Oct 2 19:37:15.128758 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Oct 2 19:37:15.128794 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 19:37:15.128816 kernel: efi: EFI v2.70 by EDK II Oct 2 19:37:15.128831 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7ac1aa98 MEMRESERVE=0x71accf98 Oct 2 19:37:15.128845 kernel: ACPI: Early table checksum verification disabled Oct 2 19:37:15.128858 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Oct 2 19:37:15.128874 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Oct 2 19:37:15.128888 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Oct 2 19:37:15.128902 kernel: ACPI: DSDT 0x0000000078640000 00154F (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Oct 2 19:37:15.128915 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Oct 2 19:37:15.128933 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Oct 2 19:37:15.128947 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Oct 2 19:37:15.128960 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Oct 2 19:37:15.128974 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Oct 2 19:37:15.128990 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Oct 2 19:37:15.129009 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Oct 2 19:37:15.129024 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Oct 2 19:37:15.129038 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Oct 2 19:37:15.129052 kernel: printk: bootconsole [uart0] enabled Oct 2 19:37:15.129067 kernel: NUMA: Failed to initialise from firmware Oct 2 19:37:15.129081 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 19:37:15.129096 kernel: NUMA: NODE_DATA [mem 0x4b5841900-0x4b5846fff] Oct 2 19:37:15.129110 kernel: Zone ranges: Oct 2 19:37:15.129124 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Oct 2 19:37:15.129139 kernel: DMA32 empty Oct 2 19:37:15.129153 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Oct 2 19:37:15.129171 kernel: Movable zone start for each node Oct 2 19:37:15.129185 kernel: Early memory node ranges Oct 2 19:37:15.129199 kernel: node 0: [mem 0x0000000040000000-0x00000000786effff] Oct 2 19:37:15.129214 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Oct 2 19:37:15.129228 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Oct 2 19:37:15.129242 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Oct 2 19:37:15.129256 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Oct 2 19:37:15.129270 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Oct 2 19:37:15.129285 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 19:37:15.129299 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Oct 2 19:37:15.129363 kernel: psci: probing for conduit method from ACPI. Oct 2 19:37:15.129382 kernel: psci: PSCIv1.0 detected in firmware. Oct 2 19:37:15.129403 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 19:37:15.129418 kernel: psci: Trusted OS migration not required Oct 2 19:37:15.129440 kernel: psci: SMC Calling Convention v1.1 Oct 2 19:37:15.129456 kernel: ACPI: SRAT not present Oct 2 19:37:15.129472 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 19:37:15.129492 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 19:37:15.129507 kernel: pcpu-alloc: [0] 0 [0] 1 Oct 2 19:37:15.129522 kernel: Detected PIPT I-cache on CPU0 Oct 2 19:37:15.129538 kernel: CPU features: detected: GIC system register CPU interface Oct 2 19:37:15.129553 kernel: CPU features: detected: Spectre-v2 Oct 2 19:37:15.129568 kernel: CPU features: detected: Spectre-v3a Oct 2 19:37:15.129583 kernel: CPU features: detected: Spectre-BHB Oct 2 19:37:15.129598 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 19:37:15.129614 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 19:37:15.129629 kernel: CPU features: detected: ARM erratum 1742098 Oct 2 19:37:15.129644 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Oct 2 19:37:15.129669 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Oct 2 19:37:15.129684 kernel: Policy zone: Normal Oct 2 19:37:15.129702 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:37:15.129719 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:37:15.129744 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:37:15.129762 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:37:15.129778 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:37:15.129793 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Oct 2 19:37:15.129809 kernel: Memory: 3826444K/4030464K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 204020K reserved, 0K cma-reserved) Oct 2 19:37:15.129825 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:37:15.129844 kernel: trace event string verifier disabled Oct 2 19:37:15.129859 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 19:37:15.129876 kernel: rcu: RCU event tracing is enabled. Oct 2 19:37:15.129891 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:37:15.129907 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 19:37:15.129922 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:37:15.129937 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:37:15.129953 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:37:15.129968 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 19:37:15.129983 kernel: GICv3: 96 SPIs implemented Oct 2 19:37:15.129998 kernel: GICv3: 0 Extended SPIs implemented Oct 2 19:37:15.130013 kernel: GICv3: Distributor has no Range Selector support Oct 2 19:37:15.130032 kernel: Root IRQ handler: gic_handle_irq Oct 2 19:37:15.130047 kernel: GICv3: 16 PPIs implemented Oct 2 19:37:15.130062 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Oct 2 19:37:15.130076 kernel: ACPI: SRAT not present Oct 2 19:37:15.130091 kernel: ITS [mem 0x10080000-0x1009ffff] Oct 2 19:37:15.130106 kernel: ITS@0x0000000010080000: allocated 8192 Devices @4000a0000 (indirect, esz 8, psz 64K, shr 1) Oct 2 19:37:15.130122 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000b0000 (flat, esz 8, psz 64K, shr 1) Oct 2 19:37:15.130137 kernel: GICv3: using LPI property table @0x00000004000c0000 Oct 2 19:37:15.130152 kernel: ITS: Using hypervisor restricted LPI range [128] Oct 2 19:37:15.130167 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Oct 2 19:37:15.130182 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Oct 2 19:37:15.130201 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Oct 2 19:37:15.130217 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Oct 2 19:37:15.130232 kernel: Console: colour dummy device 80x25 Oct 2 19:37:15.130247 kernel: printk: console [tty1] enabled Oct 2 19:37:15.130263 kernel: ACPI: Core revision 20210730 Oct 2 19:37:15.130278 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Oct 2 19:37:15.130294 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:37:15.130349 kernel: LSM: Security Framework initializing Oct 2 19:37:15.130368 kernel: SELinux: Initializing. Oct 2 19:37:15.130384 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:37:15.130405 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:37:15.130421 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:37:15.130437 kernel: Platform MSI: ITS@0x10080000 domain created Oct 2 19:37:15.130453 kernel: PCI/MSI: ITS@0x10080000 domain created Oct 2 19:37:15.130468 kernel: Remapping and enabling EFI services. Oct 2 19:37:15.130483 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:37:15.130499 kernel: Detected PIPT I-cache on CPU1 Oct 2 19:37:15.130515 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Oct 2 19:37:15.130531 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Oct 2 19:37:15.130551 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Oct 2 19:37:15.130566 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:37:15.130582 kernel: SMP: Total of 2 processors activated. Oct 2 19:37:15.130597 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 19:37:15.130612 kernel: CPU features: detected: 32-bit EL1 Support Oct 2 19:37:15.130642 kernel: CPU features: detected: CRC32 instructions Oct 2 19:37:15.130664 kernel: CPU: All CPU(s) started at EL1 Oct 2 19:37:15.130680 kernel: alternatives: patching kernel code Oct 2 19:37:15.130696 kernel: devtmpfs: initialized Oct 2 19:37:15.130716 kernel: KASLR disabled due to lack of seed Oct 2 19:37:15.130732 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:37:15.130748 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:37:15.130774 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:37:15.130794 kernel: SMBIOS 3.0.0 present. Oct 2 19:37:15.130810 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Oct 2 19:37:15.130827 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:37:15.130844 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 19:37:15.130861 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 19:37:15.130877 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 19:37:15.130893 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:37:15.130909 kernel: audit: type=2000 audit(0.247:1): state=initialized audit_enabled=0 res=1 Oct 2 19:37:15.130929 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:37:15.130946 kernel: cpuidle: using governor menu Oct 2 19:37:15.130962 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 19:37:15.130978 kernel: ASID allocator initialised with 32768 entries Oct 2 19:37:15.130994 kernel: ACPI: bus type PCI registered Oct 2 19:37:15.131014 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:37:15.131029 kernel: Serial: AMBA PL011 UART driver Oct 2 19:37:15.131045 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:37:15.131062 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 19:37:15.131078 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:37:15.131094 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 19:37:15.131110 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:37:15.131126 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 19:37:15.131141 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:37:15.131161 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:37:15.131177 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:37:15.131193 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:37:15.131209 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:37:15.131225 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:37:15.131241 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:37:15.131257 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:37:15.131274 kernel: ACPI: Interpreter enabled Oct 2 19:37:15.131290 kernel: ACPI: Using GIC for interrupt routing Oct 2 19:37:15.140465 kernel: ACPI: MCFG table detected, 1 entries Oct 2 19:37:15.140491 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Oct 2 19:37:15.140910 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:37:15.141111 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 2 19:37:15.141303 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 2 19:37:15.146678 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Oct 2 19:37:15.146882 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Oct 2 19:37:15.146913 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Oct 2 19:37:15.146931 kernel: acpiphp: Slot [1] registered Oct 2 19:37:15.146948 kernel: acpiphp: Slot [2] registered Oct 2 19:37:15.146964 kernel: acpiphp: Slot [3] registered Oct 2 19:37:15.146980 kernel: acpiphp: Slot [4] registered Oct 2 19:37:15.146996 kernel: acpiphp: Slot [5] registered Oct 2 19:37:15.147012 kernel: acpiphp: Slot [6] registered Oct 2 19:37:15.147027 kernel: acpiphp: Slot [7] registered Oct 2 19:37:15.147043 kernel: acpiphp: Slot [8] registered Oct 2 19:37:15.147063 kernel: acpiphp: Slot [9] registered Oct 2 19:37:15.147080 kernel: acpiphp: Slot [10] registered Oct 2 19:37:15.147096 kernel: acpiphp: Slot [11] registered Oct 2 19:37:15.147112 kernel: acpiphp: Slot [12] registered Oct 2 19:37:15.147128 kernel: acpiphp: Slot [13] registered Oct 2 19:37:15.147144 kernel: acpiphp: Slot [14] registered Oct 2 19:37:15.147160 kernel: acpiphp: Slot [15] registered Oct 2 19:37:15.147177 kernel: acpiphp: Slot [16] registered Oct 2 19:37:15.147192 kernel: acpiphp: Slot [17] registered Oct 2 19:37:15.147208 kernel: acpiphp: Slot [18] registered Oct 2 19:37:15.147229 kernel: acpiphp: Slot [19] registered Oct 2 19:37:15.147245 kernel: acpiphp: Slot [20] registered Oct 2 19:37:15.147261 kernel: acpiphp: Slot [21] registered Oct 2 19:37:15.147276 kernel: acpiphp: Slot [22] registered Oct 2 19:37:15.147292 kernel: acpiphp: Slot [23] registered Oct 2 19:37:15.147329 kernel: acpiphp: Slot [24] registered Oct 2 19:37:15.147350 kernel: acpiphp: Slot [25] registered Oct 2 19:37:15.147367 kernel: acpiphp: Slot [26] registered Oct 2 19:37:15.147383 kernel: acpiphp: Slot [27] registered Oct 2 19:37:15.147404 kernel: acpiphp: Slot [28] registered Oct 2 19:37:15.147421 kernel: acpiphp: Slot [29] registered Oct 2 19:37:15.147437 kernel: acpiphp: Slot [30] registered Oct 2 19:37:15.147452 kernel: acpiphp: Slot [31] registered Oct 2 19:37:15.147468 kernel: PCI host bridge to bus 0000:00 Oct 2 19:37:15.147677 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Oct 2 19:37:15.147852 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 2 19:37:15.148032 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Oct 2 19:37:15.148215 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Oct 2 19:37:15.148463 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Oct 2 19:37:15.148683 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Oct 2 19:37:15.148929 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Oct 2 19:37:15.150124 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Oct 2 19:37:15.150377 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Oct 2 19:37:15.150582 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 19:37:15.150815 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Oct 2 19:37:15.151022 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Oct 2 19:37:15.151220 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Oct 2 19:37:15.151457 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Oct 2 19:37:15.151653 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 19:37:15.151845 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Oct 2 19:37:15.152043 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Oct 2 19:37:15.152240 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Oct 2 19:37:15.167838 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Oct 2 19:37:15.168066 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Oct 2 19:37:15.168249 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Oct 2 19:37:15.168453 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 2 19:37:15.168631 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Oct 2 19:37:15.168664 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 2 19:37:15.168682 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 2 19:37:15.168710 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 2 19:37:15.168731 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 2 19:37:15.168748 kernel: iommu: Default domain type: Translated Oct 2 19:37:15.168765 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 19:37:15.168781 kernel: vgaarb: loaded Oct 2 19:37:15.168798 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:37:15.168814 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:37:15.168835 kernel: PTP clock support registered Oct 2 19:37:15.168852 kernel: Registered efivars operations Oct 2 19:37:15.168868 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 19:37:15.168884 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:37:15.168900 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:37:15.168916 kernel: pnp: PnP ACPI init Oct 2 19:37:15.169117 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Oct 2 19:37:15.169142 kernel: pnp: PnP ACPI: found 1 devices Oct 2 19:37:15.169158 kernel: NET: Registered PF_INET protocol family Oct 2 19:37:15.169179 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:37:15.169196 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:37:15.169212 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:37:15.169228 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:37:15.169245 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:37:15.169261 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:37:15.169277 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:37:15.169294 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:37:15.169328 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:37:15.169352 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:37:15.169369 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Oct 2 19:37:15.169385 kernel: kvm [1]: HYP mode not available Oct 2 19:37:15.169401 kernel: Initialise system trusted keyrings Oct 2 19:37:15.169417 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:37:15.169433 kernel: Key type asymmetric registered Oct 2 19:37:15.169449 kernel: Asymmetric key parser 'x509' registered Oct 2 19:37:15.169465 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:37:15.169481 kernel: io scheduler mq-deadline registered Oct 2 19:37:15.169501 kernel: io scheduler kyber registered Oct 2 19:37:15.169517 kernel: io scheduler bfq registered Oct 2 19:37:15.169716 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Oct 2 19:37:15.169741 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 2 19:37:15.169758 kernel: ACPI: button: Power Button [PWRB] Oct 2 19:37:15.169774 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:37:15.169791 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Oct 2 19:37:15.169983 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Oct 2 19:37:15.170011 kernel: printk: console [ttyS0] disabled Oct 2 19:37:15.170028 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Oct 2 19:37:15.170045 kernel: printk: console [ttyS0] enabled Oct 2 19:37:15.170061 kernel: printk: bootconsole [uart0] disabled Oct 2 19:37:15.170077 kernel: thunder_xcv, ver 1.0 Oct 2 19:37:15.170093 kernel: thunder_bgx, ver 1.0 Oct 2 19:37:15.170109 kernel: nicpf, ver 1.0 Oct 2 19:37:15.170124 kernel: nicvf, ver 1.0 Oct 2 19:37:15.170399 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 19:37:15.170594 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T19:37:14 UTC (1696275434) Oct 2 19:37:15.170617 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:37:15.170655 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:37:15.170674 kernel: Segment Routing with IPv6 Oct 2 19:37:15.170690 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:37:15.170706 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:37:15.170722 kernel: Key type dns_resolver registered Oct 2 19:37:15.170738 kernel: registered taskstats version 1 Oct 2 19:37:15.170758 kernel: Loading compiled-in X.509 certificates Oct 2 19:37:15.170775 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 19:37:15.170791 kernel: Key type .fscrypt registered Oct 2 19:37:15.170807 kernel: Key type fscrypt-provisioning registered Oct 2 19:37:15.170822 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:37:15.170838 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:37:15.170854 kernel: ima: No architecture policies found Oct 2 19:37:15.170870 kernel: Freeing unused kernel memory: 34560K Oct 2 19:37:15.170886 kernel: Run /init as init process Oct 2 19:37:15.170905 kernel: with arguments: Oct 2 19:37:15.170922 kernel: /init Oct 2 19:37:15.170937 kernel: with environment: Oct 2 19:37:15.170953 kernel: HOME=/ Oct 2 19:37:15.170969 kernel: TERM=linux Oct 2 19:37:15.170984 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:37:15.171005 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:37:15.171026 systemd[1]: Detected virtualization amazon. Oct 2 19:37:15.171048 systemd[1]: Detected architecture arm64. Oct 2 19:37:15.171066 systemd[1]: Running in initrd. Oct 2 19:37:15.171083 systemd[1]: No hostname configured, using default hostname. Oct 2 19:37:15.171100 systemd[1]: Hostname set to . Oct 2 19:37:15.171118 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:37:15.171135 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:37:15.171153 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:37:15.171170 systemd[1]: Reached target cryptsetup.target. Oct 2 19:37:15.171192 systemd[1]: Reached target paths.target. Oct 2 19:37:15.171209 systemd[1]: Reached target slices.target. Oct 2 19:37:15.171226 systemd[1]: Reached target swap.target. Oct 2 19:37:15.171244 systemd[1]: Reached target timers.target. Oct 2 19:37:15.171262 systemd[1]: Listening on iscsid.socket. Oct 2 19:37:15.171280 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:37:15.171297 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:37:15.171382 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:37:15.171408 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:37:15.171426 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:37:15.171444 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:37:15.171462 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:37:15.171479 systemd[1]: Reached target sockets.target. Oct 2 19:37:15.171497 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:37:15.171514 systemd[1]: Finished network-cleanup.service. Oct 2 19:37:15.171532 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:37:15.171550 systemd[1]: Starting systemd-journald.service... Oct 2 19:37:15.171571 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:37:15.171589 systemd[1]: Starting systemd-resolved.service... Oct 2 19:37:15.171606 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:37:15.171624 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:37:15.171642 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:37:15.171659 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:37:15.171677 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:37:15.171695 kernel: audit: type=1130 audit(1696275435.156:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.171717 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:37:15.171746 systemd-journald[309]: Journal started Oct 2 19:37:15.171832 systemd-journald[309]: Runtime Journal (/run/log/journal/ec2232796c5ebf9a2dc0e291f4a8e1c7) is 8.0M, max 75.4M, 67.4M free. Oct 2 19:37:15.156000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.152788 systemd-modules-load[310]: Inserted module 'overlay' Oct 2 19:37:15.184000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.197339 kernel: audit: type=1130 audit(1696275435.184:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.197391 systemd[1]: Started systemd-journald.service. Oct 2 19:37:15.213335 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:37:15.210000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.221408 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:37:15.229243 kernel: audit: type=1130 audit(1696275435.210:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.229335 kernel: Bridge firewalling registered Oct 2 19:37:15.229450 systemd-modules-load[310]: Inserted module 'br_netfilter' Oct 2 19:37:15.237589 systemd-resolved[311]: Positive Trust Anchors: Oct 2 19:37:15.237614 systemd-resolved[311]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:37:15.237669 systemd-resolved[311]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:37:15.273342 kernel: SCSI subsystem initialized Oct 2 19:37:15.294376 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:37:15.294442 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:37:15.298325 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:37:15.305770 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:37:15.306000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.309150 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:37:15.323334 kernel: audit: type=1130 audit(1696275435.306:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.326360 systemd-modules-load[310]: Inserted module 'dm_multipath' Oct 2 19:37:15.330693 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:37:15.333992 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:37:15.331000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.349357 kernel: audit: type=1130 audit(1696275435.331:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.374971 dracut-cmdline[326]: dracut-dracut-053 Oct 2 19:37:15.387375 dracut-cmdline[326]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:37:15.403219 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:37:15.404000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.416337 kernel: audit: type=1130 audit(1696275435.404:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.633350 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:37:15.646347 kernel: iscsi: registered transport (tcp) Oct 2 19:37:15.673125 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:37:15.673216 kernel: QLogic iSCSI HBA Driver Oct 2 19:37:15.821334 kernel: random: crng init done Oct 2 19:37:15.821504 systemd-resolved[311]: Defaulting to hostname 'linux'. Oct 2 19:37:15.825547 systemd[1]: Started systemd-resolved.service. Oct 2 19:37:15.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.827501 systemd[1]: Reached target nss-lookup.target. Oct 2 19:37:15.840339 kernel: audit: type=1130 audit(1696275435.826:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.880517 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:37:15.882000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.885109 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:37:15.894506 kernel: audit: type=1130 audit(1696275435.882:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.978350 kernel: raid6: neonx8 gen() 6370 MB/s Oct 2 19:37:15.996339 kernel: raid6: neonx8 xor() 4542 MB/s Oct 2 19:37:16.014339 kernel: raid6: neonx4 gen() 6581 MB/s Oct 2 19:37:16.032338 kernel: raid6: neonx4 xor() 4677 MB/s Oct 2 19:37:16.050338 kernel: raid6: neonx2 gen() 5800 MB/s Oct 2 19:37:16.068339 kernel: raid6: neonx2 xor() 4371 MB/s Oct 2 19:37:16.086339 kernel: raid6: neonx1 gen() 4502 MB/s Oct 2 19:37:16.104339 kernel: raid6: neonx1 xor() 3605 MB/s Oct 2 19:37:16.122340 kernel: raid6: int64x8 gen() 3435 MB/s Oct 2 19:37:16.140338 kernel: raid6: int64x8 xor() 2043 MB/s Oct 2 19:37:16.158338 kernel: raid6: int64x4 gen() 3830 MB/s Oct 2 19:37:16.176338 kernel: raid6: int64x4 xor() 2160 MB/s Oct 2 19:37:16.194339 kernel: raid6: int64x2 gen() 3613 MB/s Oct 2 19:37:16.212339 kernel: raid6: int64x2 xor() 1917 MB/s Oct 2 19:37:16.230339 kernel: raid6: int64x1 gen() 2753 MB/s Oct 2 19:37:16.249978 kernel: raid6: int64x1 xor() 1432 MB/s Oct 2 19:37:16.250011 kernel: raid6: using algorithm neonx4 gen() 6581 MB/s Oct 2 19:37:16.250035 kernel: raid6: .... xor() 4677 MB/s, rmw enabled Oct 2 19:37:16.251865 kernel: raid6: using neon recovery algorithm Oct 2 19:37:16.270346 kernel: xor: measuring software checksum speed Oct 2 19:37:16.273338 kernel: 8regs : 9332 MB/sec Oct 2 19:37:16.275339 kernel: 32regs : 11120 MB/sec Oct 2 19:37:16.279916 kernel: arm64_neon : 9566 MB/sec Oct 2 19:37:16.279947 kernel: xor: using function: 32regs (11120 MB/sec) Oct 2 19:37:16.369356 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 19:37:16.407332 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:37:16.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:16.417000 audit: BPF prog-id=7 op=LOAD Oct 2 19:37:16.418368 kernel: audit: type=1130 audit(1696275436.408:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:16.417000 audit: BPF prog-id=8 op=LOAD Oct 2 19:37:16.418949 systemd[1]: Starting systemd-udevd.service... Oct 2 19:37:16.456641 systemd-udevd[508]: Using default interface naming scheme 'v252'. Oct 2 19:37:16.467631 systemd[1]: Started systemd-udevd.service. Oct 2 19:37:16.484143 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:37:16.481000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:16.545631 dracut-pre-trigger[525]: rd.md=0: removing MD RAID activation Oct 2 19:37:16.652155 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:37:16.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:16.656772 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:37:16.770494 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:37:16.771000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:16.905275 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 2 19:37:16.905363 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Oct 2 19:37:16.916341 kernel: ena 0000:00:05.0: ENA device version: 0.10 Oct 2 19:37:16.916630 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Oct 2 19:37:16.939736 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Oct 2 19:37:16.939820 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:5f:ec:94:30:4f Oct 2 19:37:16.942330 kernel: nvme nvme0: pci function 0000:00:04.0 Oct 2 19:37:16.944100 (udev-worker)[561]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:37:16.954384 kernel: nvme nvme0: 2/0/0 default/read/poll queues Oct 2 19:37:16.960672 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 19:37:16.960736 kernel: GPT:9289727 != 16777215 Oct 2 19:37:16.960760 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 19:37:16.962924 kernel: GPT:9289727 != 16777215 Oct 2 19:37:16.964267 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 19:37:16.968124 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:37:17.074367 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (565) Oct 2 19:37:17.174553 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:37:17.242367 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:37:17.276574 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:37:17.287767 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:37:17.304213 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:37:17.334662 systemd[1]: Starting disk-uuid.service... Oct 2 19:37:17.355760 disk-uuid[674]: Primary Header is updated. Oct 2 19:37:17.355760 disk-uuid[674]: Secondary Entries is updated. Oct 2 19:37:17.355760 disk-uuid[674]: Secondary Header is updated. Oct 2 19:37:17.363350 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:37:18.388447 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:37:18.388513 disk-uuid[675]: The operation has completed successfully. Oct 2 19:37:18.666968 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:37:18.682663 kernel: kauditd_printk_skb: 5 callbacks suppressed Oct 2 19:37:18.682727 kernel: audit: type=1130 audit(1696275438.667:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.668963 systemd[1]: Finished disk-uuid.service. Oct 2 19:37:18.671895 systemd[1]: Starting verity-setup.service... Oct 2 19:37:18.667000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.693357 kernel: audit: type=1131 audit(1696275438.667:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.731371 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 19:37:18.822775 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:37:18.827719 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:37:18.838399 systemd[1]: Finished verity-setup.service. Oct 2 19:37:18.842000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.851368 kernel: audit: type=1130 audit(1696275438.842:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.921341 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:37:18.922732 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:37:18.925734 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:37:18.929813 systemd[1]: Starting ignition-setup.service... Oct 2 19:37:18.945419 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:37:18.967835 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:37:18.967899 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:37:18.970377 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:37:18.988349 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:37:19.020900 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:37:19.062885 systemd[1]: Finished ignition-setup.service. Oct 2 19:37:19.067562 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:37:19.063000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.086356 kernel: audit: type=1130 audit(1696275439.063:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.292656 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:37:19.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.302000 audit: BPF prog-id=9 op=LOAD Oct 2 19:37:19.306872 kernel: audit: type=1130 audit(1696275439.295:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.306921 kernel: audit: type=1334 audit(1696275439.302:21): prog-id=9 op=LOAD Oct 2 19:37:19.305030 systemd[1]: Starting systemd-networkd.service... Oct 2 19:37:19.361258 systemd-networkd[1020]: lo: Link UP Oct 2 19:37:19.361283 systemd-networkd[1020]: lo: Gained carrier Oct 2 19:37:19.363250 systemd-networkd[1020]: Enumeration completed Oct 2 19:37:19.364876 systemd[1]: Started systemd-networkd.service. Oct 2 19:37:19.365844 systemd-networkd[1020]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:37:19.372116 systemd[1]: Reached target network.target. Oct 2 19:37:19.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.385542 systemd-networkd[1020]: eth0: Link UP Oct 2 19:37:19.385556 systemd-networkd[1020]: eth0: Gained carrier Oct 2 19:37:19.389196 systemd[1]: Starting iscsiuio.service... Oct 2 19:37:19.392964 kernel: audit: type=1130 audit(1696275439.369:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.409090 systemd[1]: Started iscsiuio.service. Oct 2 19:37:19.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.413512 systemd[1]: Starting iscsid.service... Oct 2 19:37:19.422677 systemd-networkd[1020]: eth0: DHCPv4 address 172.31.25.109/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:37:19.434751 kernel: audit: type=1130 audit(1696275439.409:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.441501 iscsid[1025]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:37:19.441501 iscsid[1025]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:37:19.441501 iscsid[1025]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:37:19.441501 iscsid[1025]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:37:19.441501 iscsid[1025]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:37:19.490766 kernel: audit: type=1130 audit(1696275439.459:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.459000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.455821 systemd[1]: Started iscsid.service. Oct 2 19:37:19.494236 iscsid[1025]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:37:19.471222 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:37:19.513374 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:37:19.541344 kernel: audit: type=1130 audit(1696275439.512:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.512000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.513689 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:37:19.514398 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:37:19.515197 systemd[1]: Reached target remote-fs.target. Oct 2 19:37:19.535258 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:37:19.573793 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:37:19.573000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.744961 ignition[938]: Ignition 2.14.0 Oct 2 19:37:19.744988 ignition[938]: Stage: fetch-offline Oct 2 19:37:19.745464 ignition[938]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:37:19.745738 ignition[938]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:37:19.765803 ignition[938]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:37:19.768340 ignition[938]: Ignition finished successfully Oct 2 19:37:19.770609 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:37:19.771000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.773883 systemd[1]: Starting ignition-fetch.service... Oct 2 19:37:19.804875 ignition[1044]: Ignition 2.14.0 Oct 2 19:37:19.804903 ignition[1044]: Stage: fetch Oct 2 19:37:19.805244 ignition[1044]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:37:19.805301 ignition[1044]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:37:19.820703 ignition[1044]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:37:19.823088 ignition[1044]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:37:19.833226 ignition[1044]: INFO : PUT result: OK Oct 2 19:37:19.836518 ignition[1044]: DEBUG : parsed url from cmdline: "" Oct 2 19:37:19.836518 ignition[1044]: INFO : no config URL provided Oct 2 19:37:19.836518 ignition[1044]: INFO : reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:37:19.842659 ignition[1044]: INFO : no config at "/usr/lib/ignition/user.ign" Oct 2 19:37:19.842659 ignition[1044]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:37:19.842659 ignition[1044]: INFO : PUT result: OK Oct 2 19:37:19.842659 ignition[1044]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Oct 2 19:37:19.851920 ignition[1044]: INFO : GET result: OK Oct 2 19:37:19.851920 ignition[1044]: DEBUG : parsing config with SHA512: 3820937cd8a67a6fb7bb840fdfe3a1fe2c789a95d507fdba2392fc1e055b4685690c2ddabf46e2c4c57e48e5f56cfd591ee7038cbdbab1d687e414258221a4cb Oct 2 19:37:19.896243 unknown[1044]: fetched base config from "system" Oct 2 19:37:19.896519 unknown[1044]: fetched base config from "system" Oct 2 19:37:19.897723 ignition[1044]: fetch: fetch complete Oct 2 19:37:19.896542 unknown[1044]: fetched user config from "aws" Oct 2 19:37:19.897736 ignition[1044]: fetch: fetch passed Oct 2 19:37:19.897820 ignition[1044]: Ignition finished successfully Oct 2 19:37:19.908632 systemd[1]: Finished ignition-fetch.service. Oct 2 19:37:19.909000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.923681 systemd[1]: Starting ignition-kargs.service... Oct 2 19:37:19.959079 ignition[1050]: Ignition 2.14.0 Oct 2 19:37:19.959110 ignition[1050]: Stage: kargs Oct 2 19:37:19.959516 ignition[1050]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:37:19.959575 ignition[1050]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:37:19.975774 ignition[1050]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:37:19.978238 ignition[1050]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:37:19.981829 ignition[1050]: INFO : PUT result: OK Oct 2 19:37:19.987226 ignition[1050]: kargs: kargs passed Oct 2 19:37:19.987353 ignition[1050]: Ignition finished successfully Oct 2 19:37:19.994044 systemd[1]: Finished ignition-kargs.service. Oct 2 19:37:19.994000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.997351 systemd[1]: Starting ignition-disks.service... Oct 2 19:37:20.028361 ignition[1056]: Ignition 2.14.0 Oct 2 19:37:20.028391 ignition[1056]: Stage: disks Oct 2 19:37:20.028754 ignition[1056]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:37:20.028813 ignition[1056]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:37:20.044748 ignition[1056]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:37:20.047131 ignition[1056]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:37:20.050831 ignition[1056]: INFO : PUT result: OK Oct 2 19:37:20.055829 ignition[1056]: disks: disks passed Oct 2 19:37:20.055917 ignition[1056]: Ignition finished successfully Oct 2 19:37:20.060253 systemd[1]: Finished ignition-disks.service. Oct 2 19:37:20.059000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:20.060856 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:37:20.061133 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:37:20.061796 systemd[1]: Reached target local-fs.target. Oct 2 19:37:20.062136 systemd[1]: Reached target sysinit.target. Oct 2 19:37:20.063187 systemd[1]: Reached target basic.target. Oct 2 19:37:20.065294 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:37:20.153419 systemd-fsck[1064]: ROOT: clean, 603/553520 files, 56011/553472 blocks Oct 2 19:37:20.164752 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:37:20.167000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:20.170100 systemd[1]: Mounting sysroot.mount... Oct 2 19:37:20.203339 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:37:20.205721 systemd[1]: Mounted sysroot.mount. Oct 2 19:37:20.208832 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:37:20.225295 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:37:20.227534 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:37:20.227622 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:37:20.227682 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:37:20.248727 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:37:20.289183 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:37:20.294009 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:37:20.317345 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1081) Oct 2 19:37:20.324861 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:37:20.324932 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:37:20.327156 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:37:20.333451 initrd-setup-root[1086]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:37:20.338738 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:37:20.343192 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:37:20.373293 initrd-setup-root[1112]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:37:20.391917 initrd-setup-root[1120]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:37:20.411629 initrd-setup-root[1128]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:37:20.614804 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:37:20.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:20.621139 systemd[1]: Starting ignition-mount.service... Oct 2 19:37:20.625801 systemd[1]: Starting sysroot-boot.service... Oct 2 19:37:20.656440 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:37:20.656606 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:37:20.684058 systemd[1]: Finished sysroot-boot.service. Oct 2 19:37:20.686000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:20.706591 ignition[1149]: INFO : Ignition 2.14.0 Oct 2 19:37:20.706591 ignition[1149]: INFO : Stage: mount Oct 2 19:37:20.710093 ignition[1149]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:37:20.710093 ignition[1149]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:37:20.728223 ignition[1149]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:37:20.730935 ignition[1149]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:37:20.734528 ignition[1149]: INFO : PUT result: OK Oct 2 19:37:20.739814 ignition[1149]: INFO : mount: mount passed Oct 2 19:37:20.741540 ignition[1149]: INFO : Ignition finished successfully Oct 2 19:37:20.744724 systemd[1]: Finished ignition-mount.service. Oct 2 19:37:20.746000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:20.749271 systemd[1]: Starting ignition-files.service... Oct 2 19:37:20.772442 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:37:20.796497 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1156) Oct 2 19:37:20.802121 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:37:20.802154 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:37:20.802178 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:37:20.810340 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:37:20.815684 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:37:20.850934 ignition[1175]: INFO : Ignition 2.14.0 Oct 2 19:37:20.850934 ignition[1175]: INFO : Stage: files Oct 2 19:37:20.854384 ignition[1175]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:37:20.854384 ignition[1175]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:37:20.875536 ignition[1175]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:37:20.875536 ignition[1175]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:37:20.880930 ignition[1175]: INFO : PUT result: OK Oct 2 19:37:20.886425 ignition[1175]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:37:20.890723 ignition[1175]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:37:20.890723 ignition[1175]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:37:20.918030 ignition[1175]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:37:20.920946 ignition[1175]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:37:20.923868 unknown[1175]: wrote ssh authorized keys file for user: core Oct 2 19:37:20.926129 ignition[1175]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:37:20.928906 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 19:37:20.928906 ignition[1175]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Oct 2 19:37:21.065471 systemd-networkd[1020]: eth0: Gained IPv6LL Oct 2 19:37:21.093821 ignition[1175]: INFO : GET result: OK Oct 2 19:37:21.678854 ignition[1175]: DEBUG : file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Oct 2 19:37:21.683634 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 19:37:21.683634 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 19:37:21.691477 ignition[1175]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Oct 2 19:37:21.821026 ignition[1175]: INFO : GET result: OK Oct 2 19:37:22.128853 ignition[1175]: DEBUG : file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Oct 2 19:37:22.134546 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 19:37:22.134546 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:37:22.134546 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:37:22.134546 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:37:22.134546 ignition[1175]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:37:22.159590 ignition[1175]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4153187065" Oct 2 19:37:22.159590 ignition[1175]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4153187065": device or resource busy Oct 2 19:37:22.159590 ignition[1175]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem4153187065", trying btrfs: device or resource busy Oct 2 19:37:22.159590 ignition[1175]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4153187065" Oct 2 19:37:22.176140 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1178) Oct 2 19:37:22.183069 ignition[1175]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4153187065" Oct 2 19:37:22.214293 ignition[1175]: INFO : op(3): [started] unmounting "/mnt/oem4153187065" Oct 2 19:37:22.218664 systemd[1]: mnt-oem4153187065.mount: Deactivated successfully. Oct 2 19:37:22.221916 ignition[1175]: INFO : op(3): [finished] unmounting "/mnt/oem4153187065" Oct 2 19:37:22.221916 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:37:22.221916 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:37:22.231397 ignition[1175]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubeadm: attempt #1 Oct 2 19:37:22.318661 ignition[1175]: INFO : GET result: OK Oct 2 19:37:23.679631 ignition[1175]: DEBUG : file matches expected sum of: 5a08b81f9cc82d3cce21130856ca63b8dafca9149d9775dd25b376eb0f18209aa0e4a47c0a6d7e6fb1316aacd5d59dec770f26c09120c866949d70bc415518b3 Oct 2 19:37:23.684749 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:37:23.688203 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:37:23.691666 ignition[1175]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubelet: attempt #1 Oct 2 19:37:23.757388 ignition[1175]: INFO : GET result: OK Oct 2 19:37:25.159441 ignition[1175]: DEBUG : file matches expected sum of: 5a898ef543a6482895101ea58e33602e3c0a7682d322aaf08ac3dc8a5a3c8da8f09600d577024549288f8cebb1a86f9c79927796b69a3d8fe989ca8f12b147d6 Oct 2 19:37:25.164998 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:37:25.164998 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:37:25.164998 ignition[1175]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubectl: attempt #1 Oct 2 19:37:25.223843 ignition[1175]: INFO : GET result: OK Oct 2 19:37:26.131259 ignition[1175]: DEBUG : file matches expected sum of: 6a5c9c02a29126949f096415bb1761a0c0ad44168e2ab3d0409982701da58f96223bec354828ddf958e945ef1ce63c0ad41e77cbcbcce0756163e71b4fbae432 Oct 2 19:37:26.136410 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:37:26.136410 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:37:26.136410 ignition[1175]: INFO : GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 19:37:26.221054 ignition[1175]: INFO : GET result: OK Oct 2 19:37:26.363752 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:37:26.368467 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:37:26.368467 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:37:26.368467 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:37:26.368467 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:37:26.368467 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:37:26.368467 ignition[1175]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:37:26.397093 ignition[1175]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4123224192" Oct 2 19:37:26.397093 ignition[1175]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4123224192": device or resource busy Oct 2 19:37:26.397093 ignition[1175]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem4123224192", trying btrfs: device or resource busy Oct 2 19:37:26.397093 ignition[1175]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4123224192" Oct 2 19:37:26.397093 ignition[1175]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4123224192" Oct 2 19:37:26.413423 ignition[1175]: INFO : op(6): [started] unmounting "/mnt/oem4123224192" Oct 2 19:37:26.413423 ignition[1175]: INFO : op(6): [finished] unmounting "/mnt/oem4123224192" Oct 2 19:37:26.413423 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:37:26.413423 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:37:26.413423 ignition[1175]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:37:26.434096 systemd[1]: mnt-oem4123224192.mount: Deactivated successfully. Oct 2 19:37:26.450393 ignition[1175]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3982169198" Oct 2 19:37:26.453520 ignition[1175]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3982169198": device or resource busy Oct 2 19:37:26.456962 ignition[1175]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3982169198", trying btrfs: device or resource busy Oct 2 19:37:26.456962 ignition[1175]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3982169198" Oct 2 19:37:26.466583 ignition[1175]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3982169198" Oct 2 19:37:26.469570 ignition[1175]: INFO : op(9): [started] unmounting "/mnt/oem3982169198" Oct 2 19:37:26.471970 ignition[1175]: INFO : op(9): [finished] unmounting "/mnt/oem3982169198" Oct 2 19:37:26.474277 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:37:26.474277 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:37:26.474277 ignition[1175]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:37:26.492718 systemd[1]: mnt-oem3982169198.mount: Deactivated successfully. Oct 2 19:37:26.508177 ignition[1175]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem382760960" Oct 2 19:37:26.513157 ignition[1175]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem382760960": device or resource busy Oct 2 19:37:26.516970 ignition[1175]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem382760960", trying btrfs: device or resource busy Oct 2 19:37:26.520715 ignition[1175]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem382760960" Oct 2 19:37:26.523849 ignition[1175]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem382760960" Oct 2 19:37:26.523849 ignition[1175]: INFO : op(c): [started] unmounting "/mnt/oem382760960" Oct 2 19:37:26.528992 ignition[1175]: INFO : op(c): [finished] unmounting "/mnt/oem382760960" Oct 2 19:37:26.528992 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:37:26.528992 ignition[1175]: INFO : files: op(10): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:37:26.528992 ignition[1175]: INFO : files: op(10): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:37:26.528992 ignition[1175]: INFO : files: op(11): [started] processing unit "amazon-ssm-agent.service" Oct 2 19:37:26.528992 ignition[1175]: INFO : files: op(11): op(12): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:37:26.528992 ignition[1175]: INFO : files: op(11): op(12): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:37:26.528992 ignition[1175]: INFO : files: op(11): [finished] processing unit "amazon-ssm-agent.service" Oct 2 19:37:26.528992 ignition[1175]: INFO : files: op(13): [started] processing unit "nvidia.service" Oct 2 19:37:26.528992 ignition[1175]: INFO : files: op(13): [finished] processing unit "nvidia.service" Oct 2 19:37:26.528992 ignition[1175]: INFO : files: op(14): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:37:26.528992 ignition[1175]: INFO : files: op(14): op(15): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:37:26.528992 ignition[1175]: INFO : files: op(14): op(15): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:37:26.528992 ignition[1175]: INFO : files: op(14): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:37:26.528992 ignition[1175]: INFO : files: op(16): [started] processing unit "prepare-critools.service" Oct 2 19:37:26.528992 ignition[1175]: INFO : files: op(16): op(17): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:37:26.528992 ignition[1175]: INFO : files: op(16): op(17): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:37:26.528992 ignition[1175]: INFO : files: op(16): [finished] processing unit "prepare-critools.service" Oct 2 19:37:26.528992 ignition[1175]: INFO : files: op(18): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:37:26.588220 ignition[1175]: INFO : files: op(18): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:37:26.588220 ignition[1175]: INFO : files: op(19): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:37:26.588220 ignition[1175]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:37:26.588220 ignition[1175]: INFO : files: op(1a): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:37:26.588220 ignition[1175]: INFO : files: op(1a): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:37:26.588220 ignition[1175]: INFO : files: op(1b): [started] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:37:26.588220 ignition[1175]: INFO : files: op(1b): [finished] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:37:26.588220 ignition[1175]: INFO : files: op(1c): [started] setting preset to enabled for "nvidia.service" Oct 2 19:37:26.588220 ignition[1175]: INFO : files: op(1c): [finished] setting preset to enabled for "nvidia.service" Oct 2 19:37:26.622353 ignition[1175]: INFO : files: createResultFile: createFiles: op(1d): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:37:26.622353 ignition[1175]: INFO : files: createResultFile: createFiles: op(1d): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:37:26.622353 ignition[1175]: INFO : files: files passed Oct 2 19:37:26.622353 ignition[1175]: INFO : Ignition finished successfully Oct 2 19:37:26.633435 systemd[1]: Finished ignition-files.service. Oct 2 19:37:26.646629 kernel: kauditd_printk_skb: 9 callbacks suppressed Oct 2 19:37:26.646690 kernel: audit: type=1130 audit(1696275446.636:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.636000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.647801 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:37:26.649841 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:37:26.653118 systemd[1]: Starting ignition-quench.service... Oct 2 19:37:26.680225 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:37:26.680606 systemd[1]: Finished ignition-quench.service. Oct 2 19:37:26.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.690000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.701763 kernel: audit: type=1130 audit(1696275446.685:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.701823 kernel: audit: type=1131 audit(1696275446.690:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.707193 initrd-setup-root-after-ignition[1201]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:37:26.712712 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:37:26.716919 systemd[1]: Reached target ignition-complete.target. Oct 2 19:37:26.715000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.726350 kernel: audit: type=1130 audit(1696275446.715:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.729417 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:37:26.778859 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:37:26.780907 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:37:26.803546 kernel: audit: type=1130 audit(1696275446.785:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.803654 kernel: audit: type=1131 audit(1696275446.785:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.785000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.785000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.795556 systemd[1]: Reached target initrd-fs.target. Oct 2 19:37:26.805242 systemd[1]: Reached target initrd.target. Oct 2 19:37:26.809817 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:37:26.813847 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:37:26.854704 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:37:26.856000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.859285 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:37:26.868935 kernel: audit: type=1130 audit(1696275446.856:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.888271 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:37:26.891957 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:37:26.895666 systemd[1]: Stopped target timers.target. Oct 2 19:37:26.898848 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:37:26.901001 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:37:26.903000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.904538 systemd[1]: Stopped target initrd.target. Oct 2 19:37:26.932080 kernel: audit: type=1131 audit(1696275446.903:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.913555 systemd[1]: Stopped target basic.target. Oct 2 19:37:26.934000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.946132 kernel: audit: type=1131 audit(1696275446.934:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.915285 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:37:26.917267 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:37:26.958562 kernel: audit: type=1131 audit(1696275446.948:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.948000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.919272 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:37:26.959000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.921337 systemd[1]: Stopped target remote-fs.target. Oct 2 19:37:26.962000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.923185 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:37:26.925148 systemd[1]: Stopped target sysinit.target. Oct 2 19:37:26.927032 systemd[1]: Stopped target local-fs.target. Oct 2 19:37:26.928921 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:37:26.931159 systemd[1]: Stopped target swap.target. Oct 2 19:37:26.933711 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:37:27.024032 ignition[1214]: INFO : Ignition 2.14.0 Oct 2 19:37:27.024032 ignition[1214]: INFO : Stage: umount Oct 2 19:37:27.024032 ignition[1214]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:37:27.024032 ignition[1214]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:37:27.030000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.048000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.933995 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:37:27.069348 ignition[1214]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:37:27.069348 ignition[1214]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:37:27.069348 ignition[1214]: INFO : PUT result: OK Oct 2 19:37:27.069348 ignition[1214]: INFO : umount: umount passed Oct 2 19:37:27.069348 ignition[1214]: INFO : Ignition finished successfully Oct 2 19:37:26.944327 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:37:26.946430 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:37:26.947775 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:37:26.950275 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:37:26.958111 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:37:26.961017 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:37:26.961280 systemd[1]: Stopped ignition-files.service. Oct 2 19:37:26.966283 systemd[1]: Stopping ignition-mount.service... Oct 2 19:37:26.984841 systemd[1]: Stopping iscsiuio.service... Oct 2 19:37:27.018010 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:37:27.114000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.024051 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:37:27.119000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.122000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.127000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.024383 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:37:27.127000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.132000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.032208 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:37:27.032447 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:37:27.053168 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:37:27.150000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.088143 systemd[1]: Stopped iscsiuio.service. Oct 2 19:37:27.116472 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:37:27.116646 systemd[1]: Stopped ignition-mount.service. Oct 2 19:37:27.121672 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:37:27.121859 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:37:27.126158 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:37:27.126368 systemd[1]: Stopped ignition-disks.service. Oct 2 19:37:27.128288 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:37:27.128551 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:37:27.130334 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:37:27.130413 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:37:27.197000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.137162 systemd[1]: Stopped target network.target. Oct 2 19:37:27.201000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.146925 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:37:27.147020 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:37:27.151596 systemd[1]: Stopped target paths.target. Oct 2 19:37:27.161628 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:37:27.161781 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:37:27.170973 systemd[1]: Stopped target slices.target. Oct 2 19:37:27.175348 systemd[1]: Stopped target sockets.target. Oct 2 19:37:27.182911 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:37:27.182968 systemd[1]: Closed iscsid.socket. Oct 2 19:37:27.184529 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:37:27.184598 systemd[1]: Closed iscsiuio.socket. Oct 2 19:37:27.188605 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:37:27.240000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.188693 systemd[1]: Stopped ignition-setup.service. Oct 2 19:37:27.198424 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:37:27.198522 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:37:27.202771 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:37:27.213376 systemd-networkd[1020]: eth0: DHCPv6 lease lost Oct 2 19:37:27.215945 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:37:27.229383 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:37:27.229591 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:37:27.259000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.259000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.244965 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:37:27.247751 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:37:27.261048 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:37:27.261375 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:37:27.272000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.273000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:37:27.275000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:37:27.276525 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:37:27.276767 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:37:27.283457 systemd[1]: Stopping network-cleanup.service... Oct 2 19:37:27.286763 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:37:27.288989 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:37:27.291000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.292755 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:37:27.294051 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:37:27.298146 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:37:27.298601 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:37:27.296000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.302000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.304098 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:37:27.313141 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:37:27.315407 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:37:27.316000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.317995 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:37:27.318072 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:37:27.331431 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:37:27.331676 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:37:27.337158 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:37:27.338235 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:37:27.341000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.342720 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:37:27.345000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.342813 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:37:27.348250 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:37:27.348370 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:37:27.353000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.356071 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:37:27.376434 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 19:37:27.381000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.376559 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 19:37:27.385460 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:37:27.385555 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:37:27.391000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.392706 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:37:27.392900 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:37:27.400910 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:37:27.401188 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:37:27.397000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.401298 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 2 19:37:27.405000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.403014 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:37:27.403215 systemd[1]: Stopped network-cleanup.service. Oct 2 19:37:27.413435 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:37:27.415775 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:37:27.417000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.418000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.419623 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:37:27.424449 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:37:27.450453 systemd[1]: Switching root. Oct 2 19:37:27.478586 iscsid[1025]: iscsid shutting down. Oct 2 19:37:27.482099 systemd-journald[309]: Received SIGTERM from PID 1 (systemd). Oct 2 19:37:27.482181 systemd-journald[309]: Journal stopped Oct 2 19:37:33.269784 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:37:33.270365 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:37:33.270401 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:37:33.270448 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:37:33.270482 kernel: SELinux: policy capability open_perms=1 Oct 2 19:37:33.270516 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:37:33.270547 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:37:33.270577 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:37:33.270606 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:37:33.270706 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:37:33.270736 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:37:33.270769 systemd[1]: Successfully loaded SELinux policy in 93.861ms. Oct 2 19:37:33.271045 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 19.792ms. Oct 2 19:37:33.271083 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:37:33.271117 systemd[1]: Detected virtualization amazon. Oct 2 19:37:33.271148 systemd[1]: Detected architecture arm64. Oct 2 19:37:33.271180 systemd[1]: Detected first boot. Oct 2 19:37:33.271214 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:37:33.271247 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:37:33.271395 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:37:33.271436 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:37:33.271472 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:37:33.271507 kernel: kauditd_printk_skb: 39 callbacks suppressed Oct 2 19:37:33.271536 kernel: audit: type=1334 audit(1696275452.812:84): prog-id=12 op=LOAD Oct 2 19:37:33.273097 kernel: audit: type=1334 audit(1696275452.814:85): prog-id=3 op=UNLOAD Oct 2 19:37:33.273132 kernel: audit: type=1334 audit(1696275452.817:86): prog-id=13 op=LOAD Oct 2 19:37:33.273162 kernel: audit: type=1334 audit(1696275452.819:87): prog-id=14 op=LOAD Oct 2 19:37:33.273190 kernel: audit: type=1334 audit(1696275452.819:88): prog-id=4 op=UNLOAD Oct 2 19:37:33.273272 kernel: audit: type=1334 audit(1696275452.819:89): prog-id=5 op=UNLOAD Oct 2 19:37:33.273388 kernel: audit: type=1334 audit(1696275452.822:90): prog-id=15 op=LOAD Oct 2 19:37:33.273424 kernel: audit: type=1334 audit(1696275452.822:91): prog-id=12 op=UNLOAD Oct 2 19:37:33.273456 kernel: audit: type=1334 audit(1696275452.824:92): prog-id=16 op=LOAD Oct 2 19:37:33.273483 kernel: audit: type=1334 audit(1696275452.827:93): prog-id=17 op=LOAD Oct 2 19:37:33.273518 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:37:33.273552 systemd[1]: Stopped iscsid.service. Oct 2 19:37:33.273585 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:37:33.273615 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:37:33.273648 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:37:33.273680 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:37:33.273713 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:37:33.273746 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 19:37:33.273780 systemd[1]: Created slice system-getty.slice. Oct 2 19:37:33.273812 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:37:33.273845 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:37:33.273879 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:37:33.273912 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:37:33.273942 systemd[1]: Created slice user.slice. Oct 2 19:37:33.273972 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:37:33.274001 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:37:33.274034 systemd[1]: Set up automount boot.automount. Oct 2 19:37:33.274067 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:37:33.274101 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:37:33.274133 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:37:33.274162 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:37:33.274191 systemd[1]: Reached target integritysetup.target. Oct 2 19:37:33.274223 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:37:33.274253 systemd[1]: Reached target remote-fs.target. Oct 2 19:37:33.274284 systemd[1]: Reached target slices.target. Oct 2 19:37:33.274337 systemd[1]: Reached target swap.target. Oct 2 19:37:33.274378 systemd[1]: Reached target torcx.target. Oct 2 19:37:33.274408 systemd[1]: Reached target veritysetup.target. Oct 2 19:37:33.274456 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:37:33.274488 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:37:33.274518 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:37:33.274551 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:37:33.274580 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:37:33.274609 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:37:33.274642 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:37:33.274676 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:37:33.274707 systemd[1]: Mounting media.mount... Oct 2 19:37:33.274738 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:37:33.274770 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:37:33.274799 systemd[1]: Mounting tmp.mount... Oct 2 19:37:33.274830 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:37:33.274860 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:37:33.274889 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:37:33.274985 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:37:33.275017 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:37:33.275050 systemd[1]: Starting modprobe@drm.service... Oct 2 19:37:33.275080 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:37:33.275113 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:37:33.275142 systemd[1]: Starting modprobe@loop.service... Oct 2 19:37:33.275172 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:37:33.275205 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:37:33.275238 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:37:33.275270 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:37:33.275303 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:37:33.275351 kernel: fuse: init (API version 7.34) Oct 2 19:37:33.275380 systemd[1]: Stopped systemd-journald.service. Oct 2 19:37:33.275412 systemd[1]: Starting systemd-journald.service... Oct 2 19:37:33.275443 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:37:33.275474 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:37:33.275504 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:37:33.275535 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:37:33.275566 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:37:33.275596 systemd[1]: Stopped verity-setup.service. Oct 2 19:37:33.275629 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:37:33.275657 kernel: loop: module loaded Oct 2 19:37:33.275752 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:37:33.275783 systemd[1]: Mounted media.mount. Oct 2 19:37:33.275813 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:37:33.275846 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:37:33.275878 systemd[1]: Mounted tmp.mount. Oct 2 19:37:33.275907 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:37:33.275938 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:37:33.275971 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:37:33.276003 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:37:33.276033 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:37:33.276065 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:37:33.276094 systemd[1]: Finished modprobe@drm.service. Oct 2 19:37:33.276128 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:37:33.276159 systemd-journald[1322]: Journal started Oct 2 19:37:33.276254 systemd-journald[1322]: Runtime Journal (/run/log/journal/ec2232796c5ebf9a2dc0e291f4a8e1c7) is 8.0M, max 75.4M, 67.4M free. Oct 2 19:37:28.236000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:37:28.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:37:28.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:37:28.423000 audit: BPF prog-id=10 op=LOAD Oct 2 19:37:28.423000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:37:28.423000 audit: BPF prog-id=11 op=LOAD Oct 2 19:37:28.423000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:37:32.812000 audit: BPF prog-id=12 op=LOAD Oct 2 19:37:32.814000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:37:32.817000 audit: BPF prog-id=13 op=LOAD Oct 2 19:37:32.819000 audit: BPF prog-id=14 op=LOAD Oct 2 19:37:32.819000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:37:32.819000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:37:32.822000 audit: BPF prog-id=15 op=LOAD Oct 2 19:37:32.822000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:37:32.824000 audit: BPF prog-id=16 op=LOAD Oct 2 19:37:32.827000 audit: BPF prog-id=17 op=LOAD Oct 2 19:37:32.827000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:37:32.827000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:37:32.830000 audit: BPF prog-id=18 op=LOAD Oct 2 19:37:32.830000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:37:32.832000 audit: BPF prog-id=19 op=LOAD Oct 2 19:37:32.835000 audit: BPF prog-id=20 op=LOAD Oct 2 19:37:32.835000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:37:32.835000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:37:32.835000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.846000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.849000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:37:32.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.854000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.126000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.134000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.139000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.140000 audit: BPF prog-id=21 op=LOAD Oct 2 19:37:33.140000 audit: BPF prog-id=22 op=LOAD Oct 2 19:37:33.141000 audit: BPF prog-id=23 op=LOAD Oct 2 19:37:33.141000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:37:33.141000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:37:33.185000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.244000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.253000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.263000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.263000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:37:33.263000 audit[1322]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=6 a1=ffffeb5c7dd0 a2=4000 a3=1 items=0 ppid=1 pid=1322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:33.263000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:37:33.271000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.271000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:28.612110 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:37:28Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:37:32.809517 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:37:28.623136 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:37:28Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:37:32.837802 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:37:28.623189 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:37:28Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:37:33.279942 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:37:28.623259 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:37:28Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:37:28.623285 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:37:28Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:37:28.623376 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:37:28Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:37:28.623408 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:37:28Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:37:28.623818 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:37:28Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:37:28.623900 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:37:28Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:37:28.623935 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:37:28Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:37:28.625442 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:37:28Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:37:33.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.282000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:28.625523 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:37:28Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:37:28.625569 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:37:28Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:37:28.625609 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:37:28Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:37:28.625655 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:37:28Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:37:28.625693 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:37:28Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:37:31.934153 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:37:31Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:37:31.934713 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:37:31Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:37:31.934966 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:37:31Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:37:31.935419 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:37:31Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:37:31.935524 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:37:31Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:37:31.935656 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:37:31Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:37:33.306870 systemd[1]: Started systemd-journald.service. Oct 2 19:37:33.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.290000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.293000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.293000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.298000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.300000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.289511 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:37:33.290096 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:37:33.292501 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:37:33.292768 systemd[1]: Finished modprobe@loop.service. Oct 2 19:37:33.295102 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:37:33.297598 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:37:33.300117 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:37:33.303058 systemd[1]: Reached target network-pre.target. Oct 2 19:37:33.307204 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:37:33.321990 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:37:33.323663 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:37:33.338090 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:37:33.342975 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:37:33.345566 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:37:33.348359 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:37:33.350144 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:37:33.352532 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:37:33.357364 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:37:33.359644 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:37:33.390442 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:37:33.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.392708 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:37:33.418979 systemd-journald[1322]: Time spent on flushing to /var/log/journal/ec2232796c5ebf9a2dc0e291f4a8e1c7 is 73.069ms for 1161 entries. Oct 2 19:37:33.418979 systemd-journald[1322]: System Journal (/var/log/journal/ec2232796c5ebf9a2dc0e291f4a8e1c7) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:37:33.519696 systemd-journald[1322]: Received client request to flush runtime journal. Oct 2 19:37:33.468000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.467854 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:37:33.522248 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:37:33.523000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.590962 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:37:33.591000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.595168 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:37:33.615087 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:37:33.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.620486 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:37:33.637234 udevadm[1364]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 19:37:33.711937 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:37:33.716013 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:37:33.712000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.856512 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:37:33.857000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:34.380094 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:37:34.382000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:34.383000 audit: BPF prog-id=24 op=LOAD Oct 2 19:37:34.383000 audit: BPF prog-id=25 op=LOAD Oct 2 19:37:34.383000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:37:34.383000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:37:34.385875 systemd[1]: Starting systemd-udevd.service... Oct 2 19:37:34.433043 systemd-udevd[1369]: Using default interface naming scheme 'v252'. Oct 2 19:37:34.474182 systemd[1]: Started systemd-udevd.service. Oct 2 19:37:34.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:34.476000 audit: BPF prog-id=26 op=LOAD Oct 2 19:37:34.479603 systemd[1]: Starting systemd-networkd.service... Oct 2 19:37:34.493000 audit: BPF prog-id=27 op=LOAD Oct 2 19:37:34.493000 audit: BPF prog-id=28 op=LOAD Oct 2 19:37:34.494000 audit: BPF prog-id=29 op=LOAD Oct 2 19:37:34.496572 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:37:34.592882 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:37:34.629000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:34.628678 systemd[1]: Started systemd-userdbd.service. Oct 2 19:37:34.677945 (udev-worker)[1381]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:37:34.829410 systemd-networkd[1377]: lo: Link UP Oct 2 19:37:34.829913 systemd-networkd[1377]: lo: Gained carrier Oct 2 19:37:34.830988 systemd-networkd[1377]: Enumeration completed Oct 2 19:37:34.831326 systemd[1]: Started systemd-networkd.service. Oct 2 19:37:34.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:34.835370 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:37:34.837973 systemd-networkd[1377]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:37:34.844335 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:37:34.847276 systemd-networkd[1377]: eth0: Link UP Oct 2 19:37:34.847813 systemd-networkd[1377]: eth0: Gained carrier Oct 2 19:37:34.859620 systemd-networkd[1377]: eth0: DHCPv4 address 172.31.25.109/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:37:34.939340 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1375) Oct 2 19:37:35.135761 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:37:35.138641 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:37:35.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:35.143075 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:37:35.168209 lvm[1488]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:37:35.205297 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:37:35.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:35.207601 systemd[1]: Reached target cryptsetup.target. Oct 2 19:37:35.211682 systemd[1]: Starting lvm2-activation.service... Oct 2 19:37:35.226235 lvm[1489]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:37:35.264355 systemd[1]: Finished lvm2-activation.service. Oct 2 19:37:35.265000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:35.266454 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:37:35.268481 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:37:35.268536 systemd[1]: Reached target local-fs.target. Oct 2 19:37:35.270264 systemd[1]: Reached target machines.target. Oct 2 19:37:35.274075 systemd[1]: Starting ldconfig.service... Oct 2 19:37:35.278709 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:37:35.278817 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:37:35.280959 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:37:35.285494 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:37:35.292423 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:37:35.294622 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:37:35.294756 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:37:35.296974 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:37:35.337219 systemd-tmpfiles[1494]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:37:35.339752 systemd-tmpfiles[1494]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:37:35.342544 systemd-tmpfiles[1494]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:37:35.343421 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1491 (bootctl) Oct 2 19:37:35.350419 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:37:35.386218 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:37:35.387000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:35.464778 systemd-fsck[1500]: fsck.fat 4.2 (2021-01-31) Oct 2 19:37:35.464778 systemd-fsck[1500]: /dev/nvme0n1p1: 236 files, 113463/258078 clusters Oct 2 19:37:35.474000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:35.473280 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:37:35.478177 systemd[1]: Mounting boot.mount... Oct 2 19:37:35.508345 systemd[1]: Mounted boot.mount. Oct 2 19:37:35.534054 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:37:35.534000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:35.698922 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:37:35.699000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:35.703567 systemd[1]: Starting audit-rules.service... Oct 2 19:37:35.707501 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:37:35.711752 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:37:35.715000 audit: BPF prog-id=30 op=LOAD Oct 2 19:37:35.721668 systemd[1]: Starting systemd-resolved.service... Oct 2 19:37:35.723000 audit: BPF prog-id=31 op=LOAD Oct 2 19:37:35.726660 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:37:35.731818 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:37:35.769808 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:37:35.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:35.772038 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:37:35.776000 audit[1519]: SYSTEM_BOOT pid=1519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:37:35.785833 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:37:35.787000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:35.852007 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:37:35.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:35.930000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:37:35.930000 audit[1534]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffcb8453b0 a2=420 a3=0 items=0 ppid=1514 pid=1534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:35.930000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:37:35.932609 augenrules[1534]: No rules Oct 2 19:37:35.934038 systemd-resolved[1517]: Positive Trust Anchors: Oct 2 19:37:35.934331 systemd[1]: Finished audit-rules.service. Oct 2 19:37:35.935765 systemd-resolved[1517]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:37:35.935941 systemd-resolved[1517]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:37:35.945729 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:37:35.947724 systemd[1]: Reached target time-set.target. Oct 2 19:37:35.959334 systemd-resolved[1517]: Defaulting to hostname 'linux'. Oct 2 19:37:35.963031 systemd[1]: Started systemd-resolved.service. Oct 2 19:37:35.964974 systemd[1]: Reached target network.target. Oct 2 19:37:35.966660 systemd[1]: Reached target nss-lookup.target. Oct 2 19:37:36.041516 systemd-networkd[1377]: eth0: Gained IPv6LL Oct 2 19:37:36.045164 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:37:36.047478 systemd[1]: Reached target network-online.target. Oct 2 19:37:36.057064 systemd-timesyncd[1518]: Contacted time server 216.229.0.50:123 (0.flatcar.pool.ntp.org). Oct 2 19:37:36.057279 systemd-timesyncd[1518]: Initial clock synchronization to Mon 2023-10-02 19:37:35.972825 UTC. Oct 2 19:37:37.154391 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:37:37.155414 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:37:37.176176 ldconfig[1490]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:37:37.184693 systemd[1]: Finished ldconfig.service. Oct 2 19:37:37.188705 systemd[1]: Starting systemd-update-done.service... Oct 2 19:37:37.210819 systemd[1]: Finished systemd-update-done.service. Oct 2 19:37:37.212885 systemd[1]: Reached target sysinit.target. Oct 2 19:37:37.214712 systemd[1]: Started motdgen.path. Oct 2 19:37:37.216286 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:37:37.219043 systemd[1]: Started logrotate.timer. Oct 2 19:37:37.220802 systemd[1]: Started mdadm.timer. Oct 2 19:37:37.222284 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:37:37.224143 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:37:37.224209 systemd[1]: Reached target paths.target. Oct 2 19:37:37.225817 systemd[1]: Reached target timers.target. Oct 2 19:37:37.227868 systemd[1]: Listening on dbus.socket. Oct 2 19:37:37.231404 systemd[1]: Starting docker.socket... Oct 2 19:37:37.239750 systemd[1]: Listening on sshd.socket. Oct 2 19:37:37.241761 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:37:37.242716 systemd[1]: Listening on docker.socket. Oct 2 19:37:37.244629 systemd[1]: Reached target sockets.target. Oct 2 19:37:37.246536 systemd[1]: Reached target basic.target. Oct 2 19:37:37.248596 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:37:37.248787 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:37:37.259933 systemd[1]: Started amazon-ssm-agent.service. Oct 2 19:37:37.264618 systemd[1]: Starting containerd.service... Oct 2 19:37:37.268228 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 19:37:37.276226 systemd[1]: Starting dbus.service... Oct 2 19:37:37.279911 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:37:37.284447 systemd[1]: Starting extend-filesystems.service... Oct 2 19:37:37.286542 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:37:37.288855 systemd[1]: Starting motdgen.service... Oct 2 19:37:37.293690 systemd[1]: Started nvidia.service. Oct 2 19:37:37.297673 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:37:37.305648 systemd[1]: Starting prepare-critools.service... Oct 2 19:37:37.310697 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:37:37.315902 systemd[1]: Starting sshd-keygen.service... Oct 2 19:37:37.322748 systemd[1]: Starting systemd-logind.service... Oct 2 19:37:37.325383 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:37:37.325502 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:37:37.326878 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:37:37.328488 systemd[1]: Starting update-engine.service... Oct 2 19:37:37.333216 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:37:37.470402 jq[1560]: true Oct 2 19:37:37.480504 jq[1550]: false Oct 2 19:37:37.485443 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:37:37.485800 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:37:37.513979 tar[1565]: ./ Oct 2 19:37:37.513979 tar[1565]: ./loopback Oct 2 19:37:37.539136 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:37:37.539538 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:37:37.551656 dbus-daemon[1549]: [system] SELinux support is enabled Oct 2 19:37:37.552432 systemd[1]: Started dbus.service. Oct 2 19:37:37.557379 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:37:37.557441 systemd[1]: Reached target system-config.target. Oct 2 19:37:37.559687 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:37:37.559741 systemd[1]: Reached target user-config.target. Oct 2 19:37:37.574804 dbus-daemon[1549]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.0' (uid=244 pid=1377 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Oct 2 19:37:37.582744 dbus-daemon[1549]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 19:37:37.582888 tar[1564]: crictl Oct 2 19:37:37.592761 systemd[1]: Starting systemd-hostnamed.service... Oct 2 19:37:37.643690 jq[1573]: true Oct 2 19:37:37.708692 update_engine[1559]: I1002 19:37:37.707494 1559 main.cc:92] Flatcar Update Engine starting Oct 2 19:37:37.728705 systemd[1]: Started update-engine.service. Oct 2 19:37:37.730580 update_engine[1559]: I1002 19:37:37.730541 1559 update_check_scheduler.cc:74] Next update check in 10m19s Oct 2 19:37:37.733617 systemd[1]: Started locksmithd.service. Oct 2 19:37:37.739172 extend-filesystems[1551]: Found nvme0n1 Oct 2 19:37:37.742936 extend-filesystems[1551]: Found nvme0n1p1 Oct 2 19:37:37.742936 extend-filesystems[1551]: Found nvme0n1p2 Oct 2 19:37:37.742936 extend-filesystems[1551]: Found nvme0n1p3 Oct 2 19:37:37.742936 extend-filesystems[1551]: Found usr Oct 2 19:37:37.742936 extend-filesystems[1551]: Found nvme0n1p4 Oct 2 19:37:37.742936 extend-filesystems[1551]: Found nvme0n1p6 Oct 2 19:37:37.742936 extend-filesystems[1551]: Found nvme0n1p7 Oct 2 19:37:37.742936 extend-filesystems[1551]: Found nvme0n1p9 Oct 2 19:37:37.742936 extend-filesystems[1551]: Checking size of /dev/nvme0n1p9 Oct 2 19:37:37.804751 amazon-ssm-agent[1546]: 2023/10/02 19:37:37 Failed to load instance info from vault. RegistrationKey does not exist. Oct 2 19:37:37.836903 amazon-ssm-agent[1546]: Initializing new seelog logger Oct 2 19:37:37.840667 amazon-ssm-agent[1546]: New Seelog Logger Creation Complete Oct 2 19:37:37.847572 amazon-ssm-agent[1546]: 2023/10/02 19:37:37 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:37:37.848421 amazon-ssm-agent[1546]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:37:37.849073 amazon-ssm-agent[1546]: 2023/10/02 19:37:37 processing appconfig overrides Oct 2 19:37:37.870561 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:37:37.870963 systemd[1]: Finished motdgen.service. Oct 2 19:37:37.897707 extend-filesystems[1551]: Resized partition /dev/nvme0n1p9 Oct 2 19:37:37.921673 tar[1565]: ./bandwidth Oct 2 19:37:37.923791 extend-filesystems[1618]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 19:37:37.964336 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Oct 2 19:37:38.022331 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Oct 2 19:37:38.094050 systemd-logind[1558]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 19:37:38.094555 systemd-logind[1558]: New seat seat0. Oct 2 19:37:38.105757 env[1566]: time="2023-10-02T19:37:38.096212819Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:37:38.108803 extend-filesystems[1618]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Oct 2 19:37:38.108803 extend-filesystems[1618]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 2 19:37:38.108803 extend-filesystems[1618]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Oct 2 19:37:38.108253 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:37:38.143208 bash[1625]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:37:38.143424 extend-filesystems[1551]: Resized filesystem in /dev/nvme0n1p9 Oct 2 19:37:38.114905 dbus-daemon[1549]: [system] Successfully activated service 'org.freedesktop.hostname1' Oct 2 19:37:38.108596 systemd[1]: Finished extend-filesystems.service. Oct 2 19:37:38.119734 dbus-daemon[1549]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.5' (uid=0 pid=1581 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Oct 2 19:37:38.115325 systemd[1]: Started systemd-hostnamed.service. Oct 2 19:37:38.138046 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:37:38.155182 systemd[1]: Started systemd-logind.service. Oct 2 19:37:38.161968 systemd[1]: Starting polkit.service... Oct 2 19:37:38.178871 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 19:37:38.214249 tar[1565]: ./ptp Oct 2 19:37:38.255095 env[1566]: time="2023-10-02T19:37:38.252203749Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:37:38.255362 env[1566]: time="2023-10-02T19:37:38.255291670Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:37:38.264196 polkitd[1635]: Started polkitd version 121 Oct 2 19:37:38.267888 env[1566]: time="2023-10-02T19:37:38.267805703Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:37:38.267888 env[1566]: time="2023-10-02T19:37:38.267878245Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:37:38.268320 env[1566]: time="2023-10-02T19:37:38.268247260Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:37:38.268418 env[1566]: time="2023-10-02T19:37:38.268336010Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:37:38.268418 env[1566]: time="2023-10-02T19:37:38.268372097Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:37:38.268418 env[1566]: time="2023-10-02T19:37:38.268397566Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:37:38.268607 env[1566]: time="2023-10-02T19:37:38.268566075Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:37:38.269469 env[1566]: time="2023-10-02T19:37:38.269414863Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:37:38.269827 env[1566]: time="2023-10-02T19:37:38.269733761Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:37:38.269827 env[1566]: time="2023-10-02T19:37:38.269770336Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:37:38.269940 env[1566]: time="2023-10-02T19:37:38.269900843Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:37:38.269940 env[1566]: time="2023-10-02T19:37:38.269928833Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:37:38.278593 env[1566]: time="2023-10-02T19:37:38.278472436Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:37:38.278726 env[1566]: time="2023-10-02T19:37:38.278620946Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:37:38.278726 env[1566]: time="2023-10-02T19:37:38.278655487Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:37:38.279126 env[1566]: time="2023-10-02T19:37:38.278752702Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:37:38.279126 env[1566]: time="2023-10-02T19:37:38.279073562Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:37:38.279285 env[1566]: time="2023-10-02T19:37:38.279137900Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:37:38.279285 env[1566]: time="2023-10-02T19:37:38.279175343Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:37:38.280065 env[1566]: time="2023-10-02T19:37:38.279968163Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:37:38.280189 env[1566]: time="2023-10-02T19:37:38.280049327Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:37:38.280189 env[1566]: time="2023-10-02T19:37:38.280139122Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:37:38.280292 env[1566]: time="2023-10-02T19:37:38.280173854Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:37:38.280292 env[1566]: time="2023-10-02T19:37:38.280234256Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:37:38.280589 env[1566]: time="2023-10-02T19:37:38.280545021Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:37:38.280876 env[1566]: time="2023-10-02T19:37:38.280790888Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:37:38.282017 env[1566]: time="2023-10-02T19:37:38.281959918Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:37:38.282132 env[1566]: time="2023-10-02T19:37:38.282035980Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.282132 env[1566]: time="2023-10-02T19:37:38.282070320Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:37:38.282267 env[1566]: time="2023-10-02T19:37:38.282226867Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.282379 env[1566]: time="2023-10-02T19:37:38.282270088Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.282379 env[1566]: time="2023-10-02T19:37:38.282320681Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.282379 env[1566]: time="2023-10-02T19:37:38.282354093Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.282526 env[1566]: time="2023-10-02T19:37:38.282392202Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.282526 env[1566]: time="2023-10-02T19:37:38.282423152Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.282526 env[1566]: time="2023-10-02T19:37:38.282452319Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.282526 env[1566]: time="2023-10-02T19:37:38.282481141Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.282526 env[1566]: time="2023-10-02T19:37:38.282515718Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:37:38.284380 env[1566]: time="2023-10-02T19:37:38.284291379Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.284544 env[1566]: time="2023-10-02T19:37:38.284385300Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.284544 env[1566]: time="2023-10-02T19:37:38.284423408Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.284544 env[1566]: time="2023-10-02T19:37:38.284502205Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:37:38.284726 env[1566]: time="2023-10-02T19:37:38.284540492Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:37:38.284726 env[1566]: time="2023-10-02T19:37:38.284586710Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:37:38.284726 env[1566]: time="2023-10-02T19:37:38.284626792Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:37:38.284726 env[1566]: time="2023-10-02T19:37:38.284692890Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.285164 env[1566]: time="2023-10-02T19:37:38.285063784Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:37:38.286409 env[1566]: time="2023-10-02T19:37:38.285171331Z" level=info msg="Connect containerd service" Oct 2 19:37:38.286409 env[1566]: time="2023-10-02T19:37:38.285261139Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:37:38.288900 env[1566]: time="2023-10-02T19:37:38.288831092Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:37:38.300734 env[1566]: time="2023-10-02T19:37:38.300675939Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:37:38.300868 env[1566]: time="2023-10-02T19:37:38.300821726Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:37:38.303369 env[1566]: time="2023-10-02T19:37:38.300972471Z" level=info msg="containerd successfully booted in 0.251162s" Oct 2 19:37:38.301111 systemd[1]: Started containerd.service. Oct 2 19:37:38.304262 env[1566]: time="2023-10-02T19:37:38.304192660Z" level=info msg="Start subscribing containerd event" Oct 2 19:37:38.304408 env[1566]: time="2023-10-02T19:37:38.304356746Z" level=info msg="Start recovering state" Oct 2 19:37:38.304540 env[1566]: time="2023-10-02T19:37:38.304501986Z" level=info msg="Start event monitor" Oct 2 19:37:38.306273 env[1566]: time="2023-10-02T19:37:38.306209241Z" level=info msg="Start snapshots syncer" Oct 2 19:37:38.306427 env[1566]: time="2023-10-02T19:37:38.306292830Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:37:38.306427 env[1566]: time="2023-10-02T19:37:38.306349975Z" level=info msg="Start streaming server" Oct 2 19:37:38.319997 polkitd[1635]: Loading rules from directory /etc/polkit-1/rules.d Oct 2 19:37:38.320351 polkitd[1635]: Loading rules from directory /usr/share/polkit-1/rules.d Oct 2 19:37:38.323512 polkitd[1635]: Finished loading, compiling and executing 2 rules Oct 2 19:37:38.324509 dbus-daemon[1549]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Oct 2 19:37:38.324775 systemd[1]: Started polkit.service. Oct 2 19:37:38.329199 polkitd[1635]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Oct 2 19:37:38.376345 systemd-hostnamed[1581]: Hostname set to (transient) Oct 2 19:37:38.376346 systemd-resolved[1517]: System hostname changed to 'ip-172-31-25-109'. Oct 2 19:37:38.453701 tar[1565]: ./vlan Oct 2 19:37:38.481439 coreos-metadata[1548]: Oct 02 19:37:38.481 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Oct 2 19:37:38.491790 coreos-metadata[1548]: Oct 02 19:37:38.491 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Oct 2 19:37:38.492586 coreos-metadata[1548]: Oct 02 19:37:38.492 INFO Fetch successful Oct 2 19:37:38.492692 coreos-metadata[1548]: Oct 02 19:37:38.492 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 19:37:38.493562 coreos-metadata[1548]: Oct 02 19:37:38.493 INFO Fetch successful Oct 2 19:37:38.496477 unknown[1548]: wrote ssh authorized keys file for user: core Oct 2 19:37:38.573841 update-ssh-keys[1655]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:37:38.574725 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 19:37:38.607863 tar[1565]: ./host-device Oct 2 19:37:38.686482 amazon-ssm-agent[1546]: 2023-10-02 19:37:38 INFO Entering SSM Agent hibernate - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0b51d7a7b018f0d01 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0b51d7a7b018f0d01 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:37:38.686482 amazon-ssm-agent[1546]: status code: 400, request id: 9c4f5e3e-e464-4dd8-a1a5-f561f13d1287 Oct 2 19:37:38.686482 amazon-ssm-agent[1546]: 2023-10-02 19:37:38 INFO Agent is in hibernate mode. Reducing logging. Logging will be reduced to one log per backoff period Oct 2 19:37:38.716073 tar[1565]: ./tuning Oct 2 19:37:38.799079 tar[1565]: ./vrf Oct 2 19:37:38.886207 tar[1565]: ./sbr Oct 2 19:37:38.977213 tar[1565]: ./tap Oct 2 19:37:39.097652 tar[1565]: ./dhcp Oct 2 19:37:39.478331 tar[1565]: ./static Oct 2 19:37:39.552737 tar[1565]: ./firewall Oct 2 19:37:39.651978 systemd[1]: Finished prepare-critools.service. Oct 2 19:37:39.671543 tar[1565]: ./macvlan Oct 2 19:37:39.734993 tar[1565]: ./dummy Oct 2 19:37:39.798086 tar[1565]: ./bridge Oct 2 19:37:39.868684 tar[1565]: ./ipvlan Oct 2 19:37:39.930808 tar[1565]: ./portmap Oct 2 19:37:39.990068 tar[1565]: ./host-local Oct 2 19:37:40.071587 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:37:40.098842 locksmithd[1597]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:37:40.550080 sshd_keygen[1587]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:37:40.607487 systemd[1]: Finished sshd-keygen.service. Oct 2 19:37:40.612094 systemd[1]: Starting issuegen.service... Oct 2 19:37:40.630771 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:37:40.631119 systemd[1]: Finished issuegen.service. Oct 2 19:37:40.635584 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:37:40.657949 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:37:40.663668 systemd[1]: Started getty@tty1.service. Oct 2 19:37:40.668115 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:37:40.670410 systemd[1]: Reached target getty.target. Oct 2 19:37:40.672578 systemd[1]: Reached target multi-user.target. Oct 2 19:37:40.677028 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:37:40.700825 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:37:40.701195 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:37:40.703519 systemd[1]: Startup finished in 1.182s (kernel) + 13.492s (initrd) + 12.609s (userspace) = 27.285s. Oct 2 19:37:46.900047 systemd[1]: Created slice system-sshd.slice. Oct 2 19:37:46.903089 systemd[1]: Started sshd@0-172.31.25.109:22-139.178.89.65:57858.service. Oct 2 19:37:47.093123 sshd[1757]: Accepted publickey for core from 139.178.89.65 port 57858 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:37:47.098285 sshd[1757]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:47.115801 systemd[1]: Created slice user-500.slice. Oct 2 19:37:47.118147 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:37:47.127446 systemd-logind[1558]: New session 1 of user core. Oct 2 19:37:47.145374 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:37:47.150190 systemd[1]: Starting user@500.service... Oct 2 19:37:47.160470 (systemd)[1760]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:47.357693 systemd[1760]: Queued start job for default target default.target. Oct 2 19:37:47.358723 systemd[1760]: Reached target paths.target. Oct 2 19:37:47.358774 systemd[1760]: Reached target sockets.target. Oct 2 19:37:47.358806 systemd[1760]: Reached target timers.target. Oct 2 19:37:47.358834 systemd[1760]: Reached target basic.target. Oct 2 19:37:47.358928 systemd[1760]: Reached target default.target. Oct 2 19:37:47.358994 systemd[1760]: Startup finished in 181ms. Oct 2 19:37:47.359978 systemd[1]: Started user@500.service. Oct 2 19:37:47.361884 systemd[1]: Started session-1.scope. Oct 2 19:37:47.527532 systemd[1]: Started sshd@1-172.31.25.109:22-139.178.89.65:57864.service. Oct 2 19:37:47.706249 sshd[1769]: Accepted publickey for core from 139.178.89.65 port 57864 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:37:47.710334 sshd[1769]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:47.718629 systemd-logind[1558]: New session 2 of user core. Oct 2 19:37:47.719904 systemd[1]: Started session-2.scope. Oct 2 19:37:47.874988 sshd[1769]: pam_unix(sshd:session): session closed for user core Oct 2 19:37:47.882377 systemd[1]: sshd@1-172.31.25.109:22-139.178.89.65:57864.service: Deactivated successfully. Oct 2 19:37:47.883618 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:37:47.884257 systemd-logind[1558]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:37:47.886120 systemd-logind[1558]: Removed session 2. Oct 2 19:37:47.904566 systemd[1]: Started sshd@2-172.31.25.109:22-139.178.89.65:57872.service. Oct 2 19:37:48.086491 sshd[1775]: Accepted publickey for core from 139.178.89.65 port 57872 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:37:48.090189 sshd[1775]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:48.097813 systemd-logind[1558]: New session 3 of user core. Oct 2 19:37:48.098714 systemd[1]: Started session-3.scope. Oct 2 19:37:48.229654 sshd[1775]: pam_unix(sshd:session): session closed for user core Oct 2 19:37:48.235746 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:37:48.236863 systemd[1]: sshd@2-172.31.25.109:22-139.178.89.65:57872.service: Deactivated successfully. Oct 2 19:37:48.238466 systemd-logind[1558]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:37:48.240443 systemd-logind[1558]: Removed session 3. Oct 2 19:37:48.263534 systemd[1]: Started sshd@3-172.31.25.109:22-139.178.89.65:57876.service. Oct 2 19:37:48.447148 sshd[1781]: Accepted publickey for core from 139.178.89.65 port 57876 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:37:48.450372 sshd[1781]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:48.459157 systemd[1]: Started session-4.scope. Oct 2 19:37:48.459902 systemd-logind[1558]: New session 4 of user core. Oct 2 19:37:48.605579 sshd[1781]: pam_unix(sshd:session): session closed for user core Oct 2 19:37:48.612056 systemd[1]: sshd@3-172.31.25.109:22-139.178.89.65:57876.service: Deactivated successfully. Oct 2 19:37:48.613354 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:37:48.614465 systemd-logind[1558]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:37:48.616091 systemd-logind[1558]: Removed session 4. Oct 2 19:37:48.638252 systemd[1]: Started sshd@4-172.31.25.109:22-139.178.89.65:57886.service. Oct 2 19:37:48.824589 sshd[1787]: Accepted publickey for core from 139.178.89.65 port 57886 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:37:48.833836 sshd[1787]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:48.842410 systemd-logind[1558]: New session 5 of user core. Oct 2 19:37:48.842758 systemd[1]: Started session-5.scope. Oct 2 19:37:48.971329 sudo[1790]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:37:48.972420 sudo[1790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:37:48.988555 dbus-daemon[1549]: avc: received setenforce notice (enforcing=1) Oct 2 19:37:48.991570 sudo[1790]: pam_unix(sudo:session): session closed for user root Oct 2 19:37:49.016722 sshd[1787]: pam_unix(sshd:session): session closed for user core Oct 2 19:37:49.023862 systemd[1]: sshd@4-172.31.25.109:22-139.178.89.65:57886.service: Deactivated successfully. Oct 2 19:37:49.025245 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:37:49.026516 systemd-logind[1558]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:37:49.028535 systemd-logind[1558]: Removed session 5. Oct 2 19:37:49.045599 systemd[1]: Started sshd@5-172.31.25.109:22-139.178.89.65:57902.service. Oct 2 19:37:49.225335 sshd[1794]: Accepted publickey for core from 139.178.89.65 port 57902 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:37:49.227951 sshd[1794]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:49.236573 systemd-logind[1558]: New session 6 of user core. Oct 2 19:37:49.236944 systemd[1]: Started session-6.scope. Oct 2 19:37:49.355664 sudo[1798]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:37:49.356268 sudo[1798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:37:49.363564 sudo[1798]: pam_unix(sudo:session): session closed for user root Oct 2 19:37:49.377130 sudo[1797]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:37:49.378119 sudo[1797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:37:49.401836 systemd[1]: Stopping audit-rules.service... Oct 2 19:37:49.405000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:37:49.408986 kernel: kauditd_printk_skb: 78 callbacks suppressed Oct 2 19:37:49.409045 kernel: audit: type=1305 audit(1696275469.405:168): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:37:49.414345 kernel: audit: type=1300 audit(1696275469.405:168): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff00c54b0 a2=420 a3=0 items=0 ppid=1 pid=1801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:49.405000 audit[1801]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff00c54b0 a2=420 a3=0 items=0 ppid=1 pid=1801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:49.414649 auditctl[1801]: No rules Oct 2 19:37:49.426094 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:37:49.405000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:37:49.426480 systemd[1]: Stopped audit-rules.service. Oct 2 19:37:49.425000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.438235 kernel: audit: type=1327 audit(1696275469.405:168): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:37:49.438365 kernel: audit: type=1131 audit(1696275469.425:169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.434496 systemd[1]: Starting audit-rules.service... Oct 2 19:37:49.496071 augenrules[1818]: No rules Oct 2 19:37:49.497717 systemd[1]: Finished audit-rules.service. Oct 2 19:37:49.496000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.508033 sudo[1797]: pam_unix(sudo:session): session closed for user root Oct 2 19:37:49.507000 audit[1797]: USER_END pid=1797 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.517613 kernel: audit: type=1130 audit(1696275469.496:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.517701 kernel: audit: type=1106 audit(1696275469.507:171): pid=1797 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.507000 audit[1797]: CRED_DISP pid=1797 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.526443 kernel: audit: type=1104 audit(1696275469.507:172): pid=1797 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.539189 sshd[1794]: pam_unix(sshd:session): session closed for user core Oct 2 19:37:49.539000 audit[1794]: USER_END pid=1794 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:49.554059 systemd[1]: sshd@5-172.31.25.109:22-139.178.89.65:57902.service: Deactivated successfully. Oct 2 19:37:49.540000 audit[1794]: CRED_DISP pid=1794 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:49.555236 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:37:49.563467 kernel: audit: type=1106 audit(1696275469.539:173): pid=1794 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:49.563562 kernel: audit: type=1104 audit(1696275469.540:174): pid=1794 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:49.552000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.25.109:22-139.178.89.65:57902 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.564459 systemd-logind[1558]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:37:49.574641 kernel: audit: type=1131 audit(1696275469.552:175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.25.109:22-139.178.89.65:57902 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.580645 systemd-logind[1558]: Removed session 6. Oct 2 19:37:49.582940 systemd[1]: Started sshd@6-172.31.25.109:22-139.178.89.65:57914.service. Oct 2 19:37:49.583000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.25.109:22-139.178.89.65:57914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.767000 audit[1824]: USER_ACCT pid=1824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:49.769025 sshd[1824]: Accepted publickey for core from 139.178.89.65 port 57914 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:37:49.770000 audit[1824]: CRED_ACQ pid=1824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:49.770000 audit[1824]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe8720cb0 a2=3 a3=1 items=0 ppid=1 pid=1824 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:49.770000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:37:49.772876 sshd[1824]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:49.780583 systemd-logind[1558]: New session 7 of user core. Oct 2 19:37:49.781492 systemd[1]: Started session-7.scope. Oct 2 19:37:49.788000 audit[1824]: USER_START pid=1824 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:49.795000 audit[1826]: CRED_ACQ pid=1826 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:49.899000 audit[1827]: USER_ACCT pid=1827 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.901658 sudo[1827]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:37:49.900000 audit[1827]: CRED_REFR pid=1827 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.902768 sudo[1827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:37:49.905000 audit[1827]: USER_START pid=1827 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:37:50.629764 systemd[1]: Starting docker.service... Oct 2 19:37:50.734115 env[1842]: time="2023-10-02T19:37:50.734026994Z" level=info msg="Starting up" Oct 2 19:37:50.737198 env[1842]: time="2023-10-02T19:37:50.737152041Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:37:50.737393 env[1842]: time="2023-10-02T19:37:50.737364374Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:37:50.737536 env[1842]: time="2023-10-02T19:37:50.737503257Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:37:50.737737 env[1842]: time="2023-10-02T19:37:50.737708918Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:37:50.742676 env[1842]: time="2023-10-02T19:37:50.742631417Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:37:50.742916 env[1842]: time="2023-10-02T19:37:50.742863848Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:37:50.743073 env[1842]: time="2023-10-02T19:37:50.743037947Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:37:50.743180 env[1842]: time="2023-10-02T19:37:50.743153174Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:37:50.754280 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport2287968328-merged.mount: Deactivated successfully. Oct 2 19:37:50.801879 env[1842]: time="2023-10-02T19:37:50.801830969Z" level=info msg="Loading containers: start." Oct 2 19:37:50.907000 audit[1873]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1873 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:50.907000 audit[1873]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffe9fb1210 a2=0 a3=1 items=0 ppid=1842 pid=1873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:50.907000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:37:50.914000 audit[1875]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1875 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:50.914000 audit[1875]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffe08f05f0 a2=0 a3=1 items=0 ppid=1842 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:50.914000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:37:50.921000 audit[1877]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1877 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:50.921000 audit[1877]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe6805dd0 a2=0 a3=1 items=0 ppid=1842 pid=1877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:50.921000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:37:50.928000 audit[1879]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1879 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:50.928000 audit[1879]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe867d0b0 a2=0 a3=1 items=0 ppid=1842 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:50.928000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:37:50.937000 audit[1881]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1881 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:50.937000 audit[1881]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd47f9310 a2=0 a3=1 items=0 ppid=1842 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:50.937000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:37:50.970000 audit[1886]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1886 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:50.970000 audit[1886]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffde8d3200 a2=0 a3=1 items=0 ppid=1842 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:50.970000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:37:50.986000 audit[1888]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1888 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:50.986000 audit[1888]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff5b9e140 a2=0 a3=1 items=0 ppid=1842 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:50.986000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:37:50.993000 audit[1890]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1890 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:50.993000 audit[1890]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffef503510 a2=0 a3=1 items=0 ppid=1842 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:50.993000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:37:51.001000 audit[1892]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1892 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.001000 audit[1892]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=fffff4da3c70 a2=0 a3=1 items=0 ppid=1842 pid=1892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.001000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:37:51.021000 audit[1896]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1896 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.021000 audit[1896]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffcbe4ff70 a2=0 a3=1 items=0 ppid=1842 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.021000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:37:51.024000 audit[1897]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1897 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.024000 audit[1897]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffc3da2b30 a2=0 a3=1 items=0 ppid=1842 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.024000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:37:51.039344 kernel: Initializing XFRM netlink socket Oct 2 19:37:51.083750 env[1842]: time="2023-10-02T19:37:51.083683298Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:37:51.085647 (udev-worker)[1853]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:37:51.120000 audit[1906]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1906 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.120000 audit[1906]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffff90a7f0 a2=0 a3=1 items=0 ppid=1842 pid=1906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.120000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:37:51.145000 audit[1909]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1909 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.145000 audit[1909]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffc80c55a0 a2=0 a3=1 items=0 ppid=1842 pid=1909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.145000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:37:51.155000 audit[1912]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1912 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.155000 audit[1912]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffcfc16c10 a2=0 a3=1 items=0 ppid=1842 pid=1912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.155000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:37:51.163000 audit[1914]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1914 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.163000 audit[1914]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff560abd0 a2=0 a3=1 items=0 ppid=1842 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.163000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:37:51.173000 audit[1916]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1916 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.173000 audit[1916]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffca6c80f0 a2=0 a3=1 items=0 ppid=1842 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.173000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:37:51.181000 audit[1918]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1918 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.181000 audit[1918]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffc02fb360 a2=0 a3=1 items=0 ppid=1842 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.181000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:37:51.188000 audit[1920]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1920 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.188000 audit[1920]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffff6897c90 a2=0 a3=1 items=0 ppid=1842 pid=1920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.188000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:37:51.206000 audit[1923]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1923 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.206000 audit[1923]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffdba8edb0 a2=0 a3=1 items=0 ppid=1842 pid=1923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.206000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:37:51.214000 audit[1925]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1925 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.214000 audit[1925]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffd49f7cf0 a2=0 a3=1 items=0 ppid=1842 pid=1925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.214000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:37:51.221000 audit[1927]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1927 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.221000 audit[1927]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffe50f0e40 a2=0 a3=1 items=0 ppid=1842 pid=1927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.221000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:37:51.228000 audit[1929]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1929 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.228000 audit[1929]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe2971350 a2=0 a3=1 items=0 ppid=1842 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.228000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:37:51.230091 systemd-networkd[1377]: docker0: Link UP Oct 2 19:37:51.251000 audit[1933]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1933 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.251000 audit[1933]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd98e28a0 a2=0 a3=1 items=0 ppid=1842 pid=1933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.251000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:37:51.255000 audit[1934]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1934 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.255000 audit[1934]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffc26f6320 a2=0 a3=1 items=0 ppid=1842 pid=1934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.255000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:37:51.256531 env[1842]: time="2023-10-02T19:37:51.256487164Z" level=info msg="Loading containers: done." Oct 2 19:37:51.282858 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck343778471-merged.mount: Deactivated successfully. Oct 2 19:37:51.305376 env[1842]: time="2023-10-02T19:37:51.305275991Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:37:51.306096 env[1842]: time="2023-10-02T19:37:51.306052086Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:37:51.306502 env[1842]: time="2023-10-02T19:37:51.306437480Z" level=info msg="Daemon has completed initialization" Oct 2 19:37:51.341000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:51.341557 systemd[1]: Started docker.service. Oct 2 19:37:51.353994 env[1842]: time="2023-10-02T19:37:51.353814625Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:37:51.404012 systemd[1]: Reloading. Oct 2 19:37:51.627419 /usr/lib/systemd/system-generators/torcx-generator[1981]: time="2023-10-02T19:37:51Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:37:51.627481 /usr/lib/systemd/system-generators/torcx-generator[1981]: time="2023-10-02T19:37:51Z" level=info msg="torcx already run" Oct 2 19:37:51.842037 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:37:51.842075 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:37:51.884789 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:37:52.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.036000 audit: BPF prog-id=40 op=LOAD Oct 2 19:37:52.036000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:37:52.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.036000 audit: BPF prog-id=41 op=LOAD Oct 2 19:37:52.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.036000 audit: BPF prog-id=42 op=LOAD Oct 2 19:37:52.036000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:37:52.036000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:37:52.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.040000 audit: BPF prog-id=43 op=LOAD Oct 2 19:37:52.040000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:37:52.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.042000 audit: BPF prog-id=44 op=LOAD Oct 2 19:37:52.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.042000 audit: BPF prog-id=45 op=LOAD Oct 2 19:37:52.042000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:37:52.042000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:37:52.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.044000 audit: BPF prog-id=46 op=LOAD Oct 2 19:37:52.044000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:37:52.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.048000 audit: BPF prog-id=47 op=LOAD Oct 2 19:37:52.048000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:37:52.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.050000 audit: BPF prog-id=48 op=LOAD Oct 2 19:37:52.051000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:37:52.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.051000 audit: BPF prog-id=49 op=LOAD Oct 2 19:37:52.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.051000 audit: BPF prog-id=50 op=LOAD Oct 2 19:37:52.051000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:37:52.051000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:37:52.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.054000 audit: BPF prog-id=51 op=LOAD Oct 2 19:37:52.054000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:37:52.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.055000 audit: BPF prog-id=52 op=LOAD Oct 2 19:37:52.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.055000 audit: BPF prog-id=53 op=LOAD Oct 2 19:37:52.055000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:37:52.055000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:37:52.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.057000 audit: BPF prog-id=54 op=LOAD Oct 2 19:37:52.057000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:37:52.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.058000 audit: BPF prog-id=55 op=LOAD Oct 2 19:37:52.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.058000 audit: BPF prog-id=56 op=LOAD Oct 2 19:37:52.058000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:37:52.058000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:37:52.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.060000 audit: BPF prog-id=57 op=LOAD Oct 2 19:37:52.060000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:37:52.110000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:52.109391 systemd[1]: Started kubelet.service. Oct 2 19:37:52.285044 kubelet[2034]: E1002 19:37:52.284968 2034 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:37:52.289087 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:37:52.288000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:37:52.289468 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:37:52.526174 env[1566]: time="2023-10-02T19:37:52.526089921Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\"" Oct 2 19:37:53.280800 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount492346670.mount: Deactivated successfully. Oct 2 19:37:56.813843 env[1566]: time="2023-10-02T19:37:56.813782916Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:37:56.818774 env[1566]: time="2023-10-02T19:37:56.818723742Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:30bb499447fe1bc655853e2e8ac386cdeb28c80263536259cb54f290f9a58d6c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:37:56.821741 env[1566]: time="2023-10-02T19:37:56.821694177Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:37:56.826618 env[1566]: time="2023-10-02T19:37:56.826568613Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6beea2e5531a0606613594fd3ed92d71bbdcef99dd3237522049a0b32cad736c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:37:56.828555 env[1566]: time="2023-10-02T19:37:56.828497386Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\" returns image reference \"sha256:30bb499447fe1bc655853e2e8ac386cdeb28c80263536259cb54f290f9a58d6c\"" Oct 2 19:37:56.858777 env[1566]: time="2023-10-02T19:37:56.858708906Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\"" Oct 2 19:38:00.650463 env[1566]: time="2023-10-02T19:38:00.650404245Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:00.656005 env[1566]: time="2023-10-02T19:38:00.655953080Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:89d57b83c17862d0ca2dd214e9e5ad425f8d67ecba32d10b846f8d22d3b5597c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:00.659678 env[1566]: time="2023-10-02T19:38:00.659631685Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:00.664155 env[1566]: time="2023-10-02T19:38:00.664081732Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:6a42ce14d716205a99763f3c732c0a8f0ea041bdbbea7d2dfffcc53dafd7cac4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:00.666151 env[1566]: time="2023-10-02T19:38:00.666058110Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\" returns image reference \"sha256:89d57b83c17862d0ca2dd214e9e5ad425f8d67ecba32d10b846f8d22d3b5597c\"" Oct 2 19:38:00.696201 env[1566]: time="2023-10-02T19:38:00.696142362Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\"" Oct 2 19:38:02.480081 kernel: kauditd_printk_skb: 292 callbacks suppressed Oct 2 19:38:02.480245 kernel: audit: type=1130 audit(1696275482.466:418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:02.466000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:02.467812 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:38:02.468121 systemd[1]: Stopped kubelet.service. Oct 2 19:38:02.473157 systemd[1]: Started kubelet.service. Oct 2 19:38:02.493208 kernel: audit: type=1131 audit(1696275482.466:419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:02.466000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:02.471000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:02.504208 kernel: audit: type=1130 audit(1696275482.471:420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:02.629802 kubelet[2062]: E1002 19:38:02.629739 2062 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:38:02.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:38:02.637497 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:38:02.637803 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:38:02.647368 kernel: audit: type=1131 audit(1696275482.636:421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:38:02.870613 env[1566]: time="2023-10-02T19:38:02.869863137Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:02.874472 env[1566]: time="2023-10-02T19:38:02.874404963Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:64fc40cee3716a4596d219b360ce536adb7998eaeae3f5dbb774d6503f5039d7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:02.877705 env[1566]: time="2023-10-02T19:38:02.877656129Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:02.880944 env[1566]: time="2023-10-02T19:38:02.880895311Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:6511193f8114a2f011790619698efe12a8119ed9a17e2e36f4c1c759ccf173ab,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:02.882298 env[1566]: time="2023-10-02T19:38:02.882253411Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\" returns image reference \"sha256:64fc40cee3716a4596d219b360ce536adb7998eaeae3f5dbb774d6503f5039d7\"" Oct 2 19:38:02.911127 env[1566]: time="2023-10-02T19:38:02.911078141Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\"" Oct 2 19:38:04.343593 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount908745812.mount: Deactivated successfully. Oct 2 19:38:05.124387 env[1566]: time="2023-10-02T19:38:05.124301981Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:05.127255 env[1566]: time="2023-10-02T19:38:05.127194066Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7da62c127fc0f2c3473babe4dd0fe1da874278c4e524a490b1781e3e0e6dddfa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:05.138731 env[1566]: time="2023-10-02T19:38:05.138663492Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:05.142645 env[1566]: time="2023-10-02T19:38:05.142479983Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:41c8f92d1cd571e0e36af431f35c78379f84f5daf5b85d43014a9940d697afcf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:05.144106 env[1566]: time="2023-10-02T19:38:05.144049709Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\" returns image reference \"sha256:7da62c127fc0f2c3473babe4dd0fe1da874278c4e524a490b1781e3e0e6dddfa\"" Oct 2 19:38:05.174421 env[1566]: time="2023-10-02T19:38:05.174362468Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:38:05.689359 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount436344761.mount: Deactivated successfully. Oct 2 19:38:05.698010 env[1566]: time="2023-10-02T19:38:05.697931043Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:05.702314 env[1566]: time="2023-10-02T19:38:05.702247570Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:05.706031 env[1566]: time="2023-10-02T19:38:05.705971277Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:05.708825 env[1566]: time="2023-10-02T19:38:05.708777127Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:05.709915 env[1566]: time="2023-10-02T19:38:05.709872455Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 19:38:05.737979 env[1566]: time="2023-10-02T19:38:05.737932281Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\"" Oct 2 19:38:08.410202 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Oct 2 19:38:08.409000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:08.420342 kernel: audit: type=1131 audit(1696275488.409:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:08.447000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:38:08.447000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:38:08.453706 kernel: audit: type=1334 audit(1696275488.447:423): prog-id=53 op=UNLOAD Oct 2 19:38:08.453792 kernel: audit: type=1334 audit(1696275488.447:424): prog-id=52 op=UNLOAD Oct 2 19:38:08.453845 kernel: audit: type=1334 audit(1696275488.447:425): prog-id=51 op=UNLOAD Oct 2 19:38:08.447000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:38:12.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:12.717814 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:38:12.718140 systemd[1]: Stopped kubelet.service. Oct 2 19:38:12.726614 systemd[1]: Started kubelet.service. Oct 2 19:38:12.717000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:12.738271 kernel: audit: type=1130 audit(1696275492.717:426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:12.738431 kernel: audit: type=1131 audit(1696275492.717:427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:12.726000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:12.748246 kernel: audit: type=1130 audit(1696275492.726:428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:12.881923 kubelet[2086]: E1002 19:38:12.881857 2086 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:38:12.885870 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:38:12.886189 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:38:12.886000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:38:12.895728 kernel: audit: type=1131 audit(1696275492.886:429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:38:13.810101 env[1566]: time="2023-10-02T19:38:13.810032403Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:13.813334 env[1566]: time="2023-10-02T19:38:13.813254480Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:13.816901 env[1566]: time="2023-10-02T19:38:13.816842068Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:13.820582 env[1566]: time="2023-10-02T19:38:13.820530599Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:13.822274 env[1566]: time="2023-10-02T19:38:13.822223726Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\" returns image reference \"sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace\"" Oct 2 19:38:13.850992 env[1566]: time="2023-10-02T19:38:13.850944388Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:38:15.242921 env[1566]: time="2023-10-02T19:38:15.242838489Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:15.246841 env[1566]: time="2023-10-02T19:38:15.246777971Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:15.249985 env[1566]: time="2023-10-02T19:38:15.249926865Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:15.254284 env[1566]: time="2023-10-02T19:38:15.254230186Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:15.255433 env[1566]: time="2023-10-02T19:38:15.255388403Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Oct 2 19:38:21.929675 systemd[1]: Stopped kubelet.service. Oct 2 19:38:21.928000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:21.928000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:21.946997 kernel: audit: type=1130 audit(1696275501.928:430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:21.947172 kernel: audit: type=1131 audit(1696275501.928:431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:21.975290 systemd[1]: Reloading. Oct 2 19:38:22.154977 /usr/lib/systemd/system-generators/torcx-generator[2181]: time="2023-10-02T19:38:22Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:38:22.162361 /usr/lib/systemd/system-generators/torcx-generator[2181]: time="2023-10-02T19:38:22Z" level=info msg="torcx already run" Oct 2 19:38:22.401873 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:38:22.402115 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:38:22.444562 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:38:22.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.609353 kernel: audit: type=1400 audit(1696275502.594:432): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.609435 kernel: audit: type=1400 audit(1696275502.594:433): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.609492 kernel: audit: type=1400 audit(1696275502.594:434): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.624354 kernel: audit: type=1400 audit(1696275502.594:435): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.624451 kernel: audit: type=1400 audit(1696275502.594:436): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.639589 kernel: audit: type=1400 audit(1696275502.594:437): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.639673 kernel: audit: type=1400 audit(1696275502.594:438): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.649301 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:38:22.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.601000 audit: BPF prog-id=58 op=LOAD Oct 2 19:38:22.601000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:38:22.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.609000 audit: BPF prog-id=59 op=LOAD Oct 2 19:38:22.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.616000 audit: BPF prog-id=60 op=LOAD Oct 2 19:38:22.616000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:38:22.616000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:38:22.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.624000 audit: BPF prog-id=61 op=LOAD Oct 2 19:38:22.624000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:38:22.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.631000 audit: BPF prog-id=62 op=LOAD Oct 2 19:38:22.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.639000 audit: BPF prog-id=63 op=LOAD Oct 2 19:38:22.639000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:38:22.639000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:38:22.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.654000 audit: BPF prog-id=64 op=LOAD Oct 2 19:38:22.654000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:38:22.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.658000 audit: BPF prog-id=65 op=LOAD Oct 2 19:38:22.658000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit: BPF prog-id=66 op=LOAD Oct 2 19:38:22.660000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit: BPF prog-id=67 op=LOAD Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.660000 audit: BPF prog-id=68 op=LOAD Oct 2 19:38:22.660000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:38:22.660000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:38:22.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit: BPF prog-id=69 op=LOAD Oct 2 19:38:22.665000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:38:22.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit: BPF prog-id=70 op=LOAD Oct 2 19:38:22.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.665000 audit: BPF prog-id=71 op=LOAD Oct 2 19:38:22.665000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:38:22.665000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:38:22.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.667000 audit: BPF prog-id=72 op=LOAD Oct 2 19:38:22.667000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:38:22.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.716630 systemd[1]: Started kubelet.service. Oct 2 19:38:22.855026 kubelet[2237]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:38:22.855598 kubelet[2237]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:38:22.855696 kubelet[2237]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:38:22.856060 kubelet[2237]: I1002 19:38:22.856002 2237 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:38:23.433428 update_engine[1559]: I1002 19:38:23.433362 1559 update_attempter.cc:505] Updating boot flags... Oct 2 19:38:24.247432 kubelet[2237]: I1002 19:38:24.247290 2237 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 19:38:24.247432 kubelet[2237]: I1002 19:38:24.247374 2237 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:38:24.248011 kubelet[2237]: I1002 19:38:24.247720 2237 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 19:38:24.257742 kubelet[2237]: E1002 19:38:24.257705 2237 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.25.109:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.25.109:6443: connect: connection refused Oct 2 19:38:24.260559 kubelet[2237]: I1002 19:38:24.260519 2237 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:38:24.270878 kubelet[2237]: W1002 19:38:24.270838 2237 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:38:24.272468 kubelet[2237]: I1002 19:38:24.272434 2237 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:38:24.277012 kubelet[2237]: I1002 19:38:24.276977 2237 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:38:24.277526 kubelet[2237]: I1002 19:38:24.277498 2237 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 19:38:24.277799 kubelet[2237]: I1002 19:38:24.277776 2237 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 19:38:24.277960 kubelet[2237]: I1002 19:38:24.277938 2237 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 19:38:24.278282 kubelet[2237]: I1002 19:38:24.278261 2237 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:38:24.279113 kubelet[2237]: I1002 19:38:24.279089 2237 kubelet.go:393] "Attempting to sync node with API server" Oct 2 19:38:24.279971 kubelet[2237]: I1002 19:38:24.279897 2237 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:38:24.279971 kubelet[2237]: I1002 19:38:24.279968 2237 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:38:24.280159 kubelet[2237]: I1002 19:38:24.280096 2237 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:38:24.283559 kubelet[2237]: W1002 19:38:24.283461 2237 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.25.109:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-109&limit=500&resourceVersion=0": dial tcp 172.31.25.109:6443: connect: connection refused Oct 2 19:38:24.285389 kubelet[2237]: E1002 19:38:24.283783 2237 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.25.109:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-109&limit=500&resourceVersion=0": dial tcp 172.31.25.109:6443: connect: connection refused Oct 2 19:38:24.285389 kubelet[2237]: W1002 19:38:24.284527 2237 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.25.109:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.25.109:6443: connect: connection refused Oct 2 19:38:24.285389 kubelet[2237]: E1002 19:38:24.284598 2237 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.25.109:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.25.109:6443: connect: connection refused Oct 2 19:38:24.285389 kubelet[2237]: I1002 19:38:24.284840 2237 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:38:24.285967 kubelet[2237]: W1002 19:38:24.285943 2237 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:38:24.287572 kubelet[2237]: I1002 19:38:24.287519 2237 server.go:1232] "Started kubelet" Oct 2 19:38:24.293662 kubelet[2237]: I1002 19:38:24.293606 2237 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:38:24.295329 kubelet[2237]: I1002 19:38:24.295249 2237 server.go:462] "Adding debug handlers to kubelet server" Oct 2 19:38:24.297889 kubelet[2237]: I1002 19:38:24.297815 2237 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:38:24.302769 kubelet[2237]: E1002 19:38:24.302686 2237 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:38:24.302769 kubelet[2237]: E1002 19:38:24.302760 2237 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:38:24.303263 kubelet[2237]: E1002 19:38:24.303031 2237 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-25-109.178a61957a408ea4", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-25-109", UID:"ip-172-31-25-109", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-25-109"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 287485604, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 287485604, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ip-172-31-25-109"}': 'Post "https://172.31.25.109:6443/api/v1/namespaces/default/events": dial tcp 172.31.25.109:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:38:24.307470 kubelet[2237]: I1002 19:38:24.307412 2237 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 19:38:24.308000 audit[2237]: AVC avc: denied { mac_admin } for pid=2237 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:24.308000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:38:24.308000 audit[2237]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000cdaae0 a1=4000ab7338 a2=4000cdaab0 a3=25 items=0 ppid=1 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.308000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:38:24.310093 kubelet[2237]: I1002 19:38:24.310054 2237 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:38:24.309000 audit[2237]: AVC avc: denied { mac_admin } for pid=2237 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:24.309000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:38:24.309000 audit[2237]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000cc0740 a1=4000ab7350 a2=4000cdab70 a3=25 items=0 ppid=1 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.309000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:38:24.315423 kubelet[2237]: I1002 19:38:24.315378 2237 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:38:24.315785 kubelet[2237]: I1002 19:38:24.315758 2237 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:38:24.316429 kubelet[2237]: I1002 19:38:24.316333 2237 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 19:38:24.318729 kubelet[2237]: E1002 19:38:24.318695 2237 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.109:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-109?timeout=10s\": dial tcp 172.31.25.109:6443: connect: connection refused" interval="200ms" Oct 2 19:38:24.319585 kubelet[2237]: W1002 19:38:24.319526 2237 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.25.109:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.25.109:6443: connect: connection refused Oct 2 19:38:24.319775 kubelet[2237]: E1002 19:38:24.319752 2237 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.25.109:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.25.109:6443: connect: connection refused Oct 2 19:38:24.320458 kubelet[2237]: I1002 19:38:24.320362 2237 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:38:24.320804 kubelet[2237]: I1002 19:38:24.320780 2237 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 19:38:24.379000 audit[2420]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2420 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.379000 audit[2420]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffedbda820 a2=0 a3=1 items=0 ppid=2237 pid=2420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.379000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:38:24.414000 audit[2427]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2427 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.414000 audit[2427]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff6b1cf70 a2=0 a3=1 items=0 ppid=2237 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.414000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:38:24.432814 kubelet[2237]: I1002 19:38:24.432768 2237 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-109" Oct 2 19:38:24.433719 kubelet[2237]: E1002 19:38:24.433676 2237 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.25.109:6443/api/v1/nodes\": dial tcp 172.31.25.109:6443: connect: connection refused" node="ip-172-31-25-109" Oct 2 19:38:24.447000 audit[2435]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2435 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.447000 audit[2435]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe0956750 a2=0 a3=1 items=0 ppid=2237 pid=2435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.447000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:38:24.489731 kubelet[2237]: I1002 19:38:24.489320 2237 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:38:24.489731 kubelet[2237]: I1002 19:38:24.489366 2237 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:38:24.489731 kubelet[2237]: I1002 19:38:24.489403 2237 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:38:24.503417 kubelet[2237]: I1002 19:38:24.499556 2237 policy_none.go:49] "None policy: Start" Oct 2 19:38:24.503417 kubelet[2237]: I1002 19:38:24.500844 2237 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:38:24.503417 kubelet[2237]: I1002 19:38:24.500908 2237 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:38:24.513000 audit[2438]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.514759 systemd[1]: Created slice kubepods.slice. Oct 2 19:38:24.513000 audit[2438]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffffe8a02c0 a2=0 a3=1 items=0 ppid=2237 pid=2438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.513000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:38:24.523916 kubelet[2237]: E1002 19:38:24.523882 2237 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.109:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-109?timeout=10s\": dial tcp 172.31.25.109:6443: connect: connection refused" interval="400ms" Oct 2 19:38:24.529276 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:38:24.537795 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:38:24.553000 audit[2441]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.553000 audit[2441]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffe53c32f0 a2=0 a3=1 items=0 ppid=2237 pid=2441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.553000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:38:24.554166 kubelet[2237]: I1002 19:38:24.554136 2237 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 19:38:24.561598 kubelet[2237]: I1002 19:38:24.561564 2237 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:38:24.562000 audit[2237]: AVC avc: denied { mac_admin } for pid=2237 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:24.562000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:38:24.562000 audit[2237]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000cfe660 a1=4000d80f18 a2=4000cfe630 a3=25 items=0 ppid=1 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.562000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:38:24.563776 kubelet[2237]: I1002 19:38:24.563744 2237 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:38:24.564208 kubelet[2237]: I1002 19:38:24.564183 2237 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:38:24.564000 audit[2443]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2443 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:24.564000 audit[2443]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd5d5aa70 a2=0 a3=1 items=0 ppid=2237 pid=2443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.564000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:38:24.567000 audit[2442]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2442 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.567000 audit[2442]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdd3912d0 a2=0 a3=1 items=0 ppid=2237 pid=2442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.567000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:38:24.568742 kubelet[2237]: E1002 19:38:24.568711 2237 eviction_manager.go:258] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-25-109\" not found" Oct 2 19:38:24.570058 kubelet[2237]: I1002 19:38:24.569199 2237 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 19:38:24.571080 kubelet[2237]: I1002 19:38:24.570928 2237 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 19:38:24.571080 kubelet[2237]: I1002 19:38:24.571002 2237 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 19:38:24.571244 kubelet[2237]: E1002 19:38:24.571101 2237 kubelet.go:2327] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:38:24.574467 kubelet[2237]: W1002 19:38:24.574387 2237 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.25.109:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.25.109:6443: connect: connection refused Oct 2 19:38:24.574622 kubelet[2237]: E1002 19:38:24.574473 2237 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.25.109:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.25.109:6443: connect: connection refused Oct 2 19:38:24.576000 audit[2447]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=2447 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:24.576000 audit[2447]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff61ced60 a2=0 a3=1 items=0 ppid=2237 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.576000 audit[2446]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2446 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.576000 audit[2446]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffd70e390 a2=0 a3=1 items=0 ppid=2237 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.576000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:38:24.576000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:38:24.581000 audit[2449]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=2449 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:24.581000 audit[2449]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffc02b1f60 a2=0 a3=1 items=0 ppid=2237 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.581000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:38:24.581000 audit[2448]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=2448 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.581000 audit[2448]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffddcf4380 a2=0 a3=1 items=0 ppid=2237 pid=2448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.581000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:38:24.585000 audit[2450]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2450 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:24.585000 audit[2450]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe8f73210 a2=0 a3=1 items=0 ppid=2237 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.585000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:38:24.635793 kubelet[2237]: I1002 19:38:24.635762 2237 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-109" Oct 2 19:38:24.636585 kubelet[2237]: E1002 19:38:24.636559 2237 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.25.109:6443/api/v1/nodes\": dial tcp 172.31.25.109:6443: connect: connection refused" node="ip-172-31-25-109" Oct 2 19:38:24.671972 kubelet[2237]: I1002 19:38:24.671949 2237 topology_manager.go:215] "Topology Admit Handler" podUID="2f18a0f75c5eff149af9844a46c51d6a" podNamespace="kube-system" podName="kube-apiserver-ip-172-31-25-109" Oct 2 19:38:24.673906 kubelet[2237]: I1002 19:38:24.673867 2237 topology_manager.go:215] "Topology Admit Handler" podUID="a975c339d5e9e36fae1afbd6de8d35fd" podNamespace="kube-system" podName="kube-controller-manager-ip-172-31-25-109" Oct 2 19:38:24.675808 kubelet[2237]: I1002 19:38:24.675774 2237 topology_manager.go:215] "Topology Admit Handler" podUID="e51e5e1c1d8cea61fdb6646aff1972ed" podNamespace="kube-system" podName="kube-scheduler-ip-172-31-25-109" Oct 2 19:38:24.689116 systemd[1]: Created slice kubepods-burstable-pod2f18a0f75c5eff149af9844a46c51d6a.slice. Oct 2 19:38:24.710887 systemd[1]: Created slice kubepods-burstable-pode51e5e1c1d8cea61fdb6646aff1972ed.slice. Oct 2 19:38:24.718266 systemd[1]: Created slice kubepods-burstable-poda975c339d5e9e36fae1afbd6de8d35fd.slice. Oct 2 19:38:24.732091 kubelet[2237]: I1002 19:38:24.732043 2237 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/2f18a0f75c5eff149af9844a46c51d6a-k8s-certs\") pod \"kube-apiserver-ip-172-31-25-109\" (UID: \"2f18a0f75c5eff149af9844a46c51d6a\") " pod="kube-system/kube-apiserver-ip-172-31-25-109" Oct 2 19:38:24.732270 kubelet[2237]: I1002 19:38:24.732114 2237 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/2f18a0f75c5eff149af9844a46c51d6a-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-25-109\" (UID: \"2f18a0f75c5eff149af9844a46c51d6a\") " pod="kube-system/kube-apiserver-ip-172-31-25-109" Oct 2 19:38:24.732270 kubelet[2237]: I1002 19:38:24.732170 2237 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/a975c339d5e9e36fae1afbd6de8d35fd-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-25-109\" (UID: \"a975c339d5e9e36fae1afbd6de8d35fd\") " pod="kube-system/kube-controller-manager-ip-172-31-25-109" Oct 2 19:38:24.732270 kubelet[2237]: I1002 19:38:24.732217 2237 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/a975c339d5e9e36fae1afbd6de8d35fd-k8s-certs\") pod \"kube-controller-manager-ip-172-31-25-109\" (UID: \"a975c339d5e9e36fae1afbd6de8d35fd\") " pod="kube-system/kube-controller-manager-ip-172-31-25-109" Oct 2 19:38:24.732270 kubelet[2237]: I1002 19:38:24.732264 2237 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a975c339d5e9e36fae1afbd6de8d35fd-kubeconfig\") pod \"kube-controller-manager-ip-172-31-25-109\" (UID: \"a975c339d5e9e36fae1afbd6de8d35fd\") " pod="kube-system/kube-controller-manager-ip-172-31-25-109" Oct 2 19:38:24.732566 kubelet[2237]: I1002 19:38:24.732356 2237 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/2f18a0f75c5eff149af9844a46c51d6a-ca-certs\") pod \"kube-apiserver-ip-172-31-25-109\" (UID: \"2f18a0f75c5eff149af9844a46c51d6a\") " pod="kube-system/kube-apiserver-ip-172-31-25-109" Oct 2 19:38:24.732566 kubelet[2237]: I1002 19:38:24.732423 2237 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/a975c339d5e9e36fae1afbd6de8d35fd-ca-certs\") pod \"kube-controller-manager-ip-172-31-25-109\" (UID: \"a975c339d5e9e36fae1afbd6de8d35fd\") " pod="kube-system/kube-controller-manager-ip-172-31-25-109" Oct 2 19:38:24.732566 kubelet[2237]: I1002 19:38:24.732502 2237 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/a975c339d5e9e36fae1afbd6de8d35fd-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-25-109\" (UID: \"a975c339d5e9e36fae1afbd6de8d35fd\") " pod="kube-system/kube-controller-manager-ip-172-31-25-109" Oct 2 19:38:24.732566 kubelet[2237]: I1002 19:38:24.732545 2237 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/e51e5e1c1d8cea61fdb6646aff1972ed-kubeconfig\") pod \"kube-scheduler-ip-172-31-25-109\" (UID: \"e51e5e1c1d8cea61fdb6646aff1972ed\") " pod="kube-system/kube-scheduler-ip-172-31-25-109" Oct 2 19:38:24.926432 kubelet[2237]: E1002 19:38:24.925595 2237 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.109:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-109?timeout=10s\": dial tcp 172.31.25.109:6443: connect: connection refused" interval="800ms" Oct 2 19:38:25.006794 env[1566]: time="2023-10-02T19:38:25.006714143Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-25-109,Uid:2f18a0f75c5eff149af9844a46c51d6a,Namespace:kube-system,Attempt:0,}" Oct 2 19:38:25.018688 env[1566]: time="2023-10-02T19:38:25.018634132Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-25-109,Uid:e51e5e1c1d8cea61fdb6646aff1972ed,Namespace:kube-system,Attempt:0,}" Oct 2 19:38:25.024750 env[1566]: time="2023-10-02T19:38:25.024697296Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-25-109,Uid:a975c339d5e9e36fae1afbd6de8d35fd,Namespace:kube-system,Attempt:0,}" Oct 2 19:38:25.041035 kubelet[2237]: I1002 19:38:25.041000 2237 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-109" Oct 2 19:38:25.041816 kubelet[2237]: E1002 19:38:25.041788 2237 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.25.109:6443/api/v1/nodes\": dial tcp 172.31.25.109:6443: connect: connection refused" node="ip-172-31-25-109" Oct 2 19:38:25.116565 kubelet[2237]: W1002 19:38:25.116440 2237 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.25.109:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-109&limit=500&resourceVersion=0": dial tcp 172.31.25.109:6443: connect: connection refused Oct 2 19:38:25.116565 kubelet[2237]: E1002 19:38:25.116521 2237 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.25.109:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-109&limit=500&resourceVersion=0": dial tcp 172.31.25.109:6443: connect: connection refused Oct 2 19:38:25.235636 kubelet[2237]: W1002 19:38:25.235522 2237 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.25.109:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.25.109:6443: connect: connection refused Oct 2 19:38:25.235636 kubelet[2237]: E1002 19:38:25.235605 2237 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.25.109:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.25.109:6443: connect: connection refused Oct 2 19:38:25.504913 kubelet[2237]: W1002 19:38:25.497142 2237 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.25.109:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.25.109:6443: connect: connection refused Oct 2 19:38:25.504913 kubelet[2237]: E1002 19:38:25.497231 2237 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.25.109:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.25.109:6443: connect: connection refused Oct 2 19:38:25.513679 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount521041383.mount: Deactivated successfully. Oct 2 19:38:25.517942 env[1566]: time="2023-10-02T19:38:25.517889238Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.523844 env[1566]: time="2023-10-02T19:38:25.523794161Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.526633 env[1566]: time="2023-10-02T19:38:25.526585328Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.528740 env[1566]: time="2023-10-02T19:38:25.528695779Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.532934 env[1566]: time="2023-10-02T19:38:25.532870708Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.536401 env[1566]: time="2023-10-02T19:38:25.534798846Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.545233 env[1566]: time="2023-10-02T19:38:25.541525576Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.548082 env[1566]: time="2023-10-02T19:38:25.548034481Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.552171 env[1566]: time="2023-10-02T19:38:25.552096628Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.556201 env[1566]: time="2023-10-02T19:38:25.556114936Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.558355 env[1566]: time="2023-10-02T19:38:25.558271003Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.560403 env[1566]: time="2023-10-02T19:38:25.560297954Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.621668 env[1566]: time="2023-10-02T19:38:25.618771190Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:38:25.621668 env[1566]: time="2023-10-02T19:38:25.618837313Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:38:25.621668 env[1566]: time="2023-10-02T19:38:25.618862887Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:38:25.621668 env[1566]: time="2023-10-02T19:38:25.619248577Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3fcd8a37f02e8f2714a31a81a2ab72dd852da5ef3df174988187fa2a6018cbe5 pid=2460 runtime=io.containerd.runc.v2 Oct 2 19:38:25.658563 env[1566]: time="2023-10-02T19:38:25.658439502Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:38:25.658761 env[1566]: time="2023-10-02T19:38:25.658591010Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:38:25.658761 env[1566]: time="2023-10-02T19:38:25.658682408Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:38:25.659537 env[1566]: time="2023-10-02T19:38:25.659441919Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3f1854cbd2af2e50bb86708daa569f42c29c79fc4ed4139eb8d0bcb9b588b262 pid=2489 runtime=io.containerd.runc.v2 Oct 2 19:38:25.669855 systemd[1]: Started cri-containerd-3fcd8a37f02e8f2714a31a81a2ab72dd852da5ef3df174988187fa2a6018cbe5.scope. Oct 2 19:38:25.681502 env[1566]: time="2023-10-02T19:38:25.679140173Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:38:25.681502 env[1566]: time="2023-10-02T19:38:25.679209057Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:38:25.681502 env[1566]: time="2023-10-02T19:38:25.679235255Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:38:25.681502 env[1566]: time="2023-10-02T19:38:25.679555829Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/975cecb9ccd71b271cefc7d9a09d92a3d49e448817287a09295d934bec18a292 pid=2496 runtime=io.containerd.runc.v2 Oct 2 19:38:25.729498 systemd[1]: Started cri-containerd-975cecb9ccd71b271cefc7d9a09d92a3d49e448817287a09295d934bec18a292.scope. Oct 2 19:38:25.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.735000 audit: BPF prog-id=73 op=LOAD Oct 2 19:38:25.736620 kubelet[2237]: E1002 19:38:25.736380 2237 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.109:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-109?timeout=10s\": dial tcp 172.31.25.109:6443: connect: connection refused" interval="1.6s" Oct 2 19:38:25.737000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.737000 audit[2479]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2460 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366636438613337663032653866323731346133316138316132616237 Oct 2 19:38:25.738000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.738000 audit[2479]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2460 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.738000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366636438613337663032653866323731346133316138316132616237 Oct 2 19:38:25.738000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.738000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.738000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.738000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.738000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.738000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.738000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.738000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.738000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.738000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.738000 audit: BPF prog-id=74 op=LOAD Oct 2 19:38:25.738000 audit[2479]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2460 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.738000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366636438613337663032653866323731346133316138316132616237 Oct 2 19:38:25.741000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.741000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.741000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.741000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.741000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.741000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.741000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.741000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.741000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.741000 audit: BPF prog-id=75 op=LOAD Oct 2 19:38:25.741000 audit[2479]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2460 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366636438613337663032653866323731346133316138316132616237 Oct 2 19:38:25.742000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:38:25.742000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:38:25.743000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.743000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.743000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.743000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.743000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.743000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.743000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.743000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.743000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.743000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.743000 audit: BPF prog-id=76 op=LOAD Oct 2 19:38:25.743000 audit[2479]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2460 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.743000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366636438613337663032653866323731346133316138316132616237 Oct 2 19:38:25.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.779000 audit: BPF prog-id=77 op=LOAD Oct 2 19:38:25.784000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.784000 audit[2514]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2496 pid=2514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.784000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937356365636239636364373162323731636566633764396130396439 Oct 2 19:38:25.785000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.785000 audit[2514]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2496 pid=2514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937356365636239636364373162323731636566633764396130396439 Oct 2 19:38:25.785000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.785000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.785000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.785000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.785000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.785000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.785000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.785000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.785000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.785000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.785000 audit: BPF prog-id=78 op=LOAD Oct 2 19:38:25.785000 audit[2514]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2496 pid=2514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937356365636239636364373162323731636566633764396130396439 Oct 2 19:38:25.787000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.787000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.787000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.787000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.787000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.787000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.787000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.787000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.787000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.787000 audit: BPF prog-id=79 op=LOAD Oct 2 19:38:25.787000 audit[2514]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2496 pid=2514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937356365636239636364373162323731636566633764396130396439 Oct 2 19:38:25.789000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:38:25.789000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:38:25.789000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.789000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.789000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.789000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.789000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.789000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.789000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.789000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.789000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.789000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.789000 audit: BPF prog-id=80 op=LOAD Oct 2 19:38:25.789000 audit[2514]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2496 pid=2514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.789000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937356365636239636364373162323731636566633764396130396439 Oct 2 19:38:25.826880 systemd[1]: Started cri-containerd-3f1854cbd2af2e50bb86708daa569f42c29c79fc4ed4139eb8d0bcb9b588b262.scope. Oct 2 19:38:25.836893 env[1566]: time="2023-10-02T19:38:25.836824530Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-25-109,Uid:a975c339d5e9e36fae1afbd6de8d35fd,Namespace:kube-system,Attempt:0,} returns sandbox id \"3fcd8a37f02e8f2714a31a81a2ab72dd852da5ef3df174988187fa2a6018cbe5\"" Oct 2 19:38:25.847394 env[1566]: time="2023-10-02T19:38:25.847284564Z" level=info msg="CreateContainer within sandbox \"3fcd8a37f02e8f2714a31a81a2ab72dd852da5ef3df174988187fa2a6018cbe5\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:38:25.848974 kubelet[2237]: I1002 19:38:25.848924 2237 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-109" Oct 2 19:38:25.849475 kubelet[2237]: E1002 19:38:25.849444 2237 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.25.109:6443/api/v1/nodes\": dial tcp 172.31.25.109:6443: connect: connection refused" node="ip-172-31-25-109" Oct 2 19:38:25.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.883000 audit: BPF prog-id=81 op=LOAD Oct 2 19:38:25.885000 audit[2515]: AVC avc: denied { bpf } for pid=2515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.885000 audit[2515]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2489 pid=2515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.885000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366313835346362643261663265353062623836373038646161353639 Oct 2 19:38:25.885000 audit[2515]: AVC avc: denied { perfmon } for pid=2515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.885000 audit[2515]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2489 pid=2515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.885000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366313835346362643261663265353062623836373038646161353639 Oct 2 19:38:25.886000 audit[2515]: AVC avc: denied { bpf } for pid=2515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.886000 audit[2515]: AVC avc: denied { bpf } for pid=2515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.886000 audit[2515]: AVC avc: denied { bpf } for pid=2515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.886000 audit[2515]: AVC avc: denied { perfmon } for pid=2515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.886000 audit[2515]: AVC avc: denied { perfmon } for pid=2515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.886000 audit[2515]: AVC avc: denied { perfmon } for pid=2515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.886000 audit[2515]: AVC avc: denied { perfmon } for pid=2515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.886000 audit[2515]: AVC avc: denied { perfmon } for pid=2515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.886000 audit[2515]: AVC avc: denied { bpf } for pid=2515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.886000 audit[2515]: AVC avc: denied { bpf } for pid=2515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.886000 audit: BPF prog-id=82 op=LOAD Oct 2 19:38:25.886000 audit[2515]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2489 pid=2515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366313835346362643261663265353062623836373038646161353639 Oct 2 19:38:25.888000 audit[2515]: AVC avc: denied { bpf } for pid=2515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.888000 audit[2515]: AVC avc: denied { bpf } for pid=2515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.888000 audit[2515]: AVC avc: denied { perfmon } for pid=2515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.888000 audit[2515]: AVC avc: denied { perfmon } for pid=2515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.888000 audit[2515]: AVC avc: denied { perfmon } for pid=2515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.888000 audit[2515]: AVC avc: denied { perfmon } for pid=2515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.888000 audit[2515]: AVC avc: denied { perfmon } for pid=2515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.888000 audit[2515]: AVC avc: denied { bpf } for pid=2515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.888000 audit[2515]: AVC avc: denied { bpf } for pid=2515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.888000 audit: BPF prog-id=83 op=LOAD Oct 2 19:38:25.888000 audit[2515]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2489 pid=2515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366313835346362643261663265353062623836373038646161353639 Oct 2 19:38:25.889000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:38:25.889000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:38:25.890000 audit[2515]: AVC avc: denied { bpf } for pid=2515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.890000 audit[2515]: AVC avc: denied { bpf } for pid=2515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.890000 audit[2515]: AVC avc: denied { bpf } for pid=2515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.890000 audit[2515]: AVC avc: denied { perfmon } for pid=2515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.890000 audit[2515]: AVC avc: denied { perfmon } for pid=2515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.890000 audit[2515]: AVC avc: denied { perfmon } for pid=2515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.890000 audit[2515]: AVC avc: denied { perfmon } for pid=2515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.890000 audit[2515]: AVC avc: denied { perfmon } for pid=2515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.890000 audit[2515]: AVC avc: denied { bpf } for pid=2515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.890000 audit[2515]: AVC avc: denied { bpf } for pid=2515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.890000 audit: BPF prog-id=84 op=LOAD Oct 2 19:38:25.890000 audit[2515]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2489 pid=2515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366313835346362643261663265353062623836373038646161353639 Oct 2 19:38:25.900888 env[1566]: time="2023-10-02T19:38:25.900819711Z" level=info msg="CreateContainer within sandbox \"3fcd8a37f02e8f2714a31a81a2ab72dd852da5ef3df174988187fa2a6018cbe5\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"23f62abd598474bae09934929faa571da2d319e30e5c28c26e8f54504f28f4c3\"" Oct 2 19:38:25.902423 env[1566]: time="2023-10-02T19:38:25.902370788Z" level=info msg="StartContainer for \"23f62abd598474bae09934929faa571da2d319e30e5c28c26e8f54504f28f4c3\"" Oct 2 19:38:25.936981 env[1566]: time="2023-10-02T19:38:25.935217204Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-25-109,Uid:2f18a0f75c5eff149af9844a46c51d6a,Namespace:kube-system,Attempt:0,} returns sandbox id \"975cecb9ccd71b271cefc7d9a09d92a3d49e448817287a09295d934bec18a292\"" Oct 2 19:38:25.943113 env[1566]: time="2023-10-02T19:38:25.943028292Z" level=info msg="CreateContainer within sandbox \"975cecb9ccd71b271cefc7d9a09d92a3d49e448817287a09295d934bec18a292\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:38:25.972403 env[1566]: time="2023-10-02T19:38:25.972201648Z" level=info msg="CreateContainer within sandbox \"975cecb9ccd71b271cefc7d9a09d92a3d49e448817287a09295d934bec18a292\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"bb431e650cbc570e509c3fc2ceb2f5516bc0d091a2e49c9f2141c6e3fd51ab35\"" Oct 2 19:38:25.972930 env[1566]: time="2023-10-02T19:38:25.972654686Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-25-109,Uid:e51e5e1c1d8cea61fdb6646aff1972ed,Namespace:kube-system,Attempt:0,} returns sandbox id \"3f1854cbd2af2e50bb86708daa569f42c29c79fc4ed4139eb8d0bcb9b588b262\"" Oct 2 19:38:25.974831 env[1566]: time="2023-10-02T19:38:25.974719319Z" level=info msg="StartContainer for \"bb431e650cbc570e509c3fc2ceb2f5516bc0d091a2e49c9f2141c6e3fd51ab35\"" Oct 2 19:38:25.986859 env[1566]: time="2023-10-02T19:38:25.986015117Z" level=info msg="CreateContainer within sandbox \"3f1854cbd2af2e50bb86708daa569f42c29c79fc4ed4139eb8d0bcb9b588b262\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:38:25.988088 systemd[1]: Started cri-containerd-23f62abd598474bae09934929faa571da2d319e30e5c28c26e8f54504f28f4c3.scope. Oct 2 19:38:26.015621 kubelet[2237]: W1002 19:38:26.015465 2237 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.25.109:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.25.109:6443: connect: connection refused Oct 2 19:38:26.015621 kubelet[2237]: E1002 19:38:26.015548 2237 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.25.109:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.25.109:6443: connect: connection refused Oct 2 19:38:26.022809 env[1566]: time="2023-10-02T19:38:26.022744319Z" level=info msg="CreateContainer within sandbox \"3f1854cbd2af2e50bb86708daa569f42c29c79fc4ed4139eb8d0bcb9b588b262\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"33c1982c233c6e01c0da254bee6f3166875121053fb1eb492a5462cf4fa5eaa4\"" Oct 2 19:38:26.025664 env[1566]: time="2023-10-02T19:38:26.025555135Z" level=info msg="StartContainer for \"33c1982c233c6e01c0da254bee6f3166875121053fb1eb492a5462cf4fa5eaa4\"" Oct 2 19:38:26.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.035000 audit: BPF prog-id=85 op=LOAD Oct 2 19:38:26.041000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.041000 audit[2579]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2460 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233663632616264353938343734626165303939333439323966616135 Oct 2 19:38:26.043000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.043000 audit[2579]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2460 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233663632616264353938343734626165303939333439323966616135 Oct 2 19:38:26.044000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.044000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.044000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.044000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.044000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.044000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.044000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.044000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.044000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.044000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.044000 audit: BPF prog-id=86 op=LOAD Oct 2 19:38:26.044000 audit[2579]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2460 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233663632616264353938343734626165303939333439323966616135 Oct 2 19:38:26.045000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.045000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.045000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.045000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.045000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.045000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.045000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.045000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.045000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.045000 audit: BPF prog-id=87 op=LOAD Oct 2 19:38:26.045000 audit[2579]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2460 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233663632616264353938343734626165303939333439323966616135 Oct 2 19:38:26.047000 audit: BPF prog-id=87 op=UNLOAD Oct 2 19:38:26.048000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:38:26.048000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.048000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.048000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.048000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.048000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.048000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.048000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.048000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.048000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.048000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.048000 audit: BPF prog-id=88 op=LOAD Oct 2 19:38:26.048000 audit[2579]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2460 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.048000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233663632616264353938343734626165303939333439323966616135 Oct 2 19:38:26.102639 systemd[1]: Started cri-containerd-bb431e650cbc570e509c3fc2ceb2f5516bc0d091a2e49c9f2141c6e3fd51ab35.scope. Oct 2 19:38:26.124938 env[1566]: time="2023-10-02T19:38:26.124874157Z" level=info msg="StartContainer for \"23f62abd598474bae09934929faa571da2d319e30e5c28c26e8f54504f28f4c3\" returns successfully" Oct 2 19:38:26.139949 systemd[1]: Started cri-containerd-33c1982c233c6e01c0da254bee6f3166875121053fb1eb492a5462cf4fa5eaa4.scope. Oct 2 19:38:26.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.179000 audit: BPF prog-id=89 op=LOAD Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { bpf } for pid=2616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2496 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262343331653635306362633537306535303963336663326365623266 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { perfmon } for pid=2616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2496 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262343331653635306362633537306535303963336663326365623266 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { bpf } for pid=2616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { bpf } for pid=2616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { bpf } for pid=2616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { perfmon } for pid=2616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { perfmon } for pid=2616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { perfmon } for pid=2616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { perfmon } for pid=2616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { perfmon } for pid=2616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { bpf } for pid=2616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { bpf } for pid=2616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit: BPF prog-id=90 op=LOAD Oct 2 19:38:26.180000 audit[2616]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2496 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262343331653635306362633537306535303963336663326365623266 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { bpf } for pid=2616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { bpf } for pid=2616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { perfmon } for pid=2616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { perfmon } for pid=2616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { perfmon } for pid=2616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { perfmon } for pid=2616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { perfmon } for pid=2616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { bpf } for pid=2616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { bpf } for pid=2616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit: BPF prog-id=91 op=LOAD Oct 2 19:38:26.180000 audit[2616]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2496 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262343331653635306362633537306535303963336663326365623266 Oct 2 19:38:26.180000 audit: BPF prog-id=91 op=UNLOAD Oct 2 19:38:26.180000 audit: BPF prog-id=90 op=UNLOAD Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { bpf } for pid=2616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { bpf } for pid=2616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { bpf } for pid=2616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { perfmon } for pid=2616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { perfmon } for pid=2616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { perfmon } for pid=2616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { perfmon } for pid=2616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { perfmon } for pid=2616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { bpf } for pid=2616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit[2616]: AVC avc: denied { bpf } for pid=2616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.180000 audit: BPF prog-id=92 op=LOAD Oct 2 19:38:26.180000 audit[2616]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2496 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262343331653635306362633537306535303963336663326365623266 Oct 2 19:38:26.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.213000 audit: BPF prog-id=93 op=LOAD Oct 2 19:38:26.214000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.214000 audit[2618]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2489 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333633139383263323333633665303163306461323534626565366633 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2489 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333633139383263323333633665303163306461323534626565366633 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit: BPF prog-id=94 op=LOAD Oct 2 19:38:26.215000 audit[2618]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2489 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333633139383263323333633665303163306461323534626565366633 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit: BPF prog-id=95 op=LOAD Oct 2 19:38:26.215000 audit[2618]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2489 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333633139383263323333633665303163306461323534626565366633 Oct 2 19:38:26.215000 audit: BPF prog-id=95 op=UNLOAD Oct 2 19:38:26.215000 audit: BPF prog-id=94 op=UNLOAD Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { perfmon } for pid=2618 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit[2618]: AVC avc: denied { bpf } for pid=2618 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.215000 audit: BPF prog-id=96 op=LOAD Oct 2 19:38:26.215000 audit[2618]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2489 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333633139383263323333633665303163306461323534626565366633 Oct 2 19:38:26.278528 env[1566]: time="2023-10-02T19:38:26.278424152Z" level=info msg="StartContainer for \"bb431e650cbc570e509c3fc2ceb2f5516bc0d091a2e49c9f2141c6e3fd51ab35\" returns successfully" Oct 2 19:38:26.332667 env[1566]: time="2023-10-02T19:38:26.332532034Z" level=info msg="StartContainer for \"33c1982c233c6e01c0da254bee6f3166875121053fb1eb492a5462cf4fa5eaa4\" returns successfully" Oct 2 19:38:26.368171 kubelet[2237]: E1002 19:38:26.368130 2237 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.25.109:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.25.109:6443: connect: connection refused Oct 2 19:38:27.451716 kubelet[2237]: I1002 19:38:27.451681 2237 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-109" Oct 2 19:38:28.089387 kernel: kauditd_printk_skb: 557 callbacks suppressed Oct 2 19:38:28.089513 kernel: audit: type=1400 audit(1696275508.081:727): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:28.081000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:28.081000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40002d6510 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:38:28.109340 kernel: audit: type=1300 audit(1696275508.081:727): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40002d6510 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:38:28.081000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:28.123277 kernel: audit: type=1327 audit(1696275508.081:727): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:28.123498 kernel: audit: type=1400 audit(1696275508.093:728): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:28.093000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:28.093000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400040c040 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:38:28.145705 kernel: audit: type=1300 audit(1696275508.093:728): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400040c040 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:38:28.145882 kernel: audit: type=1327 audit(1696275508.093:728): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:28.093000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:29.666000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:29.681349 kernel: audit: type=1400 audit(1696275509.666:729): avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:29.666000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4004118a50 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:38:29.666000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:38:29.710932 kernel: audit: type=1300 audit(1696275509.666:729): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4004118a50 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:38:29.711061 kernel: audit: type=1327 audit(1696275509.666:729): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:38:29.677000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:29.724917 kernel: audit: type=1400 audit(1696275509.677:730): avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:29.677000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40060ecd00 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:38:29.677000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:38:29.815000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:29.815000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40030f9c80 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:38:29.815000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:38:29.823000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:29.823000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40030f9e00 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:38:29.823000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:38:29.895000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:29.895000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40051fc0e0 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:38:29.895000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:38:29.895000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:29.895000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=4003696f90 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:38:29.895000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:38:29.993730 kubelet[2237]: E1002 19:38:29.993674 2237 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-25-109\" not found" node="ip-172-31-25-109" Oct 2 19:38:30.043494 kubelet[2237]: I1002 19:38:30.043440 2237 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-25-109" Oct 2 19:38:30.287976 kubelet[2237]: I1002 19:38:30.287860 2237 apiserver.go:52] "Watching apiserver" Oct 2 19:38:30.321016 kubelet[2237]: I1002 19:38:30.320976 2237 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:38:30.656323 kubelet[2237]: E1002 19:38:30.656179 2237 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ip-172-31-25-109\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ip-172-31-25-109" Oct 2 19:38:32.885086 systemd[1]: Reloading. Oct 2 19:38:33.078742 /usr/lib/systemd/system-generators/torcx-generator[2712]: time="2023-10-02T19:38:33Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:38:33.078806 /usr/lib/systemd/system-generators/torcx-generator[2712]: time="2023-10-02T19:38:33Z" level=info msg="torcx already run" Oct 2 19:38:33.331468 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:38:33.331507 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:38:33.375936 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:38:33.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.564342 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:38:33.564409 kernel: audit: type=1400 audit(1696275513.560:735): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.583470 kernel: audit: type=1400 audit(1696275513.560:736): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.583559 kernel: audit: type=1400 audit(1696275513.560:737): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.599155 kernel: audit: type=1400 audit(1696275513.560:738): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.609153 kernel: audit: type=1400 audit(1696275513.560:739): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.609238 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:38:33.609395 kernel: audit: type=1400 audit(1696275513.560:740): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.619766 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:38:33.619867 kernel: audit: type=1400 audit(1696275513.560:741): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.627041 kernel: audit: backlog limit exceeded Oct 2 19:38:33.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.563000 audit: BPF prog-id=97 op=LOAD Oct 2 19:38:33.563000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:38:33.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.571000 audit: BPF prog-id=98 op=LOAD Oct 2 19:38:33.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.571000 audit: BPF prog-id=99 op=LOAD Oct 2 19:38:33.571000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:38:33.571000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:38:33.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.582000 audit: BPF prog-id=100 op=LOAD Oct 2 19:38:33.582000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:38:33.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.590000 audit: BPF prog-id=101 op=LOAD Oct 2 19:38:33.590000 audit: BPF prog-id=89 op=UNLOAD Oct 2 19:38:33.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.598000 audit: BPF prog-id=102 op=LOAD Oct 2 19:38:33.598000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:38:33.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.627000 audit: BPF prog-id=103 op=LOAD Oct 2 19:38:33.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.628000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:38:33.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.630000 audit: BPF prog-id=105 op=LOAD Oct 2 19:38:33.630000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:38:33.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.635000 audit: BPF prog-id=106 op=LOAD Oct 2 19:38:33.635000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:38:33.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.636000 audit: BPF prog-id=107 op=LOAD Oct 2 19:38:33.636000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit: BPF prog-id=108 op=LOAD Oct 2 19:38:33.638000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit: BPF prog-id=109 op=LOAD Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.638000 audit: BPF prog-id=110 op=LOAD Oct 2 19:38:33.638000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:38:33.638000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:38:33.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.641000 audit: BPF prog-id=111 op=LOAD Oct 2 19:38:33.641000 audit: BPF prog-id=93 op=UNLOAD Oct 2 19:38:33.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.643000 audit: BPF prog-id=112 op=LOAD Oct 2 19:38:33.643000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:38:33.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.645000 audit: BPF prog-id=113 op=LOAD Oct 2 19:38:33.645000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit: BPF prog-id=114 op=LOAD Oct 2 19:38:33.647000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit: BPF prog-id=115 op=LOAD Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.647000 audit: BPF prog-id=116 op=LOAD Oct 2 19:38:33.648000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:38:33.648000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:38:33.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:33.650000 audit: BPF prog-id=117 op=LOAD Oct 2 19:38:33.650000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:38:33.696293 systemd[1]: Stopping kubelet.service... Oct 2 19:38:33.719047 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:38:33.719489 systemd[1]: Stopped kubelet.service. Oct 2 19:38:33.719588 systemd[1]: kubelet.service: Consumed 1.988s CPU time. Oct 2 19:38:33.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:33.727000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:33.726762 systemd[1]: Started kubelet.service. Oct 2 19:38:33.905000 audit[2779]: USER_ACCT pid=2779 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:33.918830 sudo[2779]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:38:33.918000 audit[2779]: CRED_REFR pid=2779 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:33.920333 sudo[2779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:38:33.923000 audit[2779]: USER_START pid=2779 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:33.988724 kubelet[2768]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:38:33.988724 kubelet[2768]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:38:33.988724 kubelet[2768]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:38:33.989299 kubelet[2768]: I1002 19:38:33.989098 2768 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:38:34.011191 kubelet[2768]: I1002 19:38:34.011153 2768 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 19:38:34.011417 kubelet[2768]: I1002 19:38:34.011385 2768 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:38:34.011998 kubelet[2768]: I1002 19:38:34.011971 2768 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 19:38:34.016162 kubelet[2768]: I1002 19:38:34.016101 2768 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:38:34.020920 kubelet[2768]: I1002 19:38:34.020774 2768 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:38:34.038569 kubelet[2768]: W1002 19:38:34.038536 2768 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:38:34.040247 kubelet[2768]: I1002 19:38:34.040189 2768 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:38:34.041524 kubelet[2768]: I1002 19:38:34.041491 2768 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:38:34.041980 kubelet[2768]: I1002 19:38:34.041951 2768 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 19:38:34.042249 kubelet[2768]: I1002 19:38:34.042226 2768 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 19:38:34.042415 kubelet[2768]: I1002 19:38:34.042393 2768 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 19:38:34.042563 kubelet[2768]: I1002 19:38:34.042542 2768 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:38:34.048683 kubelet[2768]: I1002 19:38:34.048640 2768 kubelet.go:393] "Attempting to sync node with API server" Oct 2 19:38:34.048946 kubelet[2768]: I1002 19:38:34.048921 2768 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:38:34.049104 kubelet[2768]: I1002 19:38:34.049083 2768 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:38:34.063533 kubelet[2768]: I1002 19:38:34.063491 2768 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:38:34.075263 kubelet[2768]: I1002 19:38:34.075224 2768 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:38:34.079086 kubelet[2768]: I1002 19:38:34.079050 2768 server.go:1232] "Started kubelet" Oct 2 19:38:34.083000 audit[2768]: AVC avc: denied { mac_admin } for pid=2768 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.083000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:38:34.083000 audit[2768]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d2c960 a1=4000b63278 a2=4000d2c930 a3=25 items=0 ppid=1 pid=2768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:34.083000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:38:34.091205 kubelet[2768]: I1002 19:38:34.081557 2768 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:38:34.091761 kubelet[2768]: I1002 19:38:34.091735 2768 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 19:38:34.091919 kubelet[2768]: E1002 19:38:34.088619 2768 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:38:34.092044 kubelet[2768]: E1002 19:38:34.092023 2768 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:38:34.092273 kubelet[2768]: I1002 19:38:34.090610 2768 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:38:34.093762 kubelet[2768]: I1002 19:38:34.093727 2768 server.go:462] "Adding debug handlers to kubelet server" Oct 2 19:38:34.110054 kubelet[2768]: I1002 19:38:34.110005 2768 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:38:34.110000 audit[2768]: AVC avc: denied { mac_admin } for pid=2768 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.110000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:38:34.110000 audit[2768]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000cb1ca0 a1=4000cf61f8 a2=4000cad3b0 a3=25 items=0 ppid=1 pid=2768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:34.110000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:38:34.113010 kubelet[2768]: I1002 19:38:34.112977 2768 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:38:34.113166 kubelet[2768]: I1002 19:38:34.113144 2768 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:38:34.133737 kubelet[2768]: I1002 19:38:34.133702 2768 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 19:38:34.135449 kubelet[2768]: I1002 19:38:34.135415 2768 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:38:34.138139 kubelet[2768]: I1002 19:38:34.138104 2768 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 19:38:34.242747 kubelet[2768]: I1002 19:38:34.242714 2768 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-109" Oct 2 19:38:34.264984 kubelet[2768]: I1002 19:38:34.264948 2768 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-25-109" Oct 2 19:38:34.265261 kubelet[2768]: I1002 19:38:34.265241 2768 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-25-109" Oct 2 19:38:34.314731 kubelet[2768]: I1002 19:38:34.314656 2768 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 19:38:34.333255 kubelet[2768]: I1002 19:38:34.333221 2768 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:38:34.333481 kubelet[2768]: I1002 19:38:34.333458 2768 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:38:34.333634 kubelet[2768]: I1002 19:38:34.333614 2768 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:38:34.334021 kubelet[2768]: I1002 19:38:34.334000 2768 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:38:34.334164 kubelet[2768]: I1002 19:38:34.334142 2768 state_mem.go:96] "Updated CPUSet assignments" assignments={} Oct 2 19:38:34.334277 kubelet[2768]: I1002 19:38:34.334254 2768 policy_none.go:49] "None policy: Start" Oct 2 19:38:34.336168 kubelet[2768]: I1002 19:38:34.336135 2768 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:38:34.336422 kubelet[2768]: I1002 19:38:34.336401 2768 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:38:34.336780 kubelet[2768]: I1002 19:38:34.336744 2768 state_mem.go:75] "Updated machine memory state" Oct 2 19:38:34.347968 kubelet[2768]: I1002 19:38:34.347933 2768 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 19:38:34.348474 kubelet[2768]: I1002 19:38:34.348446 2768 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 19:38:34.348623 kubelet[2768]: I1002 19:38:34.348602 2768 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 19:38:34.348844 kubelet[2768]: E1002 19:38:34.348822 2768 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:38:34.354469 kubelet[2768]: I1002 19:38:34.354432 2768 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:38:34.353000 audit[2768]: AVC avc: denied { mac_admin } for pid=2768 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.353000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:38:34.353000 audit[2768]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400107faa0 a1=40011a5998 a2=400107fa70 a3=25 items=0 ppid=1 pid=2768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:34.353000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:38:34.355250 kubelet[2768]: I1002 19:38:34.355226 2768 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:38:34.360125 kubelet[2768]: I1002 19:38:34.360064 2768 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:38:34.450155 kubelet[2768]: I1002 19:38:34.450115 2768 topology_manager.go:215] "Topology Admit Handler" podUID="2f18a0f75c5eff149af9844a46c51d6a" podNamespace="kube-system" podName="kube-apiserver-ip-172-31-25-109" Oct 2 19:38:34.450593 kubelet[2768]: I1002 19:38:34.450567 2768 topology_manager.go:215] "Topology Admit Handler" podUID="a975c339d5e9e36fae1afbd6de8d35fd" podNamespace="kube-system" podName="kube-controller-manager-ip-172-31-25-109" Oct 2 19:38:34.451751 kubelet[2768]: I1002 19:38:34.451718 2768 topology_manager.go:215] "Topology Admit Handler" podUID="e51e5e1c1d8cea61fdb6646aff1972ed" podNamespace="kube-system" podName="kube-scheduler-ip-172-31-25-109" Oct 2 19:38:34.541963 kubelet[2768]: I1002 19:38:34.541833 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/a975c339d5e9e36fae1afbd6de8d35fd-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-25-109\" (UID: \"a975c339d5e9e36fae1afbd6de8d35fd\") " pod="kube-system/kube-controller-manager-ip-172-31-25-109" Oct 2 19:38:34.542285 kubelet[2768]: I1002 19:38:34.542261 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a975c339d5e9e36fae1afbd6de8d35fd-kubeconfig\") pod \"kube-controller-manager-ip-172-31-25-109\" (UID: \"a975c339d5e9e36fae1afbd6de8d35fd\") " pod="kube-system/kube-controller-manager-ip-172-31-25-109" Oct 2 19:38:34.542567 kubelet[2768]: I1002 19:38:34.542543 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/a975c339d5e9e36fae1afbd6de8d35fd-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-25-109\" (UID: \"a975c339d5e9e36fae1afbd6de8d35fd\") " pod="kube-system/kube-controller-manager-ip-172-31-25-109" Oct 2 19:38:34.542792 kubelet[2768]: I1002 19:38:34.542771 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/e51e5e1c1d8cea61fdb6646aff1972ed-kubeconfig\") pod \"kube-scheduler-ip-172-31-25-109\" (UID: \"e51e5e1c1d8cea61fdb6646aff1972ed\") " pod="kube-system/kube-scheduler-ip-172-31-25-109" Oct 2 19:38:34.543007 kubelet[2768]: I1002 19:38:34.542987 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/2f18a0f75c5eff149af9844a46c51d6a-ca-certs\") pod \"kube-apiserver-ip-172-31-25-109\" (UID: \"2f18a0f75c5eff149af9844a46c51d6a\") " pod="kube-system/kube-apiserver-ip-172-31-25-109" Oct 2 19:38:34.543225 kubelet[2768]: I1002 19:38:34.543204 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/2f18a0f75c5eff149af9844a46c51d6a-k8s-certs\") pod \"kube-apiserver-ip-172-31-25-109\" (UID: \"2f18a0f75c5eff149af9844a46c51d6a\") " pod="kube-system/kube-apiserver-ip-172-31-25-109" Oct 2 19:38:34.543560 kubelet[2768]: I1002 19:38:34.543527 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/a975c339d5e9e36fae1afbd6de8d35fd-ca-certs\") pod \"kube-controller-manager-ip-172-31-25-109\" (UID: \"a975c339d5e9e36fae1afbd6de8d35fd\") " pod="kube-system/kube-controller-manager-ip-172-31-25-109" Oct 2 19:38:34.543809 kubelet[2768]: I1002 19:38:34.543788 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/2f18a0f75c5eff149af9844a46c51d6a-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-25-109\" (UID: \"2f18a0f75c5eff149af9844a46c51d6a\") " pod="kube-system/kube-apiserver-ip-172-31-25-109" Oct 2 19:38:34.544042 kubelet[2768]: I1002 19:38:34.544020 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/a975c339d5e9e36fae1afbd6de8d35fd-k8s-certs\") pod \"kube-controller-manager-ip-172-31-25-109\" (UID: \"a975c339d5e9e36fae1afbd6de8d35fd\") " pod="kube-system/kube-controller-manager-ip-172-31-25-109" Oct 2 19:38:34.993502 sudo[2779]: pam_unix(sudo:session): session closed for user root Oct 2 19:38:34.992000 audit[2779]: USER_END pid=2779 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:34.993000 audit[2779]: CRED_DISP pid=2779 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:35.080094 kubelet[2768]: I1002 19:38:35.080053 2768 apiserver.go:52] "Watching apiserver" Oct 2 19:38:35.137046 kubelet[2768]: I1002 19:38:35.136982 2768 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:38:35.276874 kubelet[2768]: I1002 19:38:35.276724 2768 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-25-109" podStartSLOduration=1.276549112 podCreationTimestamp="2023-10-02 19:38:34 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:38:35.26180969 +0000 UTC m=+1.510232058" watchObservedRunningTime="2023-10-02 19:38:35.276549112 +0000 UTC m=+1.524971480" Oct 2 19:38:35.293005 kubelet[2768]: I1002 19:38:35.292949 2768 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-25-109" podStartSLOduration=1.292898034 podCreationTimestamp="2023-10-02 19:38:34 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:38:35.27829112 +0000 UTC m=+1.526713500" watchObservedRunningTime="2023-10-02 19:38:35.292898034 +0000 UTC m=+1.541320402" Oct 2 19:38:35.293221 kubelet[2768]: I1002 19:38:35.293088 2768 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-25-109" podStartSLOduration=1.293046143 podCreationTimestamp="2023-10-02 19:38:34 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:38:35.291649448 +0000 UTC m=+1.540071804" watchObservedRunningTime="2023-10-02 19:38:35.293046143 +0000 UTC m=+1.541468535" Oct 2 19:38:35.443432 kubelet[2768]: E1002 19:38:35.443393 2768 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-25-109\" already exists" pod="kube-system/kube-apiserver-ip-172-31-25-109" Oct 2 19:38:35.445958 kubelet[2768]: E1002 19:38:35.445923 2768 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ip-172-31-25-109\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-25-109" Oct 2 19:38:36.566000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:36.566000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40012c76c0 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:38:36.566000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:36.569000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:36.569000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001222d60 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:38:36.569000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:36.574000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:36.574000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40012c7b80 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:38:36.574000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:36.575000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:36.575000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001222ea0 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:38:36.575000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:37.047219 sudo[1827]: pam_unix(sudo:session): session closed for user root Oct 2 19:38:37.045000 audit[1827]: USER_END pid=1827 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:37.046000 audit[1827]: CRED_DISP pid=1827 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:37.072570 sshd[1824]: pam_unix(sshd:session): session closed for user core Oct 2 19:38:37.073000 audit[1824]: USER_END pid=1824 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:38:37.074000 audit[1824]: CRED_DISP pid=1824 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:38:37.079499 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:38:37.079856 systemd[1]: session-7.scope: Consumed 10.180s CPU time. Oct 2 19:38:37.080000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.25.109:22-139.178.89.65:57914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:37.081213 systemd-logind[1558]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:38:37.081552 systemd[1]: sshd@6-172.31.25.109:22-139.178.89.65:57914.service: Deactivated successfully. Oct 2 19:38:37.084399 systemd-logind[1558]: Removed session 7. Oct 2 19:38:47.590000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521030 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:38:47.593573 kernel: kauditd_printk_skb: 278 callbacks suppressed Oct 2 19:38:47.593700 kernel: audit: type=1400 audit(1696275527.590:994): avc: denied { watch } for pid=2602 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521030 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:38:47.590000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000d6fe00 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:38:47.616896 kernel: audit: type=1300 audit(1696275527.590:994): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000d6fe00 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:38:47.617088 kernel: audit: type=1327 audit(1696275527.590:994): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:47.590000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:47.731411 kubelet[2768]: I1002 19:38:47.731363 2768 kuberuntime_manager.go:1463] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:38:47.732340 env[1566]: time="2023-10-02T19:38:47.732232856Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:38:47.733238 kubelet[2768]: I1002 19:38:47.733193 2768 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:38:47.958711 kubelet[2768]: I1002 19:38:47.958582 2768 topology_manager.go:215] "Topology Admit Handler" podUID="2180d2e4-a7a2-4e92-85ee-23e0558e2788" podNamespace="kube-system" podName="kube-proxy-cx4qg" Oct 2 19:38:47.969377 systemd[1]: Created slice kubepods-besteffort-pod2180d2e4_a7a2_4e92_85ee_23e0558e2788.slice. Oct 2 19:38:47.986384 kubelet[2768]: I1002 19:38:47.985725 2768 topology_manager.go:215] "Topology Admit Handler" podUID="7b351ca2-460b-443b-82c8-18fed4998223" podNamespace="kube-system" podName="cilium-operator-6bc8ccdb58-9t4jx" Oct 2 19:38:47.988290 kubelet[2768]: W1002 19:38:47.988223 2768 reflector.go:535] object-"kube-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-25-109" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-109' and this object Oct 2 19:38:47.988290 kubelet[2768]: E1002 19:38:47.988291 2768 reflector.go:147] object-"kube-system"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-25-109" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-109' and this object Oct 2 19:38:47.990215 kubelet[2768]: W1002 19:38:47.989205 2768 reflector.go:535] object-"kube-system"/"kube-proxy": failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ip-172-31-25-109" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-109' and this object Oct 2 19:38:47.990215 kubelet[2768]: E1002 19:38:47.989260 2768 reflector.go:147] object-"kube-system"/"kube-proxy": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ip-172-31-25-109" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-109' and this object Oct 2 19:38:47.997814 systemd[1]: Created slice kubepods-besteffort-pod7b351ca2_460b_443b_82c8_18fed4998223.slice. Oct 2 19:38:48.028021 kubelet[2768]: I1002 19:38:48.027946 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jb9jj\" (UniqueName: \"kubernetes.io/projected/2180d2e4-a7a2-4e92-85ee-23e0558e2788-kube-api-access-jb9jj\") pod \"kube-proxy-cx4qg\" (UID: \"2180d2e4-a7a2-4e92-85ee-23e0558e2788\") " pod="kube-system/kube-proxy-cx4qg" Oct 2 19:38:48.028210 kubelet[2768]: I1002 19:38:48.028038 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/7b351ca2-460b-443b-82c8-18fed4998223-cilium-config-path\") pod \"cilium-operator-6bc8ccdb58-9t4jx\" (UID: \"7b351ca2-460b-443b-82c8-18fed4998223\") " pod="kube-system/cilium-operator-6bc8ccdb58-9t4jx" Oct 2 19:38:48.028210 kubelet[2768]: I1002 19:38:48.028086 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5n7t8\" (UniqueName: \"kubernetes.io/projected/7b351ca2-460b-443b-82c8-18fed4998223-kube-api-access-5n7t8\") pod \"cilium-operator-6bc8ccdb58-9t4jx\" (UID: \"7b351ca2-460b-443b-82c8-18fed4998223\") " pod="kube-system/cilium-operator-6bc8ccdb58-9t4jx" Oct 2 19:38:48.028210 kubelet[2768]: I1002 19:38:48.028133 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/2180d2e4-a7a2-4e92-85ee-23e0558e2788-kube-proxy\") pod \"kube-proxy-cx4qg\" (UID: \"2180d2e4-a7a2-4e92-85ee-23e0558e2788\") " pod="kube-system/kube-proxy-cx4qg" Oct 2 19:38:48.028210 kubelet[2768]: I1002 19:38:48.028178 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/2180d2e4-a7a2-4e92-85ee-23e0558e2788-lib-modules\") pod \"kube-proxy-cx4qg\" (UID: \"2180d2e4-a7a2-4e92-85ee-23e0558e2788\") " pod="kube-system/kube-proxy-cx4qg" Oct 2 19:38:48.028510 kubelet[2768]: I1002 19:38:48.028225 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/2180d2e4-a7a2-4e92-85ee-23e0558e2788-xtables-lock\") pod \"kube-proxy-cx4qg\" (UID: \"2180d2e4-a7a2-4e92-85ee-23e0558e2788\") " pod="kube-system/kube-proxy-cx4qg" Oct 2 19:38:48.078014 kubelet[2768]: I1002 19:38:48.077924 2768 topology_manager.go:215] "Topology Admit Handler" podUID="24728cdd-06db-420f-be25-13420eb9d62e" podNamespace="kube-system" podName="cilium-4hz7d" Oct 2 19:38:48.093752 systemd[1]: Created slice kubepods-burstable-pod24728cdd_06db_420f_be25_13420eb9d62e.slice. Oct 2 19:38:48.106396 kubelet[2768]: W1002 19:38:48.106343 2768 reflector.go:535] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-25-109" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-109' and this object Oct 2 19:38:48.106396 kubelet[2768]: E1002 19:38:48.106398 2768 reflector.go:147] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-25-109" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-109' and this object Oct 2 19:38:48.129372 kubelet[2768]: I1002 19:38:48.129294 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-s92mj\" (UniqueName: \"kubernetes.io/projected/24728cdd-06db-420f-be25-13420eb9d62e-kube-api-access-s92mj\") pod \"cilium-4hz7d\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " pod="kube-system/cilium-4hz7d" Oct 2 19:38:48.129556 kubelet[2768]: I1002 19:38:48.129417 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-bpf-maps\") pod \"cilium-4hz7d\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " pod="kube-system/cilium-4hz7d" Oct 2 19:38:48.129556 kubelet[2768]: I1002 19:38:48.129463 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-hostproc\") pod \"cilium-4hz7d\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " pod="kube-system/cilium-4hz7d" Oct 2 19:38:48.129556 kubelet[2768]: I1002 19:38:48.129507 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-etc-cni-netd\") pod \"cilium-4hz7d\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " pod="kube-system/cilium-4hz7d" Oct 2 19:38:48.129556 kubelet[2768]: I1002 19:38:48.129554 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-host-proc-sys-kernel\") pod \"cilium-4hz7d\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " pod="kube-system/cilium-4hz7d" Oct 2 19:38:48.129846 kubelet[2768]: I1002 19:38:48.129603 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/24728cdd-06db-420f-be25-13420eb9d62e-clustermesh-secrets\") pod \"cilium-4hz7d\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " pod="kube-system/cilium-4hz7d" Oct 2 19:38:48.129846 kubelet[2768]: I1002 19:38:48.129648 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-cni-path\") pod \"cilium-4hz7d\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " pod="kube-system/cilium-4hz7d" Oct 2 19:38:48.129846 kubelet[2768]: I1002 19:38:48.129691 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-xtables-lock\") pod \"cilium-4hz7d\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " pod="kube-system/cilium-4hz7d" Oct 2 19:38:48.129846 kubelet[2768]: I1002 19:38:48.129734 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/24728cdd-06db-420f-be25-13420eb9d62e-cilium-config-path\") pod \"cilium-4hz7d\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " pod="kube-system/cilium-4hz7d" Oct 2 19:38:48.129846 kubelet[2768]: I1002 19:38:48.129802 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-cilium-run\") pod \"cilium-4hz7d\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " pod="kube-system/cilium-4hz7d" Oct 2 19:38:48.130158 kubelet[2768]: I1002 19:38:48.129867 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-cilium-cgroup\") pod \"cilium-4hz7d\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " pod="kube-system/cilium-4hz7d" Oct 2 19:38:48.130158 kubelet[2768]: I1002 19:38:48.129911 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-lib-modules\") pod \"cilium-4hz7d\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " pod="kube-system/cilium-4hz7d" Oct 2 19:38:48.130158 kubelet[2768]: I1002 19:38:48.129951 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/24728cdd-06db-420f-be25-13420eb9d62e-hubble-tls\") pod \"cilium-4hz7d\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " pod="kube-system/cilium-4hz7d" Oct 2 19:38:48.130158 kubelet[2768]: I1002 19:38:48.130063 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-host-proc-sys-net\") pod \"cilium-4hz7d\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " pod="kube-system/cilium-4hz7d" Oct 2 19:38:49.178736 kubelet[2768]: E1002 19:38:49.178700 2768 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:38:49.179445 kubelet[2768]: E1002 19:38:49.179420 2768 projected.go:198] Error preparing data for projected volume kube-api-access-jb9jj for pod kube-system/kube-proxy-cx4qg: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:38:49.179670 kubelet[2768]: E1002 19:38:49.179646 2768 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/2180d2e4-a7a2-4e92-85ee-23e0558e2788-kube-api-access-jb9jj podName:2180d2e4-a7a2-4e92-85ee-23e0558e2788 nodeName:}" failed. No retries permitted until 2023-10-02 19:38:49.67960964 +0000 UTC m=+15.928031996 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-jb9jj" (UniqueName: "kubernetes.io/projected/2180d2e4-a7a2-4e92-85ee-23e0558e2788-kube-api-access-jb9jj") pod "kube-proxy-cx4qg" (UID: "2180d2e4-a7a2-4e92-85ee-23e0558e2788") : failed to sync configmap cache: timed out waiting for the condition Oct 2 19:38:49.184344 kubelet[2768]: E1002 19:38:49.183815 2768 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:38:49.184344 kubelet[2768]: E1002 19:38:49.183866 2768 projected.go:198] Error preparing data for projected volume kube-api-access-5n7t8 for pod kube-system/cilium-operator-6bc8ccdb58-9t4jx: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:38:49.184344 kubelet[2768]: E1002 19:38:49.183940 2768 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/7b351ca2-460b-443b-82c8-18fed4998223-kube-api-access-5n7t8 podName:7b351ca2-460b-443b-82c8-18fed4998223 nodeName:}" failed. No retries permitted until 2023-10-02 19:38:49.683913614 +0000 UTC m=+15.932335970 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-5n7t8" (UniqueName: "kubernetes.io/projected/7b351ca2-460b-443b-82c8-18fed4998223-kube-api-access-5n7t8") pod "cilium-operator-6bc8ccdb58-9t4jx" (UID: "7b351ca2-460b-443b-82c8-18fed4998223") : failed to sync configmap cache: timed out waiting for the condition Oct 2 19:38:49.231920 kubelet[2768]: E1002 19:38:49.231865 2768 secret.go:194] Couldn't get secret kube-system/cilium-clustermesh: failed to sync secret cache: timed out waiting for the condition Oct 2 19:38:49.232103 kubelet[2768]: E1002 19:38:49.231981 2768 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/24728cdd-06db-420f-be25-13420eb9d62e-clustermesh-secrets podName:24728cdd-06db-420f-be25-13420eb9d62e nodeName:}" failed. No retries permitted until 2023-10-02 19:38:49.73195392 +0000 UTC m=+15.980376276 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "clustermesh-secrets" (UniqueName: "kubernetes.io/secret/24728cdd-06db-420f-be25-13420eb9d62e-clustermesh-secrets") pod "cilium-4hz7d" (UID: "24728cdd-06db-420f-be25-13420eb9d62e") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:38:49.789984 env[1566]: time="2023-10-02T19:38:49.789217215Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-cx4qg,Uid:2180d2e4-a7a2-4e92-85ee-23e0558e2788,Namespace:kube-system,Attempt:0,}" Oct 2 19:38:49.811967 env[1566]: time="2023-10-02T19:38:49.811893780Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-9t4jx,Uid:7b351ca2-460b-443b-82c8-18fed4998223,Namespace:kube-system,Attempt:0,}" Oct 2 19:38:49.835415 env[1566]: time="2023-10-02T19:38:49.835172747Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:38:49.835415 env[1566]: time="2023-10-02T19:38:49.835243141Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:38:49.835415 env[1566]: time="2023-10-02T19:38:49.835268570Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:38:49.836351 env[1566]: time="2023-10-02T19:38:49.836247901Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/449f11489c35a389210347becd0ec078f94dcca56e8e30d0f354b6bdba94ee88 pid=2845 runtime=io.containerd.runc.v2 Oct 2 19:38:49.865757 env[1566]: time="2023-10-02T19:38:49.865626745Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:38:49.865757 env[1566]: time="2023-10-02T19:38:49.865707747Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:38:49.866042 env[1566]: time="2023-10-02T19:38:49.865735071Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:38:49.866178 env[1566]: time="2023-10-02T19:38:49.866021578Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9dea9ce46815757b5a5fcdbfee150cf3e97a6cc27dfac5860769dba20387d2a6 pid=2860 runtime=io.containerd.runc.v2 Oct 2 19:38:49.883975 systemd[1]: Started cri-containerd-449f11489c35a389210347becd0ec078f94dcca56e8e30d0f354b6bdba94ee88.scope. Oct 2 19:38:49.900030 env[1566]: time="2023-10-02T19:38:49.899976706Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-4hz7d,Uid:24728cdd-06db-420f-be25-13420eb9d62e,Namespace:kube-system,Attempt:0,}" Oct 2 19:38:49.942931 systemd[1]: Started cri-containerd-9dea9ce46815757b5a5fcdbfee150cf3e97a6cc27dfac5860769dba20387d2a6.scope. Oct 2 19:38:49.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.966462 kernel: audit: type=1400 audit(1696275529.948:995): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.966606 kernel: audit: type=1400 audit(1696275529.956:996): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.975408 kernel: audit: type=1400 audit(1696275529.956:997): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.975531 kernel: audit: type=1400 audit(1696275529.956:998): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.987459 kernel: audit: type=1400 audit(1696275529.956:999): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.999438 kernel: audit: type=1400 audit(1696275529.956:1000): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.008184 kernel: audit: type=1400 audit(1696275529.956:1001): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.956000 audit: BPF prog-id=118 op=LOAD Oct 2 19:38:49.957000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.957000 audit[2854]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2845 pid=2854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.957000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434396631313438396333356133383932313033343762656364306563 Oct 2 19:38:49.957000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.957000 audit[2854]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2845 pid=2854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.957000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434396631313438396333356133383932313033343762656364306563 Oct 2 19:38:49.957000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.957000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.957000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.957000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.957000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.957000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.957000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.957000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.957000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.957000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.957000 audit: BPF prog-id=119 op=LOAD Oct 2 19:38:49.957000 audit[2854]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2845 pid=2854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.957000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434396631313438396333356133383932313033343762656364306563 Oct 2 19:38:49.957000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.957000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.957000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.957000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.957000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.957000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.957000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.957000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.957000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.957000 audit: BPF prog-id=120 op=LOAD Oct 2 19:38:49.957000 audit[2854]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2845 pid=2854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.957000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434396631313438396333356133383932313033343762656364306563 Oct 2 19:38:49.966000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:38:49.966000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:38:49.966000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.966000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.966000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.966000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.966000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.966000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.966000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.966000 audit[2854]: AVC avc: denied { perfmon } for pid=2854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.966000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.966000 audit[2854]: AVC avc: denied { bpf } for pid=2854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.966000 audit: BPF prog-id=121 op=LOAD Oct 2 19:38:49.966000 audit[2854]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2845 pid=2854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434396631313438396333356133383932313033343762656364306563 Oct 2 19:38:50.038561 env[1566]: time="2023-10-02T19:38:50.038167690Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:38:50.038561 env[1566]: time="2023-10-02T19:38:50.038238863Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:38:50.038561 env[1566]: time="2023-10-02T19:38:50.038265108Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:38:50.039286 env[1566]: time="2023-10-02T19:38:50.038999897Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68 pid=2909 runtime=io.containerd.runc.v2 Oct 2 19:38:50.059977 env[1566]: time="2023-10-02T19:38:50.058845872Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-cx4qg,Uid:2180d2e4-a7a2-4e92-85ee-23e0558e2788,Namespace:kube-system,Attempt:0,} returns sandbox id \"449f11489c35a389210347becd0ec078f94dcca56e8e30d0f354b6bdba94ee88\"" Oct 2 19:38:50.068575 env[1566]: time="2023-10-02T19:38:50.068505615Z" level=info msg="CreateContainer within sandbox \"449f11489c35a389210347becd0ec078f94dcca56e8e30d0f354b6bdba94ee88\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:38:50.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.084000 audit: BPF prog-id=122 op=LOAD Oct 2 19:38:50.086000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.086000 audit[2879]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2860 pid=2879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.086000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964656139636534363831353735376235613566636462666565313530 Oct 2 19:38:50.086000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.086000 audit[2879]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2860 pid=2879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.086000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964656139636534363831353735376235613566636462666565313530 Oct 2 19:38:50.086000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.086000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.086000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.086000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.086000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.086000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.086000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.086000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.086000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.086000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.086000 audit: BPF prog-id=123 op=LOAD Oct 2 19:38:50.086000 audit[2879]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2860 pid=2879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.086000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964656139636534363831353735376235613566636462666565313530 Oct 2 19:38:50.087000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.087000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.087000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.087000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.087000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.087000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.087000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.087000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.087000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.087000 audit: BPF prog-id=124 op=LOAD Oct 2 19:38:50.087000 audit[2879]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2860 pid=2879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964656139636534363831353735376235613566636462666565313530 Oct 2 19:38:50.087000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:38:50.087000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:38:50.087000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.087000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.087000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.087000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.087000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.087000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.087000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.087000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.087000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.087000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.087000 audit: BPF prog-id=125 op=LOAD Oct 2 19:38:50.087000 audit[2879]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2860 pid=2879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964656139636534363831353735376235613566636462666565313530 Oct 2 19:38:50.105481 systemd[1]: Started cri-containerd-28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68.scope. Oct 2 19:38:50.120012 env[1566]: time="2023-10-02T19:38:50.119921392Z" level=info msg="CreateContainer within sandbox \"449f11489c35a389210347becd0ec078f94dcca56e8e30d0f354b6bdba94ee88\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"807dce613e7a55fc611d3081e63fb04c1a2ea710058b406aa66c1731edd6e988\"" Oct 2 19:38:50.121697 env[1566]: time="2023-10-02T19:38:50.121631396Z" level=info msg="StartContainer for \"807dce613e7a55fc611d3081e63fb04c1a2ea710058b406aa66c1731edd6e988\"" Oct 2 19:38:50.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.164000 audit: BPF prog-id=126 op=LOAD Oct 2 19:38:50.165000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.165000 audit[2924]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2909 pid=2924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.165000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238663264343363646564363263376666356163343434333431373333 Oct 2 19:38:50.165000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.165000 audit[2924]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2909 pid=2924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.165000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238663264343363646564363263376666356163343434333431373333 Oct 2 19:38:50.165000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.165000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.165000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.165000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.165000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.165000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.165000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.165000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.165000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.165000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.165000 audit: BPF prog-id=127 op=LOAD Oct 2 19:38:50.165000 audit[2924]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2909 pid=2924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.165000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238663264343363646564363263376666356163343434333431373333 Oct 2 19:38:50.166000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.166000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.166000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.166000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.166000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.166000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.166000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.166000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.166000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.166000 audit: BPF prog-id=128 op=LOAD Oct 2 19:38:50.166000 audit[2924]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2909 pid=2924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238663264343363646564363263376666356163343434333431373333 Oct 2 19:38:50.166000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:38:50.166000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:38:50.166000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.166000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.166000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.166000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.166000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.166000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.166000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.166000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.166000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.166000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.166000 audit: BPF prog-id=129 op=LOAD Oct 2 19:38:50.166000 audit[2924]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2909 pid=2924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238663264343363646564363263376666356163343434333431373333 Oct 2 19:38:50.205760 systemd[1]: Started cri-containerd-807dce613e7a55fc611d3081e63fb04c1a2ea710058b406aa66c1731edd6e988.scope. Oct 2 19:38:50.250609 env[1566]: time="2023-10-02T19:38:50.250547593Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-4hz7d,Uid:24728cdd-06db-420f-be25-13420eb9d62e,Namespace:kube-system,Attempt:0,} returns sandbox id \"28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68\"" Oct 2 19:38:50.251430 env[1566]: time="2023-10-02T19:38:50.250874949Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-9t4jx,Uid:7b351ca2-460b-443b-82c8-18fed4998223,Namespace:kube-system,Attempt:0,} returns sandbox id \"9dea9ce46815757b5a5fcdbfee150cf3e97a6cc27dfac5860769dba20387d2a6\"" Oct 2 19:38:50.260095 env[1566]: time="2023-10-02T19:38:50.258549798Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:38:50.286000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.286000 audit[2952]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2845 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830376463653631336537613535666336313164333038316536336662 Oct 2 19:38:50.286000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.286000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.286000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.286000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.286000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.286000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.286000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.286000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.286000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.286000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.286000 audit: BPF prog-id=130 op=LOAD Oct 2 19:38:50.286000 audit[2952]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2845 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830376463653631336537613535666336313164333038316536336662 Oct 2 19:38:50.288000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.288000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.288000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.288000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.288000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.288000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.288000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.288000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.288000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.288000 audit: BPF prog-id=131 op=LOAD Oct 2 19:38:50.288000 audit[2952]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2845 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830376463653631336537613535666336313164333038316536336662 Oct 2 19:38:50.289000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:38:50.289000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:38:50.289000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.289000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.289000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.289000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.289000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.289000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.289000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.289000 audit[2952]: AVC avc: denied { perfmon } for pid=2952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.289000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.289000 audit[2952]: AVC avc: denied { bpf } for pid=2952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:50.289000 audit: BPF prog-id=132 op=LOAD Oct 2 19:38:50.289000 audit[2952]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2845 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.289000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830376463653631336537613535666336313164333038316536336662 Oct 2 19:38:50.327452 env[1566]: time="2023-10-02T19:38:50.326761440Z" level=info msg="StartContainer for \"807dce613e7a55fc611d3081e63fb04c1a2ea710058b406aa66c1731edd6e988\" returns successfully" Oct 2 19:38:50.542000 audit[3018]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=3018 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.542000 audit[3018]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffefe8a70 a2=0 a3=ffff809ce6c0 items=0 ppid=2976 pid=3018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.542000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:38:50.547000 audit[3019]: NETFILTER_CFG table=nat:39 family=10 entries=1 op=nft_register_chain pid=3019 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.547000 audit[3019]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffed423770 a2=0 a3=ffff98c4b6c0 items=0 ppid=2976 pid=3019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.547000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:38:50.562000 audit[3021]: NETFILTER_CFG table=mangle:40 family=2 entries=1 op=nft_register_chain pid=3021 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.562000 audit[3021]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffff9f4970 a2=0 a3=ffff8aad26c0 items=0 ppid=2976 pid=3021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.562000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:38:50.564000 audit[3020]: NETFILTER_CFG table=filter:41 family=10 entries=1 op=nft_register_chain pid=3020 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.564000 audit[3020]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc50bc6e0 a2=0 a3=ffff965086c0 items=0 ppid=2976 pid=3020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.564000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:38:50.567000 audit[3022]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_chain pid=3022 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.567000 audit[3022]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff14c5850 a2=0 a3=ffff85b696c0 items=0 ppid=2976 pid=3022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.567000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:38:50.572000 audit[3023]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=3023 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.572000 audit[3023]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc19a0c70 a2=0 a3=ffff97b9e6c0 items=0 ppid=2976 pid=3023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.572000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:38:50.646000 audit[3024]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3024 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.646000 audit[3024]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffcade95e0 a2=0 a3=ffff94fca6c0 items=0 ppid=2976 pid=3024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.646000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:38:50.655000 audit[3026]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3026 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.655000 audit[3026]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc93817b0 a2=0 a3=ffffa1f1f6c0 items=0 ppid=2976 pid=3026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.655000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:38:50.668000 audit[3029]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3029 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.668000 audit[3029]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff8590fd0 a2=0 a3=ffff83ac06c0 items=0 ppid=2976 pid=3029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.668000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:38:50.672000 audit[3030]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3030 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.672000 audit[3030]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffb988720 a2=0 a3=ffffb37326c0 items=0 ppid=2976 pid=3030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.672000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:38:50.680000 audit[3032]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3032 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.680000 audit[3032]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe1e5aa40 a2=0 a3=ffff98d516c0 items=0 ppid=2976 pid=3032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.680000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:38:50.685000 audit[3033]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3033 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.685000 audit[3033]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd880b510 a2=0 a3=ffffa4f646c0 items=0 ppid=2976 pid=3033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.685000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:38:50.706000 audit[3035]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3035 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.706000 audit[3035]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffec62ba00 a2=0 a3=ffff8bf856c0 items=0 ppid=2976 pid=3035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.706000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:38:50.720000 audit[3038]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3038 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.720000 audit[3038]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffffd2e0c0 a2=0 a3=ffffbacbb6c0 items=0 ppid=2976 pid=3038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.720000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:38:50.724000 audit[3039]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3039 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.724000 audit[3039]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe0f293b0 a2=0 a3=ffff981ab6c0 items=0 ppid=2976 pid=3039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.724000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:38:50.733000 audit[3041]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3041 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.733000 audit[3041]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffd961c70 a2=0 a3=ffff91bf36c0 items=0 ppid=2976 pid=3041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.733000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:38:50.737000 audit[3042]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3042 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.737000 audit[3042]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd4450890 a2=0 a3=ffffb602d6c0 items=0 ppid=2976 pid=3042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.737000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:38:50.745000 audit[3044]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3044 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.745000 audit[3044]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe78ce430 a2=0 a3=ffffaf3da6c0 items=0 ppid=2976 pid=3044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.745000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:38:50.770000 audit[3047]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3047 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.770000 audit[3047]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff8dccc10 a2=0 a3=ffff98dcc6c0 items=0 ppid=2976 pid=3047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.770000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:38:50.783000 audit[3050]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3050 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.783000 audit[3050]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe9bf7cb0 a2=0 a3=ffff8d0ed6c0 items=0 ppid=2976 pid=3050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.783000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:38:50.787000 audit[3051]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3051 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.787000 audit[3051]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe64a2610 a2=0 a3=ffffae1876c0 items=0 ppid=2976 pid=3051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.787000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:38:50.794000 audit[3053]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3053 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.794000 audit[3053]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffcc41c930 a2=0 a3=ffff9826d6c0 items=0 ppid=2976 pid=3053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.794000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:38:50.810000 audit[3056]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3056 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.810000 audit[3056]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff1531540 a2=0 a3=ffff814586c0 items=0 ppid=2976 pid=3056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.810000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:38:50.813000 audit[3057]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3057 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.813000 audit[3057]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffec8e44d0 a2=0 a3=ffff9140c6c0 items=0 ppid=2976 pid=3057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.813000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:38:50.823000 audit[3059]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3059 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.823000 audit[3059]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffdaa6b2e0 a2=0 a3=ffffbb9696c0 items=0 ppid=2976 pid=3059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.823000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:38:50.867000 audit[3065]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3065 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:38:50.867000 audit[3065]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffc6a649a0 a2=0 a3=ffff99d366c0 items=0 ppid=2976 pid=3065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.867000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:38:50.879000 audit[3065]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3065 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:38:50.879000 audit[3065]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffc6a649a0 a2=0 a3=ffff99d366c0 items=0 ppid=2976 pid=3065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.879000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:38:50.884000 audit[3071]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3071 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.884000 audit[3071]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffc64c7730 a2=0 a3=ffffbb5066c0 items=0 ppid=2976 pid=3071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.884000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:38:50.893000 audit[3073]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3073 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.893000 audit[3073]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffcf088410 a2=0 a3=ffff8d2586c0 items=0 ppid=2976 pid=3073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.893000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:38:50.904000 audit[3076]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3076 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.904000 audit[3076]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff924e3a0 a2=0 a3=ffffa38e06c0 items=0 ppid=2976 pid=3076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.904000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:38:50.911000 audit[3077]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3077 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.911000 audit[3077]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe0644200 a2=0 a3=ffff806f36c0 items=0 ppid=2976 pid=3077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.911000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:38:50.921000 audit[3079]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3079 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.921000 audit[3079]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffed0931b0 a2=0 a3=ffff969a46c0 items=0 ppid=2976 pid=3079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.921000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:38:50.925000 audit[3080]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3080 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.925000 audit[3080]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffd588e20 a2=0 a3=ffffbdc116c0 items=0 ppid=2976 pid=3080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.925000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:38:50.933000 audit[3082]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3082 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.933000 audit[3082]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffdd708030 a2=0 a3=ffffb371f6c0 items=0 ppid=2976 pid=3082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.933000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:38:50.946000 audit[3085]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3085 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.946000 audit[3085]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffdd215560 a2=0 a3=ffff989b46c0 items=0 ppid=2976 pid=3085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.946000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:38:50.950000 audit[3086]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3086 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.950000 audit[3086]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc78941f0 a2=0 a3=ffff9aa466c0 items=0 ppid=2976 pid=3086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.950000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:38:50.958000 audit[3088]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3088 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.958000 audit[3088]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcfbdf310 a2=0 a3=ffffb7d2d6c0 items=0 ppid=2976 pid=3088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.958000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:38:50.962000 audit[3089]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3089 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.962000 audit[3089]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe59fdf60 a2=0 a3=ffff805686c0 items=0 ppid=2976 pid=3089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.962000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:38:50.971000 audit[3091]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3091 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.971000 audit[3091]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffee5009a0 a2=0 a3=ffff980436c0 items=0 ppid=2976 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.971000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:38:50.987000 audit[3094]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3094 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.987000 audit[3094]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd2e5a970 a2=0 a3=ffffa42736c0 items=0 ppid=2976 pid=3094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.987000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:38:51.002000 audit[3097]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3097 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:51.002000 audit[3097]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc2f707c0 a2=0 a3=ffff998ba6c0 items=0 ppid=2976 pid=3097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:51.002000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:38:51.005000 audit[3098]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3098 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:51.005000 audit[3098]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe8a412c0 a2=0 a3=ffffbd7b26c0 items=0 ppid=2976 pid=3098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:51.005000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:38:51.018000 audit[3100]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3100 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:51.018000 audit[3100]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffeb034d80 a2=0 a3=ffff8d8d86c0 items=0 ppid=2976 pid=3100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:51.018000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:38:51.030000 audit[3103]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3103 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:51.030000 audit[3103]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=fffffecc41c0 a2=0 a3=ffffa212f6c0 items=0 ppid=2976 pid=3103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:51.030000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:38:51.034000 audit[3104]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=3104 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:51.034000 audit[3104]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffff9e6f00 a2=0 a3=ffffb05f76c0 items=0 ppid=2976 pid=3104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:51.034000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:38:51.042000 audit[3106]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=3106 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:51.042000 audit[3106]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffc7f4c070 a2=0 a3=ffff80d2d6c0 items=0 ppid=2976 pid=3106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:51.042000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:38:51.046000 audit[3107]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3107 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:51.046000 audit[3107]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd4d70550 a2=0 a3=ffffbc08f6c0 items=0 ppid=2976 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:51.046000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:38:51.055000 audit[3109]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=3109 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:51.055000 audit[3109]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff68a3710 a2=0 a3=ffffa5e6d6c0 items=0 ppid=2976 pid=3109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:51.055000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:38:51.069000 audit[3112]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=3112 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:51.069000 audit[3112]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc8ae3080 a2=0 a3=ffffa5ad86c0 items=0 ppid=2976 pid=3112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:51.069000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:38:51.080000 audit[3114]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3114 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:38:51.080000 audit[3114]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffc8b762a0 a2=0 a3=ffff8812e6c0 items=0 ppid=2976 pid=3114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:51.080000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:38:51.082000 audit[3114]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3114 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:38:51.082000 audit[3114]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffc8b762a0 a2=0 a3=ffff8812e6c0 items=0 ppid=2976 pid=3114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:51.082000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:38:51.537798 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount556985774.mount: Deactivated successfully. Oct 2 19:38:52.474131 env[1566]: time="2023-10-02T19:38:52.474072015Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:52.479959 env[1566]: time="2023-10-02T19:38:52.479909172Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:52.483029 env[1566]: time="2023-10-02T19:38:52.482978504Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:52.483990 env[1566]: time="2023-10-02T19:38:52.483943901Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 19:38:52.485079 env[1566]: time="2023-10-02T19:38:52.485017085Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:38:52.491926 env[1566]: time="2023-10-02T19:38:52.491869957Z" level=info msg="CreateContainer within sandbox \"9dea9ce46815757b5a5fcdbfee150cf3e97a6cc27dfac5860769dba20387d2a6\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:38:52.517864 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1447371509.mount: Deactivated successfully. Oct 2 19:38:52.524247 env[1566]: time="2023-10-02T19:38:52.524187343Z" level=info msg="CreateContainer within sandbox \"9dea9ce46815757b5a5fcdbfee150cf3e97a6cc27dfac5860769dba20387d2a6\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26\"" Oct 2 19:38:52.526765 env[1566]: time="2023-10-02T19:38:52.525741630Z" level=info msg="StartContainer for \"debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26\"" Oct 2 19:38:52.582024 systemd[1]: Started cri-containerd-debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26.scope. Oct 2 19:38:52.630355 kernel: kauditd_printk_skb: 360 callbacks suppressed Oct 2 19:38:52.630459 kernel: audit: type=1400 audit(1696275532.627:1106): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.645359 kernel: audit: type=1400 audit(1696275532.627:1107): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.645469 kernel: audit: type=1400 audit(1696275532.627:1108): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.652745 kernel: audit: type=1400 audit(1696275532.627:1109): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.660421 kernel: audit: type=1400 audit(1696275532.627:1110): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.676628 kernel: audit: type=1400 audit(1696275532.627:1111): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.676907 kernel: audit: type=1400 audit(1696275532.627:1112): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.693705 kernel: audit: type=1400 audit(1696275532.627:1113): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.708066 kernel: audit: type=1400 audit(1696275532.627:1114): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.708197 kernel: audit: type=1400 audit(1696275532.629:1115): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.629000 audit: BPF prog-id=133 op=LOAD Oct 2 19:38:52.637000 audit[3123]: AVC avc: denied { bpf } for pid=3123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.637000 audit[3123]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2860 pid=3123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:52.637000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465626464646630646330623735373839653831343831383366623865 Oct 2 19:38:52.637000 audit[3123]: AVC avc: denied { perfmon } for pid=3123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.637000 audit[3123]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2860 pid=3123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:52.637000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465626464646630646330623735373839653831343831383366623865 Oct 2 19:38:52.637000 audit[3123]: AVC avc: denied { bpf } for pid=3123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.637000 audit[3123]: AVC avc: denied { bpf } for pid=3123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.637000 audit[3123]: AVC avc: denied { bpf } for pid=3123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.637000 audit[3123]: AVC avc: denied { perfmon } for pid=3123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.637000 audit[3123]: AVC avc: denied { perfmon } for pid=3123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.637000 audit[3123]: AVC avc: denied { perfmon } for pid=3123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.637000 audit[3123]: AVC avc: denied { perfmon } for pid=3123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.637000 audit[3123]: AVC avc: denied { perfmon } for pid=3123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.637000 audit[3123]: AVC avc: denied { bpf } for pid=3123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.637000 audit[3123]: AVC avc: denied { bpf } for pid=3123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.637000 audit: BPF prog-id=134 op=LOAD Oct 2 19:38:52.637000 audit[3123]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2860 pid=3123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:52.637000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465626464646630646330623735373839653831343831383366623865 Oct 2 19:38:52.644000 audit[3123]: AVC avc: denied { bpf } for pid=3123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.644000 audit[3123]: AVC avc: denied { bpf } for pid=3123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.644000 audit[3123]: AVC avc: denied { perfmon } for pid=3123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.644000 audit[3123]: AVC avc: denied { perfmon } for pid=3123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.644000 audit[3123]: AVC avc: denied { perfmon } for pid=3123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.644000 audit[3123]: AVC avc: denied { perfmon } for pid=3123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.644000 audit[3123]: AVC avc: denied { perfmon } for pid=3123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.644000 audit[3123]: AVC avc: denied { bpf } for pid=3123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.644000 audit[3123]: AVC avc: denied { bpf } for pid=3123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.644000 audit: BPF prog-id=135 op=LOAD Oct 2 19:38:52.644000 audit[3123]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2860 pid=3123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:52.644000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465626464646630646330623735373839653831343831383366623865 Oct 2 19:38:52.652000 audit: BPF prog-id=135 op=UNLOAD Oct 2 19:38:52.652000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:38:52.652000 audit[3123]: AVC avc: denied { bpf } for pid=3123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.652000 audit[3123]: AVC avc: denied { bpf } for pid=3123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.652000 audit[3123]: AVC avc: denied { bpf } for pid=3123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.652000 audit[3123]: AVC avc: denied { perfmon } for pid=3123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.652000 audit[3123]: AVC avc: denied { perfmon } for pid=3123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.652000 audit[3123]: AVC avc: denied { perfmon } for pid=3123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.652000 audit[3123]: AVC avc: denied { perfmon } for pid=3123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.652000 audit[3123]: AVC avc: denied { perfmon } for pid=3123 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.652000 audit[3123]: AVC avc: denied { bpf } for pid=3123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.652000 audit[3123]: AVC avc: denied { bpf } for pid=3123 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:52.652000 audit: BPF prog-id=136 op=LOAD Oct 2 19:38:52.652000 audit[3123]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2860 pid=3123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:52.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465626464646630646330623735373839653831343831383366623865 Oct 2 19:38:52.734173 env[1566]: time="2023-10-02T19:38:52.734019183Z" level=info msg="StartContainer for \"debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26\" returns successfully" Oct 2 19:38:52.808000 audit[3134]: AVC avc: denied { map_create } for pid=3134 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c854,c949 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c854,c949 tclass=bpf permissive=0 Oct 2 19:38:52.808000 audit[3134]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=400060f768 a2=48 a3=0 items=0 ppid=2860 pid=3134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c854,c949 key=(null) Oct 2 19:38:52.808000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:38:53.508194 systemd[1]: run-containerd-runc-k8s.io-debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26-runc.N2RKOG.mount: Deactivated successfully. Oct 2 19:38:53.603034 kubelet[2768]: I1002 19:38:53.602993 2768 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-cx4qg" podStartSLOduration=6.602937938 podCreationTimestamp="2023-10-02 19:38:47 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:38:50.480748353 +0000 UTC m=+16.729170745" watchObservedRunningTime="2023-10-02 19:38:53.602937938 +0000 UTC m=+19.851360306" Oct 2 19:38:54.519145 kubelet[2768]: I1002 19:38:54.518985 2768 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-6bc8ccdb58-9t4jx" podStartSLOduration=5.291398414 podCreationTimestamp="2023-10-02 19:38:47 +0000 UTC" firstStartedPulling="2023-10-02 19:38:50.257170691 +0000 UTC m=+16.505593035" lastFinishedPulling="2023-10-02 19:38:52.48470371 +0000 UTC m=+18.733126078" observedRunningTime="2023-10-02 19:38:53.604709836 +0000 UTC m=+19.853132228" watchObservedRunningTime="2023-10-02 19:38:54.518931457 +0000 UTC m=+20.767353825" Oct 2 19:38:59.791261 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3309201770.mount: Deactivated successfully. Oct 2 19:39:03.951896 env[1566]: time="2023-10-02T19:39:03.951629803Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:03.963441 env[1566]: time="2023-10-02T19:39:03.963382135Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:03.969169 env[1566]: time="2023-10-02T19:39:03.969116069Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:03.972004 env[1566]: time="2023-10-02T19:39:03.970636052Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 19:39:03.982912 env[1566]: time="2023-10-02T19:39:03.982832405Z" level=info msg="CreateContainer within sandbox \"28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:39:04.001358 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount511245632.mount: Deactivated successfully. Oct 2 19:39:04.012509 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1855480743.mount: Deactivated successfully. Oct 2 19:39:04.019106 env[1566]: time="2023-10-02T19:39:04.019041662Z" level=info msg="CreateContainer within sandbox \"28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9\"" Oct 2 19:39:04.022654 env[1566]: time="2023-10-02T19:39:04.022603890Z" level=info msg="StartContainer for \"8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9\"" Oct 2 19:39:04.085982 systemd[1]: Started cri-containerd-8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9.scope. Oct 2 19:39:04.123278 systemd[1]: cri-containerd-8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9.scope: Deactivated successfully. Oct 2 19:39:04.814945 env[1566]: time="2023-10-02T19:39:04.814577271Z" level=info msg="shim disconnected" id=8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9 Oct 2 19:39:04.814945 env[1566]: time="2023-10-02T19:39:04.814669049Z" level=warning msg="cleaning up after shim disconnected" id=8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9 namespace=k8s.io Oct 2 19:39:04.814945 env[1566]: time="2023-10-02T19:39:04.814692017Z" level=info msg="cleaning up dead shim" Oct 2 19:39:04.844282 env[1566]: time="2023-10-02T19:39:04.844215097Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:39:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3182 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:39:04Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:39:04.845183 env[1566]: time="2023-10-02T19:39:04.845034892Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 19:39:04.846079 env[1566]: time="2023-10-02T19:39:04.846018034Z" level=error msg="Failed to pipe stdout of container \"8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9\"" error="reading from a closed fifo" Oct 2 19:39:04.848191 env[1566]: time="2023-10-02T19:39:04.848122416Z" level=error msg="Failed to pipe stderr of container \"8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9\"" error="reading from a closed fifo" Oct 2 19:39:04.850881 env[1566]: time="2023-10-02T19:39:04.850763100Z" level=error msg="StartContainer for \"8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:39:04.851361 kubelet[2768]: E1002 19:39:04.851280 2768 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9" Oct 2 19:39:04.854384 kubelet[2768]: E1002 19:39:04.852352 2768 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:39:04.854384 kubelet[2768]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:39:04.854384 kubelet[2768]: rm /hostbin/cilium-mount Oct 2 19:39:04.854719 kubelet[2768]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-s92mj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:39:04.854719 kubelet[2768]: E1002 19:39:04.852430 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:39:04.996380 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9-rootfs.mount: Deactivated successfully. Oct 2 19:39:05.526502 env[1566]: time="2023-10-02T19:39:05.526422050Z" level=info msg="CreateContainer within sandbox \"28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:39:05.549161 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount453899854.mount: Deactivated successfully. Oct 2 19:39:05.563733 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4279451699.mount: Deactivated successfully. Oct 2 19:39:05.567825 env[1566]: time="2023-10-02T19:39:05.567738455Z" level=info msg="CreateContainer within sandbox \"28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"187cc31fc37d8df4f0d1c50f23ccfd80ccf6b70f03c2e30d7bb8c290b4bfa427\"" Oct 2 19:39:05.569548 env[1566]: time="2023-10-02T19:39:05.569490163Z" level=info msg="StartContainer for \"187cc31fc37d8df4f0d1c50f23ccfd80ccf6b70f03c2e30d7bb8c290b4bfa427\"" Oct 2 19:39:05.623856 systemd[1]: Started cri-containerd-187cc31fc37d8df4f0d1c50f23ccfd80ccf6b70f03c2e30d7bb8c290b4bfa427.scope. Oct 2 19:39:05.663809 systemd[1]: cri-containerd-187cc31fc37d8df4f0d1c50f23ccfd80ccf6b70f03c2e30d7bb8c290b4bfa427.scope: Deactivated successfully. Oct 2 19:39:05.684291 env[1566]: time="2023-10-02T19:39:05.684212508Z" level=info msg="shim disconnected" id=187cc31fc37d8df4f0d1c50f23ccfd80ccf6b70f03c2e30d7bb8c290b4bfa427 Oct 2 19:39:05.684601 env[1566]: time="2023-10-02T19:39:05.684293222Z" level=warning msg="cleaning up after shim disconnected" id=187cc31fc37d8df4f0d1c50f23ccfd80ccf6b70f03c2e30d7bb8c290b4bfa427 namespace=k8s.io Oct 2 19:39:05.684601 env[1566]: time="2023-10-02T19:39:05.684413548Z" level=info msg="cleaning up dead shim" Oct 2 19:39:05.713533 env[1566]: time="2023-10-02T19:39:05.713414960Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:39:05Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3221 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:39:05Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/187cc31fc37d8df4f0d1c50f23ccfd80ccf6b70f03c2e30d7bb8c290b4bfa427/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:39:05.714004 env[1566]: time="2023-10-02T19:39:05.713885609Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 19:39:05.715817 env[1566]: time="2023-10-02T19:39:05.715757546Z" level=error msg="Failed to pipe stdout of container \"187cc31fc37d8df4f0d1c50f23ccfd80ccf6b70f03c2e30d7bb8c290b4bfa427\"" error="reading from a closed fifo" Oct 2 19:39:05.716078 env[1566]: time="2023-10-02T19:39:05.715994946Z" level=error msg="Failed to pipe stderr of container \"187cc31fc37d8df4f0d1c50f23ccfd80ccf6b70f03c2e30d7bb8c290b4bfa427\"" error="reading from a closed fifo" Oct 2 19:39:05.718330 env[1566]: time="2023-10-02T19:39:05.718248587Z" level=error msg="StartContainer for \"187cc31fc37d8df4f0d1c50f23ccfd80ccf6b70f03c2e30d7bb8c290b4bfa427\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:39:05.718842 kubelet[2768]: E1002 19:39:05.718727 2768 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="187cc31fc37d8df4f0d1c50f23ccfd80ccf6b70f03c2e30d7bb8c290b4bfa427" Oct 2 19:39:05.719209 kubelet[2768]: E1002 19:39:05.719093 2768 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:39:05.719209 kubelet[2768]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:39:05.719209 kubelet[2768]: rm /hostbin/cilium-mount Oct 2 19:39:05.719209 kubelet[2768]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-s92mj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:39:05.719209 kubelet[2768]: E1002 19:39:05.719163 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:39:06.530370 kubelet[2768]: I1002 19:39:06.528994 2768 scope.go:117] "RemoveContainer" containerID="8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9" Oct 2 19:39:06.530370 kubelet[2768]: I1002 19:39:06.529273 2768 scope.go:117] "RemoveContainer" containerID="8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9" Oct 2 19:39:06.536149 env[1566]: time="2023-10-02T19:39:06.535359984Z" level=info msg="RemoveContainer for \"8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9\"" Oct 2 19:39:06.536149 env[1566]: time="2023-10-02T19:39:06.535966019Z" level=info msg="RemoveContainer for \"8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9\"" Oct 2 19:39:06.537040 env[1566]: time="2023-10-02T19:39:06.536152563Z" level=error msg="RemoveContainer for \"8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9\" failed" error="failed to set removing state for container \"8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9\": container is already in removing state" Oct 2 19:39:06.537141 kubelet[2768]: E1002 19:39:06.536565 2768 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9\": container is already in removing state" containerID="8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9" Oct 2 19:39:06.537141 kubelet[2768]: E1002 19:39:06.536652 2768 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9": container is already in removing state; Skipping pod "cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e)" Oct 2 19:39:06.537352 kubelet[2768]: E1002 19:39:06.537180 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e)\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:39:06.551608 env[1566]: time="2023-10-02T19:39:06.551544744Z" level=info msg="RemoveContainer for \"8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9\" returns successfully" Oct 2 19:39:07.536346 kubelet[2768]: E1002 19:39:07.534991 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e)\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:39:07.920446 kubelet[2768]: W1002 19:39:07.919996 2768 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod24728cdd_06db_420f_be25_13420eb9d62e.slice/cri-containerd-8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9.scope WatchSource:0}: container "8677848fbe8b0e44179f81ddcdff88c6893dcb3e8f9768d238c21917897985b9" in namespace "k8s.io": not found Oct 2 19:39:11.029020 kubelet[2768]: W1002 19:39:11.028761 2768 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod24728cdd_06db_420f_be25_13420eb9d62e.slice/cri-containerd-187cc31fc37d8df4f0d1c50f23ccfd80ccf6b70f03c2e30d7bb8c290b4bfa427.scope WatchSource:0}: task 187cc31fc37d8df4f0d1c50f23ccfd80ccf6b70f03c2e30d7bb8c290b4bfa427 not found: not found Oct 2 19:39:20.355713 env[1566]: time="2023-10-02T19:39:20.355608153Z" level=info msg="CreateContainer within sandbox \"28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:39:20.375951 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount596029774.mount: Deactivated successfully. Oct 2 19:39:20.387658 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3426598753.mount: Deactivated successfully. Oct 2 19:39:20.393671 env[1566]: time="2023-10-02T19:39:20.393601412Z" level=info msg="CreateContainer within sandbox \"28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1\"" Oct 2 19:39:20.394688 env[1566]: time="2023-10-02T19:39:20.394626761Z" level=info msg="StartContainer for \"81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1\"" Oct 2 19:39:20.451279 systemd[1]: Started cri-containerd-81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1.scope. Oct 2 19:39:20.496890 systemd[1]: cri-containerd-81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1.scope: Deactivated successfully. Oct 2 19:39:20.519800 env[1566]: time="2023-10-02T19:39:20.519685245Z" level=info msg="shim disconnected" id=81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1 Oct 2 19:39:20.520175 env[1566]: time="2023-10-02T19:39:20.520137301Z" level=warning msg="cleaning up after shim disconnected" id=81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1 namespace=k8s.io Oct 2 19:39:20.520353 env[1566]: time="2023-10-02T19:39:20.520296326Z" level=info msg="cleaning up dead shim" Oct 2 19:39:20.547934 env[1566]: time="2023-10-02T19:39:20.547812347Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:39:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3262 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:39:20Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:39:20.548720 env[1566]: time="2023-10-02T19:39:20.548631798Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 19:39:20.550520 env[1566]: time="2023-10-02T19:39:20.549499765Z" level=error msg="Failed to pipe stdout of container \"81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1\"" error="reading from a closed fifo" Oct 2 19:39:20.550679 env[1566]: time="2023-10-02T19:39:20.550118994Z" level=error msg="Failed to pipe stderr of container \"81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1\"" error="reading from a closed fifo" Oct 2 19:39:20.552875 env[1566]: time="2023-10-02T19:39:20.552799936Z" level=error msg="StartContainer for \"81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:39:20.554025 kubelet[2768]: E1002 19:39:20.553462 2768 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1" Oct 2 19:39:20.554025 kubelet[2768]: E1002 19:39:20.553594 2768 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:39:20.554025 kubelet[2768]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:39:20.554025 kubelet[2768]: rm /hostbin/cilium-mount Oct 2 19:39:20.554025 kubelet[2768]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-s92mj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:39:20.554025 kubelet[2768]: E1002 19:39:20.553657 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:39:20.574517 kubelet[2768]: I1002 19:39:20.573783 2768 scope.go:117] "RemoveContainer" containerID="187cc31fc37d8df4f0d1c50f23ccfd80ccf6b70f03c2e30d7bb8c290b4bfa427" Oct 2 19:39:20.574517 kubelet[2768]: I1002 19:39:20.574473 2768 scope.go:117] "RemoveContainer" containerID="187cc31fc37d8df4f0d1c50f23ccfd80ccf6b70f03c2e30d7bb8c290b4bfa427" Oct 2 19:39:20.584258 env[1566]: time="2023-10-02T19:39:20.584181633Z" level=info msg="RemoveContainer for \"187cc31fc37d8df4f0d1c50f23ccfd80ccf6b70f03c2e30d7bb8c290b4bfa427\"" Oct 2 19:39:20.586093 env[1566]: time="2023-10-02T19:39:20.586024956Z" level=info msg="RemoveContainer for \"187cc31fc37d8df4f0d1c50f23ccfd80ccf6b70f03c2e30d7bb8c290b4bfa427\"" Oct 2 19:39:20.586356 env[1566]: time="2023-10-02T19:39:20.586181102Z" level=error msg="RemoveContainer for \"187cc31fc37d8df4f0d1c50f23ccfd80ccf6b70f03c2e30d7bb8c290b4bfa427\" failed" error="failed to set removing state for container \"187cc31fc37d8df4f0d1c50f23ccfd80ccf6b70f03c2e30d7bb8c290b4bfa427\": container is already in removing state" Oct 2 19:39:20.586899 kubelet[2768]: E1002 19:39:20.586869 2768 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"187cc31fc37d8df4f0d1c50f23ccfd80ccf6b70f03c2e30d7bb8c290b4bfa427\": container is already in removing state" containerID="187cc31fc37d8df4f0d1c50f23ccfd80ccf6b70f03c2e30d7bb8c290b4bfa427" Oct 2 19:39:20.587279 kubelet[2768]: E1002 19:39:20.587256 2768 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "187cc31fc37d8df4f0d1c50f23ccfd80ccf6b70f03c2e30d7bb8c290b4bfa427": container is already in removing state; Skipping pod "cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e)" Oct 2 19:39:20.587993 kubelet[2768]: E1002 19:39:20.587963 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e)\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:39:20.592747 env[1566]: time="2023-10-02T19:39:20.592527306Z" level=info msg="RemoveContainer for \"187cc31fc37d8df4f0d1c50f23ccfd80ccf6b70f03c2e30d7bb8c290b4bfa427\" returns successfully" Oct 2 19:39:21.370159 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1-rootfs.mount: Deactivated successfully. Oct 2 19:39:23.625890 kubelet[2768]: W1002 19:39:23.625810 2768 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod24728cdd_06db_420f_be25_13420eb9d62e.slice/cri-containerd-81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1.scope WatchSource:0}: task 81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1 not found: not found Oct 2 19:39:26.352109 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:39:26.352289 kernel: audit: type=1130 audit(1696275566.339:1125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.25.109:22-139.178.89.65:59300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:26.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.25.109:22-139.178.89.65:59300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:26.340781 systemd[1]: Started sshd@7-172.31.25.109:22-139.178.89.65:59300.service. Oct 2 19:39:26.529000 audit[3280]: USER_ACCT pid=3280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:26.530755 sshd[3280]: Accepted publickey for core from 139.178.89.65 port 59300 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:39:26.541448 kernel: audit: type=1101 audit(1696275566.529:1126): pid=3280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:26.544371 sshd[3280]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:39:26.542000 audit[3280]: CRED_ACQ pid=3280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:26.561302 kernel: audit: type=1103 audit(1696275566.542:1127): pid=3280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:26.561467 kernel: audit: type=1006 audit(1696275566.542:1128): pid=3280 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 19:39:26.561538 kernel: audit: type=1300 audit(1696275566.542:1128): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeac7bde0 a2=3 a3=1 items=0 ppid=1 pid=3280 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:26.542000 audit[3280]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeac7bde0 a2=3 a3=1 items=0 ppid=1 pid=3280 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:26.542000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:26.576197 kernel: audit: type=1327 audit(1696275566.542:1128): proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:26.580233 systemd-logind[1558]: New session 8 of user core. Oct 2 19:39:26.581406 systemd[1]: Started session-8.scope. Oct 2 19:39:26.592000 audit[3280]: USER_START pid=3280 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:26.598000 audit[3282]: CRED_ACQ pid=3282 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:26.614801 kernel: audit: type=1105 audit(1696275566.592:1129): pid=3280 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:26.615070 kernel: audit: type=1103 audit(1696275566.598:1130): pid=3282 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:26.888667 sshd[3280]: pam_unix(sshd:session): session closed for user core Oct 2 19:39:26.889000 audit[3280]: USER_END pid=3280 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:26.895619 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:39:26.896984 systemd[1]: sshd@7-172.31.25.109:22-139.178.89.65:59300.service: Deactivated successfully. Oct 2 19:39:26.891000 audit[3280]: CRED_DISP pid=3280 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:26.906129 kernel: audit: type=1106 audit(1696275566.889:1131): pid=3280 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:26.906260 kernel: audit: type=1104 audit(1696275566.891:1132): pid=3280 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:26.905429 systemd-logind[1558]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:39:26.896000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.25.109:22-139.178.89.65:59300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:26.914908 systemd-logind[1558]: Removed session 8. Oct 2 19:39:28.099000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:28.099000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:28.099000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001c30960 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:39:28.099000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:28.099000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400282ce10 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:39:28.099000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:29.678000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:29.678000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:29.678000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4007821590 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:39:29.678000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:39:29.678000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4009064ec0 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:39:29.678000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:39:29.897000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:29.897000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:29.897000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4009064f00 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:39:29.897000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:39:29.897000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40078217d0 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:39:29.897000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:39:29.897000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:29.897000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4007821890 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:39:29.897000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:39:29.898000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:29.898000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4007821950 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:39:29.898000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:39:33.350898 kubelet[2768]: E1002 19:39:33.350845 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e)\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:39:36.571882 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:39:36.572028 kernel: audit: type=1400 audit(1696275576.567:1142): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:36.567000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:36.567000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001d6a220 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:39:36.592372 kernel: audit: type=1300 audit(1696275576.567:1142): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001d6a220 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:39:36.592531 kernel: audit: type=1327 audit(1696275576.567:1142): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:36.567000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:36.568000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:36.612760 kernel: audit: type=1400 audit(1696275576.568:1143): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:36.612859 kernel: audit: type=1300 audit(1696275576.568:1143): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001d6a340 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:39:36.568000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001d6a340 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:39:36.568000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:36.635939 kernel: audit: type=1327 audit(1696275576.568:1143): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:36.636070 kernel: audit: type=1400 audit(1696275576.574:1144): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:36.574000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:36.574000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001c30a40 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:39:36.658364 kernel: audit: type=1300 audit(1696275576.574:1144): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001c30a40 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:39:36.658456 kernel: audit: type=1327 audit(1696275576.574:1144): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:36.574000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:36.574000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:36.678691 kernel: audit: type=1400 audit(1696275576.574:1145): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:36.574000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001d6a460 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:39:36.574000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:36.918910 systemd[1]: Started sshd@8-172.31.25.109:22-139.178.89.65:51414.service. Oct 2 19:39:36.919000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.25.109:22-139.178.89.65:51414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:37.102000 audit[3294]: USER_ACCT pid=3294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:37.104129 sshd[3294]: Accepted publickey for core from 139.178.89.65 port 51414 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:39:37.105000 audit[3294]: CRED_ACQ pid=3294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:37.105000 audit[3294]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6bcf6c0 a2=3 a3=1 items=0 ppid=1 pid=3294 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:37.105000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:37.108194 sshd[3294]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:39:37.118181 systemd[1]: Started session-9.scope. Oct 2 19:39:37.118985 systemd-logind[1558]: New session 9 of user core. Oct 2 19:39:37.127000 audit[3294]: USER_START pid=3294 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:37.133000 audit[3296]: CRED_ACQ pid=3296 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:37.400448 sshd[3294]: pam_unix(sshd:session): session closed for user core Oct 2 19:39:37.401000 audit[3294]: USER_END pid=3294 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:37.401000 audit[3294]: CRED_DISP pid=3294 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:37.406421 systemd[1]: sshd@8-172.31.25.109:22-139.178.89.65:51414.service: Deactivated successfully. Oct 2 19:39:37.405000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.25.109:22-139.178.89.65:51414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:37.408500 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:39:37.410979 systemd-logind[1558]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:39:37.414212 systemd-logind[1558]: Removed session 9. Oct 2 19:39:45.353658 env[1566]: time="2023-10-02T19:39:45.353168547Z" level=info msg="CreateContainer within sandbox \"28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:39:45.381536 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2186444417.mount: Deactivated successfully. Oct 2 19:39:45.394758 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2092224720.mount: Deactivated successfully. Oct 2 19:39:45.398498 env[1566]: time="2023-10-02T19:39:45.398432686Z" level=info msg="CreateContainer within sandbox \"28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e\"" Oct 2 19:39:45.399783 env[1566]: time="2023-10-02T19:39:45.399727717Z" level=info msg="StartContainer for \"abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e\"" Oct 2 19:39:45.451627 systemd[1]: Started cri-containerd-abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e.scope. Oct 2 19:39:45.501053 systemd[1]: cri-containerd-abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e.scope: Deactivated successfully. Oct 2 19:39:45.528511 env[1566]: time="2023-10-02T19:39:45.528443284Z" level=info msg="shim disconnected" id=abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e Oct 2 19:39:45.528994 env[1566]: time="2023-10-02T19:39:45.528938289Z" level=warning msg="cleaning up after shim disconnected" id=abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e namespace=k8s.io Oct 2 19:39:45.529151 env[1566]: time="2023-10-02T19:39:45.529120979Z" level=info msg="cleaning up dead shim" Oct 2 19:39:45.556451 env[1566]: time="2023-10-02T19:39:45.556384387Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:39:45Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3331 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:39:45Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:39:45.557150 env[1566]: time="2023-10-02T19:39:45.557071875Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 19:39:45.557669 env[1566]: time="2023-10-02T19:39:45.557612973Z" level=error msg="Failed to pipe stdout of container \"abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e\"" error="reading from a closed fifo" Oct 2 19:39:45.557826 env[1566]: time="2023-10-02T19:39:45.557647330Z" level=error msg="Failed to pipe stderr of container \"abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e\"" error="reading from a closed fifo" Oct 2 19:39:45.560249 env[1566]: time="2023-10-02T19:39:45.560168294Z" level=error msg="StartContainer for \"abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:39:45.560728 kubelet[2768]: E1002 19:39:45.560680 2768 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e" Oct 2 19:39:45.561441 kubelet[2768]: E1002 19:39:45.560907 2768 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:39:45.561441 kubelet[2768]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:39:45.561441 kubelet[2768]: rm /hostbin/cilium-mount Oct 2 19:39:45.561441 kubelet[2768]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-s92mj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:39:45.561441 kubelet[2768]: E1002 19:39:45.560978 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:39:45.641245 kubelet[2768]: I1002 19:39:45.640199 2768 scope.go:117] "RemoveContainer" containerID="81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1" Oct 2 19:39:45.643240 kubelet[2768]: I1002 19:39:45.641692 2768 scope.go:117] "RemoveContainer" containerID="81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1" Oct 2 19:39:45.650557 env[1566]: time="2023-10-02T19:39:45.646459638Z" level=info msg="RemoveContainer for \"81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1\"" Oct 2 19:39:45.651959 env[1566]: time="2023-10-02T19:39:45.651887083Z" level=info msg="RemoveContainer for \"81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1\" returns successfully" Oct 2 19:39:45.652822 env[1566]: time="2023-10-02T19:39:45.652571523Z" level=error msg="ContainerStatus for \"81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1\": not found" Oct 2 19:39:45.653092 kubelet[2768]: E1002 19:39:45.653045 2768 remote_runtime.go:432] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1\": not found" containerID="81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1" Oct 2 19:39:45.653195 kubelet[2768]: E1002 19:39:45.653115 2768 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": failed to get container status "81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1": rpc error: code = NotFound desc = an error occurred when try to find container "81f71b4b64c9344664566a0fb004badf2142dbc4a10a2a86542092efab1ef2d1": not found; Skipping pod "cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e)" Oct 2 19:39:45.654178 kubelet[2768]: E1002 19:39:45.654133 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e)\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:39:46.374787 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e-rootfs.mount: Deactivated successfully. Oct 2 19:39:47.431000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.25.109:22-139.178.89.65:43966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:47.432292 systemd[1]: Started sshd@9-172.31.25.109:22-139.178.89.65:43966.service. Oct 2 19:39:47.436337 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:39:47.436483 kernel: audit: type=1130 audit(1696275587.431:1155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.25.109:22-139.178.89.65:43966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:47.621000 audit[3344]: USER_ACCT pid=3344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:47.623119 sshd[3344]: Accepted publickey for core from 139.178.89.65 port 43966 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:39:47.635361 kernel: audit: type=1101 audit(1696275587.621:1156): pid=3344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:47.634000 audit[3344]: CRED_ACQ pid=3344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:47.636945 sshd[3344]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:39:47.653286 kernel: audit: type=1103 audit(1696275587.634:1157): pid=3344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:47.653472 kernel: audit: type=1006 audit(1696275587.634:1158): pid=3344 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:39:47.634000 audit[3344]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa232df0 a2=3 a3=1 items=0 ppid=1 pid=3344 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:47.665126 kernel: audit: type=1300 audit(1696275587.634:1158): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa232df0 a2=3 a3=1 items=0 ppid=1 pid=3344 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:47.634000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:47.669493 kernel: audit: type=1327 audit(1696275587.634:1158): proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:47.675937 systemd-logind[1558]: New session 10 of user core. Oct 2 19:39:47.677651 systemd[1]: Started session-10.scope. Oct 2 19:39:47.686000 audit[3344]: USER_START pid=3344 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:47.701390 kernel: audit: type=1105 audit(1696275587.686:1159): pid=3344 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:47.701502 kernel: audit: type=1103 audit(1696275587.699:1160): pid=3346 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:47.699000 audit[3346]: CRED_ACQ pid=3346 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:47.977591 sshd[3344]: pam_unix(sshd:session): session closed for user core Oct 2 19:39:47.978000 audit[3344]: USER_END pid=3344 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:47.978000 audit[3344]: CRED_DISP pid=3344 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:48.001542 kernel: audit: type=1106 audit(1696275587.978:1161): pid=3344 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:48.001699 kernel: audit: type=1104 audit(1696275587.978:1162): pid=3344 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:47.992345 systemd[1]: sshd@9-172.31.25.109:22-139.178.89.65:43966.service: Deactivated successfully. Oct 2 19:39:47.993817 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:39:47.996204 systemd-logind[1558]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:39:47.997756 systemd-logind[1558]: Removed session 10. Oct 2 19:39:47.990000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.25.109:22-139.178.89.65:43966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:48.634951 kubelet[2768]: W1002 19:39:48.634883 2768 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod24728cdd_06db_420f_be25_13420eb9d62e.slice/cri-containerd-abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e.scope WatchSource:0}: task abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e not found: not found Oct 2 19:39:58.018959 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:39:58.019086 kernel: audit: type=1130 audit(1696275598.006:1164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.25.109:22-139.178.89.65:58602 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:58.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.25.109:22-139.178.89.65:58602 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:58.007285 systemd[1]: Started sshd@10-172.31.25.109:22-139.178.89.65:58602.service. Oct 2 19:39:58.195000 audit[3359]: USER_ACCT pid=3359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:58.196666 sshd[3359]: Accepted publickey for core from 139.178.89.65 port 58602 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:39:58.208383 kernel: audit: type=1101 audit(1696275598.195:1165): pid=3359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:58.207000 audit[3359]: CRED_ACQ pid=3359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:58.210358 sshd[3359]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:39:58.220114 systemd[1]: Started session-11.scope. Oct 2 19:39:58.230677 kernel: audit: type=1103 audit(1696275598.207:1166): pid=3359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:58.230733 kernel: audit: type=1006 audit(1696275598.208:1167): pid=3359 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:39:58.230780 kernel: audit: type=1300 audit(1696275598.208:1167): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff17fa80 a2=3 a3=1 items=0 ppid=1 pid=3359 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:58.208000 audit[3359]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff17fa80 a2=3 a3=1 items=0 ppid=1 pid=3359 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:58.233393 systemd-logind[1558]: New session 11 of user core. Oct 2 19:39:58.208000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:58.239460 kernel: audit: type=1327 audit(1696275598.208:1167): proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:58.246000 audit[3359]: USER_START pid=3359 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:58.261396 kernel: audit: type=1105 audit(1696275598.246:1168): pid=3359 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:58.260000 audit[3361]: CRED_ACQ pid=3361 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:58.273373 kernel: audit: type=1103 audit(1696275598.260:1169): pid=3361 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:58.353406 kubelet[2768]: E1002 19:39:58.350440 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e)\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:39:58.539558 sshd[3359]: pam_unix(sshd:session): session closed for user core Oct 2 19:39:58.540000 audit[3359]: USER_END pid=3359 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:58.540000 audit[3359]: CRED_DISP pid=3359 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:58.563626 kernel: audit: type=1106 audit(1696275598.540:1170): pid=3359 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:58.563762 kernel: audit: type=1104 audit(1696275598.540:1171): pid=3359 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:58.554240 systemd[1]: sshd@10-172.31.25.109:22-139.178.89.65:58602.service: Deactivated successfully. Oct 2 19:39:58.555519 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:39:58.553000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.25.109:22-139.178.89.65:58602 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:58.564723 systemd-logind[1558]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:39:58.566349 systemd-logind[1558]: Removed session 11. Oct 2 19:40:08.570638 systemd[1]: Started sshd@11-172.31.25.109:22-139.178.89.65:58752.service. Oct 2 19:40:08.582631 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:40:08.582737 kernel: audit: type=1130 audit(1696275608.570:1173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.25.109:22-139.178.89.65:58752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:08.570000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.25.109:22-139.178.89.65:58752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:08.753000 audit[3372]: USER_ACCT pid=3372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:08.754935 sshd[3372]: Accepted publickey for core from 139.178.89.65 port 58752 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:40:08.758697 sshd[3372]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:08.756000 audit[3372]: CRED_ACQ pid=3372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:08.775896 kernel: audit: type=1101 audit(1696275608.753:1174): pid=3372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:08.776020 kernel: audit: type=1103 audit(1696275608.756:1175): pid=3372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:08.782617 kernel: audit: type=1006 audit(1696275608.756:1176): pid=3372 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:40:08.756000 audit[3372]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc5d38d30 a2=3 a3=1 items=0 ppid=1 pid=3372 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:08.793464 kernel: audit: type=1300 audit(1696275608.756:1176): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc5d38d30 a2=3 a3=1 items=0 ppid=1 pid=3372 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:08.756000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:08.797360 kernel: audit: type=1327 audit(1696275608.756:1176): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:08.800281 systemd[1]: Started session-12.scope. Oct 2 19:40:08.801114 systemd-logind[1558]: New session 12 of user core. Oct 2 19:40:08.809000 audit[3372]: USER_START pid=3372 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:08.816000 audit[3374]: CRED_ACQ pid=3374 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:08.831623 kernel: audit: type=1105 audit(1696275608.809:1177): pid=3372 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:08.831748 kernel: audit: type=1103 audit(1696275608.816:1178): pid=3374 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:09.090775 sshd[3372]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:09.091000 audit[3372]: USER_END pid=3372 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:09.097056 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:40:09.098499 systemd[1]: sshd@11-172.31.25.109:22-139.178.89.65:58752.service: Deactivated successfully. Oct 2 19:40:09.093000 audit[3372]: CRED_DISP pid=3372 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:09.105459 kernel: audit: type=1106 audit(1696275609.091:1179): pid=3372 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:09.115004 systemd-logind[1558]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:40:09.097000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.25.109:22-139.178.89.65:58752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:09.116449 kernel: audit: type=1104 audit(1696275609.093:1180): pid=3372 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:09.117675 systemd-logind[1558]: Removed session 12. Oct 2 19:40:10.350740 kubelet[2768]: E1002 19:40:10.350698 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e)\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:40:19.121000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.25.109:22-139.178.89.65:55376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:19.122699 systemd[1]: Started sshd@12-172.31.25.109:22-139.178.89.65:55376.service. Oct 2 19:40:19.127339 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:40:19.127483 kernel: audit: type=1130 audit(1696275619.121:1182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.25.109:22-139.178.89.65:55376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:19.310000 audit[3384]: USER_ACCT pid=3384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:19.312080 sshd[3384]: Accepted publickey for core from 139.178.89.65 port 55376 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:40:19.323347 kernel: audit: type=1101 audit(1696275619.310:1183): pid=3384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:19.323000 audit[3384]: CRED_ACQ pid=3384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:19.330512 sshd[3384]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:19.341873 kernel: audit: type=1103 audit(1696275619.323:1184): pid=3384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:19.342019 kernel: audit: type=1006 audit(1696275619.323:1185): pid=3384 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:40:19.342079 kernel: audit: type=1300 audit(1696275619.323:1185): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9b6d710 a2=3 a3=1 items=0 ppid=1 pid=3384 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:19.323000 audit[3384]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9b6d710 a2=3 a3=1 items=0 ppid=1 pid=3384 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:19.323000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:19.356013 kernel: audit: type=1327 audit(1696275619.323:1185): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:19.361098 systemd-logind[1558]: New session 13 of user core. Oct 2 19:40:19.362762 systemd[1]: Started session-13.scope. Oct 2 19:40:19.371000 audit[3384]: USER_START pid=3384 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:19.376000 audit[3386]: CRED_ACQ pid=3386 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:19.394039 kernel: audit: type=1105 audit(1696275619.371:1186): pid=3384 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:19.394149 kernel: audit: type=1103 audit(1696275619.376:1187): pid=3386 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:19.645688 sshd[3384]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:19.646000 audit[3384]: USER_END pid=3384 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:19.651696 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:40:19.652927 systemd[1]: sshd@12-172.31.25.109:22-139.178.89.65:55376.service: Deactivated successfully. Oct 2 19:40:19.646000 audit[3384]: CRED_DISP pid=3384 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:19.669944 kernel: audit: type=1106 audit(1696275619.646:1188): pid=3384 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:19.670081 kernel: audit: type=1104 audit(1696275619.646:1189): pid=3384 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:19.652000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.25.109:22-139.178.89.65:55376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:19.670688 systemd-logind[1558]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:40:19.672279 systemd-logind[1558]: Removed session 13. Oct 2 19:40:25.350011 kubelet[2768]: E1002 19:40:25.349948 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e)\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:40:28.099000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:28.103177 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:40:28.103295 kernel: audit: type=1400 audit(1696275628.099:1191): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:28.101000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:28.123335 kernel: audit: type=1400 audit(1696275628.101:1192): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:28.123489 kernel: audit: type=1300 audit(1696275628.101:1192): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40005a0120 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:40:28.101000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40005a0120 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:40:28.101000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:28.146616 kernel: audit: type=1327 audit(1696275628.101:1192): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:28.146764 kernel: audit: type=1300 audit(1696275628.099:1191): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f9b000 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:40:28.099000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f9b000 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:40:28.099000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:28.169869 kernel: audit: type=1327 audit(1696275628.099:1191): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:29.678000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:29.687574 systemd[1]: Started sshd@13-172.31.25.109:22-139.178.89.65:35406.service. Oct 2 19:40:29.678000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4006f7f410 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:40:29.702717 kernel: audit: type=1400 audit(1696275629.678:1193): avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:29.702837 kernel: audit: type=1300 audit(1696275629.678:1193): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4006f7f410 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:40:29.702900 kernel: audit: type=1327 audit(1696275629.678:1193): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:40:29.678000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:40:29.679000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:29.723346 kernel: audit: type=1400 audit(1696275629.679:1194): avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:29.679000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4006360380 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:40:29.679000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:40:29.686000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.25.109:22-139.178.89.65:35406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:29.875000 audit[3399]: USER_ACCT pid=3399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:29.877076 sshd[3399]: Accepted publickey for core from 139.178.89.65 port 35406 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:40:29.881000 audit[3399]: CRED_ACQ pid=3399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:29.881000 audit[3399]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc24b0d0 a2=3 a3=1 items=0 ppid=1 pid=3399 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:29.881000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:29.883974 sshd[3399]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:29.894770 systemd-logind[1558]: New session 14 of user core. Oct 2 19:40:29.896433 systemd[1]: Started session-14.scope. Oct 2 19:40:29.898000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:29.898000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4006f7f470 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:40:29.898000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:40:29.899000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:29.899000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4006f7f4a0 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:40:29.899000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:40:29.899000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:29.899000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4006f7f4d0 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:40:29.899000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:40:29.901000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:29.901000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4006360640 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:40:29.901000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:40:29.907000 audit[3399]: USER_START pid=3399 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:29.914000 audit[3401]: CRED_ACQ pid=3401 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:30.203240 sshd[3399]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:30.204000 audit[3399]: USER_END pid=3399 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:30.205000 audit[3399]: CRED_DISP pid=3399 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:30.210229 systemd[1]: sshd@13-172.31.25.109:22-139.178.89.65:35406.service: Deactivated successfully. Oct 2 19:40:30.209000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.25.109:22-139.178.89.65:35406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:30.211643 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:40:30.212056 systemd-logind[1558]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:40:30.214253 systemd-logind[1558]: Removed session 14. Oct 2 19:40:34.224422 kubelet[2768]: E1002 19:40:34.224260 2768 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:40:34.398274 kubelet[2768]: E1002 19:40:34.398231 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:36.571000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:36.574635 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:40:36.574807 kernel: audit: type=1400 audit(1696275636.571:1208): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:36.571000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40009fc740 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:40:36.597079 kernel: audit: type=1300 audit(1696275636.571:1208): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40009fc740 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:40:36.597247 kernel: audit: type=1327 audit(1696275636.571:1208): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:36.571000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:36.607674 kernel: audit: type=1400 audit(1696275636.574:1209): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:36.574000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:36.574000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e44140 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:40:36.574000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:36.640672 kernel: audit: type=1300 audit(1696275636.574:1209): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e44140 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:40:36.640835 kernel: audit: type=1327 audit(1696275636.574:1209): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:36.640892 kernel: audit: type=1400 audit(1696275636.575:1210): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:36.575000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:36.650411 kernel: audit: type=1300 audit(1696275636.575:1210): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40009fc960 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:40:36.575000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40009fc960 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:40:36.575000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:36.673551 kernel: audit: type=1327 audit(1696275636.575:1210): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:36.673700 kernel: audit: type=1400 audit(1696275636.578:1211): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:36.578000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:36.578000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e44160 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:40:36.578000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:39.356840 env[1566]: time="2023-10-02T19:40:39.356757715Z" level=info msg="CreateContainer within sandbox \"28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:40:39.381294 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1881950235.mount: Deactivated successfully. Oct 2 19:40:39.395497 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1852524614.mount: Deactivated successfully. Oct 2 19:40:39.400461 kubelet[2768]: E1002 19:40:39.400393 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:39.401476 env[1566]: time="2023-10-02T19:40:39.401398241Z" level=info msg="CreateContainer within sandbox \"28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081\"" Oct 2 19:40:39.402933 env[1566]: time="2023-10-02T19:40:39.402873373Z" level=info msg="StartContainer for \"d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081\"" Oct 2 19:40:39.459341 systemd[1]: Started cri-containerd-d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081.scope. Oct 2 19:40:39.494401 systemd[1]: cri-containerd-d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081.scope: Deactivated successfully. Oct 2 19:40:39.526865 env[1566]: time="2023-10-02T19:40:39.526793299Z" level=info msg="shim disconnected" id=d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081 Oct 2 19:40:39.527285 env[1566]: time="2023-10-02T19:40:39.527224296Z" level=warning msg="cleaning up after shim disconnected" id=d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081 namespace=k8s.io Oct 2 19:40:39.527485 env[1566]: time="2023-10-02T19:40:39.527449875Z" level=info msg="cleaning up dead shim" Oct 2 19:40:39.556088 env[1566]: time="2023-10-02T19:40:39.556023374Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:40:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3438 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:40:39Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:40:39.556951 env[1566]: time="2023-10-02T19:40:39.556835149Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 19:40:39.562006 env[1566]: time="2023-10-02T19:40:39.561658902Z" level=error msg="Failed to pipe stdout of container \"d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081\"" error="reading from a closed fifo" Oct 2 19:40:39.562700 env[1566]: time="2023-10-02T19:40:39.562542486Z" level=error msg="Failed to pipe stderr of container \"d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081\"" error="reading from a closed fifo" Oct 2 19:40:39.566255 env[1566]: time="2023-10-02T19:40:39.566146806Z" level=error msg="StartContainer for \"d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:40:39.567082 kubelet[2768]: E1002 19:40:39.566809 2768 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081" Oct 2 19:40:39.568024 kubelet[2768]: E1002 19:40:39.566957 2768 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:40:39.568024 kubelet[2768]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:40:39.568024 kubelet[2768]: rm /hostbin/cilium-mount Oct 2 19:40:39.568024 kubelet[2768]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-s92mj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:40:39.568024 kubelet[2768]: E1002 19:40:39.567474 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:40:39.785217 kubelet[2768]: I1002 19:40:39.783771 2768 scope.go:117] "RemoveContainer" containerID="abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e" Oct 2 19:40:39.785217 kubelet[2768]: I1002 19:40:39.785134 2768 scope.go:117] "RemoveContainer" containerID="abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e" Oct 2 19:40:39.790160 env[1566]: time="2023-10-02T19:40:39.790084893Z" level=info msg="RemoveContainer for \"abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e\"" Oct 2 19:40:39.794383 env[1566]: time="2023-10-02T19:40:39.794222392Z" level=info msg="RemoveContainer for \"abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e\"" Oct 2 19:40:39.796919 env[1566]: time="2023-10-02T19:40:39.796826007Z" level=error msg="RemoveContainer for \"abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e\" failed" error="failed to set removing state for container \"abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e\": container is already in removing state" Oct 2 19:40:39.798661 kubelet[2768]: E1002 19:40:39.797481 2768 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e\": container is already in removing state" containerID="abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e" Oct 2 19:40:39.798661 kubelet[2768]: E1002 19:40:39.797573 2768 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e": container is already in removing state; Skipping pod "cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e)" Oct 2 19:40:39.798661 kubelet[2768]: E1002 19:40:39.798217 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e)\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:40:39.799293 env[1566]: time="2023-10-02T19:40:39.799217483Z" level=info msg="RemoveContainer for \"abb4266d7271acbf1d2665bde7114528bc340b9301cf0770adaa484ef319b02e\" returns successfully" Oct 2 19:40:40.235215 systemd[1]: Started sshd@14-172.31.25.109:22-139.178.89.65:47442.service. Oct 2 19:40:40.234000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.25.109:22-139.178.89.65:47442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:40.374888 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081-rootfs.mount: Deactivated successfully. Oct 2 19:40:40.420000 audit[3452]: USER_ACCT pid=3452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:40.422156 sshd[3452]: Accepted publickey for core from 139.178.89.65 port 47442 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:40:40.423000 audit[3452]: CRED_ACQ pid=3452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:40.423000 audit[3452]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed3f3390 a2=3 a3=1 items=0 ppid=1 pid=3452 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:40.423000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:40.426038 sshd[3452]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:40.435549 systemd-logind[1558]: New session 15 of user core. Oct 2 19:40:40.435673 systemd[1]: Started session-15.scope. Oct 2 19:40:40.447000 audit[3452]: USER_START pid=3452 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:40.453000 audit[3454]: CRED_ACQ pid=3454 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:40.733503 sshd[3452]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:40.733000 audit[3452]: USER_END pid=3452 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:40.734000 audit[3452]: CRED_DISP pid=3452 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:40.740147 systemd-logind[1558]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:40:40.740789 systemd[1]: sshd@14-172.31.25.109:22-139.178.89.65:47442.service: Deactivated successfully. Oct 2 19:40:40.742195 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:40:40.739000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.25.109:22-139.178.89.65:47442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:40.744590 systemd-logind[1558]: Removed session 15. Oct 2 19:40:42.634544 kubelet[2768]: W1002 19:40:42.634492 2768 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod24728cdd_06db_420f_be25_13420eb9d62e.slice/cri-containerd-d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081.scope WatchSource:0}: task d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081 not found: not found Oct 2 19:40:44.401968 kubelet[2768]: E1002 19:40:44.401829 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:49.402953 kubelet[2768]: E1002 19:40:49.402903 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:50.767206 systemd[1]: Started sshd@15-172.31.25.109:22-139.178.89.65:39256.service. Oct 2 19:40:50.767000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.109:22-139.178.89.65:39256 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:50.770322 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:40:50.770429 kernel: audit: type=1130 audit(1696275650.767:1221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.109:22-139.178.89.65:39256 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:50.961000 audit[3468]: USER_ACCT pid=3468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:50.962633 sshd[3468]: Accepted publickey for core from 139.178.89.65 port 39256 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:40:50.972393 kernel: audit: type=1101 audit(1696275650.961:1222): pid=3468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:50.974000 audit[3468]: CRED_ACQ pid=3468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:50.975825 sshd[3468]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:50.992339 kernel: audit: type=1103 audit(1696275650.974:1223): pid=3468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:50.992495 kernel: audit: type=1006 audit(1696275650.974:1224): pid=3468 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:40:50.974000 audit[3468]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd84e35f0 a2=3 a3=1 items=0 ppid=1 pid=3468 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:51.003026 kernel: audit: type=1300 audit(1696275650.974:1224): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd84e35f0 a2=3 a3=1 items=0 ppid=1 pid=3468 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:50.974000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:51.006721 kernel: audit: type=1327 audit(1696275650.974:1224): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:51.011753 systemd-logind[1558]: New session 16 of user core. Oct 2 19:40:51.013774 systemd[1]: Started session-16.scope. Oct 2 19:40:51.023000 audit[3468]: USER_START pid=3468 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:51.036000 audit[3470]: CRED_ACQ pid=3470 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:51.045932 kernel: audit: type=1105 audit(1696275651.023:1225): pid=3468 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:51.046353 kernel: audit: type=1103 audit(1696275651.036:1226): pid=3470 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:51.314656 sshd[3468]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:51.316000 audit[3468]: USER_END pid=3468 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:51.322997 systemd-logind[1558]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:40:51.325176 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:40:51.327156 systemd-logind[1558]: Removed session 16. Oct 2 19:40:51.328349 systemd[1]: sshd@15-172.31.25.109:22-139.178.89.65:39256.service: Deactivated successfully. Oct 2 19:40:51.316000 audit[3468]: CRED_DISP pid=3468 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:51.329540 kernel: audit: type=1106 audit(1696275651.316:1227): pid=3468 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:51.328000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.109:22-139.178.89.65:39256 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:51.339462 kernel: audit: type=1104 audit(1696275651.316:1228): pid=3468 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:51.349755 kubelet[2768]: E1002 19:40:51.349718 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e)\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:40:54.404350 kubelet[2768]: E1002 19:40:54.404290 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:59.406582 kubelet[2768]: E1002 19:40:59.406477 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:01.348830 systemd[1]: Started sshd@16-172.31.25.109:22-139.178.89.65:42706.service. Oct 2 19:41:01.361394 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:41:01.361501 kernel: audit: type=1130 audit(1696275661.349:1230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.25.109:22-139.178.89.65:42706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:01.349000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.25.109:22-139.178.89.65:42706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:01.536000 audit[3480]: USER_ACCT pid=3480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:01.540622 sshd[3480]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:01.543932 sshd[3480]: Accepted publickey for core from 139.178.89.65 port 42706 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:41:01.539000 audit[3480]: CRED_ACQ pid=3480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:01.548711 kernel: audit: type=1101 audit(1696275661.536:1231): pid=3480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:01.548782 kernel: audit: type=1103 audit(1696275661.539:1232): pid=3480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:01.564882 kernel: audit: type=1006 audit(1696275661.539:1233): pid=3480 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:41:01.539000 audit[3480]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff2f9c570 a2=3 a3=1 items=0 ppid=1 pid=3480 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:01.576054 kernel: audit: type=1300 audit(1696275661.539:1233): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff2f9c570 a2=3 a3=1 items=0 ppid=1 pid=3480 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:01.539000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:01.579945 kernel: audit: type=1327 audit(1696275661.539:1233): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:01.584677 systemd[1]: Started session-17.scope. Oct 2 19:41:01.585658 systemd-logind[1558]: New session 17 of user core. Oct 2 19:41:01.595000 audit[3480]: USER_START pid=3480 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:01.608458 kernel: audit: type=1105 audit(1696275661.595:1234): pid=3480 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:01.608000 audit[3482]: CRED_ACQ pid=3482 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:01.619366 kernel: audit: type=1103 audit(1696275661.608:1235): pid=3482 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:01.885136 sshd[3480]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:01.886000 audit[3480]: USER_END pid=3480 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:01.899852 systemd[1]: sshd@16-172.31.25.109:22-139.178.89.65:42706.service: Deactivated successfully. Oct 2 19:41:01.901144 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:41:01.890000 audit[3480]: CRED_DISP pid=3480 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:01.903544 systemd-logind[1558]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:41:01.913004 kernel: audit: type=1106 audit(1696275661.886:1236): pid=3480 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:01.913117 kernel: audit: type=1104 audit(1696275661.890:1237): pid=3480 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:01.900000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.25.109:22-139.178.89.65:42706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:01.921596 systemd-logind[1558]: Removed session 17. Oct 2 19:41:01.924816 systemd[1]: Started sshd@17-172.31.25.109:22-139.178.89.65:42720.service. Oct 2 19:41:01.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.25.109:22-139.178.89.65:42720 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:02.112000 audit[3492]: USER_ACCT pid=3492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:02.112802 sshd[3492]: Accepted publickey for core from 139.178.89.65 port 42720 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:41:02.115000 audit[3492]: CRED_ACQ pid=3492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:02.115000 audit[3492]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3d94700 a2=3 a3=1 items=0 ppid=1 pid=3492 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:02.115000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:02.116880 sshd[3492]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:02.126537 systemd[1]: Started session-18.scope. Oct 2 19:41:02.128073 systemd-logind[1558]: New session 18 of user core. Oct 2 19:41:02.137000 audit[3492]: USER_START pid=3492 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:02.143000 audit[3494]: CRED_ACQ pid=3494 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:03.716442 sshd[3492]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:03.719000 audit[3492]: USER_END pid=3492 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:03.720000 audit[3492]: CRED_DISP pid=3492 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:03.724762 systemd[1]: sshd@17-172.31.25.109:22-139.178.89.65:42720.service: Deactivated successfully. Oct 2 19:41:03.726119 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:41:03.726617 systemd-logind[1558]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:41:03.724000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.25.109:22-139.178.89.65:42720 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:03.728935 systemd-logind[1558]: Removed session 18. Oct 2 19:41:03.751000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.25.109:22-139.178.89.65:42728 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:03.751147 systemd[1]: Started sshd@18-172.31.25.109:22-139.178.89.65:42728.service. Oct 2 19:41:03.937000 audit[3502]: USER_ACCT pid=3502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:03.938623 sshd[3502]: Accepted publickey for core from 139.178.89.65 port 42728 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:41:03.940000 audit[3502]: CRED_ACQ pid=3502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:03.941000 audit[3502]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0bee9d0 a2=3 a3=1 items=0 ppid=1 pid=3502 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:03.941000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:03.942042 sshd[3502]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:03.951081 systemd[1]: Started session-19.scope. Oct 2 19:41:03.952091 systemd-logind[1558]: New session 19 of user core. Oct 2 19:41:03.961000 audit[3502]: USER_START pid=3502 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:03.967000 audit[3504]: CRED_ACQ pid=3504 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:04.245271 sshd[3502]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:04.247000 audit[3502]: USER_END pid=3502 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:04.247000 audit[3502]: CRED_DISP pid=3502 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:04.251086 systemd-logind[1558]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:41:04.251090 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:41:04.252617 systemd[1]: sshd@18-172.31.25.109:22-139.178.89.65:42728.service: Deactivated successfully. Oct 2 19:41:04.252000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.25.109:22-139.178.89.65:42728 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:04.254809 systemd-logind[1558]: Removed session 19. Oct 2 19:41:04.407915 kubelet[2768]: E1002 19:41:04.407880 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:06.351383 kubelet[2768]: E1002 19:41:06.351300 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e)\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:41:09.410525 kubelet[2768]: E1002 19:41:09.410454 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:14.277573 systemd[1]: Started sshd@19-172.31.25.109:22-139.178.89.65:45736.service. Oct 2 19:41:14.289850 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:41:14.289984 kernel: audit: type=1130 audit(1696275674.278:1257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.25.109:22-139.178.89.65:45736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:14.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.25.109:22-139.178.89.65:45736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:14.411961 kubelet[2768]: E1002 19:41:14.411904 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:14.467000 audit[3514]: USER_ACCT pid=3514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:14.468034 sshd[3514]: Accepted publickey for core from 139.178.89.65 port 45736 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:41:14.479390 kernel: audit: type=1101 audit(1696275674.467:1258): pid=3514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:14.480000 audit[3514]: CRED_ACQ pid=3514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:14.482107 sshd[3514]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:14.498179 kernel: audit: type=1103 audit(1696275674.480:1259): pid=3514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:14.498350 kernel: audit: type=1006 audit(1696275674.481:1260): pid=3514 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:41:14.481000 audit[3514]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3110f00 a2=3 a3=1 items=0 ppid=1 pid=3514 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:14.509334 kernel: audit: type=1300 audit(1696275674.481:1260): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3110f00 a2=3 a3=1 items=0 ppid=1 pid=3514 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:14.481000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:14.513657 kernel: audit: type=1327 audit(1696275674.481:1260): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:14.514806 systemd-logind[1558]: New session 20 of user core. Oct 2 19:41:14.518797 systemd[1]: Started session-20.scope. Oct 2 19:41:14.528000 audit[3514]: USER_START pid=3514 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:14.542000 audit[3516]: CRED_ACQ pid=3516 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:14.552620 kernel: audit: type=1105 audit(1696275674.528:1261): pid=3514 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:14.552763 kernel: audit: type=1103 audit(1696275674.542:1262): pid=3516 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:14.811548 sshd[3514]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:14.813000 audit[3514]: USER_END pid=3514 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:14.814000 audit[3514]: CRED_DISP pid=3514 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:14.826825 systemd[1]: sshd@19-172.31.25.109:22-139.178.89.65:45736.service: Deactivated successfully. Oct 2 19:41:14.836686 kernel: audit: type=1106 audit(1696275674.813:1263): pid=3514 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:14.836808 kernel: audit: type=1104 audit(1696275674.814:1264): pid=3514 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:14.828088 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:41:14.826000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.25.109:22-139.178.89.65:45736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:14.837749 systemd-logind[1558]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:41:14.839712 systemd-logind[1558]: Removed session 20. Oct 2 19:41:18.351200 kubelet[2768]: E1002 19:41:18.351148 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e)\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:41:19.413520 kubelet[2768]: E1002 19:41:19.413484 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:24.415072 kubelet[2768]: E1002 19:41:24.415004 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:24.844762 systemd[1]: Started sshd@20-172.31.25.109:22-139.178.89.65:55618.service. Oct 2 19:41:24.844000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.25.109:22-139.178.89.65:55618 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:24.850368 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:41:24.850473 kernel: audit: type=1130 audit(1696275684.844:1266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.25.109:22-139.178.89.65:55618 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:25.029000 audit[3528]: USER_ACCT pid=3528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:25.030803 sshd[3528]: Accepted publickey for core from 139.178.89.65 port 55618 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:41:25.035059 sshd[3528]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:25.032000 audit[3528]: CRED_ACQ pid=3528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:25.051181 kernel: audit: type=1101 audit(1696275685.029:1267): pid=3528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:25.051386 kernel: audit: type=1103 audit(1696275685.032:1268): pid=3528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:25.057829 kernel: audit: type=1006 audit(1696275685.032:1269): pid=3528 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:41:25.032000 audit[3528]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9084070 a2=3 a3=1 items=0 ppid=1 pid=3528 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:25.069047 kernel: audit: type=1300 audit(1696275685.032:1269): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9084070 a2=3 a3=1 items=0 ppid=1 pid=3528 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:25.032000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:25.076586 kernel: audit: type=1327 audit(1696275685.032:1269): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:25.074608 systemd-logind[1558]: New session 21 of user core. Oct 2 19:41:25.075187 systemd[1]: Started session-21.scope. Oct 2 19:41:25.084000 audit[3528]: USER_START pid=3528 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:25.091000 audit[3530]: CRED_ACQ pid=3530 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:25.106364 kernel: audit: type=1105 audit(1696275685.084:1270): pid=3528 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:25.106511 kernel: audit: type=1103 audit(1696275685.091:1271): pid=3530 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:25.361684 sshd[3528]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:25.362000 audit[3528]: USER_END pid=3528 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:25.367357 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:41:25.368641 systemd[1]: sshd@20-172.31.25.109:22-139.178.89.65:55618.service: Deactivated successfully. Oct 2 19:41:25.363000 audit[3528]: CRED_DISP pid=3528 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:25.386198 kernel: audit: type=1106 audit(1696275685.362:1272): pid=3528 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:25.386358 kernel: audit: type=1104 audit(1696275685.363:1273): pid=3528 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:25.377045 systemd-logind[1558]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:41:25.378536 systemd-logind[1558]: Removed session 21. Oct 2 19:41:25.367000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.25.109:22-139.178.89.65:55618 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:28.103000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:28.103000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:28.103000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40024ce460 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:41:28.103000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:28.103000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001bb3da0 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:41:28.103000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:29.416140 kubelet[2768]: E1002 19:41:29.416098 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:29.680000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:29.680000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:29.680000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400e9d7e60 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:41:29.680000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:41:29.680000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400c151840 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:41:29.680000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:41:29.899000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:29.902553 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:41:29.902668 kernel: audit: type=1400 audit(1696275689.899:1279): avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:29.900000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:29.900000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400ecaca20 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:41:29.937639 kernel: audit: type=1400 audit(1696275689.900:1280): avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:29.937723 kernel: audit: type=1300 audit(1696275689.900:1280): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400ecaca20 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:41:29.900000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:41:29.949066 kernel: audit: type=1327 audit(1696275689.900:1280): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:41:29.900000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:29.959122 kernel: audit: type=1400 audit(1696275689.900:1281): avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:29.959205 kernel: audit: type=1300 audit(1696275689.900:1281): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400ecaca80 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:41:29.900000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400ecaca80 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:41:29.900000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:41:29.982414 kernel: audit: type=1327 audit(1696275689.900:1281): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:41:29.901000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:29.992192 kernel: audit: type=1400 audit(1696275689.901:1282): avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:29.992269 kernel: audit: type=1300 audit(1696275689.901:1282): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c151c40 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:41:29.901000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c151c40 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:41:29.901000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:41:30.015377 kernel: audit: type=1327 audit(1696275689.901:1282): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:41:29.899000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400e9d7fb0 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:41:29.899000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:41:30.350572 kubelet[2768]: E1002 19:41:30.350533 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e)\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:41:34.418110 kubelet[2768]: E1002 19:41:34.418008 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:35.398337 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:41:35.398497 kernel: audit: type=1130 audit(1696275695.394:1283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.25.109:22-139.178.89.65:60984 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:35.394000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.25.109:22-139.178.89.65:60984 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:35.395826 systemd[1]: Started sshd@21-172.31.25.109:22-139.178.89.65:60984.service. Oct 2 19:41:35.587000 audit[3542]: USER_ACCT pid=3542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:35.589016 sshd[3542]: Accepted publickey for core from 139.178.89.65 port 60984 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:41:35.600451 kernel: audit: type=1101 audit(1696275695.587:1284): pid=3542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:35.600000 audit[3542]: CRED_ACQ pid=3542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:35.602943 sshd[3542]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:35.618347 kernel: audit: type=1103 audit(1696275695.600:1285): pid=3542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:35.618492 kernel: audit: type=1006 audit(1696275695.600:1286): pid=3542 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 19:41:35.600000 audit[3542]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc0c5f520 a2=3 a3=1 items=0 ppid=1 pid=3542 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:35.629133 kernel: audit: type=1300 audit(1696275695.600:1286): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc0c5f520 a2=3 a3=1 items=0 ppid=1 pid=3542 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:35.629403 kernel: audit: type=1327 audit(1696275695.600:1286): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:35.600000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:35.637538 systemd-logind[1558]: New session 22 of user core. Oct 2 19:41:35.638806 systemd[1]: Started session-22.scope. Oct 2 19:41:35.647000 audit[3542]: USER_START pid=3542 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:35.655000 audit[3544]: CRED_ACQ pid=3544 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:35.670138 kernel: audit: type=1105 audit(1696275695.647:1287): pid=3542 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:35.670272 kernel: audit: type=1103 audit(1696275695.655:1288): pid=3544 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:35.926161 sshd[3542]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:35.929000 audit[3542]: USER_END pid=3542 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:35.934860 systemd-logind[1558]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:41:35.937467 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:41:35.939728 systemd-logind[1558]: Removed session 22. Oct 2 19:41:35.941216 systemd[1]: sshd@21-172.31.25.109:22-139.178.89.65:60984.service: Deactivated successfully. Oct 2 19:41:35.929000 audit[3542]: CRED_DISP pid=3542 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:35.952322 kernel: audit: type=1106 audit(1696275695.929:1289): pid=3542 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:35.952435 kernel: audit: type=1104 audit(1696275695.929:1290): pid=3542 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:35.940000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.25.109:22-139.178.89.65:60984 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:36.572000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:36.572000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002530900 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:41:36.572000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:36.577000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:36.577000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:36.577000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002530920 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:41:36.577000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:36.577000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40024ce4e0 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:41:36.577000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:36.579000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:36.579000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002530a40 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:41:36.579000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:39.419796 kubelet[2768]: E1002 19:41:39.419760 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:44.350819 kubelet[2768]: E1002 19:41:44.350778 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e)\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:41:44.422485 kubelet[2768]: E1002 19:41:44.422421 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:45.960665 systemd[1]: Started sshd@22-172.31.25.109:22-139.178.89.65:54956.service. Oct 2 19:41:45.973436 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:41:45.973571 kernel: audit: type=1130 audit(1696275705.960:1296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.25.109:22-139.178.89.65:54956 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:45.960000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.25.109:22-139.178.89.65:54956 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:46.147000 audit[3554]: USER_ACCT pid=3554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:46.149589 sshd[3554]: Accepted publickey for core from 139.178.89.65 port 54956 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:41:46.153734 sshd[3554]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:46.151000 audit[3554]: CRED_ACQ pid=3554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:46.169852 kernel: audit: type=1101 audit(1696275706.147:1297): pid=3554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:46.170143 kernel: audit: type=1103 audit(1696275706.151:1298): pid=3554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:46.176524 kernel: audit: type=1006 audit(1696275706.151:1299): pid=3554 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:41:46.151000 audit[3554]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0ee6b20 a2=3 a3=1 items=0 ppid=1 pid=3554 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:46.187575 kernel: audit: type=1300 audit(1696275706.151:1299): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0ee6b20 a2=3 a3=1 items=0 ppid=1 pid=3554 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:46.151000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:46.191432 kernel: audit: type=1327 audit(1696275706.151:1299): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:46.196274 systemd[1]: Started session-23.scope. Oct 2 19:41:46.198460 systemd-logind[1558]: New session 23 of user core. Oct 2 19:41:46.206000 audit[3554]: USER_START pid=3554 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:46.220000 audit[3556]: CRED_ACQ pid=3556 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:46.236895 kernel: audit: type=1105 audit(1696275706.206:1300): pid=3554 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:46.237408 kernel: audit: type=1103 audit(1696275706.220:1301): pid=3556 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:46.490667 sshd[3554]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:46.492000 audit[3554]: USER_END pid=3554 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:46.493000 audit[3554]: CRED_DISP pid=3554 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:46.505752 systemd[1]: sshd@22-172.31.25.109:22-139.178.89.65:54956.service: Deactivated successfully. Oct 2 19:41:46.507033 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:41:46.515027 kernel: audit: type=1106 audit(1696275706.492:1302): pid=3554 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:46.515118 kernel: audit: type=1104 audit(1696275706.493:1303): pid=3554 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:46.504000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.25.109:22-139.178.89.65:54956 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:46.516265 systemd-logind[1558]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:41:46.518196 systemd-logind[1558]: Removed session 23. Oct 2 19:41:49.423839 kubelet[2768]: E1002 19:41:49.423781 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:54.425209 kubelet[2768]: E1002 19:41:54.425166 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:56.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.25.109:22-139.178.89.65:57990 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:56.522015 systemd[1]: Started sshd@23-172.31.25.109:22-139.178.89.65:57990.service. Oct 2 19:41:56.525588 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:41:56.525702 kernel: audit: type=1130 audit(1696275716.521:1305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.25.109:22-139.178.89.65:57990 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:56.713000 audit[3568]: USER_ACCT pid=3568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:56.715113 sshd[3568]: Accepted publickey for core from 139.178.89.65 port 57990 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:41:56.727378 kernel: audit: type=1101 audit(1696275716.713:1306): pid=3568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:56.726000 audit[3568]: CRED_ACQ pid=3568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:56.729295 sshd[3568]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:56.747339 kernel: audit: type=1103 audit(1696275716.726:1307): pid=3568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:56.747521 kernel: audit: type=1006 audit(1696275716.727:1308): pid=3568 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:41:56.747578 kernel: audit: type=1300 audit(1696275716.727:1308): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec68ef20 a2=3 a3=1 items=0 ppid=1 pid=3568 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:56.727000 audit[3568]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec68ef20 a2=3 a3=1 items=0 ppid=1 pid=3568 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:56.727000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:56.760477 kernel: audit: type=1327 audit(1696275716.727:1308): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:56.766215 systemd-logind[1558]: New session 24 of user core. Oct 2 19:41:56.767442 systemd[1]: Started session-24.scope. Oct 2 19:41:56.775000 audit[3568]: USER_START pid=3568 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:56.789469 kernel: audit: type=1105 audit(1696275716.775:1309): pid=3568 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:56.788000 audit[3570]: CRED_ACQ pid=3570 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:56.800385 kernel: audit: type=1103 audit(1696275716.788:1310): pid=3570 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:57.075738 sshd[3568]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:57.076000 audit[3568]: USER_END pid=3568 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:57.079000 audit[3568]: CRED_DISP pid=3568 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:57.091139 systemd[1]: sshd@23-172.31.25.109:22-139.178.89.65:57990.service: Deactivated successfully. Oct 2 19:41:57.101177 kernel: audit: type=1106 audit(1696275717.076:1311): pid=3568 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:57.101275 kernel: audit: type=1104 audit(1696275717.079:1312): pid=3568 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:57.092476 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:41:57.089000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.25.109:22-139.178.89.65:57990 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:57.103169 systemd-logind[1558]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:41:57.104708 systemd-logind[1558]: Removed session 24. Oct 2 19:41:58.350436 kubelet[2768]: E1002 19:41:58.350380 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e)\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:41:59.426777 kubelet[2768]: E1002 19:41:59.426728 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:04.428654 kubelet[2768]: E1002 19:42:04.428541 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:07.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.25.109:22-139.178.89.65:45920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:07.110653 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:42:07.110736 kernel: audit: type=1130 audit(1696275727.107:1314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.25.109:22-139.178.89.65:45920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:07.108086 systemd[1]: Started sshd@24-172.31.25.109:22-139.178.89.65:45920.service. Oct 2 19:42:07.292000 audit[3580]: USER_ACCT pid=3580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:07.294340 sshd[3580]: Accepted publickey for core from 139.178.89.65 port 45920 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:42:07.305351 kernel: audit: type=1101 audit(1696275727.292:1315): pid=3580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:07.308343 sshd[3580]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:07.306000 audit[3580]: CRED_ACQ pid=3580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:07.326855 kernel: audit: type=1103 audit(1696275727.306:1316): pid=3580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:07.326997 kernel: audit: type=1006 audit(1696275727.306:1317): pid=3580 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:42:07.327055 kernel: audit: type=1300 audit(1696275727.306:1317): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9497990 a2=3 a3=1 items=0 ppid=1 pid=3580 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.306000 audit[3580]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9497990 a2=3 a3=1 items=0 ppid=1 pid=3580 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:07.326112 systemd[1]: Started session-25.scope. Oct 2 19:42:07.329386 systemd-logind[1558]: New session 25 of user core. Oct 2 19:42:07.306000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:07.339948 kernel: audit: type=1327 audit(1696275727.306:1317): proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:07.339000 audit[3580]: USER_START pid=3580 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:07.345000 audit[3582]: CRED_ACQ pid=3582 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:07.362220 kernel: audit: type=1105 audit(1696275727.339:1318): pid=3580 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:07.362388 kernel: audit: type=1103 audit(1696275727.345:1319): pid=3582 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:07.618640 sshd[3580]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:07.619000 audit[3580]: USER_END pid=3580 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:07.625087 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:42:07.626499 systemd[1]: sshd@24-172.31.25.109:22-139.178.89.65:45920.service: Deactivated successfully. Oct 2 19:42:07.633464 kernel: audit: type=1106 audit(1696275727.619:1320): pid=3580 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:07.619000 audit[3580]: CRED_DISP pid=3580 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:07.643439 systemd-logind[1558]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:42:07.625000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.25.109:22-139.178.89.65:45920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:07.644360 kernel: audit: type=1104 audit(1696275727.619:1321): pid=3580 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:07.645649 systemd-logind[1558]: Removed session 25. Oct 2 19:42:09.354352 env[1566]: time="2023-10-02T19:42:09.354250224Z" level=info msg="CreateContainer within sandbox \"28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:42:09.381214 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1469059075.mount: Deactivated successfully. Oct 2 19:42:09.392487 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1455996598.mount: Deactivated successfully. Oct 2 19:42:09.404079 env[1566]: time="2023-10-02T19:42:09.404008253Z" level=info msg="CreateContainer within sandbox \"28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"921377c7486f1448261878ec358e9f0c8bf1b0d7b4f52425aebeb9084910dff7\"" Oct 2 19:42:09.406816 env[1566]: time="2023-10-02T19:42:09.406761235Z" level=info msg="StartContainer for \"921377c7486f1448261878ec358e9f0c8bf1b0d7b4f52425aebeb9084910dff7\"" Oct 2 19:42:09.432044 kubelet[2768]: E1002 19:42:09.432009 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:09.459857 systemd[1]: Started cri-containerd-921377c7486f1448261878ec358e9f0c8bf1b0d7b4f52425aebeb9084910dff7.scope. Oct 2 19:42:09.499272 systemd[1]: cri-containerd-921377c7486f1448261878ec358e9f0c8bf1b0d7b4f52425aebeb9084910dff7.scope: Deactivated successfully. Oct 2 19:42:09.534147 env[1566]: time="2023-10-02T19:42:09.533996992Z" level=info msg="shim disconnected" id=921377c7486f1448261878ec358e9f0c8bf1b0d7b4f52425aebeb9084910dff7 Oct 2 19:42:09.534147 env[1566]: time="2023-10-02T19:42:09.534137658Z" level=warning msg="cleaning up after shim disconnected" id=921377c7486f1448261878ec358e9f0c8bf1b0d7b4f52425aebeb9084910dff7 namespace=k8s.io Oct 2 19:42:09.534587 env[1566]: time="2023-10-02T19:42:09.534160506Z" level=info msg="cleaning up dead shim" Oct 2 19:42:09.559899 env[1566]: time="2023-10-02T19:42:09.559829342Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:09Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3616 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:42:09Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/921377c7486f1448261878ec358e9f0c8bf1b0d7b4f52425aebeb9084910dff7/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:42:09.560434 env[1566]: time="2023-10-02T19:42:09.560323389Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 19:42:09.560866 env[1566]: time="2023-10-02T19:42:09.560801487Z" level=error msg="Failed to pipe stdout of container \"921377c7486f1448261878ec358e9f0c8bf1b0d7b4f52425aebeb9084910dff7\"" error="reading from a closed fifo" Oct 2 19:42:09.560953 env[1566]: time="2023-10-02T19:42:09.560909921Z" level=error msg="Failed to pipe stderr of container \"921377c7486f1448261878ec358e9f0c8bf1b0d7b4f52425aebeb9084910dff7\"" error="reading from a closed fifo" Oct 2 19:42:09.563511 env[1566]: time="2023-10-02T19:42:09.563436724Z" level=error msg="StartContainer for \"921377c7486f1448261878ec358e9f0c8bf1b0d7b4f52425aebeb9084910dff7\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:42:09.564357 kubelet[2768]: E1002 19:42:09.563989 2768 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="921377c7486f1448261878ec358e9f0c8bf1b0d7b4f52425aebeb9084910dff7" Oct 2 19:42:09.564357 kubelet[2768]: E1002 19:42:09.564173 2768 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:42:09.564357 kubelet[2768]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:42:09.564357 kubelet[2768]: rm /hostbin/cilium-mount Oct 2 19:42:09.564357 kubelet[2768]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-s92mj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:42:09.565185 kubelet[2768]: E1002 19:42:09.564290 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:42:10.015183 kubelet[2768]: I1002 19:42:10.012729 2768 scope.go:117] "RemoveContainer" containerID="d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081" Oct 2 19:42:10.015527 kubelet[2768]: I1002 19:42:10.015384 2768 scope.go:117] "RemoveContainer" containerID="d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081" Oct 2 19:42:10.019759 env[1566]: time="2023-10-02T19:42:10.019708480Z" level=info msg="RemoveContainer for \"d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081\"" Oct 2 19:42:10.026286 env[1566]: time="2023-10-02T19:42:10.026211982Z" level=info msg="RemoveContainer for \"d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081\"" Oct 2 19:42:10.026720 env[1566]: time="2023-10-02T19:42:10.026638900Z" level=error msg="RemoveContainer for \"d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081\" failed" error="rpc error: code = NotFound desc = get container info: container \"d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081\" in namespace \"k8s.io\": not found" Oct 2 19:42:10.028054 kubelet[2768]: E1002 19:42:10.027132 2768 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = NotFound desc = get container info: container \"d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081\" in namespace \"k8s.io\": not found" containerID="d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081" Oct 2 19:42:10.028054 kubelet[2768]: E1002 19:42:10.027197 2768 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = NotFound desc = get container info: container "d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081" in namespace "k8s.io": not found; Skipping pod "cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e)" Oct 2 19:42:10.028054 kubelet[2768]: E1002 19:42:10.027753 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e)\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:42:10.029128 env[1566]: time="2023-10-02T19:42:10.029048522Z" level=info msg="RemoveContainer for \"d627ac17ee23d4f7aeb715873fcb7b0a0856d642c57520ed7679b7f834064081\" returns successfully" Oct 2 19:42:10.373399 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-921377c7486f1448261878ec358e9f0c8bf1b0d7b4f52425aebeb9084910dff7-rootfs.mount: Deactivated successfully. Oct 2 19:42:12.639115 kubelet[2768]: W1002 19:42:12.639041 2768 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod24728cdd_06db_420f_be25_13420eb9d62e.slice/cri-containerd-921377c7486f1448261878ec358e9f0c8bf1b0d7b4f52425aebeb9084910dff7.scope WatchSource:0}: task 921377c7486f1448261878ec358e9f0c8bf1b0d7b4f52425aebeb9084910dff7 not found: not found Oct 2 19:42:14.434748 kubelet[2768]: E1002 19:42:14.434683 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:17.650678 systemd[1]: Started sshd@25-172.31.25.109:22-139.178.89.65:52018.service. Oct 2 19:42:17.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.25.109:22-139.178.89.65:52018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:17.653654 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:42:17.653764 kernel: audit: type=1130 audit(1696275737.650:1323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.25.109:22-139.178.89.65:52018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:17.841000 audit[3629]: USER_ACCT pid=3629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:17.842766 sshd[3629]: Accepted publickey for core from 139.178.89.65 port 52018 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:42:17.854378 kernel: audit: type=1101 audit(1696275737.841:1324): pid=3629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:17.854000 audit[3629]: CRED_ACQ pid=3629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:17.862113 sshd[3629]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:17.872362 kernel: audit: type=1103 audit(1696275737.854:1325): pid=3629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:17.872500 kernel: audit: type=1006 audit(1696275737.860:1326): pid=3629 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:42:17.860000 audit[3629]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca24be50 a2=3 a3=1 items=0 ppid=1 pid=3629 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:17.884298 kernel: audit: type=1300 audit(1696275737.860:1326): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca24be50 a2=3 a3=1 items=0 ppid=1 pid=3629 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:17.884483 kernel: audit: type=1327 audit(1696275737.860:1326): proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:17.860000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:17.893108 systemd-logind[1558]: New session 26 of user core. Oct 2 19:42:17.896056 systemd[1]: Started session-26.scope. Oct 2 19:42:17.908000 audit[3629]: USER_START pid=3629 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:17.921000 audit[3631]: CRED_ACQ pid=3631 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:17.932223 kernel: audit: type=1105 audit(1696275737.908:1327): pid=3629 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:17.932549 kernel: audit: type=1103 audit(1696275737.921:1328): pid=3631 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:18.187756 sshd[3629]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:18.189000 audit[3629]: USER_END pid=3629 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:18.190000 audit[3629]: CRED_DISP pid=3629 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:18.202999 systemd[1]: sshd@25-172.31.25.109:22-139.178.89.65:52018.service: Deactivated successfully. Oct 2 19:42:18.204287 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:42:18.211759 kernel: audit: type=1106 audit(1696275738.189:1329): pid=3629 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:18.211867 kernel: audit: type=1104 audit(1696275738.190:1330): pid=3629 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:18.202000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.25.109:22-139.178.89.65:52018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.213113 systemd-logind[1558]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:42:18.215216 systemd-logind[1558]: Removed session 26. Oct 2 19:42:19.436534 kubelet[2768]: E1002 19:42:19.436488 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:22.350651 kubelet[2768]: E1002 19:42:22.350592 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e)\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:42:24.438218 kubelet[2768]: E1002 19:42:24.438183 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:28.103000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:28.106440 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:42:28.106548 kernel: audit: type=1400 audit(1696275748.103:1332): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:28.103000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400278dce0 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:42:28.129548 kernel: audit: type=1300 audit(1696275748.103:1332): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400278dce0 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:42:28.129647 kernel: audit: type=1327 audit(1696275748.103:1332): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:28.103000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:28.104000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:28.149967 kernel: audit: type=1400 audit(1696275748.104:1333): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:28.150079 kernel: audit: type=1300 audit(1696275748.104:1333): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012c6940 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:42:28.104000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012c6940 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:42:28.104000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:28.173442 kernel: audit: type=1327 audit(1696275748.104:1333): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:28.219182 systemd[1]: Started sshd@26-172.31.25.109:22-139.178.89.65:56400.service. Oct 2 19:42:28.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.25.109:22-139.178.89.65:56400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:28.234757 kernel: audit: type=1130 audit(1696275748.219:1334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.25.109:22-139.178.89.65:56400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:28.412000 audit[3643]: USER_ACCT pid=3643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:28.414077 sshd[3643]: Accepted publickey for core from 139.178.89.65 port 56400 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:42:28.418339 sshd[3643]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:28.412000 audit[3643]: CRED_ACQ pid=3643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:28.434297 kernel: audit: type=1101 audit(1696275748.412:1335): pid=3643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:28.434492 kernel: audit: type=1103 audit(1696275748.412:1336): pid=3643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:28.441170 kernel: audit: type=1006 audit(1696275748.412:1337): pid=3643 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:42:28.412000 audit[3643]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0c021b0 a2=3 a3=1 items=0 ppid=1 pid=3643 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:28.412000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:28.449545 systemd[1]: Started session-27.scope. Oct 2 19:42:28.450357 systemd-logind[1558]: New session 27 of user core. Oct 2 19:42:28.461000 audit[3643]: USER_START pid=3643 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:28.468000 audit[3646]: CRED_ACQ pid=3646 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:28.738653 sshd[3643]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:28.740000 audit[3643]: USER_END pid=3643 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:28.741000 audit[3643]: CRED_DISP pid=3643 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:28.745117 systemd-logind[1558]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:42:28.747000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.25.109:22-139.178.89.65:56400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:28.747247 systemd[1]: sshd@26-172.31.25.109:22-139.178.89.65:56400.service: Deactivated successfully. Oct 2 19:42:28.748656 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:42:28.750279 systemd-logind[1558]: Removed session 27. Oct 2 19:42:29.440973 kubelet[2768]: E1002 19:42:29.440926 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:29.681000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:29.681000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:29.681000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4004f45e30 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:42:29.681000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:42:29.681000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400560c260 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:42:29.681000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:42:29.902000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:29.902000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4005758960 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:42:29.902000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:42:29.902000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:29.902000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4005758b40 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:42:29.902000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:42:29.902000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:29.902000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400560c2a0 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:42:29.902000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:42:29.903000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:29.903000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4005759500 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:42:29.903000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:42:34.442994 kubelet[2768]: E1002 19:42:34.442931 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:36.350854 kubelet[2768]: E1002 19:42:36.350802 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-4hz7d_kube-system(24728cdd-06db-420f-be25-13420eb9d62e)\"" pod="kube-system/cilium-4hz7d" podUID="24728cdd-06db-420f-be25-13420eb9d62e" Oct 2 19:42:36.574000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:36.576462 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:42:36.576584 kernel: audit: type=1400 audit(1696275756.574:1349): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:36.574000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012223e0 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:42:36.598747 kernel: audit: type=1300 audit(1696275756.574:1349): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012223e0 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:42:36.598851 kernel: audit: type=1327 audit(1696275756.574:1349): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:36.574000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:36.609346 kernel: audit: type=1400 audit(1696275756.576:1350): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:36.576000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:36.576000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012c73c0 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:42:36.631813 kernel: audit: type=1300 audit(1696275756.576:1350): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012c73c0 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:42:36.631914 kernel: audit: type=1327 audit(1696275756.576:1350): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:36.576000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:36.576000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:36.652126 kernel: audit: type=1400 audit(1696275756.576:1351): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:36.652215 kernel: audit: type=1300 audit(1696275756.576:1351): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001222400 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:42:36.576000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001222400 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:42:36.576000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:36.675365 kernel: audit: type=1327 audit(1696275756.576:1351): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:36.675436 kernel: audit: type=1400 audit(1696275756.576:1352): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:36.576000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:36.576000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001222640 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:42:36.576000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:38.686422 amazon-ssm-agent[1546]: 2023-10-02 19:42:38 INFO Backing off health check to every 600 seconds for 1800 seconds. Oct 2 19:42:38.769000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.25.109:22-139.178.89.65:43268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:38.769473 systemd[1]: Started sshd@27-172.31.25.109:22-139.178.89.65:43268.service. Oct 2 19:42:38.786792 amazon-ssm-agent[1546]: 2023-10-02 19:42:38 ERROR Health ping failed with error - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0b51d7a7b018f0d01 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0b51d7a7b018f0d01 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:42:38.786792 amazon-ssm-agent[1546]: status code: 400, request id: 8113ce7d-d8d2-40d2-912a-af55442056ce Oct 2 19:42:38.956000 audit[3660]: USER_ACCT pid=3660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:38.957663 sshd[3660]: Accepted publickey for core from 139.178.89.65 port 43268 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:42:38.960000 audit[3660]: CRED_ACQ pid=3660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:38.960000 audit[3660]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd21b0da0 a2=3 a3=1 items=0 ppid=1 pid=3660 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:38.960000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:38.961709 sshd[3660]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:38.971077 systemd-logind[1558]: New session 28 of user core. Oct 2 19:42:38.973041 systemd[1]: Started session-28.scope. Oct 2 19:42:38.984000 audit[3660]: USER_START pid=3660 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:38.992000 audit[3663]: CRED_ACQ pid=3663 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:39.262883 sshd[3660]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:39.264000 audit[3660]: USER_END pid=3660 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:39.265000 audit[3660]: CRED_DISP pid=3660 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:39.269144 systemd-logind[1558]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:42:39.269728 systemd[1]: sshd@27-172.31.25.109:22-139.178.89.65:43268.service: Deactivated successfully. Oct 2 19:42:39.271042 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:42:39.269000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.25.109:22-139.178.89.65:43268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:39.273702 systemd-logind[1558]: Removed session 28. Oct 2 19:42:39.293156 systemd[1]: Started sshd@28-172.31.25.109:22-139.178.89.65:43270.service. Oct 2 19:42:39.293000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.25.109:22-139.178.89.65:43270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:39.445416 kubelet[2768]: E1002 19:42:39.445353 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:39.480000 audit[3672]: USER_ACCT pid=3672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:39.481285 sshd[3672]: Accepted publickey for core from 139.178.89.65 port 43270 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:42:39.483000 audit[3672]: CRED_ACQ pid=3672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:39.484000 audit[3672]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd323cbb0 a2=3 a3=1 items=0 ppid=1 pid=3672 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:39.484000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:39.485487 sshd[3672]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:39.495251 systemd[1]: Started session-29.scope. Oct 2 19:42:39.496412 systemd-logind[1558]: New session 29 of user core. Oct 2 19:42:39.505000 audit[3672]: USER_START pid=3672 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:39.512000 audit[3674]: CRED_ACQ pid=3674 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:42.127511 env[1566]: time="2023-10-02T19:42:42.127439568Z" level=info msg="StopPodSandbox for \"28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68\"" Oct 2 19:42:42.128211 env[1566]: time="2023-10-02T19:42:42.127566398Z" level=info msg="Container to stop \"921377c7486f1448261878ec358e9f0c8bf1b0d7b4f52425aebeb9084910dff7\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:42:42.130935 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68-shm.mount: Deactivated successfully. Oct 2 19:42:42.150261 env[1566]: time="2023-10-02T19:42:42.150160191Z" level=info msg="StopContainer for \"debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26\" with timeout 30 (s)" Oct 2 19:42:42.150827 env[1566]: time="2023-10-02T19:42:42.150782160Z" level=info msg="Stop container \"debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26\" with signal terminated" Oct 2 19:42:42.177355 kernel: kauditd_printk_skb: 21 callbacks suppressed Oct 2 19:42:42.177523 kernel: audit: type=1334 audit(1696275762.171:1368): prog-id=126 op=UNLOAD Oct 2 19:42:42.171000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:42:42.171026 systemd[1]: cri-containerd-28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68.scope: Deactivated successfully. Oct 2 19:42:42.180000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:42:42.184357 kernel: audit: type=1334 audit(1696275762.180:1369): prog-id=129 op=UNLOAD Oct 2 19:42:42.226000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:42:42.225869 systemd[1]: cri-containerd-debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26.scope: Deactivated successfully. Oct 2 19:42:42.231791 kernel: audit: type=1334 audit(1696275762.226:1370): prog-id=133 op=UNLOAD Oct 2 19:42:42.232000 audit: BPF prog-id=136 op=UNLOAD Oct 2 19:42:42.236354 kernel: audit: type=1334 audit(1696275762.232:1371): prog-id=136 op=UNLOAD Oct 2 19:42:42.268374 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68-rootfs.mount: Deactivated successfully. Oct 2 19:42:42.288440 env[1566]: time="2023-10-02T19:42:42.288279166Z" level=info msg="shim disconnected" id=28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68 Oct 2 19:42:42.288440 env[1566]: time="2023-10-02T19:42:42.288371195Z" level=warning msg="cleaning up after shim disconnected" id=28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68 namespace=k8s.io Oct 2 19:42:42.288440 env[1566]: time="2023-10-02T19:42:42.288394043Z" level=info msg="cleaning up dead shim" Oct 2 19:42:42.300962 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26-rootfs.mount: Deactivated successfully. Oct 2 19:42:42.320277 env[1566]: time="2023-10-02T19:42:42.320211404Z" level=info msg="shim disconnected" id=debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26 Oct 2 19:42:42.320709 env[1566]: time="2023-10-02T19:42:42.320672331Z" level=warning msg="cleaning up after shim disconnected" id=debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26 namespace=k8s.io Oct 2 19:42:42.320901 env[1566]: time="2023-10-02T19:42:42.320859713Z" level=info msg="cleaning up dead shim" Oct 2 19:42:42.326843 env[1566]: time="2023-10-02T19:42:42.326729535Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:42Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3718 runtime=io.containerd.runc.v2\n" Oct 2 19:42:42.327500 env[1566]: time="2023-10-02T19:42:42.327417036Z" level=info msg="TearDown network for sandbox \"28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68\" successfully" Oct 2 19:42:42.327500 env[1566]: time="2023-10-02T19:42:42.327468697Z" level=info msg="StopPodSandbox for \"28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68\" returns successfully" Oct 2 19:42:42.364647 env[1566]: time="2023-10-02T19:42:42.364572251Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:42Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3731 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:42:42Z\" level=warning msg=\"failed to remove runc container\" error=\"runc did not terminate successfully: exit status 255: \" runtime=io.containerd.runc.v2\n" Oct 2 19:42:42.367679 env[1566]: time="2023-10-02T19:42:42.367566797Z" level=info msg="StopContainer for \"debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26\" returns successfully" Oct 2 19:42:42.368942 env[1566]: time="2023-10-02T19:42:42.368894315Z" level=info msg="StopPodSandbox for \"9dea9ce46815757b5a5fcdbfee150cf3e97a6cc27dfac5860769dba20387d2a6\"" Oct 2 19:42:42.369263 env[1566]: time="2023-10-02T19:42:42.369210112Z" level=info msg="Container to stop \"debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:42:42.372145 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-9dea9ce46815757b5a5fcdbfee150cf3e97a6cc27dfac5860769dba20387d2a6-shm.mount: Deactivated successfully. Oct 2 19:42:42.392000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:42:42.392636 systemd[1]: cri-containerd-9dea9ce46815757b5a5fcdbfee150cf3e97a6cc27dfac5860769dba20387d2a6.scope: Deactivated successfully. Oct 2 19:42:42.401476 kernel: audit: type=1334 audit(1696275762.392:1372): prog-id=122 op=UNLOAD Oct 2 19:42:42.401587 kernel: audit: type=1334 audit(1696275762.397:1373): prog-id=125 op=UNLOAD Oct 2 19:42:42.397000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:42:42.434367 kubelet[2768]: I1002 19:42:42.434169 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/24728cdd-06db-420f-be25-13420eb9d62e-hubble-tls\") pod \"24728cdd-06db-420f-be25-13420eb9d62e\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " Oct 2 19:42:42.434367 kubelet[2768]: I1002 19:42:42.434252 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/24728cdd-06db-420f-be25-13420eb9d62e-cilium-config-path\") pod \"24728cdd-06db-420f-be25-13420eb9d62e\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " Oct 2 19:42:42.434367 kubelet[2768]: I1002 19:42:42.434296 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-hostproc\") pod \"24728cdd-06db-420f-be25-13420eb9d62e\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " Oct 2 19:42:42.435062 kubelet[2768]: I1002 19:42:42.434868 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-host-proc-sys-kernel\") pod \"24728cdd-06db-420f-be25-13420eb9d62e\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " Oct 2 19:42:42.435062 kubelet[2768]: I1002 19:42:42.434914 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-cni-path\") pod \"24728cdd-06db-420f-be25-13420eb9d62e\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " Oct 2 19:42:42.435062 kubelet[2768]: I1002 19:42:42.434957 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-cilium-run\") pod \"24728cdd-06db-420f-be25-13420eb9d62e\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " Oct 2 19:42:42.435062 kubelet[2768]: I1002 19:42:42.434995 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-xtables-lock\") pod \"24728cdd-06db-420f-be25-13420eb9d62e\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " Oct 2 19:42:42.435062 kubelet[2768]: I1002 19:42:42.435032 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-lib-modules\") pod \"24728cdd-06db-420f-be25-13420eb9d62e\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " Oct 2 19:42:42.435435 kubelet[2768]: I1002 19:42:42.435074 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-host-proc-sys-net\") pod \"24728cdd-06db-420f-be25-13420eb9d62e\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " Oct 2 19:42:42.435435 kubelet[2768]: I1002 19:42:42.435113 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-etc-cni-netd\") pod \"24728cdd-06db-420f-be25-13420eb9d62e\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " Oct 2 19:42:42.435435 kubelet[2768]: I1002 19:42:42.435159 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/24728cdd-06db-420f-be25-13420eb9d62e-clustermesh-secrets\") pod \"24728cdd-06db-420f-be25-13420eb9d62e\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " Oct 2 19:42:42.435435 kubelet[2768]: I1002 19:42:42.435199 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-bpf-maps\") pod \"24728cdd-06db-420f-be25-13420eb9d62e\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " Oct 2 19:42:42.435435 kubelet[2768]: I1002 19:42:42.435237 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-cilium-cgroup\") pod \"24728cdd-06db-420f-be25-13420eb9d62e\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " Oct 2 19:42:42.435435 kubelet[2768]: I1002 19:42:42.435284 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-s92mj\" (UniqueName: \"kubernetes.io/projected/24728cdd-06db-420f-be25-13420eb9d62e-kube-api-access-s92mj\") pod \"24728cdd-06db-420f-be25-13420eb9d62e\" (UID: \"24728cdd-06db-420f-be25-13420eb9d62e\") " Oct 2 19:42:42.440334 kubelet[2768]: I1002 19:42:42.438573 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-hostproc" (OuterVolumeSpecName: "hostproc") pod "24728cdd-06db-420f-be25-13420eb9d62e" (UID: "24728cdd-06db-420f-be25-13420eb9d62e"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:42.440334 kubelet[2768]: I1002 19:42:42.438687 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "24728cdd-06db-420f-be25-13420eb9d62e" (UID: "24728cdd-06db-420f-be25-13420eb9d62e"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:42.440334 kubelet[2768]: I1002 19:42:42.438767 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-cni-path" (OuterVolumeSpecName: "cni-path") pod "24728cdd-06db-420f-be25-13420eb9d62e" (UID: "24728cdd-06db-420f-be25-13420eb9d62e"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:42.440334 kubelet[2768]: I1002 19:42:42.438833 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "24728cdd-06db-420f-be25-13420eb9d62e" (UID: "24728cdd-06db-420f-be25-13420eb9d62e"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:42.440334 kubelet[2768]: I1002 19:42:42.438898 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "24728cdd-06db-420f-be25-13420eb9d62e" (UID: "24728cdd-06db-420f-be25-13420eb9d62e"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:42.440334 kubelet[2768]: I1002 19:42:42.438941 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "24728cdd-06db-420f-be25-13420eb9d62e" (UID: "24728cdd-06db-420f-be25-13420eb9d62e"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:42.440334 kubelet[2768]: I1002 19:42:42.439101 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "24728cdd-06db-420f-be25-13420eb9d62e" (UID: "24728cdd-06db-420f-be25-13420eb9d62e"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:42.442518 kubelet[2768]: I1002 19:42:42.442460 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "24728cdd-06db-420f-be25-13420eb9d62e" (UID: "24728cdd-06db-420f-be25-13420eb9d62e"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:42.442785 kubelet[2768]: I1002 19:42:42.442730 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "24728cdd-06db-420f-be25-13420eb9d62e" (UID: "24728cdd-06db-420f-be25-13420eb9d62e"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:42.442975 kubelet[2768]: I1002 19:42:42.442948 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "24728cdd-06db-420f-be25-13420eb9d62e" (UID: "24728cdd-06db-420f-be25-13420eb9d62e"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:42.443911 kubelet[2768]: I1002 19:42:42.443821 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/24728cdd-06db-420f-be25-13420eb9d62e-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "24728cdd-06db-420f-be25-13420eb9d62e" (UID: "24728cdd-06db-420f-be25-13420eb9d62e"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:42:42.458945 systemd[1]: var-lib-kubelet-pods-24728cdd\x2d06db\x2d420f\x2dbe25\x2d13420eb9d62e-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:42:42.470623 kubelet[2768]: I1002 19:42:42.470549 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/24728cdd-06db-420f-be25-13420eb9d62e-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "24728cdd-06db-420f-be25-13420eb9d62e" (UID: "24728cdd-06db-420f-be25-13420eb9d62e"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:42:42.472889 kubelet[2768]: I1002 19:42:42.472806 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/24728cdd-06db-420f-be25-13420eb9d62e-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "24728cdd-06db-420f-be25-13420eb9d62e" (UID: "24728cdd-06db-420f-be25-13420eb9d62e"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:42:42.474200 kubelet[2768]: I1002 19:42:42.474127 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/24728cdd-06db-420f-be25-13420eb9d62e-kube-api-access-s92mj" (OuterVolumeSpecName: "kube-api-access-s92mj") pod "24728cdd-06db-420f-be25-13420eb9d62e" (UID: "24728cdd-06db-420f-be25-13420eb9d62e"). InnerVolumeSpecName "kube-api-access-s92mj". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:42:42.491480 env[1566]: time="2023-10-02T19:42:42.491414742Z" level=info msg="shim disconnected" id=9dea9ce46815757b5a5fcdbfee150cf3e97a6cc27dfac5860769dba20387d2a6 Oct 2 19:42:42.491876 env[1566]: time="2023-10-02T19:42:42.491822279Z" level=warning msg="cleaning up after shim disconnected" id=9dea9ce46815757b5a5fcdbfee150cf3e97a6cc27dfac5860769dba20387d2a6 namespace=k8s.io Oct 2 19:42:42.492020 env[1566]: time="2023-10-02T19:42:42.491990366Z" level=info msg="cleaning up dead shim" Oct 2 19:42:42.519921 env[1566]: time="2023-10-02T19:42:42.519852544Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:42Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3765 runtime=io.containerd.runc.v2\n" Oct 2 19:42:42.520476 env[1566]: time="2023-10-02T19:42:42.520427280Z" level=info msg="TearDown network for sandbox \"9dea9ce46815757b5a5fcdbfee150cf3e97a6cc27dfac5860769dba20387d2a6\" successfully" Oct 2 19:42:42.520580 env[1566]: time="2023-10-02T19:42:42.520476816Z" level=info msg="StopPodSandbox for \"9dea9ce46815757b5a5fcdbfee150cf3e97a6cc27dfac5860769dba20387d2a6\" returns successfully" Oct 2 19:42:42.539302 kubelet[2768]: I1002 19:42:42.535677 2768 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-s92mj\" (UniqueName: \"kubernetes.io/projected/24728cdd-06db-420f-be25-13420eb9d62e-kube-api-access-s92mj\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:42:42.539302 kubelet[2768]: I1002 19:42:42.535738 2768 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/24728cdd-06db-420f-be25-13420eb9d62e-hubble-tls\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:42:42.539302 kubelet[2768]: I1002 19:42:42.535766 2768 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/24728cdd-06db-420f-be25-13420eb9d62e-cilium-config-path\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:42:42.539302 kubelet[2768]: I1002 19:42:42.535791 2768 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-hostproc\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:42:42.539302 kubelet[2768]: I1002 19:42:42.535816 2768 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-host-proc-sys-kernel\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:42:42.539302 kubelet[2768]: I1002 19:42:42.535841 2768 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-cni-path\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:42:42.539302 kubelet[2768]: I1002 19:42:42.535870 2768 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-cilium-run\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:42:42.539302 kubelet[2768]: I1002 19:42:42.535893 2768 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-xtables-lock\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:42:42.539302 kubelet[2768]: I1002 19:42:42.535916 2768 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-lib-modules\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:42:42.539302 kubelet[2768]: I1002 19:42:42.535942 2768 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-host-proc-sys-net\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:42:42.539302 kubelet[2768]: I1002 19:42:42.535966 2768 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-etc-cni-netd\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:42:42.539302 kubelet[2768]: I1002 19:42:42.535990 2768 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/24728cdd-06db-420f-be25-13420eb9d62e-clustermesh-secrets\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:42:42.539302 kubelet[2768]: I1002 19:42:42.536012 2768 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-bpf-maps\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:42:42.539302 kubelet[2768]: I1002 19:42:42.536036 2768 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/24728cdd-06db-420f-be25-13420eb9d62e-cilium-cgroup\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:42:42.636643 kubelet[2768]: I1002 19:42:42.636584 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/7b351ca2-460b-443b-82c8-18fed4998223-cilium-config-path\") pod \"7b351ca2-460b-443b-82c8-18fed4998223\" (UID: \"7b351ca2-460b-443b-82c8-18fed4998223\") " Oct 2 19:42:42.636966 kubelet[2768]: I1002 19:42:42.636924 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-5n7t8\" (UniqueName: \"kubernetes.io/projected/7b351ca2-460b-443b-82c8-18fed4998223-kube-api-access-5n7t8\") pod \"7b351ca2-460b-443b-82c8-18fed4998223\" (UID: \"7b351ca2-460b-443b-82c8-18fed4998223\") " Oct 2 19:42:42.642469 kubelet[2768]: I1002 19:42:42.642290 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/7b351ca2-460b-443b-82c8-18fed4998223-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "7b351ca2-460b-443b-82c8-18fed4998223" (UID: "7b351ca2-460b-443b-82c8-18fed4998223"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:42:42.647093 kubelet[2768]: I1002 19:42:42.647024 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/7b351ca2-460b-443b-82c8-18fed4998223-kube-api-access-5n7t8" (OuterVolumeSpecName: "kube-api-access-5n7t8") pod "7b351ca2-460b-443b-82c8-18fed4998223" (UID: "7b351ca2-460b-443b-82c8-18fed4998223"). InnerVolumeSpecName "kube-api-access-5n7t8". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:42:42.738411 kubelet[2768]: I1002 19:42:42.738373 2768 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/7b351ca2-460b-443b-82c8-18fed4998223-cilium-config-path\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:42:42.739149 kubelet[2768]: I1002 19:42:42.738973 2768 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-5n7t8\" (UniqueName: \"kubernetes.io/projected/7b351ca2-460b-443b-82c8-18fed4998223-kube-api-access-5n7t8\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:42:43.104948 kubelet[2768]: I1002 19:42:43.104811 2768 scope.go:117] "RemoveContainer" containerID="921377c7486f1448261878ec358e9f0c8bf1b0d7b4f52425aebeb9084910dff7" Oct 2 19:42:43.116393 env[1566]: time="2023-10-02T19:42:43.115588297Z" level=info msg="RemoveContainer for \"921377c7486f1448261878ec358e9f0c8bf1b0d7b4f52425aebeb9084910dff7\"" Oct 2 19:42:43.117736 systemd[1]: Removed slice kubepods-burstable-pod24728cdd_06db_420f_be25_13420eb9d62e.slice. Oct 2 19:42:43.123190 systemd[1]: Removed slice kubepods-besteffort-pod7b351ca2_460b_443b_82c8_18fed4998223.slice. Oct 2 19:42:43.124820 env[1566]: time="2023-10-02T19:42:43.124562370Z" level=info msg="RemoveContainer for \"921377c7486f1448261878ec358e9f0c8bf1b0d7b4f52425aebeb9084910dff7\" returns successfully" Oct 2 19:42:43.130874 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9dea9ce46815757b5a5fcdbfee150cf3e97a6cc27dfac5860769dba20387d2a6-rootfs.mount: Deactivated successfully. Oct 2 19:42:43.131073 systemd[1]: var-lib-kubelet-pods-7b351ca2\x2d460b\x2d443b\x2d82c8\x2d18fed4998223-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d5n7t8.mount: Deactivated successfully. Oct 2 19:42:43.131217 systemd[1]: var-lib-kubelet-pods-24728cdd\x2d06db\x2d420f\x2dbe25\x2d13420eb9d62e-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2ds92mj.mount: Deactivated successfully. Oct 2 19:42:43.131374 systemd[1]: var-lib-kubelet-pods-24728cdd\x2d06db\x2d420f\x2dbe25\x2d13420eb9d62e-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:42:43.134563 kubelet[2768]: I1002 19:42:43.134509 2768 scope.go:117] "RemoveContainer" containerID="debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26" Oct 2 19:42:43.138891 env[1566]: time="2023-10-02T19:42:43.138722002Z" level=info msg="RemoveContainer for \"debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26\"" Oct 2 19:42:43.147757 env[1566]: time="2023-10-02T19:42:43.147698486Z" level=info msg="RemoveContainer for \"debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26\" returns successfully" Oct 2 19:42:43.149300 kubelet[2768]: I1002 19:42:43.149200 2768 scope.go:117] "RemoveContainer" containerID="debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26" Oct 2 19:42:43.151854 env[1566]: time="2023-10-02T19:42:43.151721098Z" level=error msg="ContainerStatus for \"debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26\": not found" Oct 2 19:42:43.152693 kubelet[2768]: E1002 19:42:43.152648 2768 remote_runtime.go:432] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26\": not found" containerID="debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26" Oct 2 19:42:43.153068 kubelet[2768]: I1002 19:42:43.153022 2768 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26"} err="failed to get container status \"debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26\": rpc error: code = NotFound desc = an error occurred when try to find container \"debdddf0dc0b75789e8148183fb8eda8bdfd64f1594cf77832c544b197798f26\": not found" Oct 2 19:42:44.083726 sshd[3672]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:44.086000 audit[3672]: USER_END pid=3672 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:44.086000 audit[3672]: CRED_DISP pid=3672 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:44.099637 systemd[1]: sshd@28-172.31.25.109:22-139.178.89.65:43270.service: Deactivated successfully. Oct 2 19:42:44.100841 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:42:44.101146 systemd[1]: session-29.scope: Consumed 1.888s CPU time. Oct 2 19:42:44.108381 kernel: audit: type=1106 audit(1696275764.086:1374): pid=3672 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:44.108568 kernel: audit: type=1104 audit(1696275764.086:1375): pid=3672 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:44.098000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.25.109:22-139.178.89.65:43270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:44.118525 kernel: audit: type=1131 audit(1696275764.098:1376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.25.109:22-139.178.89.65:43270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:44.118982 systemd-logind[1558]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:42:44.124000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.25.109:22-139.178.89.65:43282 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:44.124352 systemd[1]: Started sshd@29-172.31.25.109:22-139.178.89.65:43282.service. Oct 2 19:42:44.129752 systemd-logind[1558]: Removed session 29. Oct 2 19:42:44.137423 kernel: audit: type=1130 audit(1696275764.124:1377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.25.109:22-139.178.89.65:43282 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:44.320000 audit[3782]: USER_ACCT pid=3782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:44.322059 sshd[3782]: Accepted publickey for core from 139.178.89.65 port 43282 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:42:44.328000 audit[3782]: CRED_ACQ pid=3782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:44.328000 audit[3782]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6e94670 a2=3 a3=1 items=0 ppid=1 pid=3782 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:44.328000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:44.329941 sshd[3782]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:44.343284 systemd[1]: Started session-30.scope. Oct 2 19:42:44.347260 systemd-logind[1558]: New session 30 of user core. Oct 2 19:42:44.357000 audit[3782]: USER_START pid=3782 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:44.362634 kubelet[2768]: I1002 19:42:44.358587 2768 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="24728cdd-06db-420f-be25-13420eb9d62e" path="/var/lib/kubelet/pods/24728cdd-06db-420f-be25-13420eb9d62e/volumes" Oct 2 19:42:44.362634 kubelet[2768]: I1002 19:42:44.360554 2768 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="7b351ca2-460b-443b-82c8-18fed4998223" path="/var/lib/kubelet/pods/7b351ca2-460b-443b-82c8-18fed4998223/volumes" Oct 2 19:42:44.364000 audit[3784]: CRED_ACQ pid=3784 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:44.447031 kubelet[2768]: E1002 19:42:44.446998 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:45.787491 kubelet[2768]: I1002 19:42:45.787446 2768 topology_manager.go:215] "Topology Admit Handler" podUID="eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" podNamespace="kube-system" podName="cilium-7rfbh" Oct 2 19:42:45.788217 kubelet[2768]: E1002 19:42:45.788185 2768 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="24728cdd-06db-420f-be25-13420eb9d62e" containerName="mount-cgroup" Oct 2 19:42:45.788402 kubelet[2768]: E1002 19:42:45.788379 2768 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="24728cdd-06db-420f-be25-13420eb9d62e" containerName="mount-cgroup" Oct 2 19:42:45.788548 kubelet[2768]: E1002 19:42:45.788526 2768 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="24728cdd-06db-420f-be25-13420eb9d62e" containerName="mount-cgroup" Oct 2 19:42:45.788674 kubelet[2768]: E1002 19:42:45.788653 2768 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="24728cdd-06db-420f-be25-13420eb9d62e" containerName="mount-cgroup" Oct 2 19:42:45.788798 kubelet[2768]: E1002 19:42:45.788776 2768 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="7b351ca2-460b-443b-82c8-18fed4998223" containerName="cilium-operator" Oct 2 19:42:45.789061 kubelet[2768]: I1002 19:42:45.789035 2768 memory_manager.go:346] "RemoveStaleState removing state" podUID="7b351ca2-460b-443b-82c8-18fed4998223" containerName="cilium-operator" Oct 2 19:42:45.789197 kubelet[2768]: I1002 19:42:45.789176 2768 memory_manager.go:346] "RemoveStaleState removing state" podUID="24728cdd-06db-420f-be25-13420eb9d62e" containerName="mount-cgroup" Oct 2 19:42:45.789341 kubelet[2768]: I1002 19:42:45.789301 2768 memory_manager.go:346] "RemoveStaleState removing state" podUID="24728cdd-06db-420f-be25-13420eb9d62e" containerName="mount-cgroup" Oct 2 19:42:45.789477 kubelet[2768]: I1002 19:42:45.789456 2768 memory_manager.go:346] "RemoveStaleState removing state" podUID="24728cdd-06db-420f-be25-13420eb9d62e" containerName="mount-cgroup" Oct 2 19:42:45.789598 kubelet[2768]: I1002 19:42:45.789577 2768 memory_manager.go:346] "RemoveStaleState removing state" podUID="24728cdd-06db-420f-be25-13420eb9d62e" containerName="mount-cgroup" Oct 2 19:42:45.789750 kubelet[2768]: E1002 19:42:45.789726 2768 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="24728cdd-06db-420f-be25-13420eb9d62e" containerName="mount-cgroup" Oct 2 19:42:45.789884 kubelet[2768]: E1002 19:42:45.789863 2768 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="24728cdd-06db-420f-be25-13420eb9d62e" containerName="mount-cgroup" Oct 2 19:42:45.790050 kubelet[2768]: I1002 19:42:45.790027 2768 memory_manager.go:346] "RemoveStaleState removing state" podUID="24728cdd-06db-420f-be25-13420eb9d62e" containerName="mount-cgroup" Oct 2 19:42:45.790166 kubelet[2768]: I1002 19:42:45.790145 2768 memory_manager.go:346] "RemoveStaleState removing state" podUID="24728cdd-06db-420f-be25-13420eb9d62e" containerName="mount-cgroup" Oct 2 19:42:45.805754 systemd[1]: Created slice kubepods-burstable-podeabaedd1_1dce_42d7_b46f_ac31ef7f9e9e.slice. Oct 2 19:42:45.855908 kubelet[2768]: I1002 19:42:45.855854 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-clustermesh-secrets\") pod \"cilium-7rfbh\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " pod="kube-system/cilium-7rfbh" Oct 2 19:42:45.856203 kubelet[2768]: I1002 19:42:45.856178 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-hubble-tls\") pod \"cilium-7rfbh\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " pod="kube-system/cilium-7rfbh" Oct 2 19:42:45.856428 kubelet[2768]: I1002 19:42:45.856404 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7hzpl\" (UniqueName: \"kubernetes.io/projected/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-kube-api-access-7hzpl\") pod \"cilium-7rfbh\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " pod="kube-system/cilium-7rfbh" Oct 2 19:42:45.856630 kubelet[2768]: I1002 19:42:45.856596 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-etc-cni-netd\") pod \"cilium-7rfbh\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " pod="kube-system/cilium-7rfbh" Oct 2 19:42:45.856882 kubelet[2768]: I1002 19:42:45.856801 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-xtables-lock\") pod \"cilium-7rfbh\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " pod="kube-system/cilium-7rfbh" Oct 2 19:42:45.857058 kubelet[2768]: I1002 19:42:45.857036 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-cilium-config-path\") pod \"cilium-7rfbh\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " pod="kube-system/cilium-7rfbh" Oct 2 19:42:45.857287 kubelet[2768]: I1002 19:42:45.857251 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-bpf-maps\") pod \"cilium-7rfbh\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " pod="kube-system/cilium-7rfbh" Oct 2 19:42:45.857557 kubelet[2768]: I1002 19:42:45.857521 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-cilium-cgroup\") pod \"cilium-7rfbh\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " pod="kube-system/cilium-7rfbh" Oct 2 19:42:45.857755 kubelet[2768]: I1002 19:42:45.857734 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-cni-path\") pod \"cilium-7rfbh\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " pod="kube-system/cilium-7rfbh" Oct 2 19:42:45.857947 kubelet[2768]: I1002 19:42:45.857925 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-cilium-ipsec-secrets\") pod \"cilium-7rfbh\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " pod="kube-system/cilium-7rfbh" Oct 2 19:42:45.858154 kubelet[2768]: I1002 19:42:45.858134 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-host-proc-sys-net\") pod \"cilium-7rfbh\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " pod="kube-system/cilium-7rfbh" Oct 2 19:42:45.858406 kubelet[2768]: I1002 19:42:45.858386 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-host-proc-sys-kernel\") pod \"cilium-7rfbh\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " pod="kube-system/cilium-7rfbh" Oct 2 19:42:45.858604 kubelet[2768]: I1002 19:42:45.858584 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-lib-modules\") pod \"cilium-7rfbh\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " pod="kube-system/cilium-7rfbh" Oct 2 19:42:45.858794 kubelet[2768]: I1002 19:42:45.858773 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-cilium-run\") pod \"cilium-7rfbh\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " pod="kube-system/cilium-7rfbh" Oct 2 19:42:45.859019 kubelet[2768]: I1002 19:42:45.858997 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-hostproc\") pod \"cilium-7rfbh\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " pod="kube-system/cilium-7rfbh" Oct 2 19:42:46.115133 env[1566]: time="2023-10-02T19:42:46.114988426Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-7rfbh,Uid:eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e,Namespace:kube-system,Attempt:0,}" Oct 2 19:42:46.160178 env[1566]: time="2023-10-02T19:42:46.160055243Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:42:46.160504 env[1566]: time="2023-10-02T19:42:46.160209961Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:42:46.160504 env[1566]: time="2023-10-02T19:42:46.160298126Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:42:46.161106 env[1566]: time="2023-10-02T19:42:46.160969559Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7782f8151e9199c2a1f6e5bf2c156cb3ca8c054cc1577b2bf64161997a59324a pid=3803 runtime=io.containerd.runc.v2 Oct 2 19:42:46.196761 systemd[1]: Started cri-containerd-7782f8151e9199c2a1f6e5bf2c156cb3ca8c054cc1577b2bf64161997a59324a.scope. Oct 2 19:42:46.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.248000 audit: BPF prog-id=137 op=LOAD Oct 2 19:42:46.249000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.249000 audit[3812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3803 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:46.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737383266383135316539313939633261316636653562663263313536 Oct 2 19:42:46.249000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.249000 audit[3812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3803 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:46.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737383266383135316539313939633261316636653562663263313536 Oct 2 19:42:46.249000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.249000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.249000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.249000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.249000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.249000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.249000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.249000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.249000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.249000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.249000 audit: BPF prog-id=138 op=LOAD Oct 2 19:42:46.249000 audit[3812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3803 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:46.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737383266383135316539313939633261316636653562663263313536 Oct 2 19:42:46.249000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.249000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.249000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.249000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.249000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.249000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.249000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.249000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.249000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.249000 audit: BPF prog-id=139 op=LOAD Oct 2 19:42:46.249000 audit[3812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3803 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:46.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737383266383135316539313939633261316636653562663263313536 Oct 2 19:42:46.250000 audit: BPF prog-id=139 op=UNLOAD Oct 2 19:42:46.250000 audit: BPF prog-id=138 op=UNLOAD Oct 2 19:42:46.250000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.250000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.250000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.250000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.250000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.250000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.250000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.250000 audit[3812]: AVC avc: denied { perfmon } for pid=3812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.250000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.250000 audit[3812]: AVC avc: denied { bpf } for pid=3812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:46.250000 audit: BPF prog-id=140 op=LOAD Oct 2 19:42:46.250000 audit[3812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3803 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:46.250000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737383266383135316539313939633261316636653562663263313536 Oct 2 19:42:46.285292 env[1566]: time="2023-10-02T19:42:46.285187829Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-7rfbh,Uid:eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e,Namespace:kube-system,Attempt:0,} returns sandbox id \"7782f8151e9199c2a1f6e5bf2c156cb3ca8c054cc1577b2bf64161997a59324a\"" Oct 2 19:42:46.290473 env[1566]: time="2023-10-02T19:42:46.290084701Z" level=info msg="CreateContainer within sandbox \"7782f8151e9199c2a1f6e5bf2c156cb3ca8c054cc1577b2bf64161997a59324a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:42:46.311443 env[1566]: time="2023-10-02T19:42:46.311366336Z" level=info msg="CreateContainer within sandbox \"7782f8151e9199c2a1f6e5bf2c156cb3ca8c054cc1577b2bf64161997a59324a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"fe8ee6676579a5b33055c3299dcaf1137bd6563977a64eff389479c76744c8c4\"" Oct 2 19:42:46.314567 env[1566]: time="2023-10-02T19:42:46.312569509Z" level=info msg="StartContainer for \"fe8ee6676579a5b33055c3299dcaf1137bd6563977a64eff389479c76744c8c4\"" Oct 2 19:42:46.366488 systemd[1]: Started cri-containerd-fe8ee6676579a5b33055c3299dcaf1137bd6563977a64eff389479c76744c8c4.scope. Oct 2 19:42:46.409695 systemd[1]: cri-containerd-fe8ee6676579a5b33055c3299dcaf1137bd6563977a64eff389479c76744c8c4.scope: Deactivated successfully. Oct 2 19:42:46.451496 env[1566]: time="2023-10-02T19:42:46.451390205Z" level=info msg="shim disconnected" id=fe8ee6676579a5b33055c3299dcaf1137bd6563977a64eff389479c76744c8c4 Oct 2 19:42:46.451787 env[1566]: time="2023-10-02T19:42:46.451500655Z" level=warning msg="cleaning up after shim disconnected" id=fe8ee6676579a5b33055c3299dcaf1137bd6563977a64eff389479c76744c8c4 namespace=k8s.io Oct 2 19:42:46.451787 env[1566]: time="2023-10-02T19:42:46.451550695Z" level=info msg="cleaning up dead shim" Oct 2 19:42:46.478793 env[1566]: time="2023-10-02T19:42:46.478718196Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:46Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3864 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:42:46Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/fe8ee6676579a5b33055c3299dcaf1137bd6563977a64eff389479c76744c8c4/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:42:46.479264 env[1566]: time="2023-10-02T19:42:46.479179338Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:42:46.482459 env[1566]: time="2023-10-02T19:42:46.482397663Z" level=error msg="Failed to pipe stdout of container \"fe8ee6676579a5b33055c3299dcaf1137bd6563977a64eff389479c76744c8c4\"" error="reading from a closed fifo" Oct 2 19:42:46.482665 env[1566]: time="2023-10-02T19:42:46.482573609Z" level=error msg="Failed to pipe stderr of container \"fe8ee6676579a5b33055c3299dcaf1137bd6563977a64eff389479c76744c8c4\"" error="reading from a closed fifo" Oct 2 19:42:46.485040 env[1566]: time="2023-10-02T19:42:46.484932350Z" level=error msg="StartContainer for \"fe8ee6676579a5b33055c3299dcaf1137bd6563977a64eff389479c76744c8c4\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:42:46.485577 kubelet[2768]: E1002 19:42:46.485526 2768 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="fe8ee6676579a5b33055c3299dcaf1137bd6563977a64eff389479c76744c8c4" Oct 2 19:42:46.487584 kubelet[2768]: E1002 19:42:46.487444 2768 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:42:46.487584 kubelet[2768]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:42:46.487584 kubelet[2768]: rm /hostbin/cilium-mount Oct 2 19:42:46.487584 kubelet[2768]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-7hzpl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-7rfbh_kube-system(eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:42:46.487584 kubelet[2768]: E1002 19:42:46.487534 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-7rfbh" podUID="eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" Oct 2 19:42:47.154261 env[1566]: time="2023-10-02T19:42:47.154182791Z" level=info msg="CreateContainer within sandbox \"7782f8151e9199c2a1f6e5bf2c156cb3ca8c054cc1577b2bf64161997a59324a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:42:47.175182 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3458841979.mount: Deactivated successfully. Oct 2 19:42:47.193653 env[1566]: time="2023-10-02T19:42:47.193588026Z" level=info msg="CreateContainer within sandbox \"7782f8151e9199c2a1f6e5bf2c156cb3ca8c054cc1577b2bf64161997a59324a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd\"" Oct 2 19:42:47.194898 env[1566]: time="2023-10-02T19:42:47.194834903Z" level=info msg="StartContainer for \"8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd\"" Oct 2 19:42:47.248954 systemd[1]: Started cri-containerd-8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd.scope. Oct 2 19:42:47.287302 systemd[1]: cri-containerd-8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd.scope: Deactivated successfully. Oct 2 19:42:47.313104 env[1566]: time="2023-10-02T19:42:47.313020653Z" level=info msg="shim disconnected" id=8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd Oct 2 19:42:47.313104 env[1566]: time="2023-10-02T19:42:47.313098174Z" level=warning msg="cleaning up after shim disconnected" id=8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd namespace=k8s.io Oct 2 19:42:47.313499 env[1566]: time="2023-10-02T19:42:47.313122103Z" level=info msg="cleaning up dead shim" Oct 2 19:42:47.342091 env[1566]: time="2023-10-02T19:42:47.342006623Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3902 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:42:47Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:42:47.342701 env[1566]: time="2023-10-02T19:42:47.342607915Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:42:47.343484 env[1566]: time="2023-10-02T19:42:47.343415923Z" level=error msg="Failed to pipe stdout of container \"8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd\"" error="reading from a closed fifo" Oct 2 19:42:47.343594 env[1566]: time="2023-10-02T19:42:47.343535660Z" level=error msg="Failed to pipe stderr of container \"8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd\"" error="reading from a closed fifo" Oct 2 19:42:47.349360 env[1566]: time="2023-10-02T19:42:47.349249431Z" level=error msg="StartContainer for \"8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:42:47.350458 kubelet[2768]: E1002 19:42:47.349746 2768 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd" Oct 2 19:42:47.350458 kubelet[2768]: E1002 19:42:47.349883 2768 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:42:47.350458 kubelet[2768]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:42:47.350458 kubelet[2768]: rm /hostbin/cilium-mount Oct 2 19:42:47.350458 kubelet[2768]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-7hzpl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-7rfbh_kube-system(eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:42:47.350458 kubelet[2768]: E1002 19:42:47.349943 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-7rfbh" podUID="eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" Oct 2 19:42:47.986827 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd-rootfs.mount: Deactivated successfully. Oct 2 19:42:48.150368 kubelet[2768]: I1002 19:42:48.150333 2768 scope.go:117] "RemoveContainer" containerID="fe8ee6676579a5b33055c3299dcaf1137bd6563977a64eff389479c76744c8c4" Oct 2 19:42:48.151164 kubelet[2768]: I1002 19:42:48.151135 2768 scope.go:117] "RemoveContainer" containerID="fe8ee6676579a5b33055c3299dcaf1137bd6563977a64eff389479c76744c8c4" Oct 2 19:42:48.155055 env[1566]: time="2023-10-02T19:42:48.154690925Z" level=info msg="RemoveContainer for \"fe8ee6676579a5b33055c3299dcaf1137bd6563977a64eff389479c76744c8c4\"" Oct 2 19:42:48.156960 env[1566]: time="2023-10-02T19:42:48.156000587Z" level=info msg="RemoveContainer for \"fe8ee6676579a5b33055c3299dcaf1137bd6563977a64eff389479c76744c8c4\"" Oct 2 19:42:48.156960 env[1566]: time="2023-10-02T19:42:48.156162769Z" level=error msg="RemoveContainer for \"fe8ee6676579a5b33055c3299dcaf1137bd6563977a64eff389479c76744c8c4\" failed" error="failed to set removing state for container \"fe8ee6676579a5b33055c3299dcaf1137bd6563977a64eff389479c76744c8c4\": container is already in removing state" Oct 2 19:42:48.157212 kubelet[2768]: E1002 19:42:48.156617 2768 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"fe8ee6676579a5b33055c3299dcaf1137bd6563977a64eff389479c76744c8c4\": container is already in removing state" containerID="fe8ee6676579a5b33055c3299dcaf1137bd6563977a64eff389479c76744c8c4" Oct 2 19:42:48.157212 kubelet[2768]: E1002 19:42:48.156673 2768 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "fe8ee6676579a5b33055c3299dcaf1137bd6563977a64eff389479c76744c8c4": container is already in removing state; Skipping pod "cilium-7rfbh_kube-system(eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e)" Oct 2 19:42:48.157412 kubelet[2768]: E1002 19:42:48.157295 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-7rfbh_kube-system(eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e)\"" pod="kube-system/cilium-7rfbh" podUID="eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" Oct 2 19:42:48.162857 env[1566]: time="2023-10-02T19:42:48.162778893Z" level=info msg="RemoveContainer for \"fe8ee6676579a5b33055c3299dcaf1137bd6563977a64eff389479c76744c8c4\" returns successfully" Oct 2 19:42:49.448787 kubelet[2768]: E1002 19:42:49.448706 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:49.558778 kubelet[2768]: W1002 19:42:49.558627 2768 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podeabaedd1_1dce_42d7_b46f_ac31ef7f9e9e.slice/cri-containerd-fe8ee6676579a5b33055c3299dcaf1137bd6563977a64eff389479c76744c8c4.scope WatchSource:0}: container "fe8ee6676579a5b33055c3299dcaf1137bd6563977a64eff389479c76744c8c4" in namespace "k8s.io": not found Oct 2 19:42:52.668466 kubelet[2768]: W1002 19:42:52.668396 2768 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podeabaedd1_1dce_42d7_b46f_ac31ef7f9e9e.slice/cri-containerd-8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd.scope WatchSource:0}: task 8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd not found: not found Oct 2 19:42:54.450042 kubelet[2768]: E1002 19:42:54.449962 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:59.451337 kubelet[2768]: E1002 19:42:59.451255 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:00.353898 env[1566]: time="2023-10-02T19:43:00.353819309Z" level=info msg="CreateContainer within sandbox \"7782f8151e9199c2a1f6e5bf2c156cb3ca8c054cc1577b2bf64161997a59324a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:43:00.373791 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1794667828.mount: Deactivated successfully. Oct 2 19:43:00.384847 env[1566]: time="2023-10-02T19:43:00.384753410Z" level=info msg="CreateContainer within sandbox \"7782f8151e9199c2a1f6e5bf2c156cb3ca8c054cc1577b2bf64161997a59324a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77\"" Oct 2 19:43:00.386118 env[1566]: time="2023-10-02T19:43:00.386033827Z" level=info msg="StartContainer for \"289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77\"" Oct 2 19:43:00.437118 systemd[1]: Started cri-containerd-289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77.scope. Oct 2 19:43:00.482729 systemd[1]: cri-containerd-289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77.scope: Deactivated successfully. Oct 2 19:43:00.506496 env[1566]: time="2023-10-02T19:43:00.506406140Z" level=info msg="shim disconnected" id=289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77 Oct 2 19:43:00.506496 env[1566]: time="2023-10-02T19:43:00.506484009Z" level=warning msg="cleaning up after shim disconnected" id=289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77 namespace=k8s.io Oct 2 19:43:00.506884 env[1566]: time="2023-10-02T19:43:00.506506858Z" level=info msg="cleaning up dead shim" Oct 2 19:43:00.560223 env[1566]: time="2023-10-02T19:43:00.560131545Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:00Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3942 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:43:00Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:43:00.560751 env[1566]: time="2023-10-02T19:43:00.560649796Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:43:00.561204 env[1566]: time="2023-10-02T19:43:00.561133979Z" level=error msg="Failed to pipe stderr of container \"289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77\"" error="reading from a closed fifo" Oct 2 19:43:00.561472 env[1566]: time="2023-10-02T19:43:00.561421935Z" level=error msg="Failed to pipe stdout of container \"289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77\"" error="reading from a closed fifo" Oct 2 19:43:00.564184 env[1566]: time="2023-10-02T19:43:00.564082720Z" level=error msg="StartContainer for \"289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:43:00.565191 kubelet[2768]: E1002 19:43:00.564514 2768 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77" Oct 2 19:43:00.565191 kubelet[2768]: E1002 19:43:00.564678 2768 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:43:00.565191 kubelet[2768]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:43:00.565191 kubelet[2768]: rm /hostbin/cilium-mount Oct 2 19:43:00.565191 kubelet[2768]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-7hzpl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-7rfbh_kube-system(eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:43:00.565191 kubelet[2768]: E1002 19:43:00.564742 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-7rfbh" podUID="eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" Oct 2 19:43:01.190127 kubelet[2768]: I1002 19:43:01.189947 2768 scope.go:117] "RemoveContainer" containerID="8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd" Oct 2 19:43:01.190776 kubelet[2768]: I1002 19:43:01.190715 2768 scope.go:117] "RemoveContainer" containerID="8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd" Oct 2 19:43:01.193792 env[1566]: time="2023-10-02T19:43:01.193696950Z" level=info msg="RemoveContainer for \"8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd\"" Oct 2 19:43:01.194177 env[1566]: time="2023-10-02T19:43:01.193875980Z" level=info msg="RemoveContainer for \"8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd\"" Oct 2 19:43:01.194552 env[1566]: time="2023-10-02T19:43:01.194484701Z" level=error msg="RemoveContainer for \"8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd\" failed" error="failed to set removing state for container \"8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd\": container is already in removing state" Oct 2 19:43:01.195162 kubelet[2768]: E1002 19:43:01.194901 2768 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd\": container is already in removing state" containerID="8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd" Oct 2 19:43:01.195162 kubelet[2768]: I1002 19:43:01.195031 2768 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd"} err="rpc error: code = Unknown desc = failed to set removing state for container \"8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd\": container is already in removing state" Oct 2 19:43:01.202904 env[1566]: time="2023-10-02T19:43:01.202841700Z" level=info msg="RemoveContainer for \"8ed5691b8bcdd55a0e442f61e9e13927c2e22f659d7ff6b4c8e28f5f3d5aa4fd\" returns successfully" Oct 2 19:43:01.204386 kubelet[2768]: E1002 19:43:01.203929 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-7rfbh_kube-system(eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e)\"" pod="kube-system/cilium-7rfbh" podUID="eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" Oct 2 19:43:01.368685 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77-rootfs.mount: Deactivated successfully. Oct 2 19:43:03.614591 kubelet[2768]: W1002 19:43:03.614539 2768 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podeabaedd1_1dce_42d7_b46f_ac31ef7f9e9e.slice/cri-containerd-289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77.scope WatchSource:0}: task 289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77 not found: not found Oct 2 19:43:04.452337 kubelet[2768]: E1002 19:43:04.452272 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:09.454393 kubelet[2768]: E1002 19:43:09.454343 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:14.351997 kubelet[2768]: E1002 19:43:14.351953 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-7rfbh_kube-system(eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e)\"" pod="kube-system/cilium-7rfbh" podUID="eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" Oct 2 19:43:14.456150 kubelet[2768]: E1002 19:43:14.456075 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:19.457846 kubelet[2768]: E1002 19:43:19.457812 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:24.461864 kubelet[2768]: E1002 19:43:24.461827 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:25.354385 env[1566]: time="2023-10-02T19:43:25.354284155Z" level=info msg="CreateContainer within sandbox \"7782f8151e9199c2a1f6e5bf2c156cb3ca8c054cc1577b2bf64161997a59324a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:43:25.375485 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount889430607.mount: Deactivated successfully. Oct 2 19:43:25.387580 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount661646049.mount: Deactivated successfully. Oct 2 19:43:25.397422 env[1566]: time="2023-10-02T19:43:25.397358584Z" level=info msg="CreateContainer within sandbox \"7782f8151e9199c2a1f6e5bf2c156cb3ca8c054cc1577b2bf64161997a59324a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"51aeb91b7b40879f761662f3703fdaffe884e8b0bef26aac942d0ac2eac272a6\"" Oct 2 19:43:25.398804 env[1566]: time="2023-10-02T19:43:25.398749283Z" level=info msg="StartContainer for \"51aeb91b7b40879f761662f3703fdaffe884e8b0bef26aac942d0ac2eac272a6\"" Oct 2 19:43:25.456272 systemd[1]: Started cri-containerd-51aeb91b7b40879f761662f3703fdaffe884e8b0bef26aac942d0ac2eac272a6.scope. Oct 2 19:43:25.497786 systemd[1]: cri-containerd-51aeb91b7b40879f761662f3703fdaffe884e8b0bef26aac942d0ac2eac272a6.scope: Deactivated successfully. Oct 2 19:43:25.527035 env[1566]: time="2023-10-02T19:43:25.526966790Z" level=info msg="shim disconnected" id=51aeb91b7b40879f761662f3703fdaffe884e8b0bef26aac942d0ac2eac272a6 Oct 2 19:43:25.527475 env[1566]: time="2023-10-02T19:43:25.527401004Z" level=warning msg="cleaning up after shim disconnected" id=51aeb91b7b40879f761662f3703fdaffe884e8b0bef26aac942d0ac2eac272a6 namespace=k8s.io Oct 2 19:43:25.527605 env[1566]: time="2023-10-02T19:43:25.527576350Z" level=info msg="cleaning up dead shim" Oct 2 19:43:25.555584 env[1566]: time="2023-10-02T19:43:25.555518582Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:25Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3981 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:43:25Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/51aeb91b7b40879f761662f3703fdaffe884e8b0bef26aac942d0ac2eac272a6/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:43:25.556270 env[1566]: time="2023-10-02T19:43:25.556191527Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:43:25.556667 env[1566]: time="2023-10-02T19:43:25.556603097Z" level=error msg="Failed to pipe stdout of container \"51aeb91b7b40879f761662f3703fdaffe884e8b0bef26aac942d0ac2eac272a6\"" error="reading from a closed fifo" Oct 2 19:43:25.559439 env[1566]: time="2023-10-02T19:43:25.559374379Z" level=error msg="Failed to pipe stderr of container \"51aeb91b7b40879f761662f3703fdaffe884e8b0bef26aac942d0ac2eac272a6\"" error="reading from a closed fifo" Oct 2 19:43:25.561995 env[1566]: time="2023-10-02T19:43:25.561837029Z" level=error msg="StartContainer for \"51aeb91b7b40879f761662f3703fdaffe884e8b0bef26aac942d0ac2eac272a6\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:43:25.565148 kubelet[2768]: E1002 19:43:25.562488 2768 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="51aeb91b7b40879f761662f3703fdaffe884e8b0bef26aac942d0ac2eac272a6" Oct 2 19:43:25.565148 kubelet[2768]: E1002 19:43:25.562624 2768 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:43:25.565148 kubelet[2768]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:43:25.565148 kubelet[2768]: rm /hostbin/cilium-mount Oct 2 19:43:25.565148 kubelet[2768]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-7hzpl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-7rfbh_kube-system(eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:43:25.565148 kubelet[2768]: E1002 19:43:25.562688 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-7rfbh" podUID="eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" Oct 2 19:43:26.258848 kubelet[2768]: I1002 19:43:26.258794 2768 scope.go:117] "RemoveContainer" containerID="289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77" Oct 2 19:43:26.259495 kubelet[2768]: I1002 19:43:26.259461 2768 scope.go:117] "RemoveContainer" containerID="289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77" Oct 2 19:43:26.263235 env[1566]: time="2023-10-02T19:43:26.263042826Z" level=info msg="RemoveContainer for \"289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77\"" Oct 2 19:43:26.266868 env[1566]: time="2023-10-02T19:43:26.266783025Z" level=info msg="RemoveContainer for \"289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77\"" Oct 2 19:43:26.267439 env[1566]: time="2023-10-02T19:43:26.267291556Z" level=error msg="RemoveContainer for \"289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77\" failed" error="failed to set removing state for container \"289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77\": container is already in removing state" Oct 2 19:43:26.271085 env[1566]: time="2023-10-02T19:43:26.271003496Z" level=info msg="RemoveContainer for \"289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77\" returns successfully" Oct 2 19:43:26.274198 kubelet[2768]: E1002 19:43:26.272799 2768 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77\": container is already in removing state" containerID="289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77" Oct 2 19:43:26.274198 kubelet[2768]: E1002 19:43:26.272859 2768 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "289c2c803f13e00248fdb9827d72b47c59ea23425e239e07d0e93cb3fcaefd77": container is already in removing state; Skipping pod "cilium-7rfbh_kube-system(eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e)" Oct 2 19:43:26.274198 kubelet[2768]: E1002 19:43:26.273522 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-7rfbh_kube-system(eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e)\"" pod="kube-system/cilium-7rfbh" podUID="eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" Oct 2 19:43:26.368656 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-51aeb91b7b40879f761662f3703fdaffe884e8b0bef26aac942d0ac2eac272a6-rootfs.mount: Deactivated successfully. Oct 2 19:43:28.104000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:28.107605 kernel: kauditd_printk_skb: 64 callbacks suppressed Oct 2 19:43:28.107712 kernel: audit: type=1400 audit(1696275808.104:1401): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:28.104000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400282df80 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:43:28.130491 kernel: audit: type=1300 audit(1696275808.104:1401): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400282df80 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:43:28.130611 kernel: audit: type=1327 audit(1696275808.104:1401): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:28.104000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:28.104000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:28.150910 kernel: audit: type=1400 audit(1696275808.104:1402): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:28.151002 kernel: audit: type=1300 audit(1696275808.104:1402): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001222140 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:43:28.104000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001222140 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:43:28.104000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:28.174337 kernel: audit: type=1327 audit(1696275808.104:1402): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:28.632087 kubelet[2768]: W1002 19:43:28.632024 2768 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podeabaedd1_1dce_42d7_b46f_ac31ef7f9e9e.slice/cri-containerd-51aeb91b7b40879f761662f3703fdaffe884e8b0bef26aac942d0ac2eac272a6.scope WatchSource:0}: task 51aeb91b7b40879f761662f3703fdaffe884e8b0bef26aac942d0ac2eac272a6 not found: not found Oct 2 19:43:29.464659 kubelet[2768]: E1002 19:43:29.464623 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:29.681000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:29.681000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:29.702594 kernel: audit: type=1400 audit(1696275809.681:1403): avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:29.702701 kernel: audit: type=1400 audit(1696275809.681:1404): avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:29.702758 kernel: audit: type=1300 audit(1696275809.681:1404): arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400dae0690 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:43:29.681000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400dae0690 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:43:29.681000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:43:29.725566 kernel: audit: type=1327 audit(1696275809.681:1404): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:43:29.681000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400bf93160 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:43:29.681000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:43:29.902000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:29.902000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:29.902000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400dae0960 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:43:29.902000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:43:29.902000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400bf93800 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:43:29.902000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:43:29.902000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:29.902000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400ad4bd70 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:43:29.902000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:43:29.902000 audit[2644]: AVC avc: denied { watch } for pid=2644 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:29.902000 audit[2644]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400ad4be00 a2=fc6 a3=0 items=0 ppid=2496 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c88,c822 key=(null) Oct 2 19:43:29.902000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:43:34.154015 env[1566]: time="2023-10-02T19:43:34.153707760Z" level=info msg="StopPodSandbox for \"28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68\"" Oct 2 19:43:34.154015 env[1566]: time="2023-10-02T19:43:34.153856226Z" level=info msg="TearDown network for sandbox \"28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68\" successfully" Oct 2 19:43:34.154015 env[1566]: time="2023-10-02T19:43:34.153917055Z" level=info msg="StopPodSandbox for \"28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68\" returns successfully" Oct 2 19:43:34.157688 env[1566]: time="2023-10-02T19:43:34.155369927Z" level=info msg="RemovePodSandbox for \"28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68\"" Oct 2 19:43:34.157688 env[1566]: time="2023-10-02T19:43:34.155456436Z" level=info msg="Forcibly stopping sandbox \"28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68\"" Oct 2 19:43:34.157688 env[1566]: time="2023-10-02T19:43:34.155645871Z" level=info msg="TearDown network for sandbox \"28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68\" successfully" Oct 2 19:43:34.162013 env[1566]: time="2023-10-02T19:43:34.161876681Z" level=info msg="RemovePodSandbox \"28f2d43cded62c7ff5ac444341733e6501d463b6bdaebbe99705a9ad864ecc68\" returns successfully" Oct 2 19:43:34.163262 env[1566]: time="2023-10-02T19:43:34.163203383Z" level=info msg="StopPodSandbox for \"9dea9ce46815757b5a5fcdbfee150cf3e97a6cc27dfac5860769dba20387d2a6\"" Oct 2 19:43:34.163583 env[1566]: time="2023-10-02T19:43:34.163374134Z" level=info msg="TearDown network for sandbox \"9dea9ce46815757b5a5fcdbfee150cf3e97a6cc27dfac5860769dba20387d2a6\" successfully" Oct 2 19:43:34.163583 env[1566]: time="2023-10-02T19:43:34.163435287Z" level=info msg="StopPodSandbox for \"9dea9ce46815757b5a5fcdbfee150cf3e97a6cc27dfac5860769dba20387d2a6\" returns successfully" Oct 2 19:43:34.164295 env[1566]: time="2023-10-02T19:43:34.164232506Z" level=info msg="RemovePodSandbox for \"9dea9ce46815757b5a5fcdbfee150cf3e97a6cc27dfac5860769dba20387d2a6\"" Oct 2 19:43:34.164629 env[1566]: time="2023-10-02T19:43:34.164549406Z" level=info msg="Forcibly stopping sandbox \"9dea9ce46815757b5a5fcdbfee150cf3e97a6cc27dfac5860769dba20387d2a6\"" Oct 2 19:43:34.164881 env[1566]: time="2023-10-02T19:43:34.164843062Z" level=info msg="TearDown network for sandbox \"9dea9ce46815757b5a5fcdbfee150cf3e97a6cc27dfac5860769dba20387d2a6\" successfully" Oct 2 19:43:34.170451 env[1566]: time="2023-10-02T19:43:34.170395359Z" level=info msg="RemovePodSandbox \"9dea9ce46815757b5a5fcdbfee150cf3e97a6cc27dfac5860769dba20387d2a6\" returns successfully" Oct 2 19:43:34.326270 kubelet[2768]: W1002 19:43:34.326201 2768 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:43:34.466564 kubelet[2768]: E1002 19:43:34.465758 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:36.575000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:36.577994 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:43:36.578066 kernel: audit: type=1400 audit(1696275816.575:1409): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:36.575000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001edb620 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:43:36.600630 kernel: audit: type=1300 audit(1696275816.575:1409): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001edb620 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:43:36.600700 kernel: audit: type=1327 audit(1696275816.575:1409): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:36.575000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:36.578000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:36.621106 kernel: audit: type=1400 audit(1696275816.578:1410): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:36.621204 kernel: audit: type=1300 audit(1696275816.578:1410): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001edb640 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:43:36.578000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001edb640 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:43:36.578000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:36.644634 kernel: audit: type=1327 audit(1696275816.578:1410): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:36.644743 kernel: audit: type=1400 audit(1696275816.579:1411): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:36.579000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:36.579000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001edb660 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:43:36.667233 kernel: audit: type=1300 audit(1696275816.579:1411): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001edb660 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:43:36.667356 kernel: audit: type=1327 audit(1696275816.579:1411): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:36.579000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:36.581000 audit[2602]: AVC avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:36.687686 kernel: audit: type=1400 audit(1696275816.581:1412): avc: denied { watch } for pid=2602 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:36.581000 audit[2602]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001223320 a2=fc6 a3=0 items=0 ppid=2460 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:43:36.581000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:39.467524 kubelet[2768]: E1002 19:43:39.467486 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:41.350486 kubelet[2768]: E1002 19:43:41.350448 2768 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-7rfbh_kube-system(eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e)\"" pod="kube-system/cilium-7rfbh" podUID="eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" Oct 2 19:43:44.469715 kubelet[2768]: E1002 19:43:44.469666 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:47.567505 env[1566]: time="2023-10-02T19:43:47.567183278Z" level=info msg="StopPodSandbox for \"7782f8151e9199c2a1f6e5bf2c156cb3ca8c054cc1577b2bf64161997a59324a\"" Oct 2 19:43:47.567505 env[1566]: time="2023-10-02T19:43:47.567275943Z" level=info msg="Container to stop \"51aeb91b7b40879f761662f3703fdaffe884e8b0bef26aac942d0ac2eac272a6\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:43:47.570651 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-7782f8151e9199c2a1f6e5bf2c156cb3ca8c054cc1577b2bf64161997a59324a-shm.mount: Deactivated successfully. Oct 2 19:43:47.601000 audit: BPF prog-id=137 op=UNLOAD Oct 2 19:43:47.602774 systemd[1]: cri-containerd-7782f8151e9199c2a1f6e5bf2c156cb3ca8c054cc1577b2bf64161997a59324a.scope: Deactivated successfully. Oct 2 19:43:47.605299 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:43:47.605442 kernel: audit: type=1334 audit(1696275827.601:1413): prog-id=137 op=UNLOAD Oct 2 19:43:47.611000 audit: BPF prog-id=140 op=UNLOAD Oct 2 19:43:47.616387 kernel: audit: type=1334 audit(1696275827.611:1414): prog-id=140 op=UNLOAD Oct 2 19:43:47.687111 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-7782f8151e9199c2a1f6e5bf2c156cb3ca8c054cc1577b2bf64161997a59324a-rootfs.mount: Deactivated successfully. Oct 2 19:43:47.700142 sshd[3782]: pam_unix(sshd:session): session closed for user core Oct 2 19:43:47.702000 audit[3782]: USER_END pid=3782 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:43:47.706857 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:43:47.707247 systemd[1]: session-30.scope: Consumed 1.931s CPU time. Oct 2 19:43:47.708557 systemd[1]: sshd@29-172.31.25.109:22-139.178.89.65:43282.service: Deactivated successfully. Oct 2 19:43:47.714649 systemd-logind[1558]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:43:47.702000 audit[3782]: CRED_DISP pid=3782 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:43:47.717408 systemd-logind[1558]: Removed session 30. Oct 2 19:43:47.725645 kernel: audit: type=1106 audit(1696275827.702:1415): pid=3782 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:43:47.725848 kernel: audit: type=1104 audit(1696275827.702:1416): pid=3782 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:43:47.725952 kernel: audit: type=1131 audit(1696275827.707:1417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.25.109:22-139.178.89.65:43282 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:47.707000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.25.109:22-139.178.89.65:43282 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:47.741572 env[1566]: time="2023-10-02T19:43:47.741509000Z" level=info msg="shim disconnected" id=7782f8151e9199c2a1f6e5bf2c156cb3ca8c054cc1577b2bf64161997a59324a Oct 2 19:43:47.742457 env[1566]: time="2023-10-02T19:43:47.742397696Z" level=warning msg="cleaning up after shim disconnected" id=7782f8151e9199c2a1f6e5bf2c156cb3ca8c054cc1577b2bf64161997a59324a namespace=k8s.io Oct 2 19:43:47.742457 env[1566]: time="2023-10-02T19:43:47.742445829Z" level=info msg="cleaning up dead shim" Oct 2 19:43:47.769393 env[1566]: time="2023-10-02T19:43:47.769228256Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4019 runtime=io.containerd.runc.v2\n" Oct 2 19:43:47.769868 env[1566]: time="2023-10-02T19:43:47.769817680Z" level=info msg="TearDown network for sandbox \"7782f8151e9199c2a1f6e5bf2c156cb3ca8c054cc1577b2bf64161997a59324a\" successfully" Oct 2 19:43:47.769978 env[1566]: time="2023-10-02T19:43:47.769867481Z" level=info msg="StopPodSandbox for \"7782f8151e9199c2a1f6e5bf2c156cb3ca8c054cc1577b2bf64161997a59324a\" returns successfully" Oct 2 19:43:47.846442 kubelet[2768]: I1002 19:43:47.845170 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-7hzpl\" (UniqueName: \"kubernetes.io/projected/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-kube-api-access-7hzpl\") pod \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " Oct 2 19:43:47.846442 kubelet[2768]: I1002 19:43:47.845240 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-bpf-maps\") pod \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " Oct 2 19:43:47.846442 kubelet[2768]: I1002 19:43:47.845281 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-hostproc\") pod \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " Oct 2 19:43:47.846442 kubelet[2768]: I1002 19:43:47.845355 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-cilium-ipsec-secrets\") pod \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " Oct 2 19:43:47.846442 kubelet[2768]: I1002 19:43:47.845398 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-lib-modules\") pod \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " Oct 2 19:43:47.846442 kubelet[2768]: I1002 19:43:47.845438 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-etc-cni-netd\") pod \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " Oct 2 19:43:47.846442 kubelet[2768]: I1002 19:43:47.845474 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-cni-path\") pod \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " Oct 2 19:43:47.846442 kubelet[2768]: I1002 19:43:47.845513 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-host-proc-sys-kernel\") pod \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " Oct 2 19:43:47.847573 kubelet[2768]: I1002 19:43:47.846637 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-clustermesh-secrets\") pod \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " Oct 2 19:43:47.847573 kubelet[2768]: I1002 19:43:47.846714 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-hubble-tls\") pod \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " Oct 2 19:43:47.847573 kubelet[2768]: I1002 19:43:47.846754 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-xtables-lock\") pod \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " Oct 2 19:43:47.847573 kubelet[2768]: I1002 19:43:47.846801 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-cilium-config-path\") pod \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " Oct 2 19:43:47.847573 kubelet[2768]: I1002 19:43:47.846841 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-cilium-cgroup\") pod \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " Oct 2 19:43:47.847573 kubelet[2768]: I1002 19:43:47.846880 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-host-proc-sys-net\") pod \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " Oct 2 19:43:47.847573 kubelet[2768]: I1002 19:43:47.846919 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-cilium-run\") pod \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\" (UID: \"eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e\") " Oct 2 19:43:47.847573 kubelet[2768]: I1002 19:43:47.847000 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" (UID: "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:47.847573 kubelet[2768]: I1002 19:43:47.847051 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" (UID: "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:47.847573 kubelet[2768]: I1002 19:43:47.847091 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" (UID: "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:47.847573 kubelet[2768]: I1002 19:43:47.847130 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-cni-path" (OuterVolumeSpecName: "cni-path") pod "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" (UID: "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:47.847573 kubelet[2768]: I1002 19:43:47.847169 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" (UID: "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:47.848295 kubelet[2768]: I1002 19:43:47.847861 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" (UID: "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:47.853816 kubelet[2768]: I1002 19:43:47.853395 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" (UID: "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:43:47.853816 kubelet[2768]: I1002 19:43:47.853488 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" (UID: "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:47.853816 kubelet[2768]: I1002 19:43:47.853531 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" (UID: "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:47.853816 kubelet[2768]: I1002 19:43:47.853576 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" (UID: "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:47.859754 kubelet[2768]: I1002 19:43:47.859700 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-hostproc" (OuterVolumeSpecName: "hostproc") pod "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" (UID: "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:47.865586 systemd[1]: var-lib-kubelet-pods-eabaedd1\x2d1dce\x2d42d7\x2db46f\x2dac31ef7f9e9e-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d7hzpl.mount: Deactivated successfully. Oct 2 19:43:47.867762 kubelet[2768]: I1002 19:43:47.866376 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" (UID: "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:43:47.865767 systemd[1]: var-lib-kubelet-pods-eabaedd1\x2d1dce\x2d42d7\x2db46f\x2dac31ef7f9e9e-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:43:47.872611 kubelet[2768]: I1002 19:43:47.872559 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-kube-api-access-7hzpl" (OuterVolumeSpecName: "kube-api-access-7hzpl") pod "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" (UID: "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e"). InnerVolumeSpecName "kube-api-access-7hzpl". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:43:47.879298 systemd[1]: var-lib-kubelet-pods-eabaedd1\x2d1dce\x2d42d7\x2db46f\x2dac31ef7f9e9e-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:43:47.881730 kubelet[2768]: I1002 19:43:47.881652 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" (UID: "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:43:47.886298 kubelet[2768]: I1002 19:43:47.886248 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" (UID: "eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:43:47.947689 kubelet[2768]: I1002 19:43:47.947646 2768 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-xtables-lock\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:43:47.947952 kubelet[2768]: I1002 19:43:47.947928 2768 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-clustermesh-secrets\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:43:47.948128 kubelet[2768]: I1002 19:43:47.948093 2768 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-hubble-tls\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:43:47.948397 kubelet[2768]: I1002 19:43:47.948363 2768 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-cilium-config-path\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:43:47.948534 kubelet[2768]: I1002 19:43:47.948510 2768 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-cilium-cgroup\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:43:47.948675 kubelet[2768]: I1002 19:43:47.948656 2768 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-host-proc-sys-net\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:43:47.948829 kubelet[2768]: I1002 19:43:47.948810 2768 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-cilium-run\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:43:47.948973 kubelet[2768]: I1002 19:43:47.948953 2768 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-7hzpl\" (UniqueName: \"kubernetes.io/projected/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-kube-api-access-7hzpl\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:43:47.949205 kubelet[2768]: I1002 19:43:47.949180 2768 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-bpf-maps\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:43:47.949384 kubelet[2768]: I1002 19:43:47.949350 2768 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-hostproc\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:43:47.949524 kubelet[2768]: I1002 19:43:47.949502 2768 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-cilium-ipsec-secrets\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:43:47.949688 kubelet[2768]: I1002 19:43:47.949668 2768 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-lib-modules\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:43:47.949837 kubelet[2768]: I1002 19:43:47.949818 2768 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-etc-cni-netd\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:43:47.949976 kubelet[2768]: I1002 19:43:47.949957 2768 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-cni-path\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:43:47.950133 kubelet[2768]: I1002 19:43:47.950113 2768 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e-host-proc-sys-kernel\") on node \"ip-172-31-25-109\" DevicePath \"\"" Oct 2 19:43:48.312984 kubelet[2768]: I1002 19:43:48.312948 2768 scope.go:117] "RemoveContainer" containerID="51aeb91b7b40879f761662f3703fdaffe884e8b0bef26aac942d0ac2eac272a6" Oct 2 19:43:48.321183 env[1566]: time="2023-10-02T19:43:48.321121502Z" level=info msg="RemoveContainer for \"51aeb91b7b40879f761662f3703fdaffe884e8b0bef26aac942d0ac2eac272a6\"" Oct 2 19:43:48.325579 systemd[1]: Removed slice kubepods-burstable-podeabaedd1_1dce_42d7_b46f_ac31ef7f9e9e.slice. Oct 2 19:43:48.343846 env[1566]: time="2023-10-02T19:43:48.343782701Z" level=info msg="RemoveContainer for \"51aeb91b7b40879f761662f3703fdaffe884e8b0bef26aac942d0ac2eac272a6\" returns successfully" Oct 2 19:43:48.570547 systemd[1]: var-lib-kubelet-pods-eabaedd1\x2d1dce\x2d42d7\x2db46f\x2dac31ef7f9e9e-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:43:49.471976 kubelet[2768]: E1002 19:43:49.471930 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:50.354746 kubelet[2768]: I1002 19:43:50.354710 2768 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e" path="/var/lib/kubelet/pods/eabaedd1-1dce-42d7-b46f-ac31ef7f9e9e/volumes" Oct 2 19:43:54.473666 kubelet[2768]: E1002 19:43:54.473608 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:59.475127 kubelet[2768]: E1002 19:43:59.475093 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:44:01.309343 systemd[1]: cri-containerd-23f62abd598474bae09934929faa571da2d319e30e5c28c26e8f54504f28f4c3.scope: Deactivated successfully. Oct 2 19:44:01.309899 systemd[1]: cri-containerd-23f62abd598474bae09934929faa571da2d319e30e5c28c26e8f54504f28f4c3.scope: Consumed 5.427s CPU time. Oct 2 19:44:01.312000 audit: BPF prog-id=88 op=UNLOAD Oct 2 19:44:01.312000 audit: BPF prog-id=102 op=UNLOAD Oct 2 19:44:01.319388 kernel: audit: type=1334 audit(1696275841.312:1418): prog-id=88 op=UNLOAD Oct 2 19:44:01.319520 kernel: audit: type=1334 audit(1696275841.312:1419): prog-id=102 op=UNLOAD Oct 2 19:44:01.366170 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-23f62abd598474bae09934929faa571da2d319e30e5c28c26e8f54504f28f4c3-rootfs.mount: Deactivated successfully. Oct 2 19:44:01.390178 env[1566]: time="2023-10-02T19:44:01.390108646Z" level=info msg="shim disconnected" id=23f62abd598474bae09934929faa571da2d319e30e5c28c26e8f54504f28f4c3 Oct 2 19:44:01.390893 env[1566]: time="2023-10-02T19:44:01.390178403Z" level=warning msg="cleaning up after shim disconnected" id=23f62abd598474bae09934929faa571da2d319e30e5c28c26e8f54504f28f4c3 namespace=k8s.io Oct 2 19:44:01.390893 env[1566]: time="2023-10-02T19:44:01.390202847Z" level=info msg="cleaning up dead shim" Oct 2 19:44:01.416643 env[1566]: time="2023-10-02T19:44:01.416577461Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:44:01Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4051 runtime=io.containerd.runc.v2\n" Oct 2 19:44:02.353628 kubelet[2768]: I1002 19:44:02.353570 2768 scope.go:117] "RemoveContainer" containerID="23f62abd598474bae09934929faa571da2d319e30e5c28c26e8f54504f28f4c3" Oct 2 19:44:02.358873 env[1566]: time="2023-10-02T19:44:02.358820666Z" level=info msg="CreateContainer within sandbox \"3fcd8a37f02e8f2714a31a81a2ab72dd852da5ef3df174988187fa2a6018cbe5\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 19:44:02.377817 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1839467421.mount: Deactivated successfully. Oct 2 19:44:02.387600 env[1566]: time="2023-10-02T19:44:02.387537940Z" level=info msg="CreateContainer within sandbox \"3fcd8a37f02e8f2714a31a81a2ab72dd852da5ef3df174988187fa2a6018cbe5\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"82cf506d74f8b31f8667361f2dcc52c01f8cdb7beb6e33d924b7c46fd6ac9549\"" Oct 2 19:44:02.388618 env[1566]: time="2023-10-02T19:44:02.388576086Z" level=info msg="StartContainer for \"82cf506d74f8b31f8667361f2dcc52c01f8cdb7beb6e33d924b7c46fd6ac9549\"" Oct 2 19:44:02.446079 systemd[1]: Started cri-containerd-82cf506d74f8b31f8667361f2dcc52c01f8cdb7beb6e33d924b7c46fd6ac9549.scope. Oct 2 19:44:02.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.511417 kernel: audit: type=1400 audit(1696275842.494:1420): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.511567 kernel: audit: type=1400 audit(1696275842.494:1421): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.519255 kernel: audit: type=1400 audit(1696275842.494:1422): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.527234 kernel: audit: type=1400 audit(1696275842.494:1423): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.535398 kernel: audit: type=1400 audit(1696275842.494:1424): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.543813 kernel: audit: type=1400 audit(1696275842.494:1425): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.552032 kernel: audit: type=1400 audit(1696275842.494:1426): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.560277 kernel: audit: type=1400 audit(1696275842.494:1427): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.504000 audit: BPF prog-id=141 op=LOAD Oct 2 19:44:02.505000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.505000 audit[4073]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2460 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:02.505000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832636635303664373466386233316638363637333631663264636335 Oct 2 19:44:02.505000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.505000 audit[4073]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2460 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:02.505000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832636635303664373466386233316638363637333631663264636335 Oct 2 19:44:02.505000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.505000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.505000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.505000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.505000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.505000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.505000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.505000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.505000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.505000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.505000 audit: BPF prog-id=142 op=LOAD Oct 2 19:44:02.505000 audit[4073]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2460 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:02.505000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832636635303664373466386233316638363637333631663264636335 Oct 2 19:44:02.510000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.510000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.510000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.510000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.510000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.510000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.510000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.510000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.510000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.510000 audit: BPF prog-id=143 op=LOAD Oct 2 19:44:02.510000 audit[4073]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2460 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:02.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832636635303664373466386233316638363637333631663264636335 Oct 2 19:44:02.518000 audit: BPF prog-id=143 op=UNLOAD Oct 2 19:44:02.518000 audit: BPF prog-id=142 op=UNLOAD Oct 2 19:44:02.518000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.518000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.518000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.518000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.518000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.518000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.518000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.518000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.518000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.518000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:02.518000 audit: BPF prog-id=144 op=LOAD Oct 2 19:44:02.518000 audit[4073]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2460 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:02.518000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832636635303664373466386233316638363637333631663264636335 Oct 2 19:44:02.602862 env[1566]: time="2023-10-02T19:44:02.602770741Z" level=info msg="StartContainer for \"82cf506d74f8b31f8667361f2dcc52c01f8cdb7beb6e33d924b7c46fd6ac9549\" returns successfully" Oct 2 19:44:03.373935 systemd[1]: run-containerd-runc-k8s.io-82cf506d74f8b31f8667361f2dcc52c01f8cdb7beb6e33d924b7c46fd6ac9549-runc.SiOBpE.mount: Deactivated successfully. Oct 2 19:44:04.477449 kubelet[2768]: E1002 19:44:04.477400 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:44:05.455000 audit[4084]: AVC avc: denied { watch } for pid=4084 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:05.455000 audit[4084]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40007b4510 a2=fc6 a3=0 items=0 ppid=2460 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:44:05.455000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:05.456000 audit[4084]: AVC avc: denied { watch } for pid=4084 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:05.456000 audit[4084]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000ad6040 a2=fc6 a3=0 items=0 ppid=2460 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c362,c870 key=(null) Oct 2 19:44:05.456000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:06.838931 systemd[1]: cri-containerd-33c1982c233c6e01c0da254bee6f3166875121053fb1eb492a5462cf4fa5eaa4.scope: Deactivated successfully. Oct 2 19:44:06.839482 systemd[1]: cri-containerd-33c1982c233c6e01c0da254bee6f3166875121053fb1eb492a5462cf4fa5eaa4.scope: Consumed 3.419s CPU time. Oct 2 19:44:06.841000 audit: BPF prog-id=96 op=UNLOAD Oct 2 19:44:06.844761 kernel: kauditd_printk_skb: 55 callbacks suppressed Oct 2 19:44:06.844849 kernel: audit: type=1334 audit(1696275846.841:1440): prog-id=96 op=UNLOAD Oct 2 19:44:06.841000 audit: BPF prog-id=111 op=UNLOAD Oct 2 19:44:06.850443 kernel: audit: type=1334 audit(1696275846.841:1441): prog-id=111 op=UNLOAD Oct 2 19:44:06.899221 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-33c1982c233c6e01c0da254bee6f3166875121053fb1eb492a5462cf4fa5eaa4-rootfs.mount: Deactivated successfully. Oct 2 19:44:06.928726 env[1566]: time="2023-10-02T19:44:06.928665296Z" level=info msg="shim disconnected" id=33c1982c233c6e01c0da254bee6f3166875121053fb1eb492a5462cf4fa5eaa4 Oct 2 19:44:06.929578 env[1566]: time="2023-10-02T19:44:06.929535512Z" level=warning msg="cleaning up after shim disconnected" id=33c1982c233c6e01c0da254bee6f3166875121053fb1eb492a5462cf4fa5eaa4 namespace=k8s.io Oct 2 19:44:06.929716 env[1566]: time="2023-10-02T19:44:06.929688226Z" level=info msg="cleaning up dead shim" Oct 2 19:44:06.957901 env[1566]: time="2023-10-02T19:44:06.957842764Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:44:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4114 runtime=io.containerd.runc.v2\n" Oct 2 19:44:07.368751 kubelet[2768]: I1002 19:44:07.368716 2768 scope.go:117] "RemoveContainer" containerID="33c1982c233c6e01c0da254bee6f3166875121053fb1eb492a5462cf4fa5eaa4" Oct 2 19:44:07.373182 env[1566]: time="2023-10-02T19:44:07.373106556Z" level=info msg="CreateContainer within sandbox \"3f1854cbd2af2e50bb86708daa569f42c29c79fc4ed4139eb8d0bcb9b588b262\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 19:44:07.393389 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount705459187.mount: Deactivated successfully. Oct 2 19:44:07.400553 env[1566]: time="2023-10-02T19:44:07.400493336Z" level=info msg="CreateContainer within sandbox \"3f1854cbd2af2e50bb86708daa569f42c29c79fc4ed4139eb8d0bcb9b588b262\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"5e4862e22b58ca02a6a4eb918e634bc79cf3e9dcd07820acac1b3545ade732b3\"" Oct 2 19:44:07.401621 env[1566]: time="2023-10-02T19:44:07.401567087Z" level=info msg="StartContainer for \"5e4862e22b58ca02a6a4eb918e634bc79cf3e9dcd07820acac1b3545ade732b3\"" Oct 2 19:44:07.453471 systemd[1]: Started cri-containerd-5e4862e22b58ca02a6a4eb918e634bc79cf3e9dcd07820acac1b3545ade732b3.scope. Oct 2 19:44:07.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.520339 kernel: audit: type=1400 audit(1696275847.502:1442): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.520487 kernel: audit: type=1400 audit(1696275847.502:1443): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.520575 kernel: audit: type=1400 audit(1696275847.502:1444): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.535470 kernel: audit: type=1400 audit(1696275847.502:1445): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.535609 kernel: audit: type=1400 audit(1696275847.502:1446): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.550711 kernel: audit: type=1400 audit(1696275847.502:1447): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.569888 kernel: audit: type=1400 audit(1696275847.502:1448): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.569997 kernel: audit: type=1400 audit(1696275847.502:1449): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.509000 audit: BPF prog-id=145 op=LOAD Oct 2 19:44:07.510000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.510000 audit[4136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2489 pid=4136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:07.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565343836326532326235386361303261366134656239313865363334 Oct 2 19:44:07.510000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.510000 audit[4136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2489 pid=4136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:07.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565343836326532326235386361303261366134656239313865363334 Oct 2 19:44:07.510000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.510000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.510000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.510000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.510000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.510000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.510000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.510000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.510000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.510000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.510000 audit: BPF prog-id=146 op=LOAD Oct 2 19:44:07.510000 audit[4136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2489 pid=4136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:07.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565343836326532326235386361303261366134656239313865363334 Oct 2 19:44:07.518000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.518000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.518000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.518000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.518000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.518000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.518000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.518000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.518000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.518000 audit: BPF prog-id=147 op=LOAD Oct 2 19:44:07.518000 audit[4136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2489 pid=4136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:07.518000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565343836326532326235386361303261366134656239313865363334 Oct 2 19:44:07.526000 audit: BPF prog-id=147 op=UNLOAD Oct 2 19:44:07.526000 audit: BPF prog-id=146 op=UNLOAD Oct 2 19:44:07.526000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.526000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.526000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.526000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.526000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.526000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.526000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.526000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.526000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.526000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:07.526000 audit: BPF prog-id=148 op=LOAD Oct 2 19:44:07.526000 audit[4136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2489 pid=4136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:07.526000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565343836326532326235386361303261366134656239313865363334 Oct 2 19:44:07.616288 env[1566]: time="2023-10-02T19:44:07.616201068Z" level=info msg="StartContainer for \"5e4862e22b58ca02a6a4eb918e634bc79cf3e9dcd07820acac1b3545ade732b3\" returns successfully" Oct 2 19:44:09.478736 kubelet[2768]: E1002 19:44:09.478702 2768 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:44:10.352939 kubelet[2768]: E1002 19:44:10.352892 2768 controller.go:193] "Failed to update lease" err="Put \"https://172.31.25.109:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-109?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)"