failed to get status for pod" podUID=195be483dd6b20a3fb4fa2c12e9d1f77 pod="kube-system/kube-apiserver-ip-172-31-16-28" err="Get \"https://172.31.16.28:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ip-172-31-16-28\": dial tcp 172.31.16.28:6443: connect: connection refused" Oct 2 19:38:25.199499 kubelet[2404]: I1002 19:38:25.198949 2404 status_manager.go:698] "Failed to get status for pod" podUID=870275ba912e259caf8a26f62064f3c1 pod="kube-system/kube-controller-manager-ip-172-31-16-28" err="Get \"https://172.31.16.28:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ip-172-31-16-28\": dial tcp 172.31.16.28:6443: connect: connection refused" Oct 2 19:38:25.205301 kubelet[2404]: I1002 19:38:25.205211 2404 status_manager.go:698] "Failed to get status for pod" podUID=05ec3643b932e3a74f248fbf56fa00e2 pod="kube-system/kube-scheduler-ip-172-31-16-28" err="Get \"https://172.31.16.28:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ip-172-31-16-28\": dial tcp 172.31.16.28:6443: connect: connection refused" Oct 2 19:38:25.207826 systemd[1]: Created slice kubepods-burstable-pod195be483dd6b20a3fb4fa2c12e9d1f77.slice. Oct 2 19:38:25.225783 systemd[1]: Created slice kubepods-burstable-pod870275ba912e259caf8a26f62064f3c1.slice. Oct 2 19:38:25.228002 kubelet[2404]: I1002 19:38:25.225492 2404 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/195be483dd6b20a3fb4fa2c12e9d1f77-ca-certs\") pod \"kube-apiserver-ip-172-31-16-28\" (UID: \"195be483dd6b20a3fb4fa2c12e9d1f77\") " pod="kube-system/kube-apiserver-ip-172-31-16-28" Oct 2 19:38:25.228132 kubelet[2404]: I1002 19:38:25.228060 2404 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/870275ba912e259caf8a26f62064f3c1-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-16-28\" (UID: \"870275ba912e259caf8a26f62064f3c1\") " pod="kube-system/kube-controller-manager-ip-172-31-16-28" Oct 2 19:38:25.228132 kubelet[2404]: I1002 19:38:25.228109 2404 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/870275ba912e259caf8a26f62064f3c1-k8s-certs\") pod \"kube-controller-manager-ip-172-31-16-28\" (UID: \"870275ba912e259caf8a26f62064f3c1\") " pod="kube-system/kube-controller-manager-ip-172-31-16-28" Oct 2 19:38:25.228247 kubelet[2404]: I1002 19:38:25.228156 2404 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/870275ba912e259caf8a26f62064f3c1-kubeconfig\") pod \"kube-controller-manager-ip-172-31-16-28\" (UID: \"870275ba912e259caf8a26f62064f3c1\") " pod="kube-system/kube-controller-manager-ip-172-31-16-28" Oct 2 19:38:25.228247 kubelet[2404]: I1002 19:38:25.228206 2404 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/05ec3643b932e3a74f248fbf56fa00e2-kubeconfig\") pod \"kube-scheduler-ip-172-31-16-28\" (UID: \"05ec3643b932e3a74f248fbf56fa00e2\") " pod="kube-system/kube-scheduler-ip-172-31-16-28" Oct 2 19:38:25.228386 kubelet[2404]: I1002 19:38:25.228249 2404 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/195be483dd6b20a3fb4fa2c12e9d1f77-k8s-certs\") pod \"kube-apiserver-ip-172-31-16-28\" (UID: \"195be483dd6b20a3fb4fa2c12e9d1f77\") " pod="kube-system/kube-apiserver-ip-172-31-16-28" Oct 2 19:38:25.228386 kubelet[2404]: I1002 19:38:25.228296 2404 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/195be483dd6b20a3fb4fa2c12e9d1f77-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-16-28\" (UID: \"195be483dd6b20a3fb4fa2c12e9d1f77\") " pod="kube-system/kube-apiserver-ip-172-31-16-28" Oct 2 19:38:25.228386 kubelet[2404]: I1002 19:38:25.228339 2404 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/870275ba912e259caf8a26f62064f3c1-ca-certs\") pod \"kube-controller-manager-ip-172-31-16-28\" (UID: \"870275ba912e259caf8a26f62064f3c1\") " pod="kube-system/kube-controller-manager-ip-172-31-16-28" Oct 2 19:38:25.228386 kubelet[2404]: I1002 19:38:25.228386 2404 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/870275ba912e259caf8a26f62064f3c1-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-16-28\" (UID: \"870275ba912e259caf8a26f62064f3c1\") " pod="kube-system/kube-controller-manager-ip-172-31-16-28" Oct 2 19:38:25.234927 systemd[1]: Created slice kubepods-burstable-pod05ec3643b932e3a74f248fbf56fa00e2.slice. Oct 2 19:38:25.425859 kubelet[2404]: E1002 19:38:25.425811 2404 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://172.31.16.28:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-16-28?timeout=10s": dial tcp 172.31.16.28:6443: connect: connection refused Oct 2 19:38:25.521528 env[1737]: time="2023-10-02T19:38:25.521469188Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-16-28,Uid:195be483dd6b20a3fb4fa2c12e9d1f77,Namespace:kube-system,Attempt:0,}" Oct 2 19:38:25.534805 kubelet[2404]: I1002 19:38:25.534768 2404 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-16-28" Oct 2 19:38:25.534974 env[1737]: time="2023-10-02T19:38:25.534825704Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-16-28,Uid:870275ba912e259caf8a26f62064f3c1,Namespace:kube-system,Attempt:0,}" Oct 2 19:38:25.535724 kubelet[2404]: E1002 19:38:25.535691 2404 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.16.28:6443/api/v1/nodes\": dial tcp 172.31.16.28:6443: connect: connection refused" node="ip-172-31-16-28" Oct 2 19:38:25.539818 env[1737]: time="2023-10-02T19:38:25.539765480Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-16-28,Uid:05ec3643b932e3a74f248fbf56fa00e2,Namespace:kube-system,Attempt:0,}" Oct 2 19:38:25.992988 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1389584208.mount: Deactivated successfully. Oct 2 19:38:26.001337 env[1737]: time="2023-10-02T19:38:26.001267212Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:26.007113 env[1737]: time="2023-10-02T19:38:26.007042211Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:26.009313 env[1737]: time="2023-10-02T19:38:26.009251258Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:26.012392 env[1737]: time="2023-10-02T19:38:26.012332763Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:26.016262 env[1737]: time="2023-10-02T19:38:26.016212359Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:26.020636 env[1737]: time="2023-10-02T19:38:26.020582643Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:26.022954 env[1737]: time="2023-10-02T19:38:26.022877493Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:26.030212 env[1737]: time="2023-10-02T19:38:26.030151555Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:26.037256 env[1737]: time="2023-10-02T19:38:26.037198280Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:26.039399 env[1737]: time="2023-10-02T19:38:26.039333247Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:26.041376 env[1737]: time="2023-10-02T19:38:26.041285556Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:26.043235 env[1737]: time="2023-10-02T19:38:26.043159526Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:26.078396 kubelet[2404]: W1002 19:38:26.078266 2404 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.16.28:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-16-28&limit=500&resourceVersion=0": dial tcp 172.31.16.28:6443: connect: connection refused Oct 2 19:38:26.078396 kubelet[2404]: E1002 19:38:26.078352 2404 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.16.28:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-16-28&limit=500&resourceVersion=0": dial tcp 172.31.16.28:6443: connect: connection refused Oct 2 19:38:26.111543 env[1737]: time="2023-10-02T19:38:26.111403674Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:38:26.111543 env[1737]: time="2023-10-02T19:38:26.111483130Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:38:26.111814 env[1737]: time="2023-10-02T19:38:26.111524195Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:38:26.112310 env[1737]: time="2023-10-02T19:38:26.112212326Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a6637313f917ad69c324e2a2968e3c06d4cd9f7b0c9eb3614859245d58ffae72 pid=2488 runtime=io.containerd.runc.v2 Oct 2 19:38:26.132964 env[1737]: time="2023-10-02T19:38:26.132828632Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:38:26.133214 env[1737]: time="2023-10-02T19:38:26.133155861Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:38:26.133368 env[1737]: time="2023-10-02T19:38:26.133323267Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:38:26.144175 env[1737]: time="2023-10-02T19:38:26.134022799Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3977c6c41a8d7955afbe3688155f69b4f8c969909ea480b5f87efddc5608e321 pid=2496 runtime=io.containerd.runc.v2 Oct 2 19:38:26.148427 env[1737]: time="2023-10-02T19:38:26.147869819Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:38:26.148427 env[1737]: time="2023-10-02T19:38:26.148095152Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:38:26.148427 env[1737]: time="2023-10-02T19:38:26.148138173Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:38:26.148999 env[1737]: time="2023-10-02T19:38:26.148809468Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fd9ec23bbf4b1dcc6d4bb8e6acb456cf5bba260904e585afdbef423ff21622ff pid=2507 runtime=io.containerd.runc.v2 Oct 2 19:38:26.171342 systemd[1]: Started cri-containerd-a6637313f917ad69c324e2a2968e3c06d4cd9f7b0c9eb3614859245d58ffae72.scope. Oct 2 19:38:26.195000 systemd[1]: Started cri-containerd-3977c6c41a8d7955afbe3688155f69b4f8c969909ea480b5f87efddc5608e321.scope. Oct 2 19:38:26.230618 kubelet[2404]: E1002 19:38:26.230555 2404 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://172.31.16.28:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-16-28?timeout=10s": dial tcp 172.31.16.28:6443: connect: connection refused Oct 2 19:38:26.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.233000 audit: BPF prog-id=73 op=LOAD Oct 2 19:38:26.236000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.236000 audit[2501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2488 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136363337333133663931376164363963333234653261323936386533 Oct 2 19:38:26.236000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.236000 audit[2501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2488 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136363337333133663931376164363963333234653261323936386533 Oct 2 19:38:26.236000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.236000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.236000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.236000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.236000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.236000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.236000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.236000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.236000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.236000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.236000 audit: BPF prog-id=74 op=LOAD Oct 2 19:38:26.236000 audit[2501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2488 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136363337333133663931376164363963333234653261323936386533 Oct 2 19:38:26.236000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.236000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.236000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.236000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.236000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.236000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.236000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.236000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.236000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.236000 audit: BPF prog-id=75 op=LOAD Oct 2 19:38:26.236000 audit[2501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2488 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136363337333133663931376164363963333234653261323936386533 Oct 2 19:38:26.237000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:38:26.237000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:38:26.237000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.237000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.237000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.237000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.237000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.237000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.237000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.237000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.237000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.237000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.237000 audit: BPF prog-id=76 op=LOAD Oct 2 19:38:26.237000 audit[2501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2488 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.237000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136363337333133663931376164363963333234653261323936386533 Oct 2 19:38:26.259123 kubelet[2404]: W1002 19:38:26.258936 2404 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.16.28:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.16.28:6443: connect: connection refused Oct 2 19:38:26.259123 kubelet[2404]: E1002 19:38:26.258995 2404 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.16.28:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.16.28:6443: connect: connection refused Oct 2 19:38:26.266341 systemd[1]: Started cri-containerd-fd9ec23bbf4b1dcc6d4bb8e6acb456cf5bba260904e585afdbef423ff21622ff.scope. Oct 2 19:38:26.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.294000 audit: BPF prog-id=77 op=LOAD Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=2496 pid=2524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.296000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339373763366334316138643739353561666265333638383135356636 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2496 pid=2524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.296000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339373763366334316138643739353561666265333638383135356636 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit: BPF prog-id=78 op=LOAD Oct 2 19:38:26.296000 audit[2524]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2496 pid=2524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.296000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339373763366334316138643739353561666265333638383135356636 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit: BPF prog-id=79 op=LOAD Oct 2 19:38:26.296000 audit[2524]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2496 pid=2524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.296000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339373763366334316138643739353561666265333638383135356636 Oct 2 19:38:26.296000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:38:26.296000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.296000 audit: BPF prog-id=80 op=LOAD Oct 2 19:38:26.296000 audit[2524]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2496 pid=2524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.296000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339373763366334316138643739353561666265333638383135356636 Oct 2 19:38:26.340821 kubelet[2404]: I1002 19:38:26.340763 2404 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-16-28" Oct 2 19:38:26.341363 kubelet[2404]: E1002 19:38:26.341327 2404 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.16.28:6443/api/v1/nodes\": dial tcp 172.31.16.28:6443: connect: connection refused" node="ip-172-31-16-28" Oct 2 19:38:26.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.375000 audit: BPF prog-id=81 op=LOAD Oct 2 19:38:26.377000 audit[2537]: AVC avc: denied { bpf } for pid=2537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.377000 audit[2537]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2507 pid=2537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664396563323362626634623164636336643462623865366163623435 Oct 2 19:38:26.377000 audit[2537]: AVC avc: denied { perfmon } for pid=2537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.377000 audit[2537]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2507 pid=2537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664396563323362626634623164636336643462623865366163623435 Oct 2 19:38:26.381000 audit[2537]: AVC avc: denied { bpf } for pid=2537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.381000 audit[2537]: AVC avc: denied { bpf } for pid=2537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.381000 audit[2537]: AVC avc: denied { bpf } for pid=2537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.381000 audit[2537]: AVC avc: denied { perfmon } for pid=2537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.381000 audit[2537]: AVC avc: denied { perfmon } for pid=2537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.381000 audit[2537]: AVC avc: denied { perfmon } for pid=2537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.381000 audit[2537]: AVC avc: denied { perfmon } for pid=2537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.381000 audit[2537]: AVC avc: denied { perfmon } for pid=2537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.381000 audit[2537]: AVC avc: denied { bpf } for pid=2537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.381000 audit[2537]: AVC avc: denied { bpf } for pid=2537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.381000 audit: BPF prog-id=82 op=LOAD Oct 2 19:38:26.381000 audit[2537]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2507 pid=2537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664396563323362626634623164636336643462623865366163623435 Oct 2 19:38:26.383000 audit[2537]: AVC avc: denied { bpf } for pid=2537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.383000 audit[2537]: AVC avc: denied { bpf } for pid=2537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.383000 audit[2537]: AVC avc: denied { perfmon } for pid=2537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.383000 audit[2537]: AVC avc: denied { perfmon } for pid=2537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.383000 audit[2537]: AVC avc: denied { perfmon } for pid=2537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.383000 audit[2537]: AVC avc: denied { perfmon } for pid=2537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.383000 audit[2537]: AVC avc: denied { perfmon } for pid=2537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.383000 audit[2537]: AVC avc: denied { bpf } for pid=2537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.383000 audit[2537]: AVC avc: denied { bpf } for pid=2537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.383000 audit: BPF prog-id=83 op=LOAD Oct 2 19:38:26.383000 audit[2537]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2507 pid=2537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664396563323362626634623164636336643462623865366163623435 Oct 2 19:38:26.384000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:38:26.385704 env[1737]: time="2023-10-02T19:38:26.385571496Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-16-28,Uid:05ec3643b932e3a74f248fbf56fa00e2,Namespace:kube-system,Attempt:0,} returns sandbox id \"3977c6c41a8d7955afbe3688155f69b4f8c969909ea480b5f87efddc5608e321\"" Oct 2 19:38:26.384000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:38:26.385000 audit[2537]: AVC avc: denied { bpf } for pid=2537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.385000 audit[2537]: AVC avc: denied { bpf } for pid=2537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.385000 audit[2537]: AVC avc: denied { bpf } for pid=2537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.385000 audit[2537]: AVC avc: denied { perfmon } for pid=2537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.385000 audit[2537]: AVC avc: denied { perfmon } for pid=2537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.385000 audit[2537]: AVC avc: denied { perfmon } for pid=2537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.385000 audit[2537]: AVC avc: denied { perfmon } for pid=2537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.385000 audit[2537]: AVC avc: denied { perfmon } for pid=2537 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.385000 audit[2537]: AVC avc: denied { bpf } for pid=2537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.385000 audit[2537]: AVC avc: denied { bpf } for pid=2537 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.385000 audit: BPF prog-id=84 op=LOAD Oct 2 19:38:26.385000 audit[2537]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2507 pid=2537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.385000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664396563323362626634623164636336643462623865366163623435 Oct 2 19:38:26.394041 env[1737]: time="2023-10-02T19:38:26.393876254Z" level=info msg="CreateContainer within sandbox \"3977c6c41a8d7955afbe3688155f69b4f8c969909ea480b5f87efddc5608e321\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:38:26.395554 env[1737]: time="2023-10-02T19:38:26.395482865Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-16-28,Uid:195be483dd6b20a3fb4fa2c12e9d1f77,Namespace:kube-system,Attempt:0,} returns sandbox id \"a6637313f917ad69c324e2a2968e3c06d4cd9f7b0c9eb3614859245d58ffae72\"" Oct 2 19:38:26.398111 kubelet[2404]: W1002 19:38:26.398001 2404 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.16.28:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.16.28:6443: connect: connection refused Oct 2 19:38:26.398291 kubelet[2404]: E1002 19:38:26.398139 2404 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.16.28:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.16.28:6443: connect: connection refused Oct 2 19:38:26.411063 env[1737]: time="2023-10-02T19:38:26.411010959Z" level=info msg="CreateContainer within sandbox \"a6637313f917ad69c324e2a2968e3c06d4cd9f7b0c9eb3614859245d58ffae72\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:38:26.415430 update_engine[1727]: I1002 19:38:26.414005 1727 update_attempter.cc:505] Updating boot flags... Oct 2 19:38:26.465157 env[1737]: time="2023-10-02T19:38:26.465050018Z" level=info msg="CreateContainer within sandbox \"3977c6c41a8d7955afbe3688155f69b4f8c969909ea480b5f87efddc5608e321\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"f4b7177443c9f831accd24da8b3f3dc778f7f90f15d386e6d63646ffa1adfa67\"" Oct 2 19:38:26.466269 env[1737]: time="2023-10-02T19:38:26.466196567Z" level=info msg="StartContainer for \"f4b7177443c9f831accd24da8b3f3dc778f7f90f15d386e6d63646ffa1adfa67\"" Oct 2 19:38:26.502744 env[1737]: time="2023-10-02T19:38:26.502662783Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-16-28,Uid:870275ba912e259caf8a26f62064f3c1,Namespace:kube-system,Attempt:0,} returns sandbox id \"fd9ec23bbf4b1dcc6d4bb8e6acb456cf5bba260904e585afdbef423ff21622ff\"" Oct 2 19:38:26.512966 env[1737]: time="2023-10-02T19:38:26.507737039Z" level=info msg="CreateContainer within sandbox \"a6637313f917ad69c324e2a2968e3c06d4cd9f7b0c9eb3614859245d58ffae72\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"cd9366f5b8b16bd04d5647d7a76df878cf079d73dd4bc4da04bc21ef9453e74b\"" Oct 2 19:38:26.528525 env[1737]: time="2023-10-02T19:38:26.528412183Z" level=info msg="CreateContainer within sandbox \"fd9ec23bbf4b1dcc6d4bb8e6acb456cf5bba260904e585afdbef423ff21622ff\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:38:26.529095 env[1737]: time="2023-10-02T19:38:26.528696450Z" level=info msg="StartContainer for \"cd9366f5b8b16bd04d5647d7a76df878cf079d73dd4bc4da04bc21ef9453e74b\"" Oct 2 19:38:26.559865 kubelet[2404]: W1002 19:38:26.559754 2404 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.16.28:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.16.28:6443: connect: connection refused Oct 2 19:38:26.560026 kubelet[2404]: E1002 19:38:26.559871 2404 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.16.28:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.16.28:6443: connect: connection refused Oct 2 19:38:26.578991 env[1737]: time="2023-10-02T19:38:26.578879481Z" level=info msg="CreateContainer within sandbox \"fd9ec23bbf4b1dcc6d4bb8e6acb456cf5bba260904e585afdbef423ff21622ff\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"8a5ad4ef63c3badaa73ad2902e7bcf9be9285942d4edabc392a4904c313eb55c\"" Oct 2 19:38:26.580000 env[1737]: time="2023-10-02T19:38:26.579842411Z" level=info msg="StartContainer for \"8a5ad4ef63c3badaa73ad2902e7bcf9be9285942d4edabc392a4904c313eb55c\"" Oct 2 19:38:26.627005 systemd[1]: Started cri-containerd-f4b7177443c9f831accd24da8b3f3dc778f7f90f15d386e6d63646ffa1adfa67.scope. Oct 2 19:38:26.682292 systemd[1]: Started cri-containerd-cd9366f5b8b16bd04d5647d7a76df878cf079d73dd4bc4da04bc21ef9453e74b.scope. Oct 2 19:38:26.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.727000 audit: BPF prog-id=85 op=LOAD Oct 2 19:38:26.730000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.730000 audit[2627]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2496 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634623731373734343363396638333161636364323464613862336633 Oct 2 19:38:26.730000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.730000 audit[2627]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2496 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634623731373734343363396638333161636364323464613862336633 Oct 2 19:38:26.731000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.731000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.731000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.731000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.731000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.731000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.731000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.731000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.731000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.731000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.731000 audit: BPF prog-id=86 op=LOAD Oct 2 19:38:26.731000 audit[2627]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2496 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.731000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634623731373734343363396638333161636364323464613862336633 Oct 2 19:38:26.732000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.732000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.732000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.732000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.732000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.732000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.732000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.732000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.732000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.732000 audit: BPF prog-id=87 op=LOAD Oct 2 19:38:26.732000 audit[2627]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2496 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634623731373734343363396638333161636364323464613862336633 Oct 2 19:38:26.740000 audit: BPF prog-id=87 op=UNLOAD Oct 2 19:38:26.740000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:38:26.741000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.741000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.741000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.741000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.741000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.741000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.741000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.741000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.741000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.741000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.741000 audit: BPF prog-id=88 op=LOAD Oct 2 19:38:26.741000 audit[2627]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2496 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634623731373734343363396638333161636364323464613862336633 Oct 2 19:38:26.760829 systemd[1]: Started cri-containerd-8a5ad4ef63c3badaa73ad2902e7bcf9be9285942d4edabc392a4904c313eb55c.scope. Oct 2 19:38:26.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.778000 audit: BPF prog-id=89 op=LOAD Oct 2 19:38:26.781000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.781000 audit[2665]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2488 pid=2665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.781000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364393336366635623862313662643034643536343764376137366466 Oct 2 19:38:26.781000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.781000 audit[2665]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2488 pid=2665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.781000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364393336366635623862313662643034643536343764376137366466 Oct 2 19:38:26.781000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.781000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.781000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.781000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.781000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.781000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.781000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.781000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.781000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.781000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.781000 audit: BPF prog-id=90 op=LOAD Oct 2 19:38:26.781000 audit[2665]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2488 pid=2665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.781000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364393336366635623862313662643034643536343764376137366466 Oct 2 19:38:26.782000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.782000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.782000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.782000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.782000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.782000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.782000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.782000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.782000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.782000 audit: BPF prog-id=91 op=LOAD Oct 2 19:38:26.782000 audit[2665]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2488 pid=2665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364393336366635623862313662643034643536343764376137366466 Oct 2 19:38:26.782000 audit: BPF prog-id=91 op=UNLOAD Oct 2 19:38:26.782000 audit: BPF prog-id=90 op=UNLOAD Oct 2 19:38:26.782000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.782000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.782000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.782000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.782000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.782000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.782000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.782000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.782000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.782000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.782000 audit: BPF prog-id=92 op=LOAD Oct 2 19:38:26.782000 audit[2665]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2488 pid=2665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364393336366635623862313662643034643536343764376137366466 Oct 2 19:38:26.846156 kubelet[2404]: E1002 19:38:26.846070 2404 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.16.28:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.16.28:6443: connect: connection refused Oct 2 19:38:26.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.888000 audit: BPF prog-id=93 op=LOAD Oct 2 19:38:26.894000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.894000 audit[2675]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2507 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.894000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861356164346566363363336261646161373361643239303265376263 Oct 2 19:38:26.894000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.894000 audit[2675]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2507 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.894000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861356164346566363363336261646161373361643239303265376263 Oct 2 19:38:26.894000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.894000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.894000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.894000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.894000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.894000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.894000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.894000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.894000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.894000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.894000 audit: BPF prog-id=94 op=LOAD Oct 2 19:38:26.894000 audit[2675]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2507 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.894000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861356164346566363363336261646161373361643239303265376263 Oct 2 19:38:26.895000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.895000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.895000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.895000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.895000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.895000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.895000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.895000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.895000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.895000 audit: BPF prog-id=95 op=LOAD Oct 2 19:38:26.895000 audit[2675]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2507 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.895000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861356164346566363363336261646161373361643239303265376263 Oct 2 19:38:26.895000 audit: BPF prog-id=95 op=UNLOAD Oct 2 19:38:26.895000 audit: BPF prog-id=94 op=UNLOAD Oct 2 19:38:26.895000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.895000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.895000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.895000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.895000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.895000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.895000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.895000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.895000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.895000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.895000 audit: BPF prog-id=96 op=LOAD Oct 2 19:38:26.895000 audit[2675]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2507 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.895000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861356164346566363363336261646161373361643239303265376263 Oct 2 19:38:27.054954 env[1737]: time="2023-10-02T19:38:27.054748735Z" level=info msg="StartContainer for \"f4b7177443c9f831accd24da8b3f3dc778f7f90f15d386e6d63646ffa1adfa67\" returns successfully" Oct 2 19:38:27.073526 env[1737]: time="2023-10-02T19:38:27.073444318Z" level=info msg="StartContainer for \"8a5ad4ef63c3badaa73ad2902e7bcf9be9285942d4edabc392a4904c313eb55c\" returns successfully" Oct 2 19:38:27.081107 env[1737]: time="2023-10-02T19:38:27.081028565Z" level=info msg="StartContainer for \"cd9366f5b8b16bd04d5647d7a76df878cf079d73dd4bc4da04bc21ef9453e74b\" returns successfully" Oct 2 19:38:27.117964 kubelet[2404]: I1002 19:38:27.116053 2404 status_manager.go:698] "Failed to get status for pod" podUID=195be483dd6b20a3fb4fa2c12e9d1f77 pod="kube-system/kube-apiserver-ip-172-31-16-28" err="Get \"https://172.31.16.28:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ip-172-31-16-28\": dial tcp 172.31.16.28:6443: connect: connection refused" Oct 2 19:38:27.127017 kubelet[2404]: I1002 19:38:27.126982 2404 status_manager.go:698] "Failed to get status for pod" podUID=05ec3643b932e3a74f248fbf56fa00e2 pod="kube-system/kube-scheduler-ip-172-31-16-28" err="Get \"https://172.31.16.28:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ip-172-31-16-28\": dial tcp 172.31.16.28:6443: connect: connection refused" Oct 2 19:38:27.134609 kubelet[2404]: I1002 19:38:27.134544 2404 status_manager.go:698] "Failed to get status for pod" podUID=870275ba912e259caf8a26f62064f3c1 pod="kube-system/kube-controller-manager-ip-172-31-16-28" err="Get \"https://172.31.16.28:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ip-172-31-16-28\": dial tcp 172.31.16.28:6443: connect: connection refused" Oct 2 19:38:27.943403 kubelet[2404]: I1002 19:38:27.943332 2404 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-16-28" Oct 2 19:38:30.101000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:30.104942 kernel: kauditd_printk_skb: 620 callbacks suppressed Oct 2 19:38:30.105030 kernel: audit: type=1400 audit(1696275510.101:750): avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:30.101000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000022b40 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:38:30.129879 kernel: audit: type=1300 audit(1696275510.101:750): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000022b40 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:38:30.101000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:30.144089 kernel: audit: type=1327 audit(1696275510.101:750): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:30.114000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:30.155212 kernel: audit: type=1400 audit(1696275510.114:751): avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:30.155362 kernel: audit: type=1300 audit(1696275510.114:751): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000af0040 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:38:30.114000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000af0040 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:38:30.114000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:30.177665 kernel: audit: type=1327 audit(1696275510.114:751): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:31.124000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:31.124000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=4002df8720 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:38:31.150744 kernel: audit: type=1400 audit(1696275511.124:752): avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:31.150856 kernel: audit: type=1300 audit(1696275511.124:752): arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=4002df8720 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:38:31.124000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:38:31.174052 kernel: audit: type=1327 audit(1696275511.124:752): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:38:31.124000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:31.194707 kernel: audit: type=1400 audit(1696275511.124:753): avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:31.124000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4002df9770 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:38:31.124000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:38:31.134000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:31.134000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4005b19fb0 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:38:31.134000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:38:31.135000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:31.135000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4001933500 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:38:31.135000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:38:31.261000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:31.261000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4b a1=40035e4e40 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:38:31.261000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:38:31.283000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:31.283000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4002092b40 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:38:31.283000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:38:31.455673 kubelet[2404]: E1002 19:38:31.455583 2404 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-16-28\" not found" node="ip-172-31-16-28" Oct 2 19:38:31.542085 kubelet[2404]: E1002 19:38:31.541920 2404 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-28.178a6195990924df", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-28", UID:"ip-172-31-16-28", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-28"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 803947743, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 803947743, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:38:31.569677 kubelet[2404]: I1002 19:38:31.569606 2404 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-16-28" Oct 2 19:38:31.626826 kubelet[2404]: E1002 19:38:31.626642 2404 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-28.178a61959a04e655", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-28", UID:"ip-172-31-16-28", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"InvalidDiskCapacity", Message:"invalid capacity 0 on image filesystem", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-28"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 820446805, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 820446805, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:38:31.685164 kubelet[2404]: E1002 19:38:31.684984 2404 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-28.178a61959d7d5b48", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-28", UID:"ip-172-31-16-28", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ip-172-31-16-28 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-28"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 878672712, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 878672712, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:38:31.741988 kubelet[2404]: E1002 19:38:31.741710 2404 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-28.178a61959d7db0b1", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-28", UID:"ip-172-31-16-28", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node ip-172-31-16-28 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-28"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 878694577, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 878694577, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:38:31.798235 kubelet[2404]: E1002 19:38:31.798077 2404 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-28.178a61959d7dcc11", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-28", UID:"ip-172-31-16-28", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node ip-172-31-16-28 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-28"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 878701585, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 878701585, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:38:31.803300 kubelet[2404]: I1002 19:38:31.803243 2404 apiserver.go:52] "Watching apiserver" Oct 2 19:38:31.822407 kubelet[2404]: I1002 19:38:31.822360 2404 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:38:31.858577 kubelet[2404]: E1002 19:38:31.858415 2404 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-28.178a61959d7d5b48", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-28", UID:"ip-172-31-16-28", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ip-172-31-16-28 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-28"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 878672712, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 926046284, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:38:31.873652 kubelet[2404]: I1002 19:38:31.873598 2404 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:38:31.921403 kubelet[2404]: E1002 19:38:31.921214 2404 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-28.178a61959d7db0b1", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-28", UID:"ip-172-31-16-28", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node ip-172-31-16-28 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-28"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 878694577, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 926054036, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:38:31.982039 kubelet[2404]: E1002 19:38:31.981894 2404 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-28.178a61959d7dcc11", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-28", UID:"ip-172-31-16-28", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node ip-172-31-16-28 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-28"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 878701585, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 926058608, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:38:32.039191 kubelet[2404]: E1002 19:38:32.038945 2404 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-28.178a6195a16ee559", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-28", UID:"ip-172-31-16-28", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeAllocatableEnforced", Message:"Updated Node Allocatable limit across pods", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-28"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 944833881, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 944833881, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:38:32.200521 kubelet[2404]: E1002 19:38:32.200338 2404 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-28.178a61959d7d5b48", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-28", UID:"ip-172-31-16-28", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ip-172-31-16-28 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-28"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 878672712, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 38, 25, 130465891, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:38:32.600686 kubelet[2404]: E1002 19:38:32.600501 2404 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-28.178a61959d7db0b1", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-28", UID:"ip-172-31-16-28", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node ip-172-31-16-28 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-28"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 878694577, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 38, 25, 130487336, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:38:33.000696 kubelet[2404]: E1002 19:38:33.000570 2404 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-28.178a61959d7dcc11", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-28", UID:"ip-172-31-16-28", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node ip-172-31-16-28 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-28"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 878701585, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 38, 25, 130492724, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:38:34.566134 systemd[1]: Reloading. Oct 2 19:38:34.762422 /usr/lib/systemd/system-generators/torcx-generator[2835]: time="2023-10-02T19:38:34Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:38:34.762482 /usr/lib/systemd/system-generators/torcx-generator[2835]: time="2023-10-02T19:38:34Z" level=info msg="torcx already run" Oct 2 19:38:35.013586 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:38:35.013826 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:38:35.059987 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:38:35.129404 kubelet[2404]: I1002 19:38:35.129346 2404 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-16-28" podStartSLOduration=3.129287302 pod.CreationTimestamp="2023-10-02 19:38:32 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:38:35.127770631 +0000 UTC m=+11.711085706" watchObservedRunningTime="2023-10-02 19:38:35.129287302 +0000 UTC m=+11.712602365" Oct 2 19:38:35.162087 kubelet[2404]: I1002 19:38:35.162036 2404 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-16-28" podStartSLOduration=2.161958063 pod.CreationTimestamp="2023-10-02 19:38:33 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:38:35.145309096 +0000 UTC m=+11.728624195" watchObservedRunningTime="2023-10-02 19:38:35.161958063 +0000 UTC m=+11.745273162" Oct 2 19:38:35.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.253714 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:38:35.253790 kernel: audit: type=1400 audit(1696275515.249:758): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.268688 kernel: audit: type=1400 audit(1696275515.249:759): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.277269 kernel: audit: type=1400 audit(1696275515.249:760): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.286268 kernel: audit: type=1400 audit(1696275515.249:761): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.291395 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:38:35.291539 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:38:35.291587 kernel: audit: type=1400 audit(1696275515.250:762): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.300402 kernel: audit: backlog limit exceeded Oct 2 19:38:35.300502 kernel: audit: type=1400 audit(1696275515.250:763): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.310016 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:38:35.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.252000 audit: BPF prog-id=97 op=LOAD Oct 2 19:38:35.252000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:38:35.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.259000 audit: BPF prog-id=98 op=LOAD Oct 2 19:38:35.259000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:38:35.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.266000 audit: BPF prog-id=99 op=LOAD Oct 2 19:38:35.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.267000 audit: BPF prog-id=100 op=LOAD Oct 2 19:38:35.267000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:38:35.267000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:38:35.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.275000 audit: BPF prog-id=101 op=LOAD Oct 2 19:38:35.275000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:38:35.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.284000 audit: BPF prog-id=102 op=LOAD Oct 2 19:38:35.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.312000 audit: BPF prog-id=103 op=LOAD Oct 2 19:38:35.312000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:38:35.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.317000 audit: BPF prog-id=104 op=LOAD Oct 2 19:38:35.317000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:38:35.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.318000 audit: BPF prog-id=105 op=LOAD Oct 2 19:38:35.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.318000 audit: BPF prog-id=106 op=LOAD Oct 2 19:38:35.318000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:38:35.318000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:38:35.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.319000 audit: BPF prog-id=107 op=LOAD Oct 2 19:38:35.319000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:38:35.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.320000 audit: BPF prog-id=108 op=LOAD Oct 2 19:38:35.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.320000 audit: BPF prog-id=109 op=LOAD Oct 2 19:38:35.320000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:38:35.320000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:38:35.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.321000 audit: BPF prog-id=110 op=LOAD Oct 2 19:38:35.322000 audit: BPF prog-id=93 op=UNLOAD Oct 2 19:38:35.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.323000 audit: BPF prog-id=111 op=LOAD Oct 2 19:38:35.323000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:38:35.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.329000 audit: BPF prog-id=112 op=LOAD Oct 2 19:38:35.329000 audit: BPF prog-id=89 op=UNLOAD Oct 2 19:38:35.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.331000 audit: BPF prog-id=113 op=LOAD Oct 2 19:38:35.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.331000 audit: BPF prog-id=114 op=LOAD Oct 2 19:38:35.331000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:38:35.331000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:38:35.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.333000 audit: BPF prog-id=115 op=LOAD Oct 2 19:38:35.333000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:38:35.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.336000 audit: BPF prog-id=116 op=LOAD Oct 2 19:38:35.336000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:38:35.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.337000 audit: BPF prog-id=117 op=LOAD Oct 2 19:38:35.337000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:38:35.384490 systemd[1]: Stopping kubelet.service... Oct 2 19:38:35.409557 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:38:35.410006 systemd[1]: Stopped kubelet.service. Oct 2 19:38:35.408000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:35.410104 systemd[1]: kubelet.service: Consumed 2.196s CPU time. Oct 2 19:38:35.414000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:35.415528 systemd[1]: Started kubelet.service. Oct 2 19:38:35.552000 audit[2900]: USER_ACCT pid=2900 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:35.554629 sudo[2900]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:38:35.553000 audit[2900]: CRED_REFR pid=2900 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:35.556601 sudo[2900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:38:35.559000 audit[2900]: USER_START pid=2900 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:35.630409 kubelet[2891]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:38:35.630977 kubelet[2891]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:38:35.631409 kubelet[2891]: I1002 19:38:35.631349 2891 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:38:35.634168 kubelet[2891]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:38:35.634345 kubelet[2891]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:38:35.646378 kubelet[2891]: I1002 19:38:35.646339 2891 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:38:35.646622 kubelet[2891]: I1002 19:38:35.646585 2891 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:38:35.647357 kubelet[2891]: I1002 19:38:35.647325 2891 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:38:35.649852 kubelet[2891]: I1002 19:38:35.649819 2891 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:38:35.653728 kubelet[2891]: I1002 19:38:35.653694 2891 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:38:35.658799 kubelet[2891]: W1002 19:38:35.658765 2891 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:38:35.660651 kubelet[2891]: I1002 19:38:35.660594 2891 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:38:35.661595 kubelet[2891]: I1002 19:38:35.661571 2891 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:38:35.661857 kubelet[2891]: I1002 19:38:35.661836 2891 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:38:35.662202 kubelet[2891]: I1002 19:38:35.662179 2891 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:38:35.662319 kubelet[2891]: I1002 19:38:35.662299 2891 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:38:35.662655 kubelet[2891]: I1002 19:38:35.662564 2891 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:38:35.683218 kubelet[2891]: I1002 19:38:35.683179 2891 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:38:35.683518 kubelet[2891]: I1002 19:38:35.683495 2891 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:38:35.683790 kubelet[2891]: I1002 19:38:35.683767 2891 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:38:35.683930 kubelet[2891]: I1002 19:38:35.683887 2891 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:38:35.697169 kubelet[2891]: I1002 19:38:35.697133 2891 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:38:35.698595 kubelet[2891]: I1002 19:38:35.698569 2891 server.go:1186] "Started kubelet" Oct 2 19:38:35.700000 audit[2891]: AVC avc: denied { mac_admin } for pid=2891 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.700000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:38:35.700000 audit[2891]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40005639e0 a1=400072e2d0 a2=40005639b0 a3=25 items=0 ppid=1 pid=2891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:35.700000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:38:35.705543 kubelet[2891]: I1002 19:38:35.705508 2891 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:38:35.703000 audit[2891]: AVC avc: denied { mac_admin } for pid=2891 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.703000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:38:35.703000 audit[2891]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a960a0 a1=400072e2e8 a2=4000563a70 a3=25 items=0 ppid=1 pid=2891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:35.703000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:38:35.706226 kubelet[2891]: I1002 19:38:35.706196 2891 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:38:35.706412 kubelet[2891]: I1002 19:38:35.706352 2891 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:38:35.712012 kubelet[2891]: E1002 19:38:35.711976 2891 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:38:35.712207 kubelet[2891]: E1002 19:38:35.712187 2891 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:38:35.729198 kubelet[2891]: I1002 19:38:35.729160 2891 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:38:35.730517 kubelet[2891]: I1002 19:38:35.730487 2891 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:38:35.745444 kubelet[2891]: I1002 19:38:35.745408 2891 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:38:35.746698 kubelet[2891]: I1002 19:38:35.746665 2891 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:38:35.855371 kubelet[2891]: I1002 19:38:35.855252 2891 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-16-28" Oct 2 19:38:35.876600 kubelet[2891]: I1002 19:38:35.876559 2891 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-16-28" Oct 2 19:38:35.878174 kubelet[2891]: I1002 19:38:35.878140 2891 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-16-28" Oct 2 19:38:36.030536 kubelet[2891]: I1002 19:38:36.030490 2891 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:38:36.030920 kubelet[2891]: I1002 19:38:36.030867 2891 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:38:36.030920 kubelet[2891]: I1002 19:38:36.030918 2891 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:38:36.031049 kubelet[2891]: I1002 19:38:36.030950 2891 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:38:36.031223 kubelet[2891]: I1002 19:38:36.031188 2891 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:38:36.031299 kubelet[2891]: I1002 19:38:36.031224 2891 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:38:36.031376 kubelet[2891]: I1002 19:38:36.031305 2891 policy_none.go:49] "None policy: Start" Oct 2 19:38:36.033109 kubelet[2891]: I1002 19:38:36.033062 2891 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:38:36.033109 kubelet[2891]: I1002 19:38:36.033113 2891 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:38:36.033432 kubelet[2891]: I1002 19:38:36.033396 2891 state_mem.go:75] "Updated machine memory state" Oct 2 19:38:36.047043 kubelet[2891]: I1002 19:38:36.047007 2891 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:38:36.047335 kubelet[2891]: I1002 19:38:36.047304 2891 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:38:36.045000 audit[2891]: AVC avc: denied { mac_admin } for pid=2891 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:36.045000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:38:36.045000 audit[2891]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b70d50 a1=4000e2cbe8 a2=4000b70d20 a3=25 items=0 ppid=1 pid=2891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:36.045000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:38:36.056773 kubelet[2891]: I1002 19:38:36.055514 2891 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:38:36.142406 kubelet[2891]: I1002 19:38:36.142270 2891 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:38:36.142406 kubelet[2891]: I1002 19:38:36.142313 2891 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:38:36.142406 kubelet[2891]: I1002 19:38:36.142349 2891 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:38:36.142640 kubelet[2891]: E1002 19:38:36.142427 2891 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:38:36.242843 kubelet[2891]: I1002 19:38:36.242773 2891 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:38:36.243016 kubelet[2891]: I1002 19:38:36.242935 2891 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:38:36.243016 kubelet[2891]: I1002 19:38:36.243000 2891 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:38:36.251366 kubelet[2891]: E1002 19:38:36.251313 2891 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ip-172-31-16-28\" already exists" pod="kube-system/kube-scheduler-ip-172-31-16-28" Oct 2 19:38:36.255381 kubelet[2891]: E1002 19:38:36.255320 2891 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-16-28\" already exists" pod="kube-system/kube-apiserver-ip-172-31-16-28" Oct 2 19:38:36.257941 kubelet[2891]: I1002 19:38:36.257859 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/870275ba912e259caf8a26f62064f3c1-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-16-28\" (UID: \"870275ba912e259caf8a26f62064f3c1\") " pod="kube-system/kube-controller-manager-ip-172-31-16-28" Oct 2 19:38:36.258293 kubelet[2891]: I1002 19:38:36.258259 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/870275ba912e259caf8a26f62064f3c1-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-16-28\" (UID: \"870275ba912e259caf8a26f62064f3c1\") " pod="kube-system/kube-controller-manager-ip-172-31-16-28" Oct 2 19:38:36.258547 kubelet[2891]: I1002 19:38:36.258523 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/195be483dd6b20a3fb4fa2c12e9d1f77-ca-certs\") pod \"kube-apiserver-ip-172-31-16-28\" (UID: \"195be483dd6b20a3fb4fa2c12e9d1f77\") " pod="kube-system/kube-apiserver-ip-172-31-16-28" Oct 2 19:38:36.258779 kubelet[2891]: I1002 19:38:36.258757 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/195be483dd6b20a3fb4fa2c12e9d1f77-k8s-certs\") pod \"kube-apiserver-ip-172-31-16-28\" (UID: \"195be483dd6b20a3fb4fa2c12e9d1f77\") " pod="kube-system/kube-apiserver-ip-172-31-16-28" Oct 2 19:38:36.259057 kubelet[2891]: I1002 19:38:36.259025 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/870275ba912e259caf8a26f62064f3c1-ca-certs\") pod \"kube-controller-manager-ip-172-31-16-28\" (UID: \"870275ba912e259caf8a26f62064f3c1\") " pod="kube-system/kube-controller-manager-ip-172-31-16-28" Oct 2 19:38:36.259276 kubelet[2891]: I1002 19:38:36.259255 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/05ec3643b932e3a74f248fbf56fa00e2-kubeconfig\") pod \"kube-scheduler-ip-172-31-16-28\" (UID: \"05ec3643b932e3a74f248fbf56fa00e2\") " pod="kube-system/kube-scheduler-ip-172-31-16-28" Oct 2 19:38:36.259519 kubelet[2891]: I1002 19:38:36.259499 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/195be483dd6b20a3fb4fa2c12e9d1f77-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-16-28\" (UID: \"195be483dd6b20a3fb4fa2c12e9d1f77\") " pod="kube-system/kube-apiserver-ip-172-31-16-28" Oct 2 19:38:36.259789 kubelet[2891]: I1002 19:38:36.259767 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/870275ba912e259caf8a26f62064f3c1-k8s-certs\") pod \"kube-controller-manager-ip-172-31-16-28\" (UID: \"870275ba912e259caf8a26f62064f3c1\") " pod="kube-system/kube-controller-manager-ip-172-31-16-28" Oct 2 19:38:36.260067 kubelet[2891]: I1002 19:38:36.260032 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/870275ba912e259caf8a26f62064f3c1-kubeconfig\") pod \"kube-controller-manager-ip-172-31-16-28\" (UID: \"870275ba912e259caf8a26f62064f3c1\") " pod="kube-system/kube-controller-manager-ip-172-31-16-28" Oct 2 19:38:36.262645 kubelet[2891]: E1002 19:38:36.262589 2891 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ip-172-31-16-28\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-16-28" Oct 2 19:38:36.631586 sudo[2900]: pam_unix(sudo:session): session closed for user root Oct 2 19:38:36.629000 audit[2900]: USER_END pid=2900 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:36.629000 audit[2900]: CRED_DISP pid=2900 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:36.690609 kubelet[2891]: I1002 19:38:36.690560 2891 apiserver.go:52] "Watching apiserver" Oct 2 19:38:36.747274 kubelet[2891]: I1002 19:38:36.747228 2891 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:38:36.764794 kubelet[2891]: I1002 19:38:36.764748 2891 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:38:37.167747 kubelet[2891]: E1002 19:38:37.167693 2891 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ip-172-31-16-28\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-16-28" Oct 2 19:38:37.170174 kubelet[2891]: E1002 19:38:37.170126 2891 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ip-172-31-16-28\" already exists" pod="kube-system/kube-scheduler-ip-172-31-16-28" Oct 2 19:38:37.294428 kubelet[2891]: E1002 19:38:37.294376 2891 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-16-28\" already exists" pod="kube-system/kube-apiserver-ip-172-31-16-28" Oct 2 19:38:39.146521 sudo[1996]: pam_unix(sudo:session): session closed for user root Oct 2 19:38:39.145000 audit[1996]: USER_END pid=1996 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:39.145000 audit[1996]: CRED_DISP pid=1996 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:39.171241 sshd[1993]: pam_unix(sshd:session): session closed for user core Oct 2 19:38:39.171000 audit[1993]: USER_END pid=1993 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:38:39.172000 audit[1993]: CRED_DISP pid=1993 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:38:39.178595 systemd[1]: sshd@6-172.31.16.28:22-139.178.89.65:44166.service: Deactivated successfully. Oct 2 19:38:39.177000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.16.28:22-139.178.89.65:44166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:39.180039 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:38:39.180663 systemd[1]: session-7.scope: Consumed 11.129s CPU time. Oct 2 19:38:39.181530 systemd-logind[1726]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:38:39.183032 systemd-logind[1726]: Removed session 7. Oct 2 19:38:44.222000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521282 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:38:44.225836 kernel: kauditd_printk_skb: 262 callbacks suppressed Oct 2 19:38:44.226004 kernel: audit: type=1400 audit(1696275524.222:1015): avc: denied { watch } for pid=2748 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521282 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:38:44.222000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001372d00 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:38:44.248944 kernel: audit: type=1300 audit(1696275524.222:1015): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001372d00 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:38:44.222000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:44.259834 kernel: audit: type=1327 audit(1696275524.222:1015): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:44.730000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:44.730000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f3a160 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:38:44.752927 kernel: audit: type=1400 audit(1696275524.730:1016): avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:44.753080 kernel: audit: type=1300 audit(1696275524.730:1016): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f3a160 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:38:44.730000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:44.763296 kernel: audit: type=1327 audit(1696275524.730:1016): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:44.735000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:44.772833 kernel: audit: type=1400 audit(1696275524.735:1017): avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:44.773008 kernel: audit: type=1300 audit(1696275524.735:1017): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f3a2a0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:38:44.735000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f3a2a0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:38:44.735000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:44.795872 kernel: audit: type=1327 audit(1696275524.735:1017): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:44.735000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:44.805520 kernel: audit: type=1400 audit(1696275524.735:1018): avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:44.735000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f3a3e0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:38:44.735000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:44.740000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:44.740000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f3a520 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:38:44.740000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:47.173832 kubelet[2891]: I1002 19:38:47.173795 2891 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:38:47.175456 env[1737]: time="2023-10-02T19:38:47.175333838Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:38:47.176481 kubelet[2891]: I1002 19:38:47.176430 2891 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:38:47.818785 kubelet[2891]: I1002 19:38:47.818736 2891 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:38:47.830023 kubelet[2891]: I1002 19:38:47.829968 2891 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:38:47.832274 systemd[1]: Created slice kubepods-besteffort-pod366b4f20_9f4f_4d8e_be4c_7eec630f8b46.slice. Oct 2 19:38:47.847838 systemd[1]: Created slice kubepods-burstable-podcab1ee13_fc5f_4ac4_8b8d_729eb34e4236.slice. Oct 2 19:38:47.863359 kubelet[2891]: W1002 19:38:47.863319 2891 reflector.go:424] object-"kube-system"/"hubble-server-certs": failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ip-172-31-16-28" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-16-28' and this object Oct 2 19:38:47.864289 kubelet[2891]: E1002 19:38:47.864253 2891 reflector.go:140] object-"kube-system"/"hubble-server-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ip-172-31-16-28" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-16-28' and this object Oct 2 19:38:47.864517 kubelet[2891]: W1002 19:38:47.863693 2891 reflector.go:424] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-16-28" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-16-28' and this object Oct 2 19:38:47.864667 kubelet[2891]: E1002 19:38:47.864642 2891 reflector.go:140] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-16-28" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-16-28' and this object Oct 2 19:38:47.864829 kubelet[2891]: W1002 19:38:47.863856 2891 reflector.go:424] object-"kube-system"/"cilium-config": failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ip-172-31-16-28" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-16-28' and this object Oct 2 19:38:47.865025 kubelet[2891]: E1002 19:38:47.864989 2891 reflector.go:140] object-"kube-system"/"cilium-config": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ip-172-31-16-28" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-16-28' and this object Oct 2 19:38:47.934833 kubelet[2891]: I1002 19:38:47.934740 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/366b4f20-9f4f-4d8e-be4c-7eec630f8b46-xtables-lock\") pod \"kube-proxy-md78g\" (UID: \"366b4f20-9f4f-4d8e-be4c-7eec630f8b46\") " pod="kube-system/kube-proxy-md78g" Oct 2 19:38:47.935133 kubelet[2891]: I1002 19:38:47.935110 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-cni-path\") pod \"cilium-jdwt8\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " pod="kube-system/cilium-jdwt8" Oct 2 19:38:47.935341 kubelet[2891]: I1002 19:38:47.935316 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-clustermesh-secrets\") pod \"cilium-jdwt8\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " pod="kube-system/cilium-jdwt8" Oct 2 19:38:47.935509 kubelet[2891]: I1002 19:38:47.935488 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-cilium-config-path\") pod \"cilium-jdwt8\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " pod="kube-system/cilium-jdwt8" Oct 2 19:38:47.935676 kubelet[2891]: I1002 19:38:47.935653 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pwhmr\" (UniqueName: \"kubernetes.io/projected/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-kube-api-access-pwhmr\") pod \"cilium-jdwt8\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " pod="kube-system/cilium-jdwt8" Oct 2 19:38:47.935858 kubelet[2891]: I1002 19:38:47.935835 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-hostproc\") pod \"cilium-jdwt8\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " pod="kube-system/cilium-jdwt8" Oct 2 19:38:47.936073 kubelet[2891]: I1002 19:38:47.936049 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-cilium-cgroup\") pod \"cilium-jdwt8\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " pod="kube-system/cilium-jdwt8" Oct 2 19:38:47.936254 kubelet[2891]: I1002 19:38:47.936226 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-xtables-lock\") pod \"cilium-jdwt8\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " pod="kube-system/cilium-jdwt8" Oct 2 19:38:47.936510 kubelet[2891]: I1002 19:38:47.936487 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-lib-modules\") pod \"cilium-jdwt8\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " pod="kube-system/cilium-jdwt8" Oct 2 19:38:47.936766 kubelet[2891]: I1002 19:38:47.936728 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/366b4f20-9f4f-4d8e-be4c-7eec630f8b46-kube-proxy\") pod \"kube-proxy-md78g\" (UID: \"366b4f20-9f4f-4d8e-be4c-7eec630f8b46\") " pod="kube-system/kube-proxy-md78g" Oct 2 19:38:47.936992 kubelet[2891]: I1002 19:38:47.936969 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-host-proc-sys-net\") pod \"cilium-jdwt8\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " pod="kube-system/cilium-jdwt8" Oct 2 19:38:47.937156 kubelet[2891]: I1002 19:38:47.937134 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-host-proc-sys-kernel\") pod \"cilium-jdwt8\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " pod="kube-system/cilium-jdwt8" Oct 2 19:38:47.937424 kubelet[2891]: I1002 19:38:47.937366 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-bpf-maps\") pod \"cilium-jdwt8\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " pod="kube-system/cilium-jdwt8" Oct 2 19:38:47.937602 kubelet[2891]: I1002 19:38:47.937580 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-hubble-tls\") pod \"cilium-jdwt8\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " pod="kube-system/cilium-jdwt8" Oct 2 19:38:47.937862 kubelet[2891]: I1002 19:38:47.937825 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/366b4f20-9f4f-4d8e-be4c-7eec630f8b46-lib-modules\") pod \"kube-proxy-md78g\" (UID: \"366b4f20-9f4f-4d8e-be4c-7eec630f8b46\") " pod="kube-system/kube-proxy-md78g" Oct 2 19:38:47.938207 kubelet[2891]: I1002 19:38:47.938180 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dqnsl\" (UniqueName: \"kubernetes.io/projected/366b4f20-9f4f-4d8e-be4c-7eec630f8b46-kube-api-access-dqnsl\") pod \"kube-proxy-md78g\" (UID: \"366b4f20-9f4f-4d8e-be4c-7eec630f8b46\") " pod="kube-system/kube-proxy-md78g" Oct 2 19:38:47.938500 kubelet[2891]: I1002 19:38:47.938461 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-cilium-run\") pod \"cilium-jdwt8\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " pod="kube-system/cilium-jdwt8" Oct 2 19:38:47.938696 kubelet[2891]: I1002 19:38:47.938671 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-etc-cni-netd\") pod \"cilium-jdwt8\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " pod="kube-system/cilium-jdwt8" Oct 2 19:38:48.059704 kubelet[2891]: E1002 19:38:48.059666 2891 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Oct 2 19:38:48.059941 kubelet[2891]: E1002 19:38:48.059884 2891 projected.go:198] Error preparing data for projected volume kube-api-access-dqnsl for pod kube-system/kube-proxy-md78g: configmap "kube-root-ca.crt" not found Oct 2 19:38:48.060221 kubelet[2891]: E1002 19:38:48.060192 2891 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/366b4f20-9f4f-4d8e-be4c-7eec630f8b46-kube-api-access-dqnsl podName:366b4f20-9f4f-4d8e-be4c-7eec630f8b46 nodeName:}" failed. No retries permitted until 2023-10-02 19:38:48.560143133 +0000 UTC m=+13.109211298 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-dqnsl" (UniqueName: "kubernetes.io/projected/366b4f20-9f4f-4d8e-be4c-7eec630f8b46-kube-api-access-dqnsl") pod "kube-proxy-md78g" (UID: "366b4f20-9f4f-4d8e-be4c-7eec630f8b46") : configmap "kube-root-ca.crt" not found Oct 2 19:38:48.163102 kubelet[2891]: I1002 19:38:48.163019 2891 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:38:48.174182 systemd[1]: Created slice kubepods-besteffort-poddda6a56b_0998_4f88_834f_dd9c3d04c5f3.slice. Oct 2 19:38:48.241319 kubelet[2891]: I1002 19:38:48.241226 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/dda6a56b-0998-4f88-834f-dd9c3d04c5f3-cilium-config-path\") pod \"cilium-operator-f59cbd8c6-q8bgz\" (UID: \"dda6a56b-0998-4f88-834f-dd9c3d04c5f3\") " pod="kube-system/cilium-operator-f59cbd8c6-q8bgz" Oct 2 19:38:48.242247 kubelet[2891]: I1002 19:38:48.242166 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mhh82\" (UniqueName: \"kubernetes.io/projected/dda6a56b-0998-4f88-834f-dd9c3d04c5f3-kube-api-access-mhh82\") pod \"cilium-operator-f59cbd8c6-q8bgz\" (UID: \"dda6a56b-0998-4f88-834f-dd9c3d04c5f3\") " pod="kube-system/cilium-operator-f59cbd8c6-q8bgz" Oct 2 19:38:48.744971 env[1737]: time="2023-10-02T19:38:48.744414678Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-md78g,Uid:366b4f20-9f4f-4d8e-be4c-7eec630f8b46,Namespace:kube-system,Attempt:0,}" Oct 2 19:38:48.791060 env[1737]: time="2023-10-02T19:38:48.790881530Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:38:48.791243 env[1737]: time="2023-10-02T19:38:48.791085737Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:38:48.791243 env[1737]: time="2023-10-02T19:38:48.791172235Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:38:48.791741 env[1737]: time="2023-10-02T19:38:48.791570305Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9b46ee80ce143b718f3447b29be20be7ce9d04e4ca68bd28133eae825f9455c0 pid=2989 runtime=io.containerd.runc.v2 Oct 2 19:38:48.850207 systemd[1]: Started cri-containerd-9b46ee80ce143b718f3447b29be20be7ce9d04e4ca68bd28133eae825f9455c0.scope. Oct 2 19:38:48.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.881000 audit: BPF prog-id=118 op=LOAD Oct 2 19:38:48.882000 audit[2999]: AVC avc: denied { bpf } for pid=2999 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.882000 audit[2999]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2989 pid=2999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:48.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962343665653830636531343362373138663334343762323962653230 Oct 2 19:38:48.882000 audit[2999]: AVC avc: denied { perfmon } for pid=2999 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.882000 audit[2999]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2989 pid=2999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:48.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962343665653830636531343362373138663334343762323962653230 Oct 2 19:38:48.882000 audit[2999]: AVC avc: denied { bpf } for pid=2999 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.882000 audit[2999]: AVC avc: denied { bpf } for pid=2999 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.882000 audit[2999]: AVC avc: denied { bpf } for pid=2999 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.882000 audit[2999]: AVC avc: denied { perfmon } for pid=2999 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.882000 audit[2999]: AVC avc: denied { perfmon } for pid=2999 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.882000 audit[2999]: AVC avc: denied { perfmon } for pid=2999 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.882000 audit[2999]: AVC avc: denied { perfmon } for pid=2999 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.882000 audit[2999]: AVC avc: denied { perfmon } for pid=2999 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.882000 audit[2999]: AVC avc: denied { bpf } for pid=2999 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.882000 audit[2999]: AVC avc: denied { bpf } for pid=2999 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.882000 audit: BPF prog-id=119 op=LOAD Oct 2 19:38:48.882000 audit[2999]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2989 pid=2999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:48.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962343665653830636531343362373138663334343762323962653230 Oct 2 19:38:48.882000 audit[2999]: AVC avc: denied { bpf } for pid=2999 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.882000 audit[2999]: AVC avc: denied { bpf } for pid=2999 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.882000 audit[2999]: AVC avc: denied { perfmon } for pid=2999 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.882000 audit[2999]: AVC avc: denied { perfmon } for pid=2999 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.882000 audit[2999]: AVC avc: denied { perfmon } for pid=2999 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.882000 audit[2999]: AVC avc: denied { perfmon } for pid=2999 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.882000 audit[2999]: AVC avc: denied { perfmon } for pid=2999 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.882000 audit[2999]: AVC avc: denied { bpf } for pid=2999 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.882000 audit[2999]: AVC avc: denied { bpf } for pid=2999 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.882000 audit: BPF prog-id=120 op=LOAD Oct 2 19:38:48.882000 audit[2999]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2989 pid=2999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:48.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962343665653830636531343362373138663334343762323962653230 Oct 2 19:38:48.883000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:38:48.883000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:38:48.883000 audit[2999]: AVC avc: denied { bpf } for pid=2999 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.883000 audit[2999]: AVC avc: denied { bpf } for pid=2999 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.883000 audit[2999]: AVC avc: denied { bpf } for pid=2999 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.883000 audit[2999]: AVC avc: denied { perfmon } for pid=2999 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.883000 audit[2999]: AVC avc: denied { perfmon } for pid=2999 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.883000 audit[2999]: AVC avc: denied { perfmon } for pid=2999 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.883000 audit[2999]: AVC avc: denied { perfmon } for pid=2999 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.883000 audit[2999]: AVC avc: denied { perfmon } for pid=2999 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.883000 audit[2999]: AVC avc: denied { bpf } for pid=2999 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.883000 audit[2999]: AVC avc: denied { bpf } for pid=2999 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:48.883000 audit: BPF prog-id=121 op=LOAD Oct 2 19:38:48.883000 audit[2999]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2989 pid=2999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:48.883000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962343665653830636531343362373138663334343762323962653230 Oct 2 19:38:48.914763 env[1737]: time="2023-10-02T19:38:48.914699509Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-md78g,Uid:366b4f20-9f4f-4d8e-be4c-7eec630f8b46,Namespace:kube-system,Attempt:0,} returns sandbox id \"9b46ee80ce143b718f3447b29be20be7ce9d04e4ca68bd28133eae825f9455c0\"" Oct 2 19:38:48.923451 env[1737]: time="2023-10-02T19:38:48.923382406Z" level=info msg="CreateContainer within sandbox \"9b46ee80ce143b718f3447b29be20be7ce9d04e4ca68bd28133eae825f9455c0\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:38:48.947751 env[1737]: time="2023-10-02T19:38:48.947670499Z" level=info msg="CreateContainer within sandbox \"9b46ee80ce143b718f3447b29be20be7ce9d04e4ca68bd28133eae825f9455c0\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"fe3cbb052853dda0b5ff318f52819e265a093ae502544cc50e0764bfd8dfb1e5\"" Oct 2 19:38:48.953044 env[1737]: time="2023-10-02T19:38:48.949088142Z" level=info msg="StartContainer for \"fe3cbb052853dda0b5ff318f52819e265a093ae502544cc50e0764bfd8dfb1e5\"" Oct 2 19:38:48.998292 systemd[1]: Started cri-containerd-fe3cbb052853dda0b5ff318f52819e265a093ae502544cc50e0764bfd8dfb1e5.scope. Oct 2 19:38:49.042810 kubelet[2891]: E1002 19:38:49.042735 2891 secret.go:194] Couldn't get secret kube-system/cilium-clustermesh: failed to sync secret cache: timed out waiting for the condition Oct 2 19:38:49.043053 kubelet[2891]: E1002 19:38:49.042871 2891 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-clustermesh-secrets podName:cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 nodeName:}" failed. No retries permitted until 2023-10-02 19:38:49.542841452 +0000 UTC m=+14.091909617 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "clustermesh-secrets" (UniqueName: "kubernetes.io/secret/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-clustermesh-secrets") pod "cilium-jdwt8" (UID: "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:38:49.043351 kubelet[2891]: E1002 19:38:49.043293 2891 projected.go:267] Couldn't get secret kube-system/hubble-server-certs: failed to sync secret cache: timed out waiting for the condition Oct 2 19:38:49.043470 kubelet[2891]: E1002 19:38:49.043338 2891 projected.go:198] Error preparing data for projected volume hubble-tls for pod kube-system/cilium-jdwt8: failed to sync secret cache: timed out waiting for the condition Oct 2 19:38:49.043558 kubelet[2891]: E1002 19:38:49.043485 2891 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-hubble-tls podName:cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 nodeName:}" failed. No retries permitted until 2023-10-02 19:38:49.543450005 +0000 UTC m=+14.092518170 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "hubble-tls" (UniqueName: "kubernetes.io/projected/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-hubble-tls") pod "cilium-jdwt8" (UID: "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:38:49.075000 audit[3033]: AVC avc: denied { perfmon } for pid=3033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.075000 audit[3033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2989 pid=3033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665336362623035323835336464613062356666333138663532383139 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { bpf } for pid=3033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { bpf } for pid=3033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { bpf } for pid=3033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { perfmon } for pid=3033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { perfmon } for pid=3033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { perfmon } for pid=3033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { perfmon } for pid=3033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { perfmon } for pid=3033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { bpf } for pid=3033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { bpf } for pid=3033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit: BPF prog-id=122 op=LOAD Oct 2 19:38:49.076000 audit[3033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2989 pid=3033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.076000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665336362623035323835336464613062356666333138663532383139 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { bpf } for pid=3033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { bpf } for pid=3033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { perfmon } for pid=3033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { perfmon } for pid=3033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { perfmon } for pid=3033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { perfmon } for pid=3033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { perfmon } for pid=3033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { bpf } for pid=3033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { bpf } for pid=3033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit: BPF prog-id=123 op=LOAD Oct 2 19:38:49.076000 audit[3033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2989 pid=3033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.076000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665336362623035323835336464613062356666333138663532383139 Oct 2 19:38:49.076000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:38:49.076000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { bpf } for pid=3033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { bpf } for pid=3033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { bpf } for pid=3033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { perfmon } for pid=3033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { perfmon } for pid=3033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { perfmon } for pid=3033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { perfmon } for pid=3033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { perfmon } for pid=3033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { bpf } for pid=3033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit[3033]: AVC avc: denied { bpf } for pid=3033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.076000 audit: BPF prog-id=124 op=LOAD Oct 2 19:38:49.076000 audit[3033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2989 pid=3033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.076000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665336362623035323835336464613062356666333138663532383139 Oct 2 19:38:49.089427 env[1737]: time="2023-10-02T19:38:49.088301886Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-q8bgz,Uid:dda6a56b-0998-4f88-834f-dd9c3d04c5f3,Namespace:kube-system,Attempt:0,}" Oct 2 19:38:49.136788 env[1737]: time="2023-10-02T19:38:49.136703627Z" level=info msg="StartContainer for \"fe3cbb052853dda0b5ff318f52819e265a093ae502544cc50e0764bfd8dfb1e5\" returns successfully" Oct 2 19:38:49.145301 env[1737]: time="2023-10-02T19:38:49.144847435Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:38:49.145301 env[1737]: time="2023-10-02T19:38:49.144945381Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:38:49.145301 env[1737]: time="2023-10-02T19:38:49.144972273Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:38:49.147154 env[1737]: time="2023-10-02T19:38:49.146158960Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4b70cee2f0d321431afe505ab21798f924d0f889b6812e50343f1b316d3daf77 pid=3063 runtime=io.containerd.runc.v2 Oct 2 19:38:49.205627 systemd[1]: run-containerd-runc-k8s.io-4b70cee2f0d321431afe505ab21798f924d0f889b6812e50343f1b316d3daf77-runc.7TPVuD.mount: Deactivated successfully. Oct 2 19:38:49.218751 systemd[1]: Started cri-containerd-4b70cee2f0d321431afe505ab21798f924d0f889b6812e50343f1b316d3daf77.scope. Oct 2 19:38:49.329955 kernel: kauditd_printk_skb: 105 callbacks suppressed Oct 2 19:38:49.330124 kernel: audit: type=1400 audit(1696275529.325:1044): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.345919 kernel: audit: type=1400 audit(1696275529.325:1045): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.354321 kernel: audit: type=1400 audit(1696275529.325:1046): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.354500 kernel: audit: type=1400 audit(1696275529.325:1047): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.372321 kernel: audit: type=1400 audit(1696275529.325:1048): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.380673 kernel: audit: type=1400 audit(1696275529.325:1049): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.388831 kernel: audit: type=1400 audit(1696275529.325:1050): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.397507 kernel: audit: type=1400 audit(1696275529.325:1051): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.405550 kernel: audit: type=1400 audit(1696275529.325:1052): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.413469 kernel: audit: type=1400 audit(1696275529.328:1053): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.328000 audit: BPF prog-id=125 op=LOAD Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3063 pid=3078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462373063656532663064333231343331616665353035616232313739 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3063 pid=3078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462373063656532663064333231343331616665353035616232313739 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit: BPF prog-id=126 op=LOAD Oct 2 19:38:49.336000 audit[3078]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3063 pid=3078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462373063656532663064333231343331616665353035616232313739 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit: BPF prog-id=127 op=LOAD Oct 2 19:38:49.336000 audit[3078]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3063 pid=3078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462373063656532663064333231343331616665353035616232313739 Oct 2 19:38:49.336000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:38:49.336000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.336000 audit: BPF prog-id=128 op=LOAD Oct 2 19:38:49.336000 audit[3078]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3063 pid=3078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462373063656532663064333231343331616665353035616232313739 Oct 2 19:38:49.443744 kubelet[2891]: I1002 19:38:49.443644 2891 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-md78g" podStartSLOduration=2.443470342 pod.CreationTimestamp="2023-10-02 19:38:47 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:38:49.442509439 +0000 UTC m=+13.991577616" watchObservedRunningTime="2023-10-02 19:38:49.443470342 +0000 UTC m=+13.992538531" Oct 2 19:38:49.461264 env[1737]: time="2023-10-02T19:38:49.461174509Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-q8bgz,Uid:dda6a56b-0998-4f88-834f-dd9c3d04c5f3,Namespace:kube-system,Attempt:0,} returns sandbox id \"4b70cee2f0d321431afe505ab21798f924d0f889b6812e50343f1b316d3daf77\"" Oct 2 19:38:49.467050 env[1737]: time="2023-10-02T19:38:49.466968008Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:38:49.547000 audit[3122]: NETFILTER_CFG table=mangle:59 family=2 entries=1 op=nft_register_chain pid=3122 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:49.547000 audit[3122]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdfad7790 a2=0 a3=ffff87e3e6c0 items=0 ppid=3043 pid=3122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.547000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:38:49.558000 audit[3123]: NETFILTER_CFG table=mangle:60 family=10 entries=1 op=nft_register_chain pid=3123 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:49.558000 audit[3123]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcb8d4810 a2=0 a3=ffff84cce6c0 items=0 ppid=3043 pid=3123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.558000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:38:49.565000 audit[3124]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3124 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:49.565000 audit[3124]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff6730870 a2=0 a3=ffff959236c0 items=0 ppid=3043 pid=3124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.565000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:38:49.573000 audit[3126]: NETFILTER_CFG table=filter:62 family=2 entries=1 op=nft_register_chain pid=3126 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:49.573000 audit[3126]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdbf6a2f0 a2=0 a3=ffffab3046c0 items=0 ppid=3043 pid=3126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.573000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:38:49.576000 audit[3127]: NETFILTER_CFG table=nat:63 family=10 entries=1 op=nft_register_chain pid=3127 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:49.576000 audit[3127]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffed3955b0 a2=0 a3=ffff829ad6c0 items=0 ppid=3043 pid=3127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.576000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:38:49.580000 audit[3128]: NETFILTER_CFG table=filter:64 family=10 entries=1 op=nft_register_chain pid=3128 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:49.580000 audit[3128]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffea3de830 a2=0 a3=ffff930656c0 items=0 ppid=3043 pid=3128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.580000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:38:49.655164 env[1737]: time="2023-10-02T19:38:49.653278749Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-jdwt8,Uid:cab1ee13-fc5f-4ac4-8b8d-729eb34e4236,Namespace:kube-system,Attempt:0,}" Oct 2 19:38:49.656000 audit[3130]: NETFILTER_CFG table=filter:65 family=2 entries=1 op=nft_register_chain pid=3130 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:49.656000 audit[3130]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff21e5850 a2=0 a3=ffff88cfd6c0 items=0 ppid=3043 pid=3130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.656000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:38:49.667000 audit[3132]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_rule pid=3132 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:49.667000 audit[3132]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffd06f5ce0 a2=0 a3=ffff9365d6c0 items=0 ppid=3043 pid=3132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.667000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:38:49.688000 audit[3143]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_rule pid=3143 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:49.688000 audit[3143]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc4bd77b0 a2=0 a3=ffff8b97d6c0 items=0 ppid=3043 pid=3143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.688000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:38:49.695000 audit[3148]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=3148 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:49.695000 audit[3148]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc182aa70 a2=0 a3=ffff92bf56c0 items=0 ppid=3043 pid=3148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.695000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:38:49.698137 env[1737]: time="2023-10-02T19:38:49.697969335Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:38:49.698561 env[1737]: time="2023-10-02T19:38:49.698475251Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:38:49.698827 env[1737]: time="2023-10-02T19:38:49.698755948Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:38:49.701120 env[1737]: time="2023-10-02T19:38:49.700207863Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4 pid=3141 runtime=io.containerd.runc.v2 Oct 2 19:38:49.708000 audit[3157]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=3157 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:49.708000 audit[3157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdb2b9b40 a2=0 a3=ffff946526c0 items=0 ppid=3043 pid=3157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.708000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:38:49.714000 audit[3158]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_chain pid=3158 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:49.714000 audit[3158]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcdb9acc0 a2=0 a3=ffff8bd9c6c0 items=0 ppid=3043 pid=3158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.714000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:38:49.729000 audit[3166]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=3166 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:49.729000 audit[3166]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff5f71a50 a2=0 a3=ffff97cdf6c0 items=0 ppid=3043 pid=3166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.729000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:38:49.734864 systemd[1]: Started cri-containerd-c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4.scope. Oct 2 19:38:49.751000 audit[3171]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=3171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:49.751000 audit[3171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffcc27cfa0 a2=0 a3=ffff98b3a6c0 items=0 ppid=3043 pid=3171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.751000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:38:49.756000 audit[3172]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=3172 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:49.756000 audit[3172]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff6f0e0c0 a2=0 a3=ffff822de6c0 items=0 ppid=3043 pid=3172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.756000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:38:49.771000 audit[3181]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=3181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:49.771000 audit[3181]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff84deb00 a2=0 a3=ffff8d0b86c0 items=0 ppid=3043 pid=3181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.771000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:38:49.777000 audit[3182]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_chain pid=3182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:49.777000 audit[3182]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffda69aa60 a2=0 a3=ffff8d7f06c0 items=0 ppid=3043 pid=3182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.777000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:38:49.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.781000 audit: BPF prog-id=129 op=LOAD Oct 2 19:38:49.782000 audit[3156]: AVC avc: denied { bpf } for pid=3156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.782000 audit[3156]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3141 pid=3156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331643762333431643863653665323632623231623039303562346432 Oct 2 19:38:49.782000 audit[3156]: AVC avc: denied { perfmon } for pid=3156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.782000 audit[3156]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3141 pid=3156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331643762333431643863653665323632623231623039303562346432 Oct 2 19:38:49.782000 audit[3156]: AVC avc: denied { bpf } for pid=3156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.782000 audit[3156]: AVC avc: denied { bpf } for pid=3156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.782000 audit[3156]: AVC avc: denied { bpf } for pid=3156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.782000 audit[3156]: AVC avc: denied { perfmon } for pid=3156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.782000 audit[3156]: AVC avc: denied { perfmon } for pid=3156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.782000 audit[3156]: AVC avc: denied { perfmon } for pid=3156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.782000 audit[3156]: AVC avc: denied { perfmon } for pid=3156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.782000 audit[3156]: AVC avc: denied { perfmon } for pid=3156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.782000 audit[3156]: AVC avc: denied { bpf } for pid=3156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.782000 audit[3156]: AVC avc: denied { bpf } for pid=3156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.782000 audit: BPF prog-id=130 op=LOAD Oct 2 19:38:49.782000 audit[3156]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3141 pid=3156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331643762333431643863653665323632623231623039303562346432 Oct 2 19:38:49.782000 audit[3156]: AVC avc: denied { bpf } for pid=3156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.782000 audit[3156]: AVC avc: denied { bpf } for pid=3156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.782000 audit[3156]: AVC avc: denied { perfmon } for pid=3156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.782000 audit[3156]: AVC avc: denied { perfmon } for pid=3156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.782000 audit[3156]: AVC avc: denied { perfmon } for pid=3156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.782000 audit[3156]: AVC avc: denied { perfmon } for pid=3156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.782000 audit[3156]: AVC avc: denied { perfmon } for pid=3156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.782000 audit[3156]: AVC avc: denied { bpf } for pid=3156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.782000 audit[3156]: AVC avc: denied { bpf } for pid=3156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.782000 audit: BPF prog-id=131 op=LOAD Oct 2 19:38:49.782000 audit[3156]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3141 pid=3156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331643762333431643863653665323632623231623039303562346432 Oct 2 19:38:49.783000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:38:49.783000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:38:49.783000 audit[3156]: AVC avc: denied { bpf } for pid=3156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.783000 audit[3156]: AVC avc: denied { bpf } for pid=3156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.783000 audit[3156]: AVC avc: denied { bpf } for pid=3156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.783000 audit[3156]: AVC avc: denied { perfmon } for pid=3156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.783000 audit[3156]: AVC avc: denied { perfmon } for pid=3156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.783000 audit[3156]: AVC avc: denied { perfmon } for pid=3156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.783000 audit[3156]: AVC avc: denied { perfmon } for pid=3156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.783000 audit[3156]: AVC avc: denied { perfmon } for pid=3156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.783000 audit[3156]: AVC avc: denied { bpf } for pid=3156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.783000 audit[3156]: AVC avc: denied { bpf } for pid=3156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.783000 audit: BPF prog-id=132 op=LOAD Oct 2 19:38:49.783000 audit[3156]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3141 pid=3156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331643762333431643863653665323632623231623039303562346432 Oct 2 19:38:49.801000 audit[3184]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=3184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:49.801000 audit[3184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcc79a490 a2=0 a3=ffff9c9eb6c0 items=0 ppid=3043 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.801000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:38:49.824000 audit[3188]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=3188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:49.824000 audit[3188]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc214e590 a2=0 a3=ffffbe38f6c0 items=0 ppid=3043 pid=3188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.824000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:38:49.841768 env[1737]: time="2023-10-02T19:38:49.841602618Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-jdwt8,Uid:cab1ee13-fc5f-4ac4-8b8d-729eb34e4236,Namespace:kube-system,Attempt:0,} returns sandbox id \"c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4\"" Oct 2 19:38:49.842000 audit[3196]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=3196 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:49.842000 audit[3196]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd6b42c50 a2=0 a3=ffff8e51e6c0 items=0 ppid=3043 pid=3196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.842000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:38:49.849000 audit[3197]: NETFILTER_CFG table=nat:79 family=2 entries=1 op=nft_register_chain pid=3197 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:49.849000 audit[3197]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff7ae00a0 a2=0 a3=ffffaf6496c0 items=0 ppid=3043 pid=3197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.849000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:38:49.860000 audit[3199]: NETFILTER_CFG table=nat:80 family=2 entries=1 op=nft_register_rule pid=3199 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:49.860000 audit[3199]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=fffffc892cd0 a2=0 a3=ffffbb5526c0 items=0 ppid=3043 pid=3199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.860000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:38:49.873000 audit[3202]: NETFILTER_CFG table=nat:81 family=2 entries=1 op=nft_register_rule pid=3202 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:49.873000 audit[3202]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffced60bf0 a2=0 a3=ffff9ad216c0 items=0 ppid=3043 pid=3202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.873000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:38:49.902000 audit[3206]: NETFILTER_CFG table=filter:82 family=2 entries=6 op=nft_register_rule pid=3206 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:38:49.902000 audit[3206]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4028 a0=3 a1=ffffd442cf00 a2=0 a3=ffffabe8e6c0 items=0 ppid=3043 pid=3206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.902000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:38:49.917000 audit[3206]: NETFILTER_CFG table=nat:83 family=2 entries=17 op=nft_register_chain pid=3206 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:38:49.917000 audit[3206]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffd442cf00 a2=0 a3=ffffabe8e6c0 items=0 ppid=3043 pid=3206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.917000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:38:49.923000 audit[3211]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3211 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:49.923000 audit[3211]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffebe31bc0 a2=0 a3=ffffb9d0c6c0 items=0 ppid=3043 pid=3211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.923000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:38:49.933000 audit[3213]: NETFILTER_CFG table=filter:85 family=10 entries=2 op=nft_register_chain pid=3213 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:49.933000 audit[3213]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff0c55420 a2=0 a3=ffffbb5776c0 items=0 ppid=3043 pid=3213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.933000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:38:49.945000 audit[3216]: NETFILTER_CFG table=filter:86 family=10 entries=2 op=nft_register_chain pid=3216 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:49.945000 audit[3216]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe23f41a0 a2=0 a3=ffff9281d6c0 items=0 ppid=3043 pid=3216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.945000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:38:49.950000 audit[3217]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=3217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:49.950000 audit[3217]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff27a1800 a2=0 a3=ffff9fe366c0 items=0 ppid=3043 pid=3217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.950000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:38:49.959000 audit[3219]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=3219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:49.959000 audit[3219]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe1010a40 a2=0 a3=ffff852316c0 items=0 ppid=3043 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.959000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:38:49.964000 audit[3220]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=3220 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:49.964000 audit[3220]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc4581cc0 a2=0 a3=ffffb4bc16c0 items=0 ppid=3043 pid=3220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.964000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:38:49.973000 audit[3222]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=3222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:49.973000 audit[3222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffffbab3c00 a2=0 a3=ffff832516c0 items=0 ppid=3043 pid=3222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.973000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:38:49.986000 audit[3225]: NETFILTER_CFG table=filter:91 family=10 entries=2 op=nft_register_chain pid=3225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:49.986000 audit[3225]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffeaeb1d70 a2=0 a3=ffffacdbf6c0 items=0 ppid=3043 pid=3225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.986000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:38:49.991000 audit[3226]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_chain pid=3226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:49.991000 audit[3226]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe3204220 a2=0 a3=ffffb44f66c0 items=0 ppid=3043 pid=3226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.991000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:38:50.000000 audit[3228]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=3228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.000000 audit[3228]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc7d691a0 a2=0 a3=ffff9f2ce6c0 items=0 ppid=3043 pid=3228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.000000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:38:50.004000 audit[3229]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_chain pid=3229 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.004000 audit[3229]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcd2fca60 a2=0 a3=ffff90a616c0 items=0 ppid=3043 pid=3229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.004000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:38:50.017000 audit[3231]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_rule pid=3231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.017000 audit[3231]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe94e3bc0 a2=0 a3=ffffa00936c0 items=0 ppid=3043 pid=3231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.017000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:38:50.030000 audit[3234]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_rule pid=3234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.030000 audit[3234]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc9b79d80 a2=0 a3=ffffa57cc6c0 items=0 ppid=3043 pid=3234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.030000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:38:50.043000 audit[3237]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=3237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.043000 audit[3237]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff381d000 a2=0 a3=ffff93cca6c0 items=0 ppid=3043 pid=3237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.043000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:38:50.047000 audit[3238]: NETFILTER_CFG table=nat:98 family=10 entries=1 op=nft_register_chain pid=3238 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.047000 audit[3238]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffdf633b40 a2=0 a3=ffff8fdf46c0 items=0 ppid=3043 pid=3238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.047000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:38:50.056000 audit[3240]: NETFILTER_CFG table=nat:99 family=10 entries=2 op=nft_register_chain pid=3240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.056000 audit[3240]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffd1406350 a2=0 a3=ffffb5f776c0 items=0 ppid=3043 pid=3240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.056000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:38:50.068000 audit[3243]: NETFILTER_CFG table=nat:100 family=10 entries=2 op=nft_register_chain pid=3243 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.068000 audit[3243]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffc1e56580 a2=0 a3=ffff848466c0 items=0 ppid=3043 pid=3243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.068000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:38:50.103000 audit[3247]: NETFILTER_CFG table=filter:101 family=10 entries=3 op=nft_register_rule pid=3247 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:38:50.103000 audit[3247]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffd4c88e30 a2=0 a3=ffff8e0ad6c0 items=0 ppid=3043 pid=3247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.103000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:38:50.105000 audit[3247]: NETFILTER_CFG table=nat:102 family=10 entries=10 op=nft_register_chain pid=3247 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:38:50.105000 audit[3247]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffd4c88e30 a2=0 a3=ffff8e0ad6c0 items=0 ppid=3043 pid=3247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.105000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:38:50.790746 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount852852212.mount: Deactivated successfully. Oct 2 19:38:51.864096 env[1737]: time="2023-10-02T19:38:51.864021424Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:51.867263 env[1737]: time="2023-10-02T19:38:51.867191295Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:51.870365 env[1737]: time="2023-10-02T19:38:51.870304621Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:51.871590 env[1737]: time="2023-10-02T19:38:51.871528028Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 19:38:51.874550 env[1737]: time="2023-10-02T19:38:51.874486672Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:38:51.880665 env[1737]: time="2023-10-02T19:38:51.880603931Z" level=info msg="CreateContainer within sandbox \"4b70cee2f0d321431afe505ab21798f924d0f889b6812e50343f1b316d3daf77\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:38:51.907688 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3609268874.mount: Deactivated successfully. Oct 2 19:38:51.919263 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2493816660.mount: Deactivated successfully. Oct 2 19:38:51.929368 env[1737]: time="2023-10-02T19:38:51.929215046Z" level=info msg="CreateContainer within sandbox \"4b70cee2f0d321431afe505ab21798f924d0f889b6812e50343f1b316d3daf77\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"34b25ead6b4c606e14cdc03b983f4c7f4f7d62ce14a3d8ee77a3b84c5b34645d\"" Oct 2 19:38:51.930681 env[1737]: time="2023-10-02T19:38:51.930601763Z" level=info msg="StartContainer for \"34b25ead6b4c606e14cdc03b983f4c7f4f7d62ce14a3d8ee77a3b84c5b34645d\"" Oct 2 19:38:51.984224 systemd[1]: Started cri-containerd-34b25ead6b4c606e14cdc03b983f4c7f4f7d62ce14a3d8ee77a3b84c5b34645d.scope. Oct 2 19:38:52.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.039000 audit: BPF prog-id=133 op=LOAD Oct 2 19:38:52.040000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.040000 audit[3256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3063 pid=3256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:52.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334623235656164366234633630366531346364633033623938336634 Oct 2 19:38:52.040000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.040000 audit[3256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3063 pid=3256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:52.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334623235656164366234633630366531346364633033623938336634 Oct 2 19:38:52.040000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.040000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.040000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.040000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.040000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.040000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.040000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.040000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.040000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.040000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.040000 audit: BPF prog-id=134 op=LOAD Oct 2 19:38:52.040000 audit[3256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3063 pid=3256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:52.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334623235656164366234633630366531346364633033623938336634 Oct 2 19:38:52.041000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.041000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.041000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.041000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.041000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.041000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.041000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.041000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.041000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.041000 audit: BPF prog-id=135 op=LOAD Oct 2 19:38:52.041000 audit[3256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3063 pid=3256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:52.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334623235656164366234633630366531346364633033623938336634 Oct 2 19:38:52.041000 audit: BPF prog-id=135 op=UNLOAD Oct 2 19:38:52.041000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:38:52.041000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.041000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.041000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.041000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.041000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.041000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.041000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.041000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.041000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.041000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.041000 audit: BPF prog-id=136 op=LOAD Oct 2 19:38:52.041000 audit[3256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3063 pid=3256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:52.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334623235656164366234633630366531346364633033623938336634 Oct 2 19:38:52.088430 env[1737]: time="2023-10-02T19:38:52.087992017Z" level=info msg="StartContainer for \"34b25ead6b4c606e14cdc03b983f4c7f4f7d62ce14a3d8ee77a3b84c5b34645d\" returns successfully" Oct 2 19:38:52.184000 audit[3267]: AVC avc: denied { map_create } for pid=3267 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c710,c757 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c710,c757 tclass=bpf permissive=0 Oct 2 19:38:52.184000 audit[3267]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=400068f768 a2=48 a3=0 items=0 ppid=3063 pid=3267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c710,c757 key=(null) Oct 2 19:38:52.184000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:38:56.197199 kubelet[2891]: I1002 19:38:56.197028 2891 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-f59cbd8c6-q8bgz" podStartSLOduration=-9.223372028658133e+09 pod.CreationTimestamp="2023-10-02 19:38:48 +0000 UTC" firstStartedPulling="2023-10-02 19:38:49.463489309 +0000 UTC m=+14.012557474" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:38:52.258562023 +0000 UTC m=+16.807630272" watchObservedRunningTime="2023-10-02 19:38:56.196643147 +0000 UTC m=+20.745711336" Oct 2 19:38:59.632894 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1354134975.mount: Deactivated successfully. Oct 2 19:39:03.781635 env[1737]: time="2023-10-02T19:39:03.781571951Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:03.786023 env[1737]: time="2023-10-02T19:39:03.785964926Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:03.788734 env[1737]: time="2023-10-02T19:39:03.788677929Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:03.790056 env[1737]: time="2023-10-02T19:39:03.789986472Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 19:39:03.798495 env[1737]: time="2023-10-02T19:39:03.798437415Z" level=info msg="CreateContainer within sandbox \"c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:39:03.817243 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount593836555.mount: Deactivated successfully. Oct 2 19:39:03.834777 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3434727664.mount: Deactivated successfully. Oct 2 19:39:03.838138 env[1737]: time="2023-10-02T19:39:03.838052647Z" level=info msg="CreateContainer within sandbox \"c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753\"" Oct 2 19:39:03.841274 env[1737]: time="2023-10-02T19:39:03.841210879Z" level=info msg="StartContainer for \"ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753\"" Oct 2 19:39:03.894266 systemd[1]: Started cri-containerd-ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753.scope. Oct 2 19:39:03.939086 systemd[1]: cri-containerd-ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753.scope: Deactivated successfully. Oct 2 19:39:04.581066 env[1737]: time="2023-10-02T19:39:04.580970026Z" level=info msg="shim disconnected" id=ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753 Oct 2 19:39:04.581427 env[1737]: time="2023-10-02T19:39:04.581392838Z" level=warning msg="cleaning up after shim disconnected" id=ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753 namespace=k8s.io Oct 2 19:39:04.581570 env[1737]: time="2023-10-02T19:39:04.581541760Z" level=info msg="cleaning up dead shim" Oct 2 19:39:04.608870 env[1737]: time="2023-10-02T19:39:04.608795512Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:39:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3312 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:39:04Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:39:04.609436 env[1737]: time="2023-10-02T19:39:04.609280402Z" level=error msg="copy shim log" error="read /proc/self/fd/57: file already closed" Oct 2 19:39:04.609807 env[1737]: time="2023-10-02T19:39:04.609737787Z" level=error msg="Failed to pipe stdout of container \"ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753\"" error="reading from a closed fifo" Oct 2 19:39:04.609955 env[1737]: time="2023-10-02T19:39:04.609880828Z" level=error msg="Failed to pipe stderr of container \"ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753\"" error="reading from a closed fifo" Oct 2 19:39:04.612331 env[1737]: time="2023-10-02T19:39:04.612227863Z" level=error msg="StartContainer for \"ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:39:04.613653 kubelet[2891]: E1002 19:39:04.612793 2891 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753" Oct 2 19:39:04.613653 kubelet[2891]: E1002 19:39:04.613037 2891 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:39:04.613653 kubelet[2891]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:39:04.613653 kubelet[2891]: rm /hostbin/cilium-mount Oct 2 19:39:04.614988 kubelet[2891]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-pwhmr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:39:04.615226 kubelet[2891]: E1002 19:39:04.613133 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:39:04.811662 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753-rootfs.mount: Deactivated successfully. Oct 2 19:39:05.292058 env[1737]: time="2023-10-02T19:39:05.287247155Z" level=info msg="CreateContainer within sandbox \"c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:39:05.312351 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1627181592.mount: Deactivated successfully. Oct 2 19:39:05.324440 env[1737]: time="2023-10-02T19:39:05.324372058Z" level=info msg="CreateContainer within sandbox \"c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f\"" Oct 2 19:39:05.327287 env[1737]: time="2023-10-02T19:39:05.325931259Z" level=info msg="StartContainer for \"32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f\"" Oct 2 19:39:05.376066 systemd[1]: Started cri-containerd-32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f.scope. Oct 2 19:39:05.421580 systemd[1]: cri-containerd-32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f.scope: Deactivated successfully. Oct 2 19:39:05.444369 env[1737]: time="2023-10-02T19:39:05.444291414Z" level=info msg="shim disconnected" id=32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f Oct 2 19:39:05.444664 env[1737]: time="2023-10-02T19:39:05.444442028Z" level=warning msg="cleaning up after shim disconnected" id=32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f namespace=k8s.io Oct 2 19:39:05.444664 env[1737]: time="2023-10-02T19:39:05.444483704Z" level=info msg="cleaning up dead shim" Oct 2 19:39:05.475103 env[1737]: time="2023-10-02T19:39:05.475023233Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:39:05Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3351 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:39:05Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:39:05.475568 env[1737]: time="2023-10-02T19:39:05.475473994Z" level=error msg="copy shim log" error="read /proc/self/fd/57: file already closed" Oct 2 19:39:05.478879 env[1737]: time="2023-10-02T19:39:05.478354770Z" level=error msg="Failed to pipe stdout of container \"32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f\"" error="reading from a closed fifo" Oct 2 19:39:05.478879 env[1737]: time="2023-10-02T19:39:05.478495496Z" level=error msg="Failed to pipe stderr of container \"32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f\"" error="reading from a closed fifo" Oct 2 19:39:05.481277 env[1737]: time="2023-10-02T19:39:05.481144178Z" level=error msg="StartContainer for \"32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:39:05.481728 kubelet[2891]: E1002 19:39:05.481659 2891 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f" Oct 2 19:39:05.481894 kubelet[2891]: E1002 19:39:05.481877 2891 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:39:05.481894 kubelet[2891]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:39:05.481894 kubelet[2891]: rm /hostbin/cilium-mount Oct 2 19:39:05.481894 kubelet[2891]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-pwhmr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:39:05.482362 kubelet[2891]: E1002 19:39:05.481979 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:39:05.811673 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f-rootfs.mount: Deactivated successfully. Oct 2 19:39:06.284943 kubelet[2891]: I1002 19:39:06.284870 2891 scope.go:115] "RemoveContainer" containerID="ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753" Oct 2 19:39:06.288729 kubelet[2891]: I1002 19:39:06.287940 2891 scope.go:115] "RemoveContainer" containerID="ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753" Oct 2 19:39:06.289951 env[1737]: time="2023-10-02T19:39:06.289825536Z" level=info msg="RemoveContainer for \"ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753\"" Oct 2 19:39:06.291319 env[1737]: time="2023-10-02T19:39:06.291196756Z" level=info msg="RemoveContainer for \"ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753\"" Oct 2 19:39:06.291797 env[1737]: time="2023-10-02T19:39:06.291695865Z" level=error msg="RemoveContainer for \"ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753\" failed" error="failed to set removing state for container \"ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753\": container is already in removing state" Oct 2 19:39:06.292219 kubelet[2891]: E1002 19:39:06.292190 2891 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753\": container is already in removing state" containerID="ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753" Oct 2 19:39:06.292460 kubelet[2891]: E1002 19:39:06.292431 2891 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753": container is already in removing state; Skipping pod "cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236)" Oct 2 19:39:06.294071 kubelet[2891]: E1002 19:39:06.293984 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236)\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:39:06.300952 env[1737]: time="2023-10-02T19:39:06.298154841Z" level=info msg="RemoveContainer for \"ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753\" returns successfully" Oct 2 19:39:07.293107 kubelet[2891]: E1002 19:39:07.292986 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236)\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:39:07.688359 kubelet[2891]: W1002 19:39:07.688293 2891 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podcab1ee13_fc5f_4ac4_8b8d_729eb34e4236.slice/cri-containerd-ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753.scope WatchSource:0}: container "ccdc3a52bac405a3b6627ef15763d9c151de2f7dbcc3e240911434910f4f8753" in namespace "k8s.io": not found Oct 2 19:39:10.798835 kubelet[2891]: W1002 19:39:10.798762 2891 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podcab1ee13_fc5f_4ac4_8b8d_729eb34e4236.slice/cri-containerd-32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f.scope WatchSource:0}: task 32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f not found: not found Oct 2 19:39:22.150005 env[1737]: time="2023-10-02T19:39:22.148265551Z" level=info msg="CreateContainer within sandbox \"c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:39:22.170530 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3101031430.mount: Deactivated successfully. Oct 2 19:39:22.181289 env[1737]: time="2023-10-02T19:39:22.181185032Z" level=info msg="CreateContainer within sandbox \"c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77\"" Oct 2 19:39:22.184346 env[1737]: time="2023-10-02T19:39:22.184287053Z" level=info msg="StartContainer for \"d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77\"" Oct 2 19:39:22.247802 systemd[1]: Started cri-containerd-d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77.scope. Oct 2 19:39:22.294022 systemd[1]: cri-containerd-d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77.scope: Deactivated successfully. Oct 2 19:39:22.317537 env[1737]: time="2023-10-02T19:39:22.317423659Z" level=info msg="shim disconnected" id=d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77 Oct 2 19:39:22.317936 env[1737]: time="2023-10-02T19:39:22.317868818Z" level=warning msg="cleaning up after shim disconnected" id=d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77 namespace=k8s.io Oct 2 19:39:22.318087 env[1737]: time="2023-10-02T19:39:22.318056758Z" level=info msg="cleaning up dead shim" Oct 2 19:39:22.348399 env[1737]: time="2023-10-02T19:39:22.348318199Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:39:22Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3390 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:39:22Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:39:22.349109 env[1737]: time="2023-10-02T19:39:22.349027105Z" level=error msg="copy shim log" error="read /proc/self/fd/52: file already closed" Oct 2 19:39:22.352387 env[1737]: time="2023-10-02T19:39:22.352188024Z" level=error msg="Failed to pipe stdout of container \"d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77\"" error="reading from a closed fifo" Oct 2 19:39:22.352551 env[1737]: time="2023-10-02T19:39:22.352254231Z" level=error msg="Failed to pipe stderr of container \"d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77\"" error="reading from a closed fifo" Oct 2 19:39:22.357978 env[1737]: time="2023-10-02T19:39:22.357863024Z" level=error msg="StartContainer for \"d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:39:22.358800 kubelet[2891]: E1002 19:39:22.358532 2891 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77" Oct 2 19:39:22.358800 kubelet[2891]: E1002 19:39:22.358690 2891 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:39:22.358800 kubelet[2891]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:39:22.358800 kubelet[2891]: rm /hostbin/cilium-mount Oct 2 19:39:22.364642 kubelet[2891]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-pwhmr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:39:22.364854 kubelet[2891]: E1002 19:39:22.358754 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:39:23.165951 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77-rootfs.mount: Deactivated successfully. Oct 2 19:39:23.337166 kubelet[2891]: I1002 19:39:23.337106 2891 scope.go:115] "RemoveContainer" containerID="32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f" Oct 2 19:39:23.337417 kubelet[2891]: I1002 19:39:23.337372 2891 scope.go:115] "RemoveContainer" containerID="32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f" Oct 2 19:39:23.341530 env[1737]: time="2023-10-02T19:39:23.341436295Z" level=info msg="RemoveContainer for \"32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f\"" Oct 2 19:39:23.343508 env[1737]: time="2023-10-02T19:39:23.343454249Z" level=info msg="RemoveContainer for \"32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f\"" Oct 2 19:39:23.344052 env[1737]: time="2023-10-02T19:39:23.343876150Z" level=error msg="RemoveContainer for \"32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f\" failed" error="failed to set removing state for container \"32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f\": container is already in removing state" Oct 2 19:39:23.344783 kubelet[2891]: E1002 19:39:23.344730 2891 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f\": container is already in removing state" containerID="32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f" Oct 2 19:39:23.344987 kubelet[2891]: E1002 19:39:23.344816 2891 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f": container is already in removing state; Skipping pod "cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236)" Oct 2 19:39:23.346531 env[1737]: time="2023-10-02T19:39:23.346452727Z" level=info msg="RemoveContainer for \"32ffa0c7c33b814cdfddec3c96b8ef4de973d69b916ad88602803aec5ef32d4f\" returns successfully" Oct 2 19:39:23.349580 kubelet[2891]: E1002 19:39:23.349538 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236)\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:39:25.424142 kubelet[2891]: W1002 19:39:25.423993 2891 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podcab1ee13_fc5f_4ac4_8b8d_729eb34e4236.slice/cri-containerd-d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77.scope WatchSource:0}: task d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77 not found: not found Oct 2 19:39:30.115000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:30.118272 kernel: kauditd_printk_skb: 296 callbacks suppressed Oct 2 19:39:30.118451 kernel: audit: type=1400 audit(1696275570.115:1143): avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:30.127945 kernel: audit: type=1300 audit(1696275570.115:1143): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40013c79c0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:39:30.115000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40013c79c0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:39:30.115000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:30.150557 kernel: audit: type=1327 audit(1696275570.115:1143): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:30.150743 kernel: audit: type=1400 audit(1696275570.115:1144): avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:30.115000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:30.115000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40020c4bd0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:39:30.173346 kernel: audit: type=1300 audit(1696275570.115:1144): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40020c4bd0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:39:30.115000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:30.183942 kernel: audit: type=1327 audit(1696275570.115:1144): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:31.125000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:31.125000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=59 a1=400beae1e0 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:39:31.149117 kernel: audit: type=1400 audit(1696275571.125:1145): avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:31.149239 kernel: audit: type=1300 audit(1696275571.125:1145): arch=c00000b7 syscall=27 success=no exit=-13 a0=59 a1=400beae1e0 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:39:31.149326 kernel: audit: type=1327 audit(1696275571.125:1145): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:39:31.125000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:39:31.159957 kernel: audit: type=1400 audit(1696275571.127:1146): avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:31.127000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:31.127000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=59 a1=400bd9bbf0 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:39:31.127000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:39:31.135000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:31.135000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=59 a1=400bd9bd70 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:39:31.135000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:39:31.135000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:31.135000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=59 a1=4009d23e40 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:39:31.135000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:39:31.262000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:31.262000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=59 a1=400beae510 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:39:31.262000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:39:31.284000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:31.284000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=59 a1=4009ea3ae0 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:39:31.284000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:39:37.144507 kubelet[2891]: E1002 19:39:37.144453 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236)\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:39:41.060594 systemd[1]: Started sshd@7-172.31.16.28:22-139.178.89.65:41850.service. Oct 2 19:39:41.073880 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:39:41.074032 kernel: audit: type=1130 audit(1696275581.059:1151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.16.28:22-139.178.89.65:41850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:41.059000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.16.28:22-139.178.89.65:41850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:41.249000 audit[3409]: USER_ACCT pid=3409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:41.253596 sshd[3409]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:39:41.254839 sshd[3409]: Accepted publickey for core from 139.178.89.65 port 41850 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:39:41.251000 audit[3409]: CRED_ACQ pid=3409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:41.270209 kernel: audit: type=1101 audit(1696275581.249:1152): pid=3409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:41.270309 kernel: audit: type=1103 audit(1696275581.251:1153): pid=3409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:41.276809 kernel: audit: type=1006 audit(1696275581.252:1154): pid=3409 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 19:39:41.252000 audit[3409]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4085f20 a2=3 a3=1 items=0 ppid=1 pid=3409 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:41.287553 kernel: audit: type=1300 audit(1696275581.252:1154): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4085f20 a2=3 a3=1 items=0 ppid=1 pid=3409 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:41.252000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:41.291315 kernel: audit: type=1327 audit(1696275581.252:1154): proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:41.294765 systemd-logind[1726]: New session 8 of user core. Oct 2 19:39:41.296288 systemd[1]: Started session-8.scope. Oct 2 19:39:41.305000 audit[3409]: USER_START pid=3409 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:41.311000 audit[3411]: CRED_ACQ pid=3411 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:41.327106 kernel: audit: type=1105 audit(1696275581.305:1155): pid=3409 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:41.327231 kernel: audit: type=1103 audit(1696275581.311:1156): pid=3411 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:41.633449 sshd[3409]: pam_unix(sshd:session): session closed for user core Oct 2 19:39:41.635000 audit[3409]: USER_END pid=3409 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:41.640436 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:39:41.641737 systemd[1]: sshd@7-172.31.16.28:22-139.178.89.65:41850.service: Deactivated successfully. Oct 2 19:39:41.637000 audit[3409]: CRED_DISP pid=3409 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:41.657151 kernel: audit: type=1106 audit(1696275581.635:1157): pid=3409 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:41.657302 kernel: audit: type=1104 audit(1696275581.637:1158): pid=3409 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:41.657685 systemd-logind[1726]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:39:41.641000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.16.28:22-139.178.89.65:41850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:41.660227 systemd-logind[1726]: Removed session 8. Oct 2 19:39:44.731000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:44.731000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40027a7320 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:39:44.731000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:44.738000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:44.738000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40026b72c0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:39:44.738000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:44.739000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:44.739000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40027a7340 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:39:44.739000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:44.741000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:44.741000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40027a7460 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:39:44.741000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:49.159482 env[1737]: time="2023-10-02T19:39:49.159239703Z" level=info msg="CreateContainer within sandbox \"c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:39:49.187729 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1533957009.mount: Deactivated successfully. Oct 2 19:39:49.192957 env[1737]: time="2023-10-02T19:39:49.192746957Z" level=info msg="CreateContainer within sandbox \"c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8\"" Oct 2 19:39:49.195183 env[1737]: time="2023-10-02T19:39:49.193888486Z" level=info msg="StartContainer for \"e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8\"" Oct 2 19:39:49.262818 systemd[1]: Started cri-containerd-e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8.scope. Oct 2 19:39:49.302785 systemd[1]: cri-containerd-e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8.scope: Deactivated successfully. Oct 2 19:39:49.332974 env[1737]: time="2023-10-02T19:39:49.332870854Z" level=info msg="shim disconnected" id=e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8 Oct 2 19:39:49.333310 env[1737]: time="2023-10-02T19:39:49.332974764Z" level=warning msg="cleaning up after shim disconnected" id=e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8 namespace=k8s.io Oct 2 19:39:49.333310 env[1737]: time="2023-10-02T19:39:49.332998321Z" level=info msg="cleaning up dead shim" Oct 2 19:39:49.363327 env[1737]: time="2023-10-02T19:39:49.363237124Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:39:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3448 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:39:49Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:39:49.363774 env[1737]: time="2023-10-02T19:39:49.363681472Z" level=error msg="copy shim log" error="read /proc/self/fd/51: file already closed" Oct 2 19:39:49.364206 env[1737]: time="2023-10-02T19:39:49.364147311Z" level=error msg="Failed to pipe stderr of container \"e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8\"" error="reading from a closed fifo" Oct 2 19:39:49.364410 env[1737]: time="2023-10-02T19:39:49.364204529Z" level=error msg="Failed to pipe stdout of container \"e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8\"" error="reading from a closed fifo" Oct 2 19:39:49.368628 env[1737]: time="2023-10-02T19:39:49.367763422Z" level=error msg="StartContainer for \"e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:39:49.371122 kubelet[2891]: E1002 19:39:49.368185 2891 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8" Oct 2 19:39:49.371122 kubelet[2891]: E1002 19:39:49.368314 2891 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:39:49.371122 kubelet[2891]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:39:49.371122 kubelet[2891]: rm /hostbin/cilium-mount Oct 2 19:39:49.371781 kubelet[2891]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-pwhmr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:39:49.371892 kubelet[2891]: E1002 19:39:49.368373 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:39:49.400459 kubelet[2891]: I1002 19:39:49.399648 2891 scope.go:115] "RemoveContainer" containerID="d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77" Oct 2 19:39:49.400459 kubelet[2891]: I1002 19:39:49.400189 2891 scope.go:115] "RemoveContainer" containerID="d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77" Oct 2 19:39:49.403384 env[1737]: time="2023-10-02T19:39:49.403326472Z" level=info msg="RemoveContainer for \"d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77\"" Oct 2 19:39:49.406221 env[1737]: time="2023-10-02T19:39:49.406164279Z" level=info msg="RemoveContainer for \"d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77\"" Oct 2 19:39:49.407028 env[1737]: time="2023-10-02T19:39:49.406970327Z" level=error msg="RemoveContainer for \"d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77\" failed" error="failed to set removing state for container \"d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77\": container is already in removing state" Oct 2 19:39:49.408833 kubelet[2891]: E1002 19:39:49.407727 2891 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77\": container is already in removing state" containerID="d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77" Oct 2 19:39:49.408833 kubelet[2891]: E1002 19:39:49.407791 2891 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77": container is already in removing state; Skipping pod "cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236)" Oct 2 19:39:49.408833 kubelet[2891]: E1002 19:39:49.408350 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236)\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:39:49.415546 env[1737]: time="2023-10-02T19:39:49.414160500Z" level=info msg="RemoveContainer for \"d6bc94cbffd3aa2d6aa7643648e8be101ef3805fadb6c2dff35e621f3496ad77\" returns successfully" Oct 2 19:39:50.178022 systemd[1]: run-containerd-runc-k8s.io-e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8-runc.x6qqAQ.mount: Deactivated successfully. Oct 2 19:39:50.178218 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8-rootfs.mount: Deactivated successfully. Oct 2 19:39:51.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.16.28:22-139.178.89.65:36560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:51.667620 systemd[1]: Started sshd@8-172.31.16.28:22-139.178.89.65:36560.service. Oct 2 19:39:51.670364 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:39:51.670451 kernel: audit: type=1130 audit(1696275591.667:1164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.16.28:22-139.178.89.65:36560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:51.861000 audit[3465]: USER_ACCT pid=3465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:51.862873 sshd[3465]: Accepted publickey for core from 139.178.89.65 port 36560 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:39:51.875986 kernel: audit: type=1101 audit(1696275591.861:1165): pid=3465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:51.876142 kernel: audit: type=1103 audit(1696275591.874:1166): pid=3465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:51.874000 audit[3465]: CRED_ACQ pid=3465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:51.876776 sshd[3465]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:39:51.892045 kernel: audit: type=1006 audit(1696275591.874:1167): pid=3465 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 2 19:39:51.874000 audit[3465]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9911560 a2=3 a3=1 items=0 ppid=1 pid=3465 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:51.898482 systemd[1]: Started session-9.scope. Oct 2 19:39:51.902321 systemd-logind[1726]: New session 9 of user core. Oct 2 19:39:51.903515 kernel: audit: type=1300 audit(1696275591.874:1167): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9911560 a2=3 a3=1 items=0 ppid=1 pid=3465 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:51.903589 kernel: audit: type=1327 audit(1696275591.874:1167): proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:51.874000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:51.917000 audit[3465]: USER_START pid=3465 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:51.930222 kernel: audit: type=1105 audit(1696275591.917:1168): pid=3465 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:51.930000 audit[3467]: CRED_ACQ pid=3467 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:51.941971 kernel: audit: type=1103 audit(1696275591.930:1169): pid=3467 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:52.219106 sshd[3465]: pam_unix(sshd:session): session closed for user core Oct 2 19:39:52.222000 audit[3465]: USER_END pid=3465 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:52.224000 audit[3465]: CRED_DISP pid=3465 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:52.236085 systemd[1]: sshd@8-172.31.16.28:22-139.178.89.65:36560.service: Deactivated successfully. Oct 2 19:39:52.237541 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:39:52.240590 systemd-logind[1726]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:39:52.243134 systemd-logind[1726]: Removed session 9. Oct 2 19:39:52.246035 kernel: audit: type=1106 audit(1696275592.222:1170): pid=3465 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:52.246408 kernel: audit: type=1104 audit(1696275592.224:1171): pid=3465 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:52.235000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.16.28:22-139.178.89.65:36560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:52.440488 kubelet[2891]: W1002 19:39:52.440419 2891 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podcab1ee13_fc5f_4ac4_8b8d_729eb34e4236.slice/cri-containerd-e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8.scope WatchSource:0}: task e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8 not found: not found Oct 2 19:40:02.249000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.16.28:22-139.178.89.65:34978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:02.249639 systemd[1]: Started sshd@9-172.31.16.28:22-139.178.89.65:34978.service. Oct 2 19:40:02.251938 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:40:02.252020 kernel: audit: type=1130 audit(1696275602.249:1173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.16.28:22-139.178.89.65:34978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:02.439000 audit[3477]: USER_ACCT pid=3477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:02.446103 sshd[3477]: Accepted publickey for core from 139.178.89.65 port 34978 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:40:02.449971 sshd[3477]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:02.445000 audit[3477]: CRED_ACQ pid=3477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:02.460234 kernel: audit: type=1101 audit(1696275602.439:1174): pid=3477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:02.460892 kernel: audit: type=1103 audit(1696275602.445:1175): pid=3477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:02.461024 kernel: audit: type=1006 audit(1696275602.445:1176): pid=3477 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:40:02.474029 kernel: audit: type=1300 audit(1696275602.445:1176): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd93f0d0 a2=3 a3=1 items=0 ppid=1 pid=3477 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:02.445000 audit[3477]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd93f0d0 a2=3 a3=1 items=0 ppid=1 pid=3477 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:02.445000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:02.483956 kernel: audit: type=1327 audit(1696275602.445:1176): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:02.491679 systemd[1]: Started session-10.scope. Oct 2 19:40:02.492981 systemd-logind[1726]: New session 10 of user core. Oct 2 19:40:02.508000 audit[3477]: USER_START pid=3477 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:02.514000 audit[3479]: CRED_ACQ pid=3479 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:02.533673 kernel: audit: type=1105 audit(1696275602.508:1177): pid=3477 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:02.533820 kernel: audit: type=1103 audit(1696275602.514:1178): pid=3479 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:02.794635 sshd[3477]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:02.798000 audit[3477]: USER_END pid=3477 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:02.798000 audit[3477]: CRED_DISP pid=3477 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:02.815378 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:40:02.816880 systemd[1]: sshd@9-172.31.16.28:22-139.178.89.65:34978.service: Deactivated successfully. Oct 2 19:40:02.823107 kernel: audit: type=1106 audit(1696275602.798:1179): pid=3477 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:02.823266 kernel: audit: type=1104 audit(1696275602.798:1180): pid=3477 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:02.824668 systemd-logind[1726]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:40:02.812000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.16.28:22-139.178.89.65:34978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:02.826823 systemd-logind[1726]: Removed session 10. Oct 2 19:40:03.147886 kubelet[2891]: E1002 19:40:03.147842 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236)\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:40:12.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.16.28:22-139.178.89.65:51092 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:12.827053 systemd[1]: Started sshd@10-172.31.16.28:22-139.178.89.65:51092.service. Oct 2 19:40:12.829396 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:40:12.829484 kernel: audit: type=1130 audit(1696275612.826:1182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.16.28:22-139.178.89.65:51092 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:13.020000 audit[3490]: USER_ACCT pid=3490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:13.021737 sshd[3490]: Accepted publickey for core from 139.178.89.65 port 51092 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:40:13.033939 kernel: audit: type=1101 audit(1696275613.020:1183): pid=3490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:13.033000 audit[3490]: CRED_ACQ pid=3490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:13.035104 sshd[3490]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:13.049947 kernel: audit: type=1103 audit(1696275613.033:1184): pid=3490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:13.050097 kernel: audit: type=1006 audit(1696275613.033:1185): pid=3490 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:40:13.033000 audit[3490]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffda1e2510 a2=3 a3=1 items=0 ppid=1 pid=3490 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:13.060880 kernel: audit: type=1300 audit(1696275613.033:1185): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffda1e2510 a2=3 a3=1 items=0 ppid=1 pid=3490 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:13.033000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:13.067137 kernel: audit: type=1327 audit(1696275613.033:1185): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:13.066332 systemd-logind[1726]: New session 11 of user core. Oct 2 19:40:13.066450 systemd[1]: Started session-11.scope. Oct 2 19:40:13.077000 audit[3490]: USER_START pid=3490 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:13.083000 audit[3492]: CRED_ACQ pid=3492 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:13.099583 kernel: audit: type=1105 audit(1696275613.077:1186): pid=3490 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:13.099744 kernel: audit: type=1103 audit(1696275613.083:1187): pid=3492 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:13.367253 sshd[3490]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:13.368000 audit[3490]: USER_END pid=3490 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:13.374795 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:40:13.376149 systemd[1]: sshd@10-172.31.16.28:22-139.178.89.65:51092.service: Deactivated successfully. Oct 2 19:40:13.370000 audit[3490]: CRED_DISP pid=3490 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:13.382922 systemd-logind[1726]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:40:13.384671 systemd-logind[1726]: Removed session 11. Oct 2 19:40:13.390708 kernel: audit: type=1106 audit(1696275613.368:1188): pid=3490 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:13.390813 kernel: audit: type=1104 audit(1696275613.370:1189): pid=3490 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:13.375000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.16.28:22-139.178.89.65:51092 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:14.144100 kubelet[2891]: E1002 19:40:14.144062 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236)\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:40:23.408710 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:40:23.408857 kernel: audit: type=1130 audit(1696275623.396:1191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.16.28:22-139.178.89.65:40786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:23.396000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.16.28:22-139.178.89.65:40786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:23.397063 systemd[1]: Started sshd@11-172.31.16.28:22-139.178.89.65:40786.service. Oct 2 19:40:23.581000 audit[3505]: USER_ACCT pid=3505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:23.583626 sshd[3505]: Accepted publickey for core from 139.178.89.65 port 40786 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:40:23.594971 kernel: audit: type=1101 audit(1696275623.581:1192): pid=3505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:23.595000 audit[3505]: CRED_ACQ pid=3505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:23.597282 sshd[3505]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:23.607253 kernel: audit: type=1103 audit(1696275623.595:1193): pid=3505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:23.607381 kernel: audit: type=1006 audit(1696275623.595:1194): pid=3505 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:40:23.595000 audit[3505]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcddb4dd0 a2=3 a3=1 items=0 ppid=1 pid=3505 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:23.624019 kernel: audit: type=1300 audit(1696275623.595:1194): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcddb4dd0 a2=3 a3=1 items=0 ppid=1 pid=3505 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:23.595000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:23.628033 kernel: audit: type=1327 audit(1696275623.595:1194): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:23.631824 systemd-logind[1726]: New session 12 of user core. Oct 2 19:40:23.633967 systemd[1]: Started session-12.scope. Oct 2 19:40:23.641000 audit[3505]: USER_START pid=3505 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:23.648000 audit[3507]: CRED_ACQ pid=3507 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:23.664710 kernel: audit: type=1105 audit(1696275623.641:1195): pid=3505 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:23.664922 kernel: audit: type=1103 audit(1696275623.648:1196): pid=3507 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:23.913251 sshd[3505]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:23.913000 audit[3505]: USER_END pid=3505 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:23.918984 systemd-logind[1726]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:40:23.921241 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:40:23.922350 systemd[1]: sshd@11-172.31.16.28:22-139.178.89.65:40786.service: Deactivated successfully. Oct 2 19:40:23.925535 systemd-logind[1726]: Removed session 12. Oct 2 19:40:23.913000 audit[3505]: CRED_DISP pid=3505 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:23.936580 kernel: audit: type=1106 audit(1696275623.913:1197): pid=3505 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:23.936677 kernel: audit: type=1104 audit(1696275623.913:1198): pid=3505 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:23.919000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.16.28:22-139.178.89.65:40786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:25.144010 kubelet[2891]: E1002 19:40:25.143958 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236)\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:40:30.114000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:30.118853 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:40:30.118978 kernel: audit: type=1400 audit(1696275630.114:1201): avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:30.114000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:30.138215 kernel: audit: type=1400 audit(1696275630.114:1200): avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:30.138303 kernel: audit: type=1300 audit(1696275630.114:1200): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f9f950 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:40:30.114000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f9f950 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:40:30.114000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:30.160935 kernel: audit: type=1327 audit(1696275630.114:1200): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:30.114000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4001198c60 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:40:30.173417 kernel: audit: type=1300 audit(1696275630.114:1201): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4001198c60 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:40:30.173554 kernel: audit: type=1327 audit(1696275630.114:1201): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:30.114000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:31.126000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:31.126000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400903de00 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:40:31.149410 kernel: audit: type=1400 audit(1696275631.126:1202): avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:31.149535 kernel: audit: type=1300 audit(1696275631.126:1202): arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400903de00 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:40:31.149600 kernel: audit: type=1327 audit(1696275631.126:1202): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:40:31.126000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:40:31.128000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:31.169664 kernel: audit: type=1400 audit(1696275631.128:1203): avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:31.128000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400a5d1920 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:40:31.128000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:40:31.136000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:31.136000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400903df80 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:40:31.136000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:40:31.136000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:31.136000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4001064780 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:40:31.136000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:40:31.263000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:31.263000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4009bcc060 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:40:31.263000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:40:31.284000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:31.284000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=40010647c0 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:40:31.284000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:40:33.943553 systemd[1]: Started sshd@12-172.31.16.28:22-139.178.89.65:42628.service. Oct 2 19:40:33.942000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.16.28:22-139.178.89.65:42628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:34.127000 audit[3518]: USER_ACCT pid=3518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:34.129522 sshd[3518]: Accepted publickey for core from 139.178.89.65 port 42628 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:40:34.132000 audit[3518]: CRED_ACQ pid=3518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:34.132000 audit[3518]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd20f35e0 a2=3 a3=1 items=0 ppid=1 pid=3518 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:34.132000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:34.134484 sshd[3518]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:34.142442 systemd-logind[1726]: New session 13 of user core. Oct 2 19:40:34.143541 systemd[1]: Started session-13.scope. Oct 2 19:40:34.161000 audit[3518]: USER_START pid=3518 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:34.168000 audit[3520]: CRED_ACQ pid=3520 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:34.431753 sshd[3518]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:34.434000 audit[3518]: USER_END pid=3518 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:34.434000 audit[3518]: CRED_DISP pid=3518 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:34.438827 systemd[1]: sshd@12-172.31.16.28:22-139.178.89.65:42628.service: Deactivated successfully. Oct 2 19:40:34.438000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.16.28:22-139.178.89.65:42628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:34.440267 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:40:34.442661 systemd-logind[1726]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:40:34.444461 systemd-logind[1726]: Removed session 13. Oct 2 19:40:35.795166 kubelet[2891]: E1002 19:40:35.795109 2891 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:40:36.088046 kubelet[2891]: E1002 19:40:36.087927 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:40.148705 env[1737]: time="2023-10-02T19:40:40.148526640Z" level=info msg="CreateContainer within sandbox \"c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:40:40.168989 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2560943335.mount: Deactivated successfully. Oct 2 19:40:40.181617 env[1737]: time="2023-10-02T19:40:40.181541669Z" level=info msg="CreateContainer within sandbox \"c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9\"" Oct 2 19:40:40.184848 env[1737]: time="2023-10-02T19:40:40.184745946Z" level=info msg="StartContainer for \"3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9\"" Oct 2 19:40:40.243530 systemd[1]: Started cri-containerd-3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9.scope. Oct 2 19:40:40.283506 systemd[1]: cri-containerd-3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9.scope: Deactivated successfully. Oct 2 19:40:40.309927 env[1737]: time="2023-10-02T19:40:40.309835633Z" level=info msg="shim disconnected" id=3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9 Oct 2 19:40:40.310213 env[1737]: time="2023-10-02T19:40:40.309929630Z" level=warning msg="cleaning up after shim disconnected" id=3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9 namespace=k8s.io Oct 2 19:40:40.310213 env[1737]: time="2023-10-02T19:40:40.309953067Z" level=info msg="cleaning up dead shim" Oct 2 19:40:40.335605 env[1737]: time="2023-10-02T19:40:40.335519124Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:40:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3555 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:40:40Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:40:40.336111 env[1737]: time="2023-10-02T19:40:40.336018812Z" level=error msg="copy shim log" error="read /proc/self/fd/51: file already closed" Oct 2 19:40:40.336964 env[1737]: time="2023-10-02T19:40:40.336867669Z" level=error msg="Failed to pipe stdout of container \"3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9\"" error="reading from a closed fifo" Oct 2 19:40:40.337164 env[1737]: time="2023-10-02T19:40:40.337116997Z" level=error msg="Failed to pipe stderr of container \"3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9\"" error="reading from a closed fifo" Oct 2 19:40:40.339539 env[1737]: time="2023-10-02T19:40:40.339469681Z" level=error msg="StartContainer for \"3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:40:40.340053 kubelet[2891]: E1002 19:40:40.339894 2891 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9" Oct 2 19:40:40.340630 kubelet[2891]: E1002 19:40:40.340170 2891 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:40:40.340630 kubelet[2891]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:40:40.340630 kubelet[2891]: rm /hostbin/cilium-mount Oct 2 19:40:40.340630 kubelet[2891]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-pwhmr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:40:40.340967 kubelet[2891]: E1002 19:40:40.340234 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:40:40.528661 kubelet[2891]: I1002 19:40:40.528499 2891 scope.go:115] "RemoveContainer" containerID="e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8" Oct 2 19:40:40.529690 kubelet[2891]: I1002 19:40:40.529661 2891 scope.go:115] "RemoveContainer" containerID="e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8" Oct 2 19:40:40.541619 env[1737]: time="2023-10-02T19:40:40.541489121Z" level=info msg="RemoveContainer for \"e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8\"" Oct 2 19:40:40.541896 env[1737]: time="2023-10-02T19:40:40.541856039Z" level=info msg="RemoveContainer for \"e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8\"" Oct 2 19:40:40.542198 env[1737]: time="2023-10-02T19:40:40.542141967Z" level=error msg="RemoveContainer for \"e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8\" failed" error="failed to set removing state for container \"e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8\": container is already in removing state" Oct 2 19:40:40.543737 kubelet[2891]: E1002 19:40:40.542606 2891 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8\": container is already in removing state" containerID="e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8" Oct 2 19:40:40.543737 kubelet[2891]: E1002 19:40:40.542719 2891 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8": container is already in removing state; Skipping pod "cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236)" Oct 2 19:40:40.543737 kubelet[2891]: E1002 19:40:40.543367 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236)\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:40:40.548005 env[1737]: time="2023-10-02T19:40:40.547895660Z" level=info msg="RemoveContainer for \"e1b50ac0d8a4fc1ceb79ed8459e0679171fb79e0370b58e1fa3a311bb239b9c8\" returns successfully" Oct 2 19:40:41.090070 kubelet[2891]: E1002 19:40:41.090017 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:41.163792 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9-rootfs.mount: Deactivated successfully. Oct 2 19:40:43.417803 kubelet[2891]: W1002 19:40:43.417754 2891 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podcab1ee13_fc5f_4ac4_8b8d_729eb34e4236.slice/cri-containerd-3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9.scope WatchSource:0}: task 3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9 not found: not found Oct 2 19:40:44.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.16.28:22-139.178.89.65:52980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:44.462141 systemd[1]: Started sshd@13-172.31.16.28:22-139.178.89.65:52980.service. Oct 2 19:40:44.464467 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:40:44.464585 kernel: audit: type=1130 audit(1696275644.461:1217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.16.28:22-139.178.89.65:52980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:44.655000 audit[3569]: USER_ACCT pid=3569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:44.656962 sshd[3569]: Accepted publickey for core from 139.178.89.65 port 52980 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:40:44.669075 kernel: audit: type=1101 audit(1696275644.655:1218): pid=3569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:44.668000 audit[3569]: CRED_ACQ pid=3569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:44.670870 sshd[3569]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:44.686249 kernel: audit: type=1103 audit(1696275644.668:1219): pid=3569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:44.686420 kernel: audit: type=1006 audit(1696275644.668:1220): pid=3569 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:40:44.668000 audit[3569]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb2b64e0 a2=3 a3=1 items=0 ppid=1 pid=3569 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:44.698331 kernel: audit: type=1300 audit(1696275644.668:1220): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb2b64e0 a2=3 a3=1 items=0 ppid=1 pid=3569 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:44.668000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:44.702207 kernel: audit: type=1327 audit(1696275644.668:1220): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:44.706201 systemd-logind[1726]: New session 14 of user core. Oct 2 19:40:44.709055 systemd[1]: Started session-14.scope. Oct 2 19:40:44.718000 audit[3569]: USER_START pid=3569 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:44.730000 audit[3571]: CRED_ACQ pid=3571 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:44.741733 kernel: audit: type=1105 audit(1696275644.718:1221): pid=3569 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:44.741886 kernel: audit: type=1103 audit(1696275644.730:1222): pid=3571 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:44.742154 kernel: audit: type=1400 audit(1696275644.732:1223): avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:44.732000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:44.732000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f7a7a0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:40:44.763474 kernel: audit: type=1300 audit(1696275644.732:1223): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f7a7a0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:40:44.732000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:44.738000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:44.738000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f7a8c0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:40:44.738000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:44.739000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:44.739000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40007df2c0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:40:44.739000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:44.743000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:44.743000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f7ab20 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:40:44.743000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:44.992108 sshd[3569]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:44.993000 audit[3569]: USER_END pid=3569 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:44.993000 audit[3569]: CRED_DISP pid=3569 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:44.998007 systemd[1]: sshd@13-172.31.16.28:22-139.178.89.65:52980.service: Deactivated successfully. Oct 2 19:40:44.997000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.16.28:22-139.178.89.65:52980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:44.999426 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:40:45.000709 systemd-logind[1726]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:40:45.002828 systemd-logind[1726]: Removed session 14. Oct 2 19:40:46.090955 kubelet[2891]: E1002 19:40:46.090888 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:51.092811 kubelet[2891]: E1002 19:40:51.092766 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:55.022364 systemd[1]: Started sshd@14-172.31.16.28:22-139.178.89.65:34996.service. Oct 2 19:40:55.022000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.16.28:22-139.178.89.65:34996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:55.029022 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:40:55.029160 kernel: audit: type=1130 audit(1696275655.022:1230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.16.28:22-139.178.89.65:34996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:55.145347 kubelet[2891]: E1002 19:40:55.144745 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236)\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:40:55.206000 audit[3584]: USER_ACCT pid=3584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:55.209044 sshd[3584]: Accepted publickey for core from 139.178.89.65 port 34996 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:40:55.218982 kernel: audit: type=1101 audit(1696275655.206:1231): pid=3584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:55.221793 sshd[3584]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:55.220000 audit[3584]: CRED_ACQ pid=3584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:55.238121 kernel: audit: type=1103 audit(1696275655.220:1232): pid=3584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:55.238299 kernel: audit: type=1006 audit(1696275655.220:1233): pid=3584 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:40:55.220000 audit[3584]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc8b6250 a2=3 a3=1 items=0 ppid=1 pid=3584 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:55.248723 kernel: audit: type=1300 audit(1696275655.220:1233): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc8b6250 a2=3 a3=1 items=0 ppid=1 pid=3584 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:55.220000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:55.252800 kernel: audit: type=1327 audit(1696275655.220:1233): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:55.256999 systemd-logind[1726]: New session 15 of user core. Oct 2 19:40:55.258106 systemd[1]: Started session-15.scope. Oct 2 19:40:55.267000 audit[3584]: USER_START pid=3584 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:55.272000 audit[3586]: CRED_ACQ pid=3586 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:55.289730 kernel: audit: type=1105 audit(1696275655.267:1234): pid=3584 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:55.289828 kernel: audit: type=1103 audit(1696275655.272:1235): pid=3586 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:55.539500 sshd[3584]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:55.540000 audit[3584]: USER_END pid=3584 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:55.546474 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:40:55.547927 systemd[1]: sshd@14-172.31.16.28:22-139.178.89.65:34996.service: Deactivated successfully. Oct 2 19:40:55.543000 audit[3584]: CRED_DISP pid=3584 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:55.554266 systemd-logind[1726]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:40:55.563881 kernel: audit: type=1106 audit(1696275655.540:1236): pid=3584 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:55.564030 kernel: audit: type=1104 audit(1696275655.543:1237): pid=3584 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:55.566484 systemd-logind[1726]: Removed session 15. Oct 2 19:40:55.547000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.16.28:22-139.178.89.65:34996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:56.094363 kubelet[2891]: E1002 19:40:56.094283 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:01.095764 kubelet[2891]: E1002 19:41:01.095717 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:05.574347 systemd[1]: Started sshd@15-172.31.16.28:22-139.178.89.65:36410.service. Oct 2 19:41:05.573000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.16.28:22-139.178.89.65:36410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:05.576943 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:41:05.577042 kernel: audit: type=1130 audit(1696275665.573:1239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.16.28:22-139.178.89.65:36410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:05.768000 audit[3596]: USER_ACCT pid=3596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:05.772495 sshd[3596]: Accepted publickey for core from 139.178.89.65 port 36410 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:41:05.774157 sshd[3596]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:05.772000 audit[3596]: CRED_ACQ pid=3596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:05.789855 kernel: audit: type=1101 audit(1696275665.768:1240): pid=3596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:05.790088 kernel: audit: type=1103 audit(1696275665.772:1241): pid=3596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:05.790150 kernel: audit: type=1006 audit(1696275665.772:1242): pid=3596 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:41:05.772000 audit[3596]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc716c2d0 a2=3 a3=1 items=0 ppid=1 pid=3596 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:05.806354 kernel: audit: type=1300 audit(1696275665.772:1242): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc716c2d0 a2=3 a3=1 items=0 ppid=1 pid=3596 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:05.772000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:05.810171 kernel: audit: type=1327 audit(1696275665.772:1242): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:05.815174 systemd[1]: Started session-16.scope. Oct 2 19:41:05.816284 systemd-logind[1726]: New session 16 of user core. Oct 2 19:41:05.825000 audit[3596]: USER_START pid=3596 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:05.833000 audit[3598]: CRED_ACQ pid=3598 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:05.848040 kernel: audit: type=1105 audit(1696275665.825:1243): pid=3596 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:05.848123 kernel: audit: type=1103 audit(1696275665.833:1244): pid=3598 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:06.098125 kubelet[2891]: E1002 19:41:06.097960 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:06.099731 sshd[3596]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:06.101000 audit[3596]: USER_END pid=3596 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:06.106733 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:41:06.108198 systemd[1]: sshd@15-172.31.16.28:22-139.178.89.65:36410.service: Deactivated successfully. Oct 2 19:41:06.101000 audit[3596]: CRED_DISP pid=3596 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:06.115589 systemd-logind[1726]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:41:06.118363 systemd-logind[1726]: Removed session 16. Oct 2 19:41:06.125581 kernel: audit: type=1106 audit(1696275666.101:1245): pid=3596 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:06.125680 kernel: audit: type=1104 audit(1696275666.101:1246): pid=3596 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:06.107000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.16.28:22-139.178.89.65:36410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:10.144391 kubelet[2891]: E1002 19:41:10.144334 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236)\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:41:11.099614 kubelet[2891]: E1002 19:41:11.099580 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:16.101326 kubelet[2891]: E1002 19:41:16.101271 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:16.130541 systemd[1]: Started sshd@16-172.31.16.28:22-139.178.89.65:58018.service. Oct 2 19:41:16.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.16.28:22-139.178.89.65:58018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:16.137811 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:41:16.137984 kernel: audit: type=1130 audit(1696275676.130:1248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.16.28:22-139.178.89.65:58018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:16.317000 audit[3609]: USER_ACCT pid=3609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.318379 sshd[3609]: Accepted publickey for core from 139.178.89.65 port 58018 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:41:16.329036 kernel: audit: type=1101 audit(1696275676.317:1249): pid=3609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.331766 sshd[3609]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:16.330000 audit[3609]: CRED_ACQ pid=3609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.341603 systemd[1]: Started session-17.scope. Oct 2 19:41:16.345247 systemd-logind[1726]: New session 17 of user core. Oct 2 19:41:16.347570 kernel: audit: type=1103 audit(1696275676.330:1250): pid=3609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.347684 kernel: audit: type=1006 audit(1696275676.330:1251): pid=3609 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:41:16.330000 audit[3609]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe61ff4a0 a2=3 a3=1 items=0 ppid=1 pid=3609 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:16.358391 kernel: audit: type=1300 audit(1696275676.330:1251): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe61ff4a0 a2=3 a3=1 items=0 ppid=1 pid=3609 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:16.362993 kernel: audit: type=1327 audit(1696275676.330:1251): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:16.330000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:16.359000 audit[3609]: USER_START pid=3609 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.375109 kernel: audit: type=1105 audit(1696275676.359:1252): pid=3609 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.366000 audit[3611]: CRED_ACQ pid=3611 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.384913 kernel: audit: type=1103 audit(1696275676.366:1253): pid=3611 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.636142 sshd[3609]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:16.638000 audit[3609]: USER_END pid=3609 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.642783 systemd-logind[1726]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:41:16.645299 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:41:16.647496 systemd-logind[1726]: Removed session 17. Oct 2 19:41:16.638000 audit[3609]: CRED_DISP pid=3609 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.648832 systemd[1]: sshd@16-172.31.16.28:22-139.178.89.65:58018.service: Deactivated successfully. Oct 2 19:41:16.660113 kernel: audit: type=1106 audit(1696275676.638:1254): pid=3609 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.660241 kernel: audit: type=1104 audit(1696275676.638:1255): pid=3609 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.648000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.16.28:22-139.178.89.65:58018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:16.672874 systemd[1]: Started sshd@17-172.31.16.28:22-139.178.89.65:58026.service. Oct 2 19:41:16.672000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.16.28:22-139.178.89.65:58026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:16.860000 audit[3621]: USER_ACCT pid=3621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.861886 sshd[3621]: Accepted publickey for core from 139.178.89.65 port 58026 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:41:16.863000 audit[3621]: CRED_ACQ pid=3621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.863000 audit[3621]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd45ec5d0 a2=3 a3=1 items=0 ppid=1 pid=3621 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:16.863000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:16.865672 sshd[3621]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:16.874471 systemd-logind[1726]: New session 18 of user core. Oct 2 19:41:16.875377 systemd[1]: Started session-18.scope. Oct 2 19:41:16.885000 audit[3621]: USER_START pid=3621 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.891000 audit[3623]: CRED_ACQ pid=3623 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:18.635179 sshd[3621]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:18.636000 audit[3621]: USER_END pid=3621 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:18.636000 audit[3621]: CRED_DISP pid=3621 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:18.641881 systemd-logind[1726]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:41:18.642000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.16.28:22-139.178.89.65:58026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:18.642584 systemd[1]: sshd@17-172.31.16.28:22-139.178.89.65:58026.service: Deactivated successfully. Oct 2 19:41:18.643871 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:41:18.647468 systemd-logind[1726]: Removed session 18. Oct 2 19:41:18.666000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.16.28:22-139.178.89.65:58032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:18.667329 systemd[1]: Started sshd@18-172.31.16.28:22-139.178.89.65:58032.service. Oct 2 19:41:18.852000 audit[3631]: USER_ACCT pid=3631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:18.855026 sshd[3631]: Accepted publickey for core from 139.178.89.65 port 58032 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:41:18.855000 audit[3631]: CRED_ACQ pid=3631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:18.855000 audit[3631]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff8ee1f20 a2=3 a3=1 items=0 ppid=1 pid=3631 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:18.855000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:18.857955 sshd[3631]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:18.866624 systemd-logind[1726]: New session 19 of user core. Oct 2 19:41:18.867622 systemd[1]: Started session-19.scope. Oct 2 19:41:18.876000 audit[3631]: USER_START pid=3631 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:18.882000 audit[3633]: CRED_ACQ pid=3633 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:19.194301 sshd[3631]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:19.196000 audit[3631]: USER_END pid=3631 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:19.196000 audit[3631]: CRED_DISP pid=3631 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:19.200663 systemd-logind[1726]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:41:19.202021 systemd[1]: sshd@18-172.31.16.28:22-139.178.89.65:58032.service: Deactivated successfully. Oct 2 19:41:19.201000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.16.28:22-139.178.89.65:58032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:19.203488 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:41:19.204983 systemd-logind[1726]: Removed session 19. Oct 2 19:41:21.102806 kubelet[2891]: E1002 19:41:21.102753 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:21.143952 kubelet[2891]: E1002 19:41:21.143893 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236)\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:41:26.104978 kubelet[2891]: E1002 19:41:26.104929 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:29.226790 systemd[1]: Started sshd@19-172.31.16.28:22-139.178.89.65:41156.service. Oct 2 19:41:29.238237 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:41:29.238299 kernel: audit: type=1130 audit(1696275689.226:1275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.16.28:22-139.178.89.65:41156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:29.226000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.16.28:22-139.178.89.65:41156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:29.420000 audit[3644]: USER_ACCT pid=3644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:29.422149 sshd[3644]: Accepted publickey for core from 139.178.89.65 port 41156 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:41:29.425945 sshd[3644]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:29.424000 audit[3644]: CRED_ACQ pid=3644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:29.442499 kernel: audit: type=1101 audit(1696275689.420:1276): pid=3644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:29.442588 kernel: audit: type=1103 audit(1696275689.424:1277): pid=3644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:29.449098 kernel: audit: type=1006 audit(1696275689.424:1278): pid=3644 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:41:29.449233 kernel: audit: type=1300 audit(1696275689.424:1278): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe39afbb0 a2=3 a3=1 items=0 ppid=1 pid=3644 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:29.424000 audit[3644]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe39afbb0 a2=3 a3=1 items=0 ppid=1 pid=3644 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:29.424000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:29.462845 kernel: audit: type=1327 audit(1696275689.424:1278): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:29.468338 systemd-logind[1726]: New session 20 of user core. Oct 2 19:41:29.469655 systemd[1]: Started session-20.scope. Oct 2 19:41:29.479000 audit[3644]: USER_START pid=3644 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:29.497630 kernel: audit: type=1105 audit(1696275689.479:1279): pid=3644 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:29.497776 kernel: audit: type=1103 audit(1696275689.495:1280): pid=3646 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:29.495000 audit[3646]: CRED_ACQ pid=3646 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:29.761271 sshd[3644]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:29.762000 audit[3644]: USER_END pid=3644 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:29.762000 audit[3644]: CRED_DISP pid=3644 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:29.786864 kernel: audit: type=1106 audit(1696275689.762:1281): pid=3644 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:29.787017 kernel: audit: type=1104 audit(1696275689.762:1282): pid=3644 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:29.777995 systemd[1]: sshd@19-172.31.16.28:22-139.178.89.65:41156.service: Deactivated successfully. Oct 2 19:41:29.779236 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:41:29.776000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.16.28:22-139.178.89.65:41156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:29.788235 systemd-logind[1726]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:41:29.789717 systemd-logind[1726]: Removed session 20. Oct 2 19:41:30.117000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:30.117000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:30.117000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4001e87ce0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:41:30.117000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40026b7e20 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:41:30.117000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:30.117000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:31.106439 kubelet[2891]: E1002 19:41:31.106406 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:31.127000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:31.127000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=40035b7a40 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:41:31.127000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:41:31.128000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:31.128000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4005b19110 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:41:31.128000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:41:31.136000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:31.136000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:31.136000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=40035b7ec0 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:41:31.136000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:41:31.136000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=40018c4fe0 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:41:31.136000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:41:31.263000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:31.263000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4000fc2000 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:41:31.263000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:41:31.285000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:31.285000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=40018c5020 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:41:31.285000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:41:35.143832 kubelet[2891]: E1002 19:41:35.143793 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236)\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:41:36.109015 kubelet[2891]: E1002 19:41:36.108956 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:39.802762 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:41:39.802928 kernel: audit: type=1130 audit(1696275699.790:1292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.16.28:22-139.178.89.65:47894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:39.790000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.16.28:22-139.178.89.65:47894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:39.791325 systemd[1]: Started sshd@20-172.31.16.28:22-139.178.89.65:47894.service. Oct 2 19:41:39.977000 audit[3657]: USER_ACCT pid=3657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:39.978812 sshd[3657]: Accepted publickey for core from 139.178.89.65 port 47894 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:41:39.990949 kernel: audit: type=1101 audit(1696275699.977:1293): pid=3657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:39.992014 sshd[3657]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:39.990000 audit[3657]: CRED_ACQ pid=3657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:40.009082 kernel: audit: type=1103 audit(1696275699.990:1294): pid=3657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:40.009187 kernel: audit: type=1006 audit(1696275699.990:1295): pid=3657 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:41:39.990000 audit[3657]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9c29e60 a2=3 a3=1 items=0 ppid=1 pid=3657 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:40.020153 kernel: audit: type=1300 audit(1696275699.990:1295): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9c29e60 a2=3 a3=1 items=0 ppid=1 pid=3657 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:39.990000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:40.024733 kernel: audit: type=1327 audit(1696275699.990:1295): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:40.028003 systemd-logind[1726]: New session 21 of user core. Oct 2 19:41:40.030271 systemd[1]: Started session-21.scope. Oct 2 19:41:40.039000 audit[3657]: USER_START pid=3657 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:40.056562 kernel: audit: type=1105 audit(1696275700.039:1296): pid=3657 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:40.056723 kernel: audit: type=1103 audit(1696275700.054:1297): pid=3659 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:40.054000 audit[3659]: CRED_ACQ pid=3659 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:40.331044 sshd[3657]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:40.331000 audit[3657]: USER_END pid=3657 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:40.345000 systemd[1]: sshd@20-172.31.16.28:22-139.178.89.65:47894.service: Deactivated successfully. Oct 2 19:41:40.346402 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:41:40.347049 kernel: audit: type=1106 audit(1696275700.331:1298): pid=3657 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:40.334000 audit[3657]: CRED_DISP pid=3657 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:40.347879 systemd-logind[1726]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:41:40.344000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.16.28:22-139.178.89.65:47894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:40.358046 kernel: audit: type=1104 audit(1696275700.334:1299): pid=3657 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:40.358295 systemd-logind[1726]: Removed session 21. Oct 2 19:41:41.110878 kubelet[2891]: E1002 19:41:41.110844 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:44.734000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:44.734000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400294f5c0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:41:44.734000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:44.740000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:44.740000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400294f5e0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:41:44.740000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:44.740000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:44.740000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400294f600 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:41:44.740000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:44.743000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:44.743000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40028ab900 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:41:44.743000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:46.113042 kubelet[2891]: E1002 19:41:46.112983 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:48.144512 kubelet[2891]: E1002 19:41:48.144468 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236)\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:41:50.361000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.16.28:22-139.178.89.65:32986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:50.362437 systemd[1]: Started sshd@21-172.31.16.28:22-139.178.89.65:32986.service. Oct 2 19:41:50.365942 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:41:50.366077 kernel: audit: type=1130 audit(1696275710.361:1305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.16.28:22-139.178.89.65:32986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:50.547000 audit[3672]: USER_ACCT pid=3672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:50.548977 sshd[3672]: Accepted publickey for core from 139.178.89.65 port 32986 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:41:50.560958 kernel: audit: type=1101 audit(1696275710.547:1306): pid=3672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:50.562273 sshd[3672]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:50.560000 audit[3672]: CRED_ACQ pid=3672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:50.578512 kernel: audit: type=1103 audit(1696275710.560:1307): pid=3672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:50.578649 kernel: audit: type=1006 audit(1696275710.560:1308): pid=3672 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 19:41:50.560000 audit[3672]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6dbe380 a2=3 a3=1 items=0 ppid=1 pid=3672 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:50.589563 kernel: audit: type=1300 audit(1696275710.560:1308): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6dbe380 a2=3 a3=1 items=0 ppid=1 pid=3672 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:50.560000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:50.593553 kernel: audit: type=1327 audit(1696275710.560:1308): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:50.598265 systemd-logind[1726]: New session 22 of user core. Oct 2 19:41:50.599415 systemd[1]: Started session-22.scope. Oct 2 19:41:50.607000 audit[3672]: USER_START pid=3672 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:50.614000 audit[3674]: CRED_ACQ pid=3674 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:50.630472 kernel: audit: type=1105 audit(1696275710.607:1309): pid=3672 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:50.630630 kernel: audit: type=1103 audit(1696275710.614:1310): pid=3674 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:50.874624 sshd[3672]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:50.876000 audit[3672]: USER_END pid=3672 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:50.876000 audit[3672]: CRED_DISP pid=3672 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:50.889490 systemd[1]: sshd@21-172.31.16.28:22-139.178.89.65:32986.service: Deactivated successfully. Oct 2 19:41:50.890764 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:41:50.898200 kernel: audit: type=1106 audit(1696275710.876:1311): pid=3672 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:50.898348 kernel: audit: type=1104 audit(1696275710.876:1312): pid=3672 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:50.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.16.28:22-139.178.89.65:32986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:50.899359 systemd-logind[1726]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:41:50.901045 systemd-logind[1726]: Removed session 22. Oct 2 19:41:51.114274 kubelet[2891]: E1002 19:41:51.114224 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:56.117129 kubelet[2891]: E1002 19:41:56.117084 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:00.908387 systemd[1]: Started sshd@22-172.31.16.28:22-139.178.89.65:50192.service. Oct 2 19:42:00.911565 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:42:00.911623 kernel: audit: type=1130 audit(1696275720.906:1314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.16.28:22-139.178.89.65:50192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.16.28:22-139.178.89.65:50192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.095000 audit[3683]: USER_ACCT pid=3683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:01.096858 sshd[3683]: Accepted publickey for core from 139.178.89.65 port 50192 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:42:01.110814 kernel: audit: type=1101 audit(1696275721.095:1315): pid=3683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:01.110989 kernel: audit: type=1103 audit(1696275721.107:1316): pid=3683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:01.107000 audit[3683]: CRED_ACQ pid=3683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:01.110071 sshd[3683]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:01.118978 kubelet[2891]: E1002 19:42:01.118755 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:01.127739 kernel: audit: type=1006 audit(1696275721.107:1317): pid=3683 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:42:01.127991 kernel: audit: type=1300 audit(1696275721.107:1317): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe613890 a2=3 a3=1 items=0 ppid=1 pid=3683 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:01.107000 audit[3683]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe613890 a2=3 a3=1 items=0 ppid=1 pid=3683 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:01.139491 kernel: audit: type=1327 audit(1696275721.107:1317): proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:01.107000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:01.150608 systemd[1]: Started session-23.scope. Oct 2 19:42:01.153209 systemd-logind[1726]: New session 23 of user core. Oct 2 19:42:01.166000 audit[3683]: USER_START pid=3683 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:01.179000 audit[3685]: CRED_ACQ pid=3685 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:01.190793 kernel: audit: type=1105 audit(1696275721.166:1318): pid=3683 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:01.190931 kernel: audit: type=1103 audit(1696275721.179:1319): pid=3685 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:01.447253 sshd[3683]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:01.447000 audit[3683]: USER_END pid=3683 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:01.454115 systemd-logind[1726]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:42:01.456791 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:42:01.458854 systemd-logind[1726]: Removed session 23. Oct 2 19:42:01.447000 audit[3683]: CRED_DISP pid=3683 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:01.460358 systemd[1]: sshd@22-172.31.16.28:22-139.178.89.65:50192.service: Deactivated successfully. Oct 2 19:42:01.470243 kernel: audit: type=1106 audit(1696275721.447:1320): pid=3683 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:01.470358 kernel: audit: type=1104 audit(1696275721.447:1321): pid=3683 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:01.457000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.16.28:22-139.178.89.65:50192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:02.147401 env[1737]: time="2023-10-02T19:42:02.147331261Z" level=info msg="CreateContainer within sandbox \"c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:42:02.174582 env[1737]: time="2023-10-02T19:42:02.174503903Z" level=info msg="CreateContainer within sandbox \"c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"b8e83a320e80d0e3ee442bf3db379208584ceb3a11f677d63265eaa527e08766\"" Oct 2 19:42:02.175892 env[1737]: time="2023-10-02T19:42:02.175845065Z" level=info msg="StartContainer for \"b8e83a320e80d0e3ee442bf3db379208584ceb3a11f677d63265eaa527e08766\"" Oct 2 19:42:02.235518 systemd[1]: Started cri-containerd-b8e83a320e80d0e3ee442bf3db379208584ceb3a11f677d63265eaa527e08766.scope. Oct 2 19:42:02.274561 systemd[1]: cri-containerd-b8e83a320e80d0e3ee442bf3db379208584ceb3a11f677d63265eaa527e08766.scope: Deactivated successfully. Oct 2 19:42:02.304414 env[1737]: time="2023-10-02T19:42:02.304339627Z" level=info msg="shim disconnected" id=b8e83a320e80d0e3ee442bf3db379208584ceb3a11f677d63265eaa527e08766 Oct 2 19:42:02.304759 env[1737]: time="2023-10-02T19:42:02.304416608Z" level=warning msg="cleaning up after shim disconnected" id=b8e83a320e80d0e3ee442bf3db379208584ceb3a11f677d63265eaa527e08766 namespace=k8s.io Oct 2 19:42:02.304759 env[1737]: time="2023-10-02T19:42:02.304439600Z" level=info msg="cleaning up dead shim" Oct 2 19:42:02.331778 env[1737]: time="2023-10-02T19:42:02.331701139Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:02Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3720 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:42:02Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/b8e83a320e80d0e3ee442bf3db379208584ceb3a11f677d63265eaa527e08766/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:42:02.332279 env[1737]: time="2023-10-02T19:42:02.332182298Z" level=error msg="copy shim log" error="read /proc/self/fd/51: file already closed" Oct 2 19:42:02.332756 env[1737]: time="2023-10-02T19:42:02.332700981Z" level=error msg="Failed to pipe stderr of container \"b8e83a320e80d0e3ee442bf3db379208584ceb3a11f677d63265eaa527e08766\"" error="reading from a closed fifo" Oct 2 19:42:02.336047 env[1737]: time="2023-10-02T19:42:02.335990884Z" level=error msg="Failed to pipe stdout of container \"b8e83a320e80d0e3ee442bf3db379208584ceb3a11f677d63265eaa527e08766\"" error="reading from a closed fifo" Oct 2 19:42:02.338205 env[1737]: time="2023-10-02T19:42:02.338124140Z" level=error msg="StartContainer for \"b8e83a320e80d0e3ee442bf3db379208584ceb3a11f677d63265eaa527e08766\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:42:02.338719 kubelet[2891]: E1002 19:42:02.338540 2891 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="b8e83a320e80d0e3ee442bf3db379208584ceb3a11f677d63265eaa527e08766" Oct 2 19:42:02.339682 kubelet[2891]: E1002 19:42:02.339006 2891 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:42:02.339682 kubelet[2891]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:42:02.339682 kubelet[2891]: rm /hostbin/cilium-mount Oct 2 19:42:02.339682 kubelet[2891]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-pwhmr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:42:02.340002 kubelet[2891]: E1002 19:42:02.339067 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:42:02.742226 kubelet[2891]: I1002 19:42:02.742157 2891 scope.go:115] "RemoveContainer" containerID="3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9" Oct 2 19:42:02.742955 kubelet[2891]: I1002 19:42:02.742925 2891 scope.go:115] "RemoveContainer" containerID="3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9" Oct 2 19:42:02.745853 env[1737]: time="2023-10-02T19:42:02.745778297Z" level=info msg="RemoveContainer for \"3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9\"" Oct 2 19:42:02.746820 env[1737]: time="2023-10-02T19:42:02.746768754Z" level=info msg="RemoveContainer for \"3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9\"" Oct 2 19:42:02.747217 env[1737]: time="2023-10-02T19:42:02.747153431Z" level=error msg="RemoveContainer for \"3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9\" failed" error="failed to set removing state for container \"3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9\": container is already in removing state" Oct 2 19:42:02.747713 kubelet[2891]: E1002 19:42:02.747682 2891 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9\": container is already in removing state" containerID="3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9" Oct 2 19:42:02.747975 kubelet[2891]: E1002 19:42:02.747897 2891 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9": container is already in removing state; Skipping pod "cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236)" Oct 2 19:42:02.748560 kubelet[2891]: E1002 19:42:02.748530 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236)\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:42:02.759153 env[1737]: time="2023-10-02T19:42:02.759067836Z" level=info msg="RemoveContainer for \"3b6ab7d6b84fc9a24e9bd9a508a9269cea2fe73ec2cdaf0611ac08e6795756d9\" returns successfully" Oct 2 19:42:03.160469 systemd[1]: run-containerd-runc-k8s.io-b8e83a320e80d0e3ee442bf3db379208584ceb3a11f677d63265eaa527e08766-runc.Xc1ZFr.mount: Deactivated successfully. Oct 2 19:42:03.160658 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b8e83a320e80d0e3ee442bf3db379208584ceb3a11f677d63265eaa527e08766-rootfs.mount: Deactivated successfully. Oct 2 19:42:05.409206 kubelet[2891]: W1002 19:42:05.409147 2891 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podcab1ee13_fc5f_4ac4_8b8d_729eb34e4236.slice/cri-containerd-b8e83a320e80d0e3ee442bf3db379208584ceb3a11f677d63265eaa527e08766.scope WatchSource:0}: task b8e83a320e80d0e3ee442bf3db379208584ceb3a11f677d63265eaa527e08766 not found: not found Oct 2 19:42:06.120734 kubelet[2891]: E1002 19:42:06.120690 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:11.122971 kubelet[2891]: E1002 19:42:11.122832 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:11.479729 systemd[1]: Started sshd@23-172.31.16.28:22-139.178.89.65:50096.service. Oct 2 19:42:11.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.16.28:22-139.178.89.65:50096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:11.484441 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:42:11.484688 kernel: audit: type=1130 audit(1696275731.479:1323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.16.28:22-139.178.89.65:50096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:11.662000 audit[3734]: USER_ACCT pid=3734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:11.664202 sshd[3734]: Accepted publickey for core from 139.178.89.65 port 50096 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:42:11.675992 kernel: audit: type=1101 audit(1696275731.662:1324): pid=3734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:11.675000 audit[3734]: CRED_ACQ pid=3734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:11.677765 sshd[3734]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:11.692797 kernel: audit: type=1103 audit(1696275731.675:1325): pid=3734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:11.692949 kernel: audit: type=1006 audit(1696275731.675:1326): pid=3734 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:42:11.675000 audit[3734]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1141f70 a2=3 a3=1 items=0 ppid=1 pid=3734 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:11.704387 kernel: audit: type=1300 audit(1696275731.675:1326): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1141f70 a2=3 a3=1 items=0 ppid=1 pid=3734 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:11.675000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:11.708160 kernel: audit: type=1327 audit(1696275731.675:1326): proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:11.712637 systemd-logind[1726]: New session 24 of user core. Oct 2 19:42:11.713738 systemd[1]: Started session-24.scope. Oct 2 19:42:11.722000 audit[3734]: USER_START pid=3734 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:11.735982 kernel: audit: type=1105 audit(1696275731.722:1327): pid=3734 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:11.735000 audit[3736]: CRED_ACQ pid=3736 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:11.746936 kernel: audit: type=1103 audit(1696275731.735:1328): pid=3736 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:12.004253 sshd[3734]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:12.005000 audit[3734]: USER_END pid=3734 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:12.010446 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:42:12.011852 systemd[1]: sshd@23-172.31.16.28:22-139.178.89.65:50096.service: Deactivated successfully. Oct 2 19:42:12.007000 audit[3734]: CRED_DISP pid=3734 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:12.019077 kernel: audit: type=1106 audit(1696275732.005:1329): pid=3734 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:12.028430 systemd-logind[1726]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:42:12.011000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.16.28:22-139.178.89.65:50096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.029976 kernel: audit: type=1104 audit(1696275732.007:1330): pid=3734 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:12.030139 systemd-logind[1726]: Removed session 24. Oct 2 19:42:16.124124 kubelet[2891]: E1002 19:42:16.124020 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:16.146077 kubelet[2891]: E1002 19:42:16.146009 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236)\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:42:21.125649 kubelet[2891]: E1002 19:42:21.125592 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:22.036018 systemd[1]: Started sshd@24-172.31.16.28:22-139.178.89.65:42936.service. Oct 2 19:42:22.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.16.28:22-139.178.89.65:42936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:22.038934 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:42:22.039028 kernel: audit: type=1130 audit(1696275742.035:1332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.16.28:22-139.178.89.65:42936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:22.225000 audit[3748]: USER_ACCT pid=3748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:22.232733 sshd[3748]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:22.234471 sshd[3748]: Accepted publickey for core from 139.178.89.65 port 42936 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:42:22.228000 audit[3748]: CRED_ACQ pid=3748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:22.246986 kernel: audit: type=1101 audit(1696275742.225:1333): pid=3748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:22.247095 kernel: audit: type=1103 audit(1696275742.228:1334): pid=3748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:22.253784 kernel: audit: type=1006 audit(1696275742.228:1335): pid=3748 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:42:22.228000 audit[3748]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec346b00 a2=3 a3=1 items=0 ppid=1 pid=3748 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:22.265955 kernel: audit: type=1300 audit(1696275742.228:1335): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec346b00 a2=3 a3=1 items=0 ppid=1 pid=3748 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:22.228000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:22.270423 kernel: audit: type=1327 audit(1696275742.228:1335): proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:22.273003 systemd-logind[1726]: New session 25 of user core. Oct 2 19:42:22.274774 systemd[1]: Started session-25.scope. Oct 2 19:42:22.287000 audit[3748]: USER_START pid=3748 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:22.299000 audit[3750]: CRED_ACQ pid=3750 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:22.310653 kernel: audit: type=1105 audit(1696275742.287:1336): pid=3748 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:22.310739 kernel: audit: type=1103 audit(1696275742.299:1337): pid=3750 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:22.572514 sshd[3748]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:22.574000 audit[3748]: USER_END pid=3748 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:22.579292 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:42:22.580830 systemd[1]: sshd@24-172.31.16.28:22-139.178.89.65:42936.service: Deactivated successfully. Oct 2 19:42:22.589230 systemd-logind[1726]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:42:22.575000 audit[3748]: CRED_DISP pid=3748 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:22.599979 kernel: audit: type=1106 audit(1696275742.574:1338): pid=3748 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:22.600116 kernel: audit: type=1104 audit(1696275742.575:1339): pid=3748 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:22.580000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.16.28:22-139.178.89.65:42936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:22.600989 systemd-logind[1726]: Removed session 25. Oct 2 19:42:26.127432 kubelet[2891]: E1002 19:42:26.127376 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:30.118000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:30.121952 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:42:30.122035 kernel: audit: type=1400 audit(1696275750.118:1342): avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:30.118000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:30.141104 kernel: audit: type=1400 audit(1696275750.118:1341): avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:30.141195 kernel: audit: type=1300 audit(1696275750.118:1342): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40014c8920 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:42:30.118000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40014c8920 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:42:30.118000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:30.163838 kernel: audit: type=1327 audit(1696275750.118:1342): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:30.163984 kernel: audit: type=1300 audit(1696275750.118:1341): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002b91dd0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:42:30.118000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002b91dd0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:42:30.118000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:30.186413 kernel: audit: type=1327 audit(1696275750.118:1341): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:31.128531 kubelet[2891]: E1002 19:42:31.128497 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:31.128000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:31.128000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400ddc8390 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:42:31.151627 kernel: audit: type=1400 audit(1696275751.128:1343): avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:31.151727 kernel: audit: type=1300 audit(1696275751.128:1343): arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400ddc8390 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:42:31.128000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:42:31.162814 kernel: audit: type=1327 audit(1696275751.128:1343): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:42:31.162935 kubelet[2891]: E1002 19:42:31.152824 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236)\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:42:31.129000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:31.173112 kernel: audit: type=1400 audit(1696275751.129:1344): avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:31.129000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400ddc83c0 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:42:31.129000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:42:31.137000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:31.137000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4002a72fc0 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:42:31.137000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:42:31.138000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:31.138000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400b4d2b70 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:42:31.138000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:42:31.265000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:31.265000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400b4d2e10 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:42:31.265000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:42:31.286000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:31.286000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4002a73540 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:42:31.286000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:42:32.604000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.16.28:22-139.178.89.65:59264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:32.605351 systemd[1]: Started sshd@25-172.31.16.28:22-139.178.89.65:59264.service. Oct 2 19:42:32.791000 audit[3760]: USER_ACCT pid=3760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:32.792809 sshd[3760]: Accepted publickey for core from 139.178.89.65 port 59264 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:42:32.794000 audit[3760]: CRED_ACQ pid=3760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:32.795000 audit[3760]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdbfc5b30 a2=3 a3=1 items=0 ppid=1 pid=3760 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:32.795000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:32.797131 sshd[3760]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:32.807117 systemd-logind[1726]: New session 26 of user core. Oct 2 19:42:32.807238 systemd[1]: Started session-26.scope. Oct 2 19:42:32.816000 audit[3760]: USER_START pid=3760 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:32.823000 audit[3762]: CRED_ACQ pid=3762 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:33.086216 sshd[3760]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:33.087000 audit[3760]: USER_END pid=3760 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:33.087000 audit[3760]: CRED_DISP pid=3760 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:33.092522 systemd-logind[1726]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:42:33.094034 systemd[1]: sshd@25-172.31.16.28:22-139.178.89.65:59264.service: Deactivated successfully. Oct 2 19:42:33.093000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.16.28:22-139.178.89.65:59264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:33.095432 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:42:33.096525 systemd-logind[1726]: Removed session 26. Oct 2 19:42:36.130273 kubelet[2891]: E1002 19:42:36.130210 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:41.132119 kubelet[2891]: E1002 19:42:41.131966 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:42.320272 amazon-ssm-agent[1713]: 2023-10-02 19:42:42 INFO Backing off health check to every 600 seconds for 1800 seconds. Oct 2 19:42:42.420739 amazon-ssm-agent[1713]: 2023-10-02 19:42:42 ERROR Health ping failed with error - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-086c5b064cef02769 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-086c5b064cef02769 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:42:42.420739 amazon-ssm-agent[1713]: status code: 400, request id: 71b4142d-720c-46b9-b577-71f11d3c8b87 Oct 2 19:42:43.127791 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:42:43.127992 kernel: audit: type=1130 audit(1696275763.116:1358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.16.28:22-139.178.89.65:37716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:43.116000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.16.28:22-139.178.89.65:37716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:43.116696 systemd[1]: Started sshd@26-172.31.16.28:22-139.178.89.65:37716.service. Oct 2 19:42:43.301000 audit[3776]: USER_ACCT pid=3776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:43.302944 sshd[3776]: Accepted publickey for core from 139.178.89.65 port 37716 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:42:43.315050 kernel: audit: type=1101 audit(1696275763.301:1359): pid=3776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:43.316148 sshd[3776]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:43.314000 audit[3776]: CRED_ACQ pid=3776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:43.333177 kernel: audit: type=1103 audit(1696275763.314:1360): pid=3776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:43.333402 kernel: audit: type=1006 audit(1696275763.314:1361): pid=3776 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:42:43.314000 audit[3776]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2daf830 a2=3 a3=1 items=0 ppid=1 pid=3776 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:43.344510 kernel: audit: type=1300 audit(1696275763.314:1361): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2daf830 a2=3 a3=1 items=0 ppid=1 pid=3776 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:43.314000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:43.348976 kernel: audit: type=1327 audit(1696275763.314:1361): proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:43.352180 systemd[1]: Started session-27.scope. Oct 2 19:42:43.355063 systemd-logind[1726]: New session 27 of user core. Oct 2 19:42:43.363000 audit[3776]: USER_START pid=3776 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:43.369000 audit[3780]: CRED_ACQ pid=3780 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:43.385706 kernel: audit: type=1105 audit(1696275763.363:1362): pid=3776 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:43.385953 kernel: audit: type=1103 audit(1696275763.369:1363): pid=3780 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:43.636566 sshd[3776]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:43.637000 audit[3776]: USER_END pid=3776 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:43.643536 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:42:43.644934 systemd[1]: sshd@26-172.31.16.28:22-139.178.89.65:37716.service: Deactivated successfully. Oct 2 19:42:43.640000 audit[3776]: CRED_DISP pid=3776 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:43.651755 systemd-logind[1726]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:42:43.653967 systemd-logind[1726]: Removed session 27. Oct 2 19:42:43.659321 kernel: audit: type=1106 audit(1696275763.637:1364): pid=3776 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:43.659464 kernel: audit: type=1104 audit(1696275763.640:1365): pid=3776 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:43.644000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.16.28:22-139.178.89.65:37716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:44.736000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:44.736000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000af00c0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:42:44.736000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:44.741000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:44.741000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:44.741000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000af00e0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:42:44.741000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:44.741000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40015b62c0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:42:44.741000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:44.744000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:44.744000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000af0220 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:42:44.744000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:45.144097 kubelet[2891]: E1002 19:42:45.144062 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-jdwt8_kube-system(cab1ee13-fc5f-4ac4-8b8d-729eb34e4236)\"" pod="kube-system/cilium-jdwt8" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 Oct 2 19:42:46.133691 kubelet[2891]: E1002 19:42:46.133659 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:51.135332 kubelet[2891]: E1002 19:42:51.135276 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:53.672483 systemd[1]: Started sshd@27-172.31.16.28:22-139.178.89.65:51634.service. Oct 2 19:42:53.672000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.16.28:22-139.178.89.65:51634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:53.675721 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:42:53.675853 kernel: audit: type=1130 audit(1696275773.672:1371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.16.28:22-139.178.89.65:51634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:53.861000 audit[3791]: USER_ACCT pid=3791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:53.865132 sshd[3791]: Accepted publickey for core from 139.178.89.65 port 51634 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:42:53.868877 sshd[3791]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:53.867000 audit[3791]: CRED_ACQ pid=3791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:53.878986 systemd[1]: Started session-28.scope. Oct 2 19:42:53.882842 kernel: audit: type=1101 audit(1696275773.861:1372): pid=3791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:53.882988 kernel: audit: type=1103 audit(1696275773.867:1373): pid=3791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:53.883114 systemd-logind[1726]: New session 28 of user core. Oct 2 19:42:53.889009 kernel: audit: type=1006 audit(1696275773.867:1374): pid=3791 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:42:53.889148 kernel: audit: type=1300 audit(1696275773.867:1374): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2268670 a2=3 a3=1 items=0 ppid=1 pid=3791 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:53.867000 audit[3791]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2268670 a2=3 a3=1 items=0 ppid=1 pid=3791 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:53.899976 kernel: audit: type=1327 audit(1696275773.867:1374): proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:53.867000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:53.893000 audit[3791]: USER_START pid=3791 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:53.914377 kernel: audit: type=1105 audit(1696275773.893:1375): pid=3791 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:53.900000 audit[3793]: CRED_ACQ pid=3793 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:53.924191 kernel: audit: type=1103 audit(1696275773.900:1376): pid=3793 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:54.162565 sshd[3791]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:54.163000 audit[3791]: USER_END pid=3791 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:54.168001 systemd-logind[1726]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:42:54.170335 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:42:54.172400 systemd-logind[1726]: Removed session 28. Oct 2 19:42:54.173708 systemd[1]: sshd@27-172.31.16.28:22-139.178.89.65:51634.service: Deactivated successfully. Oct 2 19:42:54.163000 audit[3791]: CRED_DISP pid=3791 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:54.186225 kernel: audit: type=1106 audit(1696275774.163:1377): pid=3791 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:54.186362 kernel: audit: type=1104 audit(1696275774.163:1378): pid=3791 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:54.173000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.16.28:22-139.178.89.65:51634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:54.197553 systemd[1]: Started sshd@28-172.31.16.28:22-139.178.89.65:51648.service. Oct 2 19:42:54.196000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.16.28:22-139.178.89.65:51648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:54.381000 audit[3804]: USER_ACCT pid=3804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:54.382803 sshd[3804]: Accepted publickey for core from 139.178.89.65 port 51648 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:42:54.384000 audit[3804]: CRED_ACQ pid=3804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:54.384000 audit[3804]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcada4c20 a2=3 a3=1 items=0 ppid=1 pid=3804 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:54.384000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:54.387078 sshd[3804]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:54.396666 systemd-logind[1726]: New session 29 of user core. Oct 2 19:42:54.397651 systemd[1]: Started session-29.scope. Oct 2 19:42:54.406000 audit[3804]: USER_START pid=3804 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:54.413000 audit[3806]: CRED_ACQ pid=3806 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:56.136343 kubelet[2891]: E1002 19:42:56.136309 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:57.161321 env[1737]: time="2023-10-02T19:42:57.161247752Z" level=info msg="StopPodSandbox for \"c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4\"" Oct 2 19:42:57.162010 env[1737]: time="2023-10-02T19:42:57.161354805Z" level=info msg="Container to stop \"b8e83a320e80d0e3ee442bf3db379208584ceb3a11f677d63265eaa527e08766\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:42:57.167600 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4-shm.mount: Deactivated successfully. Oct 2 19:42:57.199223 systemd[1]: cri-containerd-c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4.scope: Deactivated successfully. Oct 2 19:42:57.198000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:42:57.202000 audit: BPF prog-id=132 op=UNLOAD Oct 2 19:42:57.218090 env[1737]: time="2023-10-02T19:42:57.218008456Z" level=info msg="StopContainer for \"34b25ead6b4c606e14cdc03b983f4c7f4f7d62ce14a3d8ee77a3b84c5b34645d\" with timeout 30 (s)" Oct 2 19:42:57.218780 env[1737]: time="2023-10-02T19:42:57.218722789Z" level=info msg="Stop container \"34b25ead6b4c606e14cdc03b983f4c7f4f7d62ce14a3d8ee77a3b84c5b34645d\" with signal terminated" Oct 2 19:42:57.270071 systemd[1]: cri-containerd-34b25ead6b4c606e14cdc03b983f4c7f4f7d62ce14a3d8ee77a3b84c5b34645d.scope: Deactivated successfully. Oct 2 19:42:57.269000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:42:57.273000 audit: BPF prog-id=136 op=UNLOAD Oct 2 19:42:57.287641 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4-rootfs.mount: Deactivated successfully. Oct 2 19:42:57.311878 env[1737]: time="2023-10-02T19:42:57.311770682Z" level=info msg="shim disconnected" id=c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4 Oct 2 19:42:57.312224 env[1737]: time="2023-10-02T19:42:57.311880639Z" level=warning msg="cleaning up after shim disconnected" id=c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4 namespace=k8s.io Oct 2 19:42:57.312224 env[1737]: time="2023-10-02T19:42:57.312125586Z" level=info msg="cleaning up dead shim" Oct 2 19:42:57.355524 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-34b25ead6b4c606e14cdc03b983f4c7f4f7d62ce14a3d8ee77a3b84c5b34645d-rootfs.mount: Deactivated successfully. Oct 2 19:42:57.356251 env[1737]: time="2023-10-02T19:42:57.356198765Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:57Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3840 runtime=io.containerd.runc.v2\n" Oct 2 19:42:57.357490 env[1737]: time="2023-10-02T19:42:57.357440697Z" level=info msg="TearDown network for sandbox \"c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4\" successfully" Oct 2 19:42:57.357958 env[1737]: time="2023-10-02T19:42:57.357884475Z" level=info msg="StopPodSandbox for \"c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4\" returns successfully" Oct 2 19:42:57.369417 env[1737]: time="2023-10-02T19:42:57.369311612Z" level=info msg="shim disconnected" id=34b25ead6b4c606e14cdc03b983f4c7f4f7d62ce14a3d8ee77a3b84c5b34645d Oct 2 19:42:57.369859 env[1737]: time="2023-10-02T19:42:57.369783026Z" level=warning msg="cleaning up after shim disconnected" id=34b25ead6b4c606e14cdc03b983f4c7f4f7d62ce14a3d8ee77a3b84c5b34645d namespace=k8s.io Oct 2 19:42:57.371277 env[1737]: time="2023-10-02T19:42:57.371228157Z" level=info msg="cleaning up dead shim" Oct 2 19:42:57.399325 env[1737]: time="2023-10-02T19:42:57.399268898Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:57Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3860 runtime=io.containerd.runc.v2\n" Oct 2 19:42:57.402749 env[1737]: time="2023-10-02T19:42:57.402694655Z" level=info msg="StopContainer for \"34b25ead6b4c606e14cdc03b983f4c7f4f7d62ce14a3d8ee77a3b84c5b34645d\" returns successfully" Oct 2 19:42:57.403725 env[1737]: time="2023-10-02T19:42:57.403680984Z" level=info msg="StopPodSandbox for \"4b70cee2f0d321431afe505ab21798f924d0f889b6812e50343f1b316d3daf77\"" Oct 2 19:42:57.403976 env[1737]: time="2023-10-02T19:42:57.403939863Z" level=info msg="Container to stop \"34b25ead6b4c606e14cdc03b983f4c7f4f7d62ce14a3d8ee77a3b84c5b34645d\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:42:57.409953 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-4b70cee2f0d321431afe505ab21798f924d0f889b6812e50343f1b316d3daf77-shm.mount: Deactivated successfully. Oct 2 19:42:57.426000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:42:57.427024 systemd[1]: cri-containerd-4b70cee2f0d321431afe505ab21798f924d0f889b6812e50343f1b316d3daf77.scope: Deactivated successfully. Oct 2 19:42:57.430000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:42:57.488493 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4b70cee2f0d321431afe505ab21798f924d0f889b6812e50343f1b316d3daf77-rootfs.mount: Deactivated successfully. Oct 2 19:42:57.500481 env[1737]: time="2023-10-02T19:42:57.500397432Z" level=info msg="shim disconnected" id=4b70cee2f0d321431afe505ab21798f924d0f889b6812e50343f1b316d3daf77 Oct 2 19:42:57.500481 env[1737]: time="2023-10-02T19:42:57.500474629Z" level=warning msg="cleaning up after shim disconnected" id=4b70cee2f0d321431afe505ab21798f924d0f889b6812e50343f1b316d3daf77 namespace=k8s.io Oct 2 19:42:57.500819 env[1737]: time="2023-10-02T19:42:57.500498894Z" level=info msg="cleaning up dead shim" Oct 2 19:42:57.528021 env[1737]: time="2023-10-02T19:42:57.527894519Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:57Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3892 runtime=io.containerd.runc.v2\n" Oct 2 19:42:57.528639 env[1737]: time="2023-10-02T19:42:57.528546079Z" level=info msg="TearDown network for sandbox \"4b70cee2f0d321431afe505ab21798f924d0f889b6812e50343f1b316d3daf77\" successfully" Oct 2 19:42:57.528639 env[1737]: time="2023-10-02T19:42:57.528595844Z" level=info msg="StopPodSandbox for \"4b70cee2f0d321431afe505ab21798f924d0f889b6812e50343f1b316d3daf77\" returns successfully" Oct 2 19:42:57.535199 kubelet[2891]: I1002 19:42:57.533960 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-lib-modules\") pod \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " Oct 2 19:42:57.535199 kubelet[2891]: I1002 19:42:57.534022 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-cni-path\") pod \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " Oct 2 19:42:57.535199 kubelet[2891]: I1002 19:42:57.534072 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-clustermesh-secrets\") pod \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " Oct 2 19:42:57.535199 kubelet[2891]: I1002 19:42:57.534112 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-bpf-maps\") pod \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " Oct 2 19:42:57.535199 kubelet[2891]: I1002 19:42:57.534154 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-hubble-tls\") pod \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " Oct 2 19:42:57.535199 kubelet[2891]: I1002 19:42:57.534196 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-cilium-cgroup\") pod \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " Oct 2 19:42:57.536110 kubelet[2891]: I1002 19:42:57.534236 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-host-proc-sys-net\") pod \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " Oct 2 19:42:57.536110 kubelet[2891]: I1002 19:42:57.534275 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-xtables-lock\") pod \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " Oct 2 19:42:57.536110 kubelet[2891]: I1002 19:42:57.534313 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-etc-cni-netd\") pod \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " Oct 2 19:42:57.536110 kubelet[2891]: I1002 19:42:57.534358 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-cilium-config-path\") pod \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " Oct 2 19:42:57.536110 kubelet[2891]: I1002 19:42:57.534395 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-cilium-run\") pod \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " Oct 2 19:42:57.536110 kubelet[2891]: I1002 19:42:57.534439 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-pwhmr\" (UniqueName: \"kubernetes.io/projected/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-kube-api-access-pwhmr\") pod \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " Oct 2 19:42:57.536480 kubelet[2891]: I1002 19:42:57.534475 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-hostproc\") pod \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " Oct 2 19:42:57.536480 kubelet[2891]: I1002 19:42:57.534515 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-host-proc-sys-kernel\") pod \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\" (UID: \"cab1ee13-fc5f-4ac4-8b8d-729eb34e4236\") " Oct 2 19:42:57.536480 kubelet[2891]: I1002 19:42:57.534599 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" (UID: "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:57.536480 kubelet[2891]: I1002 19:42:57.534658 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" (UID: "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:57.536480 kubelet[2891]: I1002 19:42:57.534698 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-cni-path" (OuterVolumeSpecName: "cni-path") pod "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" (UID: "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:57.537956 kubelet[2891]: I1002 19:42:57.536838 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" (UID: "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:57.537956 kubelet[2891]: I1002 19:42:57.536929 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" (UID: "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:57.537956 kubelet[2891]: I1002 19:42:57.537289 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" (UID: "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:57.537956 kubelet[2891]: I1002 19:42:57.537334 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" (UID: "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:57.537956 kubelet[2891]: I1002 19:42:57.537376 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" (UID: "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:57.538339 kubelet[2891]: I1002 19:42:57.537413 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" (UID: "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:57.538339 kubelet[2891]: W1002 19:42:57.537629 2891 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:42:57.543571 kubelet[2891]: I1002 19:42:57.543517 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" (UID: "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:42:57.543944 kubelet[2891]: I1002 19:42:57.543880 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-hostproc" (OuterVolumeSpecName: "hostproc") pod "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" (UID: "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:57.555278 kubelet[2891]: I1002 19:42:57.555163 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" (UID: "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:42:57.555665 kubelet[2891]: I1002 19:42:57.555629 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-kube-api-access-pwhmr" (OuterVolumeSpecName: "kube-api-access-pwhmr") pod "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" (UID: "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236"). InnerVolumeSpecName "kube-api-access-pwhmr". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:42:57.561168 kubelet[2891]: I1002 19:42:57.561117 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" (UID: "cab1ee13-fc5f-4ac4-8b8d-729eb34e4236"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:42:57.635371 kubelet[2891]: I1002 19:42:57.635305 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/dda6a56b-0998-4f88-834f-dd9c3d04c5f3-cilium-config-path\") pod \"dda6a56b-0998-4f88-834f-dd9c3d04c5f3\" (UID: \"dda6a56b-0998-4f88-834f-dd9c3d04c5f3\") " Oct 2 19:42:57.635542 kubelet[2891]: I1002 19:42:57.635386 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-mhh82\" (UniqueName: \"kubernetes.io/projected/dda6a56b-0998-4f88-834f-dd9c3d04c5f3-kube-api-access-mhh82\") pod \"dda6a56b-0998-4f88-834f-dd9c3d04c5f3\" (UID: \"dda6a56b-0998-4f88-834f-dd9c3d04c5f3\") " Oct 2 19:42:57.635542 kubelet[2891]: I1002 19:42:57.635453 2891 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-cilium-run\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:42:57.635542 kubelet[2891]: I1002 19:42:57.635481 2891 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-pwhmr\" (UniqueName: \"kubernetes.io/projected/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-kube-api-access-pwhmr\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:42:57.635542 kubelet[2891]: I1002 19:42:57.635505 2891 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-hostproc\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:42:57.635542 kubelet[2891]: I1002 19:42:57.635530 2891 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-host-proc-sys-kernel\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:42:57.635864 kubelet[2891]: I1002 19:42:57.635555 2891 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-lib-modules\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:42:57.635864 kubelet[2891]: I1002 19:42:57.635579 2891 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-cni-path\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:42:57.635864 kubelet[2891]: I1002 19:42:57.635603 2891 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-clustermesh-secrets\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:42:57.635864 kubelet[2891]: I1002 19:42:57.635625 2891 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-bpf-maps\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:42:57.635864 kubelet[2891]: I1002 19:42:57.635649 2891 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-hubble-tls\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:42:57.635864 kubelet[2891]: I1002 19:42:57.635672 2891 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-cilium-cgroup\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:42:57.635864 kubelet[2891]: I1002 19:42:57.635696 2891 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-host-proc-sys-net\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:42:57.635864 kubelet[2891]: I1002 19:42:57.635719 2891 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-xtables-lock\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:42:57.636420 kubelet[2891]: I1002 19:42:57.635771 2891 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-etc-cni-netd\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:42:57.636420 kubelet[2891]: I1002 19:42:57.635797 2891 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236-cilium-config-path\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:42:57.636420 kubelet[2891]: W1002 19:42:57.636266 2891 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/dda6a56b-0998-4f88-834f-dd9c3d04c5f3/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:42:57.641366 kubelet[2891]: I1002 19:42:57.641308 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/dda6a56b-0998-4f88-834f-dd9c3d04c5f3-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "dda6a56b-0998-4f88-834f-dd9c3d04c5f3" (UID: "dda6a56b-0998-4f88-834f-dd9c3d04c5f3"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:42:57.647195 kubelet[2891]: I1002 19:42:57.647122 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/dda6a56b-0998-4f88-834f-dd9c3d04c5f3-kube-api-access-mhh82" (OuterVolumeSpecName: "kube-api-access-mhh82") pod "dda6a56b-0998-4f88-834f-dd9c3d04c5f3" (UID: "dda6a56b-0998-4f88-834f-dd9c3d04c5f3"). InnerVolumeSpecName "kube-api-access-mhh82". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:42:57.736830 kubelet[2891]: I1002 19:42:57.736687 2891 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/dda6a56b-0998-4f88-834f-dd9c3d04c5f3-cilium-config-path\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:42:57.736830 kubelet[2891]: I1002 19:42:57.736738 2891 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-mhh82\" (UniqueName: \"kubernetes.io/projected/dda6a56b-0998-4f88-834f-dd9c3d04c5f3-kube-api-access-mhh82\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:42:57.870977 kubelet[2891]: I1002 19:42:57.870877 2891 scope.go:115] "RemoveContainer" containerID="b8e83a320e80d0e3ee442bf3db379208584ceb3a11f677d63265eaa527e08766" Oct 2 19:42:57.874410 env[1737]: time="2023-10-02T19:42:57.873988197Z" level=info msg="RemoveContainer for \"b8e83a320e80d0e3ee442bf3db379208584ceb3a11f677d63265eaa527e08766\"" Oct 2 19:42:57.879759 env[1737]: time="2023-10-02T19:42:57.879682932Z" level=info msg="RemoveContainer for \"b8e83a320e80d0e3ee442bf3db379208584ceb3a11f677d63265eaa527e08766\" returns successfully" Oct 2 19:42:57.881646 kubelet[2891]: I1002 19:42:57.881393 2891 scope.go:115] "RemoveContainer" containerID="34b25ead6b4c606e14cdc03b983f4c7f4f7d62ce14a3d8ee77a3b84c5b34645d" Oct 2 19:42:57.883684 systemd[1]: Removed slice kubepods-burstable-podcab1ee13_fc5f_4ac4_8b8d_729eb34e4236.slice. Oct 2 19:42:57.893362 systemd[1]: Removed slice kubepods-besteffort-poddda6a56b_0998_4f88_834f_dd9c3d04c5f3.slice. Oct 2 19:42:57.897188 env[1737]: time="2023-10-02T19:42:57.895727453Z" level=info msg="RemoveContainer for \"34b25ead6b4c606e14cdc03b983f4c7f4f7d62ce14a3d8ee77a3b84c5b34645d\"" Oct 2 19:42:57.904698 env[1737]: time="2023-10-02T19:42:57.904616269Z" level=info msg="RemoveContainer for \"34b25ead6b4c606e14cdc03b983f4c7f4f7d62ce14a3d8ee77a3b84c5b34645d\" returns successfully" Oct 2 19:42:57.906175 kubelet[2891]: I1002 19:42:57.906138 2891 scope.go:115] "RemoveContainer" containerID="34b25ead6b4c606e14cdc03b983f4c7f4f7d62ce14a3d8ee77a3b84c5b34645d" Oct 2 19:42:57.907924 env[1737]: time="2023-10-02T19:42:57.907766046Z" level=error msg="ContainerStatus for \"34b25ead6b4c606e14cdc03b983f4c7f4f7d62ce14a3d8ee77a3b84c5b34645d\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"34b25ead6b4c606e14cdc03b983f4c7f4f7d62ce14a3d8ee77a3b84c5b34645d\": not found" Oct 2 19:42:57.909050 kubelet[2891]: E1002 19:42:57.908973 2891 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"34b25ead6b4c606e14cdc03b983f4c7f4f7d62ce14a3d8ee77a3b84c5b34645d\": not found" containerID="34b25ead6b4c606e14cdc03b983f4c7f4f7d62ce14a3d8ee77a3b84c5b34645d" Oct 2 19:42:57.909262 kubelet[2891]: I1002 19:42:57.909065 2891 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:34b25ead6b4c606e14cdc03b983f4c7f4f7d62ce14a3d8ee77a3b84c5b34645d} err="failed to get container status \"34b25ead6b4c606e14cdc03b983f4c7f4f7d62ce14a3d8ee77a3b84c5b34645d\": rpc error: code = NotFound desc = an error occurred when try to find container \"34b25ead6b4c606e14cdc03b983f4c7f4f7d62ce14a3d8ee77a3b84c5b34645d\": not found" Oct 2 19:42:58.150682 kubelet[2891]: I1002 19:42:58.150636 2891 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=cab1ee13-fc5f-4ac4-8b8d-729eb34e4236 path="/var/lib/kubelet/pods/cab1ee13-fc5f-4ac4-8b8d-729eb34e4236/volumes" Oct 2 19:42:58.152441 kubelet[2891]: I1002 19:42:58.152396 2891 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=dda6a56b-0998-4f88-834f-dd9c3d04c5f3 path="/var/lib/kubelet/pods/dda6a56b-0998-4f88-834f-dd9c3d04c5f3/volumes" Oct 2 19:42:58.164072 systemd[1]: var-lib-kubelet-pods-cab1ee13\x2dfc5f\x2d4ac4\x2d8b8d\x2d729eb34e4236-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:42:58.164509 systemd[1]: var-lib-kubelet-pods-cab1ee13\x2dfc5f\x2d4ac4\x2d8b8d\x2d729eb34e4236-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:42:58.164803 systemd[1]: var-lib-kubelet-pods-dda6a56b\x2d0998\x2d4f88\x2d834f\x2ddd9c3d04c5f3-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dmhh82.mount: Deactivated successfully. Oct 2 19:42:58.165125 systemd[1]: var-lib-kubelet-pods-cab1ee13\x2dfc5f\x2d4ac4\x2d8b8d\x2d729eb34e4236-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dpwhmr.mount: Deactivated successfully. Oct 2 19:42:59.114572 sshd[3804]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:59.116000 audit[3804]: USER_END pid=3804 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:59.119184 kernel: kauditd_printk_skb: 15 callbacks suppressed Oct 2 19:42:59.119290 kernel: audit: type=1106 audit(1696275779.116:1392): pid=3804 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:59.121590 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:42:59.121960 systemd[1]: session-29.scope: Consumed 2.031s CPU time. Oct 2 19:42:59.123326 systemd[1]: sshd@28-172.31.16.28:22-139.178.89.65:51648.service: Deactivated successfully. Oct 2 19:42:59.131818 systemd-logind[1726]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:42:59.118000 audit[3804]: CRED_DISP pid=3804 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:59.142086 kernel: audit: type=1104 audit(1696275779.118:1393): pid=3804 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:59.122000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.16.28:22-139.178.89.65:51648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:59.151947 kernel: audit: type=1131 audit(1696275779.122:1394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.16.28:22-139.178.89.65:51648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:59.147530 systemd[1]: Started sshd@29-172.31.16.28:22-139.178.89.65:36184.service. Oct 2 19:42:59.153603 systemd-logind[1726]: Removed session 29. Oct 2 19:42:59.153000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.16.28:22-139.178.89.65:36184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:59.165073 kernel: audit: type=1130 audit(1696275779.153:1395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.16.28:22-139.178.89.65:36184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:59.338000 audit[3911]: USER_ACCT pid=3911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:59.339402 sshd[3911]: Accepted publickey for core from 139.178.89.65 port 36184 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:42:59.343286 sshd[3911]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:59.341000 audit[3911]: CRED_ACQ pid=3911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:59.359026 kernel: audit: type=1101 audit(1696275779.338:1396): pid=3911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:59.359154 kernel: audit: type=1103 audit(1696275779.341:1397): pid=3911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:59.365091 kernel: audit: type=1006 audit(1696275779.341:1398): pid=3911 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 19:42:59.341000 audit[3911]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb44b160 a2=3 a3=1 items=0 ppid=1 pid=3911 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:59.376216 kernel: audit: type=1300 audit(1696275779.341:1398): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb44b160 a2=3 a3=1 items=0 ppid=1 pid=3911 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:59.341000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:59.380797 kernel: audit: type=1327 audit(1696275779.341:1398): proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:59.385315 systemd-logind[1726]: New session 30 of user core. Oct 2 19:42:59.387562 systemd[1]: Started session-30.scope. Oct 2 19:42:59.397000 audit[3911]: USER_START pid=3911 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:59.403000 audit[3913]: CRED_ACQ pid=3913 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:59.409973 kernel: audit: type=1105 audit(1696275779.397:1399): pid=3911 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:43:00.910002 kubelet[2891]: I1002 19:43:00.909936 2891 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:43:00.910552 kubelet[2891]: E1002 19:43:00.910048 2891 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" containerName="mount-cgroup" Oct 2 19:43:00.910552 kubelet[2891]: E1002 19:43:00.910071 2891 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" containerName="mount-cgroup" Oct 2 19:43:00.910552 kubelet[2891]: E1002 19:43:00.910112 2891 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" containerName="mount-cgroup" Oct 2 19:43:00.910552 kubelet[2891]: E1002 19:43:00.910134 2891 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="dda6a56b-0998-4f88-834f-dd9c3d04c5f3" containerName="cilium-operator" Oct 2 19:43:00.910552 kubelet[2891]: I1002 19:43:00.910195 2891 memory_manager.go:346] "RemoveStaleState removing state" podUID="cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" containerName="mount-cgroup" Oct 2 19:43:00.910552 kubelet[2891]: I1002 19:43:00.910216 2891 memory_manager.go:346] "RemoveStaleState removing state" podUID="dda6a56b-0998-4f88-834f-dd9c3d04c5f3" containerName="cilium-operator" Oct 2 19:43:00.910552 kubelet[2891]: I1002 19:43:00.910234 2891 memory_manager.go:346] "RemoveStaleState removing state" podUID="cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" containerName="mount-cgroup" Oct 2 19:43:00.910552 kubelet[2891]: I1002 19:43:00.910251 2891 memory_manager.go:346] "RemoveStaleState removing state" podUID="cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" containerName="mount-cgroup" Oct 2 19:43:00.910552 kubelet[2891]: I1002 19:43:00.910293 2891 memory_manager.go:346] "RemoveStaleState removing state" podUID="cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" containerName="mount-cgroup" Oct 2 19:43:00.910552 kubelet[2891]: E1002 19:43:00.910339 2891 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" containerName="mount-cgroup" Oct 2 19:43:00.910552 kubelet[2891]: E1002 19:43:00.910383 2891 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" containerName="mount-cgroup" Oct 2 19:43:00.910552 kubelet[2891]: I1002 19:43:00.910420 2891 memory_manager.go:346] "RemoveStaleState removing state" podUID="cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" containerName="mount-cgroup" Oct 2 19:43:00.911317 kubelet[2891]: I1002 19:43:00.910460 2891 memory_manager.go:346] "RemoveStaleState removing state" podUID="cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" containerName="mount-cgroup" Oct 2 19:43:00.911317 kubelet[2891]: E1002 19:43:00.910501 2891 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="cab1ee13-fc5f-4ac4-8b8d-729eb34e4236" containerName="mount-cgroup" Oct 2 19:43:00.922257 systemd[1]: Created slice kubepods-burstable-pod9b4566f9_1ce2_463c_b9c9_3a9c575668bb.slice. Oct 2 19:43:01.058944 kubelet[2891]: I1002 19:43:01.058889 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-cilium-cgroup\") pod \"cilium-d95ch\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " pod="kube-system/cilium-d95ch" Oct 2 19:43:01.059208 kubelet[2891]: I1002 19:43:01.059184 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-etc-cni-netd\") pod \"cilium-d95ch\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " pod="kube-system/cilium-d95ch" Oct 2 19:43:01.059371 kubelet[2891]: I1002 19:43:01.059349 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-clustermesh-secrets\") pod \"cilium-d95ch\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " pod="kube-system/cilium-d95ch" Oct 2 19:43:01.059528 kubelet[2891]: I1002 19:43:01.059507 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-hubble-tls\") pod \"cilium-d95ch\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " pod="kube-system/cilium-d95ch" Oct 2 19:43:01.059686 kubelet[2891]: I1002 19:43:01.059665 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-cilium-run\") pod \"cilium-d95ch\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " pod="kube-system/cilium-d95ch" Oct 2 19:43:01.059880 kubelet[2891]: I1002 19:43:01.059859 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-cilium-ipsec-secrets\") pod \"cilium-d95ch\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " pod="kube-system/cilium-d95ch" Oct 2 19:43:01.060070 kubelet[2891]: I1002 19:43:01.060047 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-lib-modules\") pod \"cilium-d95ch\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " pod="kube-system/cilium-d95ch" Oct 2 19:43:01.060223 kubelet[2891]: I1002 19:43:01.060203 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ngdk8\" (UniqueName: \"kubernetes.io/projected/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-kube-api-access-ngdk8\") pod \"cilium-d95ch\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " pod="kube-system/cilium-d95ch" Oct 2 19:43:01.060408 kubelet[2891]: I1002 19:43:01.060386 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-hostproc\") pod \"cilium-d95ch\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " pod="kube-system/cilium-d95ch" Oct 2 19:43:01.060560 kubelet[2891]: I1002 19:43:01.060540 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-cilium-config-path\") pod \"cilium-d95ch\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " pod="kube-system/cilium-d95ch" Oct 2 19:43:01.060733 kubelet[2891]: I1002 19:43:01.060711 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-host-proc-sys-net\") pod \"cilium-d95ch\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " pod="kube-system/cilium-d95ch" Oct 2 19:43:01.060889 kubelet[2891]: I1002 19:43:01.060869 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-cni-path\") pod \"cilium-d95ch\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " pod="kube-system/cilium-d95ch" Oct 2 19:43:01.061080 kubelet[2891]: I1002 19:43:01.061059 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-bpf-maps\") pod \"cilium-d95ch\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " pod="kube-system/cilium-d95ch" Oct 2 19:43:01.061243 kubelet[2891]: I1002 19:43:01.061222 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-xtables-lock\") pod \"cilium-d95ch\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " pod="kube-system/cilium-d95ch" Oct 2 19:43:01.061412 kubelet[2891]: I1002 19:43:01.061392 2891 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-host-proc-sys-kernel\") pod \"cilium-d95ch\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " pod="kube-system/cilium-d95ch" Oct 2 19:43:01.139073 kubelet[2891]: E1002 19:43:01.139014 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:01.528590 env[1737]: time="2023-10-02T19:43:01.528207645Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-d95ch,Uid:9b4566f9-1ce2-463c-b9c9-3a9c575668bb,Namespace:kube-system,Attempt:0,}" Oct 2 19:43:01.582851 env[1737]: time="2023-10-02T19:43:01.582698519Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:43:01.583082 env[1737]: time="2023-10-02T19:43:01.582861661Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:43:01.583082 env[1737]: time="2023-10-02T19:43:01.582984014Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:43:01.583732 env[1737]: time="2023-10-02T19:43:01.583584082Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4dda67f006ea4a0f1c7767810d1cb1b636e3c6ac515de6c53a236cdd27cba8f6 pid=3930 runtime=io.containerd.runc.v2 Oct 2 19:43:01.614024 systemd[1]: Started cri-containerd-4dda67f006ea4a0f1c7767810d1cb1b636e3c6ac515de6c53a236cdd27cba8f6.scope. Oct 2 19:43:01.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.654000 audit: BPF prog-id=137 op=LOAD Oct 2 19:43:01.655000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.655000 audit[3940]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3930 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:01.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464646136376630303665613461306631633737363738313064316362 Oct 2 19:43:01.655000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.655000 audit[3940]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3930 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:01.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464646136376630303665613461306631633737363738313064316362 Oct 2 19:43:01.656000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.656000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.656000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.656000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.656000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.656000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.656000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.656000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.656000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.656000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.656000 audit: BPF prog-id=138 op=LOAD Oct 2 19:43:01.656000 audit[3940]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3930 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:01.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464646136376630303665613461306631633737363738313064316362 Oct 2 19:43:01.658000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.658000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.658000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.658000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.658000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.658000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.658000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.658000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.658000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.658000 audit: BPF prog-id=139 op=LOAD Oct 2 19:43:01.658000 audit[3940]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3930 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:01.658000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464646136376630303665613461306631633737363738313064316362 Oct 2 19:43:01.660000 audit: BPF prog-id=139 op=UNLOAD Oct 2 19:43:01.660000 audit: BPF prog-id=138 op=UNLOAD Oct 2 19:43:01.660000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.660000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.660000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.660000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.660000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.660000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.660000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.660000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.660000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.660000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:01.660000 audit: BPF prog-id=140 op=LOAD Oct 2 19:43:01.660000 audit[3940]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3930 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:01.660000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464646136376630303665613461306631633737363738313064316362 Oct 2 19:43:01.696294 env[1737]: time="2023-10-02T19:43:01.696203810Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-d95ch,Uid:9b4566f9-1ce2-463c-b9c9-3a9c575668bb,Namespace:kube-system,Attempt:0,} returns sandbox id \"4dda67f006ea4a0f1c7767810d1cb1b636e3c6ac515de6c53a236cdd27cba8f6\"" Oct 2 19:43:01.704438 env[1737]: time="2023-10-02T19:43:01.704353284Z" level=info msg="CreateContainer within sandbox \"4dda67f006ea4a0f1c7767810d1cb1b636e3c6ac515de6c53a236cdd27cba8f6\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:43:01.726633 env[1737]: time="2023-10-02T19:43:01.726531313Z" level=info msg="CreateContainer within sandbox \"4dda67f006ea4a0f1c7767810d1cb1b636e3c6ac515de6c53a236cdd27cba8f6\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"3370c9a282e733e747d23deec8e2456d44435f18404b04f62f1fc07056e72ca6\"" Oct 2 19:43:01.730838 env[1737]: time="2023-10-02T19:43:01.727684732Z" level=info msg="StartContainer for \"3370c9a282e733e747d23deec8e2456d44435f18404b04f62f1fc07056e72ca6\"" Oct 2 19:43:01.773698 systemd[1]: Started cri-containerd-3370c9a282e733e747d23deec8e2456d44435f18404b04f62f1fc07056e72ca6.scope. Oct 2 19:43:01.814939 systemd[1]: cri-containerd-3370c9a282e733e747d23deec8e2456d44435f18404b04f62f1fc07056e72ca6.scope: Deactivated successfully. Oct 2 19:43:01.854137 env[1737]: time="2023-10-02T19:43:01.854058342Z" level=info msg="shim disconnected" id=3370c9a282e733e747d23deec8e2456d44435f18404b04f62f1fc07056e72ca6 Oct 2 19:43:01.854453 env[1737]: time="2023-10-02T19:43:01.854142691Z" level=warning msg="cleaning up after shim disconnected" id=3370c9a282e733e747d23deec8e2456d44435f18404b04f62f1fc07056e72ca6 namespace=k8s.io Oct 2 19:43:01.854453 env[1737]: time="2023-10-02T19:43:01.854166092Z" level=info msg="cleaning up dead shim" Oct 2 19:43:01.884830 env[1737]: time="2023-10-02T19:43:01.884734834Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:01Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3989 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:43:01Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/3370c9a282e733e747d23deec8e2456d44435f18404b04f62f1fc07056e72ca6/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:43:01.885317 env[1737]: time="2023-10-02T19:43:01.885230345Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 19:43:01.885716 env[1737]: time="2023-10-02T19:43:01.885661354Z" level=error msg="Failed to pipe stderr of container \"3370c9a282e733e747d23deec8e2456d44435f18404b04f62f1fc07056e72ca6\"" error="reading from a closed fifo" Oct 2 19:43:01.885998 env[1737]: time="2023-10-02T19:43:01.885918877Z" level=error msg="Failed to pipe stdout of container \"3370c9a282e733e747d23deec8e2456d44435f18404b04f62f1fc07056e72ca6\"" error="reading from a closed fifo" Oct 2 19:43:01.890737 env[1737]: time="2023-10-02T19:43:01.890660127Z" level=error msg="StartContainer for \"3370c9a282e733e747d23deec8e2456d44435f18404b04f62f1fc07056e72ca6\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:43:01.891480 kubelet[2891]: E1002 19:43:01.891140 2891 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="3370c9a282e733e747d23deec8e2456d44435f18404b04f62f1fc07056e72ca6" Oct 2 19:43:01.891480 kubelet[2891]: E1002 19:43:01.891355 2891 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:43:01.891480 kubelet[2891]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:43:01.891480 kubelet[2891]: rm /hostbin/cilium-mount Oct 2 19:43:01.892242 kubelet[2891]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ngdk8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-d95ch_kube-system(9b4566f9-1ce2-463c-b9c9-3a9c575668bb): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:43:01.892471 kubelet[2891]: E1002 19:43:01.891440 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-d95ch" podUID=9b4566f9-1ce2-463c-b9c9-3a9c575668bb Oct 2 19:43:01.910462 env[1737]: time="2023-10-02T19:43:01.910391852Z" level=info msg="CreateContainer within sandbox \"4dda67f006ea4a0f1c7767810d1cb1b636e3c6ac515de6c53a236cdd27cba8f6\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:43:01.932967 env[1737]: time="2023-10-02T19:43:01.932220401Z" level=info msg="CreateContainer within sandbox \"4dda67f006ea4a0f1c7767810d1cb1b636e3c6ac515de6c53a236cdd27cba8f6\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"2c836edb81f602dacf3e83c8ee80989388a843260e0d01ce795f0aee0fb442c4\"" Oct 2 19:43:01.936379 env[1737]: time="2023-10-02T19:43:01.936304930Z" level=info msg="StartContainer for \"2c836edb81f602dacf3e83c8ee80989388a843260e0d01ce795f0aee0fb442c4\"" Oct 2 19:43:01.979080 systemd[1]: Started cri-containerd-2c836edb81f602dacf3e83c8ee80989388a843260e0d01ce795f0aee0fb442c4.scope. Oct 2 19:43:02.017957 systemd[1]: cri-containerd-2c836edb81f602dacf3e83c8ee80989388a843260e0d01ce795f0aee0fb442c4.scope: Deactivated successfully. Oct 2 19:43:02.037108 env[1737]: time="2023-10-02T19:43:02.037012558Z" level=info msg="shim disconnected" id=2c836edb81f602dacf3e83c8ee80989388a843260e0d01ce795f0aee0fb442c4 Oct 2 19:43:02.037464 env[1737]: time="2023-10-02T19:43:02.037420623Z" level=warning msg="cleaning up after shim disconnected" id=2c836edb81f602dacf3e83c8ee80989388a843260e0d01ce795f0aee0fb442c4 namespace=k8s.io Oct 2 19:43:02.037589 env[1737]: time="2023-10-02T19:43:02.037561169Z" level=info msg="cleaning up dead shim" Oct 2 19:43:02.072690 env[1737]: time="2023-10-02T19:43:02.072531161Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:02Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4027 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:43:02Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/2c836edb81f602dacf3e83c8ee80989388a843260e0d01ce795f0aee0fb442c4/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:43:02.074219 env[1737]: time="2023-10-02T19:43:02.074132402Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 19:43:02.075963 env[1737]: time="2023-10-02T19:43:02.074637788Z" level=error msg="Failed to pipe stdout of container \"2c836edb81f602dacf3e83c8ee80989388a843260e0d01ce795f0aee0fb442c4\"" error="reading from a closed fifo" Oct 2 19:43:02.076267 env[1737]: time="2023-10-02T19:43:02.075546020Z" level=error msg="Failed to pipe stderr of container \"2c836edb81f602dacf3e83c8ee80989388a843260e0d01ce795f0aee0fb442c4\"" error="reading from a closed fifo" Oct 2 19:43:02.078141 env[1737]: time="2023-10-02T19:43:02.078076817Z" level=error msg="StartContainer for \"2c836edb81f602dacf3e83c8ee80989388a843260e0d01ce795f0aee0fb442c4\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:43:02.080534 kubelet[2891]: E1002 19:43:02.078542 2891 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="2c836edb81f602dacf3e83c8ee80989388a843260e0d01ce795f0aee0fb442c4" Oct 2 19:43:02.080534 kubelet[2891]: E1002 19:43:02.078674 2891 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:43:02.080534 kubelet[2891]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:43:02.080534 kubelet[2891]: rm /hostbin/cilium-mount Oct 2 19:43:02.082025 kubelet[2891]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ngdk8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-d95ch_kube-system(9b4566f9-1ce2-463c-b9c9-3a9c575668bb): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:43:02.083464 kubelet[2891]: E1002 19:43:02.078732 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-d95ch" podUID=9b4566f9-1ce2-463c-b9c9-3a9c575668bb Oct 2 19:43:02.905033 kubelet[2891]: I1002 19:43:02.904989 2891 scope.go:115] "RemoveContainer" containerID="3370c9a282e733e747d23deec8e2456d44435f18404b04f62f1fc07056e72ca6" Oct 2 19:43:02.906258 kubelet[2891]: I1002 19:43:02.906223 2891 scope.go:115] "RemoveContainer" containerID="3370c9a282e733e747d23deec8e2456d44435f18404b04f62f1fc07056e72ca6" Oct 2 19:43:02.908540 env[1737]: time="2023-10-02T19:43:02.908473200Z" level=info msg="RemoveContainer for \"3370c9a282e733e747d23deec8e2456d44435f18404b04f62f1fc07056e72ca6\"" Oct 2 19:43:02.909806 env[1737]: time="2023-10-02T19:43:02.909741725Z" level=info msg="RemoveContainer for \"3370c9a282e733e747d23deec8e2456d44435f18404b04f62f1fc07056e72ca6\"" Oct 2 19:43:02.910340 env[1737]: time="2023-10-02T19:43:02.909983120Z" level=error msg="RemoveContainer for \"3370c9a282e733e747d23deec8e2456d44435f18404b04f62f1fc07056e72ca6\" failed" error="failed to set removing state for container \"3370c9a282e733e747d23deec8e2456d44435f18404b04f62f1fc07056e72ca6\": container is already in removing state" Oct 2 19:43:02.910731 kubelet[2891]: E1002 19:43:02.910678 2891 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"3370c9a282e733e747d23deec8e2456d44435f18404b04f62f1fc07056e72ca6\": container is already in removing state" containerID="3370c9a282e733e747d23deec8e2456d44435f18404b04f62f1fc07056e72ca6" Oct 2 19:43:02.910845 kubelet[2891]: E1002 19:43:02.910741 2891 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "3370c9a282e733e747d23deec8e2456d44435f18404b04f62f1fc07056e72ca6": container is already in removing state; Skipping pod "cilium-d95ch_kube-system(9b4566f9-1ce2-463c-b9c9-3a9c575668bb)" Oct 2 19:43:02.911380 kubelet[2891]: E1002 19:43:02.911323 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-d95ch_kube-system(9b4566f9-1ce2-463c-b9c9-3a9c575668bb)\"" pod="kube-system/cilium-d95ch" podUID=9b4566f9-1ce2-463c-b9c9-3a9c575668bb Oct 2 19:43:02.917216 env[1737]: time="2023-10-02T19:43:02.917105297Z" level=info msg="RemoveContainer for \"3370c9a282e733e747d23deec8e2456d44435f18404b04f62f1fc07056e72ca6\" returns successfully" Oct 2 19:43:03.913195 kubelet[2891]: E1002 19:43:03.911941 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-d95ch_kube-system(9b4566f9-1ce2-463c-b9c9-3a9c575668bb)\"" pod="kube-system/cilium-d95ch" podUID=9b4566f9-1ce2-463c-b9c9-3a9c575668bb Oct 2 19:43:04.959859 kubelet[2891]: W1002 19:43:04.959809 2891 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod9b4566f9_1ce2_463c_b9c9_3a9c575668bb.slice/cri-containerd-3370c9a282e733e747d23deec8e2456d44435f18404b04f62f1fc07056e72ca6.scope WatchSource:0}: container "3370c9a282e733e747d23deec8e2456d44435f18404b04f62f1fc07056e72ca6" in namespace "k8s.io": not found Oct 2 19:43:06.140692 kubelet[2891]: E1002 19:43:06.140628 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:08.077072 kubelet[2891]: W1002 19:43:08.077016 2891 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod9b4566f9_1ce2_463c_b9c9_3a9c575668bb.slice/cri-containerd-2c836edb81f602dacf3e83c8ee80989388a843260e0d01ce795f0aee0fb442c4.scope WatchSource:0}: task 2c836edb81f602dacf3e83c8ee80989388a843260e0d01ce795f0aee0fb442c4 not found: not found Oct 2 19:43:11.141762 kubelet[2891]: E1002 19:43:11.141726 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:16.145880 kubelet[2891]: E1002 19:43:16.145830 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:16.148060 env[1737]: time="2023-10-02T19:43:16.147992716Z" level=info msg="CreateContainer within sandbox \"4dda67f006ea4a0f1c7767810d1cb1b636e3c6ac515de6c53a236cdd27cba8f6\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:43:16.168463 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3635915621.mount: Deactivated successfully. Oct 2 19:43:16.179455 env[1737]: time="2023-10-02T19:43:16.179163170Z" level=info msg="CreateContainer within sandbox \"4dda67f006ea4a0f1c7767810d1cb1b636e3c6ac515de6c53a236cdd27cba8f6\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74\"" Oct 2 19:43:16.184929 env[1737]: time="2023-10-02T19:43:16.184802943Z" level=info msg="StartContainer for \"ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74\"" Oct 2 19:43:16.252092 systemd[1]: Started cri-containerd-ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74.scope. Oct 2 19:43:16.294153 systemd[1]: cri-containerd-ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74.scope: Deactivated successfully. Oct 2 19:43:16.317537 env[1737]: time="2023-10-02T19:43:16.317461346Z" level=info msg="shim disconnected" id=ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74 Oct 2 19:43:16.317824 env[1737]: time="2023-10-02T19:43:16.317537379Z" level=warning msg="cleaning up after shim disconnected" id=ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74 namespace=k8s.io Oct 2 19:43:16.317824 env[1737]: time="2023-10-02T19:43:16.317560191Z" level=info msg="cleaning up dead shim" Oct 2 19:43:16.346069 env[1737]: time="2023-10-02T19:43:16.345993758Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4065 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:43:16Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:43:16.346535 env[1737]: time="2023-10-02T19:43:16.346439791Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 19:43:16.346916 env[1737]: time="2023-10-02T19:43:16.346834465Z" level=error msg="Failed to pipe stdout of container \"ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74\"" error="reading from a closed fifo" Oct 2 19:43:16.348066 env[1737]: time="2023-10-02T19:43:16.348003724Z" level=error msg="Failed to pipe stderr of container \"ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74\"" error="reading from a closed fifo" Oct 2 19:43:16.350422 env[1737]: time="2023-10-02T19:43:16.350355562Z" level=error msg="StartContainer for \"ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:43:16.351784 kubelet[2891]: E1002 19:43:16.350837 2891 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74" Oct 2 19:43:16.351784 kubelet[2891]: E1002 19:43:16.351014 2891 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:43:16.351784 kubelet[2891]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:43:16.351784 kubelet[2891]: rm /hostbin/cilium-mount Oct 2 19:43:16.352207 kubelet[2891]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ngdk8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-d95ch_kube-system(9b4566f9-1ce2-463c-b9c9-3a9c575668bb): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:43:16.352327 kubelet[2891]: E1002 19:43:16.351091 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-d95ch" podUID=9b4566f9-1ce2-463c-b9c9-3a9c575668bb Oct 2 19:43:16.942457 kubelet[2891]: I1002 19:43:16.942371 2891 scope.go:115] "RemoveContainer" containerID="2c836edb81f602dacf3e83c8ee80989388a843260e0d01ce795f0aee0fb442c4" Oct 2 19:43:16.943281 kubelet[2891]: I1002 19:43:16.943226 2891 scope.go:115] "RemoveContainer" containerID="2c836edb81f602dacf3e83c8ee80989388a843260e0d01ce795f0aee0fb442c4" Oct 2 19:43:16.946190 env[1737]: time="2023-10-02T19:43:16.946101243Z" level=info msg="RemoveContainer for \"2c836edb81f602dacf3e83c8ee80989388a843260e0d01ce795f0aee0fb442c4\"" Oct 2 19:43:16.947753 env[1737]: time="2023-10-02T19:43:16.947679551Z" level=info msg="RemoveContainer for \"2c836edb81f602dacf3e83c8ee80989388a843260e0d01ce795f0aee0fb442c4\"" Oct 2 19:43:16.948487 env[1737]: time="2023-10-02T19:43:16.948415281Z" level=error msg="RemoveContainer for \"2c836edb81f602dacf3e83c8ee80989388a843260e0d01ce795f0aee0fb442c4\" failed" error="failed to set removing state for container \"2c836edb81f602dacf3e83c8ee80989388a843260e0d01ce795f0aee0fb442c4\": container is already in removing state" Oct 2 19:43:16.950032 kubelet[2891]: E1002 19:43:16.948981 2891 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"2c836edb81f602dacf3e83c8ee80989388a843260e0d01ce795f0aee0fb442c4\": container is already in removing state" containerID="2c836edb81f602dacf3e83c8ee80989388a843260e0d01ce795f0aee0fb442c4" Oct 2 19:43:16.950032 kubelet[2891]: E1002 19:43:16.949064 2891 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "2c836edb81f602dacf3e83c8ee80989388a843260e0d01ce795f0aee0fb442c4": container is already in removing state; Skipping pod "cilium-d95ch_kube-system(9b4566f9-1ce2-463c-b9c9-3a9c575668bb)" Oct 2 19:43:16.950032 kubelet[2891]: E1002 19:43:16.949511 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-d95ch_kube-system(9b4566f9-1ce2-463c-b9c9-3a9c575668bb)\"" pod="kube-system/cilium-d95ch" podUID=9b4566f9-1ce2-463c-b9c9-3a9c575668bb Oct 2 19:43:16.954158 env[1737]: time="2023-10-02T19:43:16.954075958Z" level=info msg="RemoveContainer for \"2c836edb81f602dacf3e83c8ee80989388a843260e0d01ce795f0aee0fb442c4\" returns successfully" Oct 2 19:43:17.163008 systemd[1]: run-containerd-runc-k8s.io-ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74-runc.CgbYrg.mount: Deactivated successfully. Oct 2 19:43:17.163220 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74-rootfs.mount: Deactivated successfully. Oct 2 19:43:19.424122 kubelet[2891]: W1002 19:43:19.424057 2891 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod9b4566f9_1ce2_463c_b9c9_3a9c575668bb.slice/cri-containerd-ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74.scope WatchSource:0}: task ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74 not found: not found Oct 2 19:43:21.147001 kubelet[2891]: E1002 19:43:21.146931 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:26.148060 kubelet[2891]: E1002 19:43:26.147988 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:28.143666 kubelet[2891]: E1002 19:43:28.143627 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-d95ch_kube-system(9b4566f9-1ce2-463c-b9c9-3a9c575668bb)\"" pod="kube-system/cilium-d95ch" podUID=9b4566f9-1ce2-463c-b9c9-3a9c575668bb Oct 2 19:43:30.119000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:30.123015 kernel: kauditd_printk_skb: 58 callbacks suppressed Oct 2 19:43:30.123116 kernel: audit: type=1400 audit(1696275810.119:1419): avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:30.119000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400151f3a0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:43:30.146829 kernel: audit: type=1300 audit(1696275810.119:1419): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400151f3a0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:43:30.147016 kernel: audit: type=1327 audit(1696275810.119:1419): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:30.119000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:30.120000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:30.168384 kernel: audit: type=1400 audit(1696275810.120:1420): avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:30.168502 kernel: audit: type=1300 audit(1696275810.120:1420): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002b90330 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:43:30.120000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002b90330 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:43:30.120000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:30.192440 kernel: audit: type=1327 audit(1696275810.120:1420): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:31.130000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:31.130000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=400bd741b0 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:43:31.153750 kernel: audit: type=1400 audit(1696275811.130:1421): avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:31.153860 kernel: audit: type=1300 audit(1696275811.130:1421): arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=400bd741b0 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:43:31.130000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:43:31.164425 kernel: audit: type=1327 audit(1696275811.130:1421): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:43:31.164634 kubelet[2891]: E1002 19:43:31.164593 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:31.131000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:31.174313 kernel: audit: type=1400 audit(1696275811.131:1422): avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:31.131000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=400bd741e0 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:43:31.131000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:43:31.138000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:31.138000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=4004132e80 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:43:31.138000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:43:31.138000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:31.138000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=400bd745a0 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:43:31.138000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:43:31.266000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:31.266000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=400bddc000 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:43:31.266000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:43:31.287000 audit[2715]: AVC avc: denied { watch } for pid=2715 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:31.287000 audit[2715]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=400414c7c0 a2=fc6 a3=0 items=0 ppid=2488 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c848,c942 key=(null) Oct 2 19:43:31.287000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3238002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:43:35.784654 env[1737]: time="2023-10-02T19:43:35.784583193Z" level=info msg="StopPodSandbox for \"c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4\"" Oct 2 19:43:35.785300 env[1737]: time="2023-10-02T19:43:35.784781399Z" level=info msg="TearDown network for sandbox \"c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4\" successfully" Oct 2 19:43:35.785300 env[1737]: time="2023-10-02T19:43:35.784867212Z" level=info msg="StopPodSandbox for \"c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4\" returns successfully" Oct 2 19:43:35.787894 env[1737]: time="2023-10-02T19:43:35.785998791Z" level=info msg="RemovePodSandbox for \"c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4\"" Oct 2 19:43:35.787894 env[1737]: time="2023-10-02T19:43:35.786053788Z" level=info msg="Forcibly stopping sandbox \"c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4\"" Oct 2 19:43:35.787894 env[1737]: time="2023-10-02T19:43:35.786189726Z" level=info msg="TearDown network for sandbox \"c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4\" successfully" Oct 2 19:43:35.790724 env[1737]: time="2023-10-02T19:43:35.790539590Z" level=info msg="RemovePodSandbox \"c1d7b341d8ce6e262b21b0905b4d27a1716c743829d891f7ffa49ccf98413ca4\" returns successfully" Oct 2 19:43:35.791610 env[1737]: time="2023-10-02T19:43:35.791534259Z" level=info msg="StopPodSandbox for \"4b70cee2f0d321431afe505ab21798f924d0f889b6812e50343f1b316d3daf77\"" Oct 2 19:43:35.791824 env[1737]: time="2023-10-02T19:43:35.791715450Z" level=info msg="TearDown network for sandbox \"4b70cee2f0d321431afe505ab21798f924d0f889b6812e50343f1b316d3daf77\" successfully" Oct 2 19:43:35.791824 env[1737]: time="2023-10-02T19:43:35.791798275Z" level=info msg="StopPodSandbox for \"4b70cee2f0d321431afe505ab21798f924d0f889b6812e50343f1b316d3daf77\" returns successfully" Oct 2 19:43:35.792527 env[1737]: time="2023-10-02T19:43:35.792431883Z" level=info msg="RemovePodSandbox for \"4b70cee2f0d321431afe505ab21798f924d0f889b6812e50343f1b316d3daf77\"" Oct 2 19:43:35.792634 env[1737]: time="2023-10-02T19:43:35.792557693Z" level=info msg="Forcibly stopping sandbox \"4b70cee2f0d321431afe505ab21798f924d0f889b6812e50343f1b316d3daf77\"" Oct 2 19:43:35.792768 env[1737]: time="2023-10-02T19:43:35.792729175Z" level=info msg="TearDown network for sandbox \"4b70cee2f0d321431afe505ab21798f924d0f889b6812e50343f1b316d3daf77\" successfully" Oct 2 19:43:35.798124 env[1737]: time="2023-10-02T19:43:35.798058276Z" level=info msg="RemovePodSandbox \"4b70cee2f0d321431afe505ab21798f924d0f889b6812e50343f1b316d3daf77\" returns successfully" Oct 2 19:43:36.019511 kubelet[2891]: W1002 19:43:36.019461 2891 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:43:36.165659 kubelet[2891]: E1002 19:43:36.165602 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:41.167636 kubelet[2891]: E1002 19:43:41.167485 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:43.149819 env[1737]: time="2023-10-02T19:43:43.148498298Z" level=info msg="CreateContainer within sandbox \"4dda67f006ea4a0f1c7767810d1cb1b636e3c6ac515de6c53a236cdd27cba8f6\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:43:43.171340 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3874626996.mount: Deactivated successfully. Oct 2 19:43:43.176685 env[1737]: time="2023-10-02T19:43:43.176600467Z" level=info msg="CreateContainer within sandbox \"4dda67f006ea4a0f1c7767810d1cb1b636e3c6ac515de6c53a236cdd27cba8f6\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"b3137fa17e1d7743d1abd2ee0669b60c070dca07b0313ac58730c26533fe1dc8\"" Oct 2 19:43:43.178629 env[1737]: time="2023-10-02T19:43:43.177238876Z" level=info msg="StartContainer for \"b3137fa17e1d7743d1abd2ee0669b60c070dca07b0313ac58730c26533fe1dc8\"" Oct 2 19:43:43.243782 systemd[1]: Started cri-containerd-b3137fa17e1d7743d1abd2ee0669b60c070dca07b0313ac58730c26533fe1dc8.scope. Oct 2 19:43:43.282136 systemd[1]: cri-containerd-b3137fa17e1d7743d1abd2ee0669b60c070dca07b0313ac58730c26533fe1dc8.scope: Deactivated successfully. Oct 2 19:43:43.316588 env[1737]: time="2023-10-02T19:43:43.316495455Z" level=info msg="shim disconnected" id=b3137fa17e1d7743d1abd2ee0669b60c070dca07b0313ac58730c26533fe1dc8 Oct 2 19:43:43.316588 env[1737]: time="2023-10-02T19:43:43.316578700Z" level=warning msg="cleaning up after shim disconnected" id=b3137fa17e1d7743d1abd2ee0669b60c070dca07b0313ac58730c26533fe1dc8 namespace=k8s.io Oct 2 19:43:43.316998 env[1737]: time="2023-10-02T19:43:43.316601753Z" level=info msg="cleaning up dead shim" Oct 2 19:43:43.344465 env[1737]: time="2023-10-02T19:43:43.344386398Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:43Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4108 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:43:43Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/b3137fa17e1d7743d1abd2ee0669b60c070dca07b0313ac58730c26533fe1dc8/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:43:43.344992 env[1737]: time="2023-10-02T19:43:43.344868948Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 19:43:43.345609 env[1737]: time="2023-10-02T19:43:43.345418220Z" level=error msg="Failed to pipe stderr of container \"b3137fa17e1d7743d1abd2ee0669b60c070dca07b0313ac58730c26533fe1dc8\"" error="reading from a closed fifo" Oct 2 19:43:43.345719 env[1737]: time="2023-10-02T19:43:43.345670211Z" level=error msg="Failed to pipe stdout of container \"b3137fa17e1d7743d1abd2ee0669b60c070dca07b0313ac58730c26533fe1dc8\"" error="reading from a closed fifo" Oct 2 19:43:43.348275 env[1737]: time="2023-10-02T19:43:43.348191540Z" level=error msg="StartContainer for \"b3137fa17e1d7743d1abd2ee0669b60c070dca07b0313ac58730c26533fe1dc8\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:43:43.348605 kubelet[2891]: E1002 19:43:43.348554 2891 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="b3137fa17e1d7743d1abd2ee0669b60c070dca07b0313ac58730c26533fe1dc8" Oct 2 19:43:43.349305 kubelet[2891]: E1002 19:43:43.348702 2891 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:43:43.349305 kubelet[2891]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:43:43.349305 kubelet[2891]: rm /hostbin/cilium-mount Oct 2 19:43:43.349305 kubelet[2891]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ngdk8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-d95ch_kube-system(9b4566f9-1ce2-463c-b9c9-3a9c575668bb): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:43:43.349760 kubelet[2891]: E1002 19:43:43.348760 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-d95ch" podUID=9b4566f9-1ce2-463c-b9c9-3a9c575668bb Oct 2 19:43:44.010923 kubelet[2891]: I1002 19:43:44.010878 2891 scope.go:115] "RemoveContainer" containerID="ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74" Oct 2 19:43:44.011507 kubelet[2891]: I1002 19:43:44.011468 2891 scope.go:115] "RemoveContainer" containerID="ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74" Oct 2 19:43:44.015123 env[1737]: time="2023-10-02T19:43:44.015071463Z" level=info msg="RemoveContainer for \"ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74\"" Oct 2 19:43:44.015940 env[1737]: time="2023-10-02T19:43:44.015875222Z" level=info msg="RemoveContainer for \"ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74\"" Oct 2 19:43:44.016255 env[1737]: time="2023-10-02T19:43:44.016206066Z" level=error msg="RemoveContainer for \"ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74\" failed" error="failed to set removing state for container \"ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74\": container is already in removing state" Oct 2 19:43:44.018965 kubelet[2891]: E1002 19:43:44.017013 2891 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74\": container is already in removing state" containerID="ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74" Oct 2 19:43:44.018965 kubelet[2891]: E1002 19:43:44.017095 2891 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74": container is already in removing state; Skipping pod "cilium-d95ch_kube-system(9b4566f9-1ce2-463c-b9c9-3a9c575668bb)" Oct 2 19:43:44.018965 kubelet[2891]: E1002 19:43:44.017524 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-d95ch_kube-system(9b4566f9-1ce2-463c-b9c9-3a9c575668bb)\"" pod="kube-system/cilium-d95ch" podUID=9b4566f9-1ce2-463c-b9c9-3a9c575668bb Oct 2 19:43:44.024773 env[1737]: time="2023-10-02T19:43:44.024687201Z" level=info msg="RemoveContainer for \"ffb54e98ce57b881517fdb789ee0be53adc87e2baa5b49c3696ce62ee974de74\" returns successfully" Oct 2 19:43:44.164354 systemd[1]: run-containerd-runc-k8s.io-b3137fa17e1d7743d1abd2ee0669b60c070dca07b0313ac58730c26533fe1dc8-runc.fqH1e0.mount: Deactivated successfully. Oct 2 19:43:44.164546 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b3137fa17e1d7743d1abd2ee0669b60c070dca07b0313ac58730c26533fe1dc8-rootfs.mount: Deactivated successfully. Oct 2 19:43:44.736000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:44.739933 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:43:44.740097 kernel: audit: type=1400 audit(1696275824.736:1427): avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:44.736000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000af0ae0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:43:44.762427 kernel: audit: type=1300 audit(1696275824.736:1427): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000af0ae0 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:43:44.762595 kernel: audit: type=1327 audit(1696275824.736:1427): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:44.736000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:44.743000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:44.783143 kernel: audit: type=1400 audit(1696275824.743:1429): avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:44.783310 kernel: audit: type=1300 audit(1696275824.743:1429): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000af0b00 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:43:44.743000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000af0b00 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:43:44.743000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:44.806512 kernel: audit: type=1327 audit(1696275824.743:1429): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:44.806656 kernel: audit: type=1400 audit(1696275824.745:1430): avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:44.745000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:44.745000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000ff6960 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:43:44.828854 kernel: audit: type=1300 audit(1696275824.745:1430): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000ff6960 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:43:44.745000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:44.840295 kernel: audit: type=1327 audit(1696275824.745:1430): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:44.840432 kernel: audit: type=1400 audit(1696275824.743:1428): avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:44.743000 audit[2748]: AVC avc: denied { watch } for pid=2748 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521249 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:44.743000 audit[2748]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40014c9040 a2=fc6 a3=0 items=0 ppid=2507 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c464 key=(null) Oct 2 19:43:44.743000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:46.168818 kubelet[2891]: E1002 19:43:46.168776 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:46.428083 kubelet[2891]: W1002 19:43:46.427883 2891 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod9b4566f9_1ce2_463c_b9c9_3a9c575668bb.slice/cri-containerd-b3137fa17e1d7743d1abd2ee0669b60c070dca07b0313ac58730c26533fe1dc8.scope WatchSource:0}: task b3137fa17e1d7743d1abd2ee0669b60c070dca07b0313ac58730c26533fe1dc8 not found: not found Oct 2 19:43:51.170005 kubelet[2891]: E1002 19:43:51.169958 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:55.143608 kubelet[2891]: E1002 19:43:55.143553 2891 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-d95ch_kube-system(9b4566f9-1ce2-463c-b9c9-3a9c575668bb)\"" pod="kube-system/cilium-d95ch" podUID=9b4566f9-1ce2-463c-b9c9-3a9c575668bb Oct 2 19:43:56.171642 kubelet[2891]: E1002 19:43:56.171597 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:44:01.174111 kubelet[2891]: E1002 19:44:01.174075 2891 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:44:02.614043 env[1737]: time="2023-10-02T19:44:02.613770286Z" level=info msg="StopPodSandbox for \"4dda67f006ea4a0f1c7767810d1cb1b636e3c6ac515de6c53a236cdd27cba8f6\"" Oct 2 19:44:02.614043 env[1737]: time="2023-10-02T19:44:02.613860900Z" level=info msg="Container to stop \"b3137fa17e1d7743d1abd2ee0669b60c070dca07b0313ac58730c26533fe1dc8\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:44:02.619535 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-4dda67f006ea4a0f1c7767810d1cb1b636e3c6ac515de6c53a236cdd27cba8f6-shm.mount: Deactivated successfully. Oct 2 19:44:02.652000 audit: BPF prog-id=137 op=UNLOAD Oct 2 19:44:02.652536 systemd[1]: cri-containerd-4dda67f006ea4a0f1c7767810d1cb1b636e3c6ac515de6c53a236cdd27cba8f6.scope: Deactivated successfully. Oct 2 19:44:02.655121 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:44:02.655229 kernel: audit: type=1334 audit(1696275842.652:1431): prog-id=137 op=UNLOAD Oct 2 19:44:02.658000 audit: BPF prog-id=140 op=UNLOAD Oct 2 19:44:02.666114 kernel: audit: type=1334 audit(1696275842.658:1432): prog-id=140 op=UNLOAD Oct 2 19:44:02.736474 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4dda67f006ea4a0f1c7767810d1cb1b636e3c6ac515de6c53a236cdd27cba8f6-rootfs.mount: Deactivated successfully. Oct 2 19:44:02.761048 env[1737]: time="2023-10-02T19:44:02.760964237Z" level=info msg="shim disconnected" id=4dda67f006ea4a0f1c7767810d1cb1b636e3c6ac515de6c53a236cdd27cba8f6 Oct 2 19:44:02.761048 env[1737]: time="2023-10-02T19:44:02.761041698Z" level=warning msg="cleaning up after shim disconnected" id=4dda67f006ea4a0f1c7767810d1cb1b636e3c6ac515de6c53a236cdd27cba8f6 namespace=k8s.io Oct 2 19:44:02.761427 env[1737]: time="2023-10-02T19:44:02.761070726Z" level=info msg="cleaning up dead shim" Oct 2 19:44:02.780065 sshd[3911]: pam_unix(sshd:session): session closed for user core Oct 2 19:44:02.784000 audit[3911]: USER_END pid=3911 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:02.790885 systemd-logind[1726]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:44:02.785000 audit[3911]: CRED_DISP pid=3911 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:02.800331 systemd[1]: sshd@29-172.31.16.28:22-139.178.89.65:36184.service: Deactivated successfully. Oct 2 19:44:02.801674 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:44:02.802072 systemd[1]: session-30.scope: Consumed 1.991s CPU time. Oct 2 19:44:02.804849 systemd-logind[1726]: Removed session 30. Oct 2 19:44:02.809136 kernel: audit: type=1106 audit(1696275842.784:1433): pid=3911 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:02.809348 kernel: audit: type=1104 audit(1696275842.785:1434): pid=3911 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:02.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.16.28:22-139.178.89.65:36184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:02.819843 kernel: audit: type=1131 audit(1696275842.798:1435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.16.28:22-139.178.89.65:36184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:02.820896 env[1737]: time="2023-10-02T19:44:02.820804935Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:44:02Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4142 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:44:02Z\" level=warning msg=\"failed to remove runc container\" error=\"runc did not terminate successfully: exit status 255: \" runtime=io.containerd.runc.v2\n" Oct 2 19:44:02.821603 env[1737]: time="2023-10-02T19:44:02.821524380Z" level=info msg="TearDown network for sandbox \"4dda67f006ea4a0f1c7767810d1cb1b636e3c6ac515de6c53a236cdd27cba8f6\" successfully" Oct 2 19:44:02.821603 env[1737]: time="2023-10-02T19:44:02.821574157Z" level=info msg="StopPodSandbox for \"4dda67f006ea4a0f1c7767810d1cb1b636e3c6ac515de6c53a236cdd27cba8f6\" returns successfully" Oct 2 19:44:02.953547 kubelet[2891]: I1002 19:44:02.953485 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-hostproc\") pod \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " Oct 2 19:44:02.954283 kubelet[2891]: I1002 19:44:02.953702 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-etc-cni-netd\") pod \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " Oct 2 19:44:02.954283 kubelet[2891]: I1002 19:44:02.953814 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-ngdk8\" (UniqueName: \"kubernetes.io/projected/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-kube-api-access-ngdk8\") pod \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " Oct 2 19:44:02.954283 kubelet[2891]: I1002 19:44:02.953866 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-cilium-config-path\") pod \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " Oct 2 19:44:02.954283 kubelet[2891]: I1002 19:44:02.953974 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-bpf-maps\") pod \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " Oct 2 19:44:02.954283 kubelet[2891]: I1002 19:44:02.954043 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-cilium-cgroup\") pod \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " Oct 2 19:44:02.954283 kubelet[2891]: I1002 19:44:02.954087 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-host-proc-sys-kernel\") pod \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " Oct 2 19:44:02.954709 kubelet[2891]: I1002 19:44:02.954162 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-lib-modules\") pod \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " Oct 2 19:44:02.954709 kubelet[2891]: I1002 19:44:02.954234 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-host-proc-sys-net\") pod \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " Oct 2 19:44:02.954709 kubelet[2891]: I1002 19:44:02.954304 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-cni-path\") pod \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " Oct 2 19:44:02.954709 kubelet[2891]: I1002 19:44:02.954356 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-hubble-tls\") pod \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " Oct 2 19:44:02.954709 kubelet[2891]: I1002 19:44:02.954424 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-cilium-run\") pod \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " Oct 2 19:44:02.954709 kubelet[2891]: I1002 19:44:02.954500 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-cilium-ipsec-secrets\") pod \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " Oct 2 19:44:02.955178 kubelet[2891]: I1002 19:44:02.954574 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-clustermesh-secrets\") pod \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " Oct 2 19:44:02.955178 kubelet[2891]: I1002 19:44:02.954618 2891 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-xtables-lock\") pod \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\" (UID: \"9b4566f9-1ce2-463c-b9c9-3a9c575668bb\") " Oct 2 19:44:02.955178 kubelet[2891]: I1002 19:44:02.954746 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "9b4566f9-1ce2-463c-b9c9-3a9c575668bb" (UID: "9b4566f9-1ce2-463c-b9c9-3a9c575668bb"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:44:02.955178 kubelet[2891]: I1002 19:44:02.953601 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-hostproc" (OuterVolumeSpecName: "hostproc") pod "9b4566f9-1ce2-463c-b9c9-3a9c575668bb" (UID: "9b4566f9-1ce2-463c-b9c9-3a9c575668bb"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:44:02.955178 kubelet[2891]: I1002 19:44:02.954849 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "9b4566f9-1ce2-463c-b9c9-3a9c575668bb" (UID: "9b4566f9-1ce2-463c-b9c9-3a9c575668bb"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:44:02.955680 kubelet[2891]: I1002 19:44:02.955632 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "9b4566f9-1ce2-463c-b9c9-3a9c575668bb" (UID: "9b4566f9-1ce2-463c-b9c9-3a9c575668bb"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:44:02.956033 kubelet[2891]: I1002 19:44:02.955972 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-cni-path" (OuterVolumeSpecName: "cni-path") pod "9b4566f9-1ce2-463c-b9c9-3a9c575668bb" (UID: "9b4566f9-1ce2-463c-b9c9-3a9c575668bb"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:44:02.956376 kubelet[2891]: W1002 19:44:02.956314 2891 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/9b4566f9-1ce2-463c-b9c9-3a9c575668bb/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:44:02.961104 kubelet[2891]: I1002 19:44:02.960995 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "9b4566f9-1ce2-463c-b9c9-3a9c575668bb" (UID: "9b4566f9-1ce2-463c-b9c9-3a9c575668bb"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:44:02.961274 kubelet[2891]: I1002 19:44:02.961124 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "9b4566f9-1ce2-463c-b9c9-3a9c575668bb" (UID: "9b4566f9-1ce2-463c-b9c9-3a9c575668bb"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:44:02.961274 kubelet[2891]: I1002 19:44:02.961172 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "9b4566f9-1ce2-463c-b9c9-3a9c575668bb" (UID: "9b4566f9-1ce2-463c-b9c9-3a9c575668bb"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:44:02.961274 kubelet[2891]: I1002 19:44:02.961215 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "9b4566f9-1ce2-463c-b9c9-3a9c575668bb" (UID: "9b4566f9-1ce2-463c-b9c9-3a9c575668bb"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:44:02.962716 kubelet[2891]: I1002 19:44:02.962655 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "9b4566f9-1ce2-463c-b9c9-3a9c575668bb" (UID: "9b4566f9-1ce2-463c-b9c9-3a9c575668bb"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:44:02.963762 kubelet[2891]: I1002 19:44:02.963715 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "9b4566f9-1ce2-463c-b9c9-3a9c575668bb" (UID: "9b4566f9-1ce2-463c-b9c9-3a9c575668bb"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:44:02.977401 systemd[1]: var-lib-kubelet-pods-9b4566f9\x2d1ce2\x2d463c\x2db9c9\x2d3a9c575668bb-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dngdk8.mount: Deactivated successfully. Oct 2 19:44:02.977589 systemd[1]: var-lib-kubelet-pods-9b4566f9\x2d1ce2\x2d463c\x2db9c9\x2d3a9c575668bb-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:44:02.984124 kubelet[2891]: I1002 19:44:02.983171 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "9b4566f9-1ce2-463c-b9c9-3a9c575668bb" (UID: "9b4566f9-1ce2-463c-b9c9-3a9c575668bb"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:44:02.984124 kubelet[2891]: I1002 19:44:02.983313 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-kube-api-access-ngdk8" (OuterVolumeSpecName: "kube-api-access-ngdk8") pod "9b4566f9-1ce2-463c-b9c9-3a9c575668bb" (UID: "9b4566f9-1ce2-463c-b9c9-3a9c575668bb"). InnerVolumeSpecName "kube-api-access-ngdk8". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:44:02.986089 systemd[1]: var-lib-kubelet-pods-9b4566f9\x2d1ce2\x2d463c\x2db9c9\x2d3a9c575668bb-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:44:02.989555 kubelet[2891]: I1002 19:44:02.989498 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "9b4566f9-1ce2-463c-b9c9-3a9c575668bb" (UID: "9b4566f9-1ce2-463c-b9c9-3a9c575668bb"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:44:02.992161 kubelet[2891]: I1002 19:44:02.992106 2891 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "9b4566f9-1ce2-463c-b9c9-3a9c575668bb" (UID: "9b4566f9-1ce2-463c-b9c9-3a9c575668bb"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:44:02.993292 systemd[1]: var-lib-kubelet-pods-9b4566f9\x2d1ce2\x2d463c\x2db9c9\x2d3a9c575668bb-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:44:03.054999 kubelet[2891]: I1002 19:44:03.054883 2891 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-cni-path\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:44:03.054999 kubelet[2891]: I1002 19:44:03.054952 2891 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-lib-modules\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:44:03.055263 kubelet[2891]: I1002 19:44:03.055011 2891 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-host-proc-sys-net\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:44:03.055263 kubelet[2891]: I1002 19:44:03.055043 2891 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-hubble-tls\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:44:03.055263 kubelet[2891]: I1002 19:44:03.055068 2891 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-cilium-run\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:44:03.055263 kubelet[2891]: I1002 19:44:03.055092 2891 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-clustermesh-secrets\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:44:03.055263 kubelet[2891]: I1002 19:44:03.055115 2891 reconciler_common.go:295] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-cilium-ipsec-secrets\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:44:03.055263 kubelet[2891]: I1002 19:44:03.055139 2891 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-xtables-lock\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:44:03.055263 kubelet[2891]: I1002 19:44:03.055160 2891 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-hostproc\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:44:03.055263 kubelet[2891]: I1002 19:44:03.055212 2891 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-bpf-maps\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:44:03.055847 kubelet[2891]: I1002 19:44:03.055236 2891 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-cilium-cgroup\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:44:03.055847 kubelet[2891]: I1002 19:44:03.055259 2891 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-etc-cni-netd\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:44:03.055847 kubelet[2891]: I1002 19:44:03.055285 2891 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-ngdk8\" (UniqueName: \"kubernetes.io/projected/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-kube-api-access-ngdk8\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:44:03.055847 kubelet[2891]: I1002 19:44:03.055309 2891 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-cilium-config-path\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:44:03.055847 kubelet[2891]: I1002 19:44:03.055333 2891 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/9b4566f9-1ce2-463c-b9c9-3a9c575668bb-host-proc-sys-kernel\") on node \"ip-172-31-16-28\" DevicePath \"\"" Oct 2 19:44:03.058515 kubelet[2891]: I1002 19:44:03.058476 2891 scope.go:115] "RemoveContainer" containerID="b3137fa17e1d7743d1abd2ee0669b60c070dca07b0313ac58730c26533fe1dc8" Oct 2 19:44:03.068476 env[1737]: time="2023-10-02T19:44:03.068024315Z" level=info msg="RemoveContainer for \"b3137fa17e1d7743d1abd2ee0669b60c070dca07b0313ac58730c26533fe1dc8\"" Oct 2 19:44:03.071807 systemd[1]: Removed slice kubepods-burstable-pod9b4566f9_1ce2_463c_b9c9_3a9c575668bb.slice. Oct 2 19:44:03.074807 env[1737]: time="2023-10-02T19:44:03.074728766Z" level=info msg="RemoveContainer for \"b3137fa17e1d7743d1abd2ee0669b60c070dca07b0313ac58730c26533fe1dc8\" returns successfully" Oct 2 19:44:04.149135 kubelet[2891]: I1002 19:44:04.149100 2891 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=9b4566f9-1ce2-463c-b9c9-3a9c575668bb path="/var/lib/kubelet/pods/9b4566f9-1ce2-463c-b9c9-3a9c575668bb/volumes"