Jul 16 12:18:31.880079 kernel: Linux version 5.15.188-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Tue Jul 15 10:04:37 -00 2025 Jul 16 12:18:31.880105 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 16 12:18:31.880118 kernel: BIOS-provided physical RAM map: Jul 16 12:18:31.880125 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Jul 16 12:18:31.880132 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Jul 16 12:18:31.880139 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Jul 16 12:18:31.880148 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007ffdbfff] usable Jul 16 12:18:31.880155 kernel: BIOS-e820: [mem 0x000000007ffdc000-0x000000007fffffff] reserved Jul 16 12:18:31.880163 kernel: BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Jul 16 12:18:31.880170 kernel: BIOS-e820: [mem 0x00000000fed1c000-0x00000000fed1ffff] reserved Jul 16 12:18:31.880179 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Jul 16 12:18:31.880186 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Jul 16 12:18:31.880193 kernel: NX (Execute Disable) protection: active Jul 16 12:18:31.880201 kernel: SMBIOS 2.8 present. Jul 16 12:18:31.880210 kernel: DMI: Red Hat KVM/RHEL-AV, BIOS 1.13.0-2.module_el8.5.0+2608+72063365 04/01/2014 Jul 16 12:18:31.880218 kernel: Hypervisor detected: KVM Jul 16 12:18:31.880228 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Jul 16 12:18:31.880236 kernel: kvm-clock: cpu 0, msr 4019b001, primary cpu clock Jul 16 12:18:31.880244 kernel: kvm-clock: using sched offset of 4086914889 cycles Jul 16 12:18:31.880253 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Jul 16 12:18:31.880261 kernel: tsc: Detected 2294.576 MHz processor Jul 16 12:18:31.880269 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 16 12:18:31.880277 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 16 12:18:31.880286 kernel: last_pfn = 0x7ffdc max_arch_pfn = 0x400000000 Jul 16 12:18:31.880294 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 16 12:18:31.880304 kernel: Using GB pages for direct mapping Jul 16 12:18:31.880312 kernel: ACPI: Early table checksum verification disabled Jul 16 12:18:31.880320 kernel: ACPI: RSDP 0x00000000000F5AA0 000014 (v00 BOCHS ) Jul 16 12:18:31.880328 kernel: ACPI: RSDT 0x000000007FFE47A5 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 16 12:18:31.880336 kernel: ACPI: FACP 0x000000007FFE438D 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 16 12:18:31.880343 kernel: ACPI: DSDT 0x000000007FFDFD80 00460D (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 16 12:18:31.880351 kernel: ACPI: FACS 0x000000007FFDFD40 000040 Jul 16 12:18:31.880359 kernel: ACPI: APIC 0x000000007FFE4481 0000F0 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 16 12:18:31.880367 kernel: ACPI: SRAT 0x000000007FFE4571 0001D0 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 16 12:18:31.880377 kernel: ACPI: MCFG 0x000000007FFE4741 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 16 12:18:31.880385 kernel: ACPI: WAET 0x000000007FFE477D 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 16 12:18:31.880392 kernel: ACPI: Reserving FACP table memory at [mem 0x7ffe438d-0x7ffe4480] Jul 16 12:18:31.880400 kernel: ACPI: Reserving DSDT table memory at [mem 0x7ffdfd80-0x7ffe438c] Jul 16 12:18:31.880408 kernel: ACPI: Reserving FACS table memory at [mem 0x7ffdfd40-0x7ffdfd7f] Jul 16 12:18:31.880416 kernel: ACPI: Reserving APIC table memory at [mem 0x7ffe4481-0x7ffe4570] Jul 16 12:18:31.880428 kernel: ACPI: Reserving SRAT table memory at [mem 0x7ffe4571-0x7ffe4740] Jul 16 12:18:31.880439 kernel: ACPI: Reserving MCFG table memory at [mem 0x7ffe4741-0x7ffe477c] Jul 16 12:18:31.880448 kernel: ACPI: Reserving WAET table memory at [mem 0x7ffe477d-0x7ffe47a4] Jul 16 12:18:31.880456 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Jul 16 12:18:31.880465 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Jul 16 12:18:31.880486 kernel: SRAT: PXM 0 -> APIC 0x02 -> Node 0 Jul 16 12:18:31.880495 kernel: SRAT: PXM 0 -> APIC 0x03 -> Node 0 Jul 16 12:18:31.880503 kernel: SRAT: PXM 0 -> APIC 0x04 -> Node 0 Jul 16 12:18:31.880515 kernel: SRAT: PXM 0 -> APIC 0x05 -> Node 0 Jul 16 12:18:31.880523 kernel: SRAT: PXM 0 -> APIC 0x06 -> Node 0 Jul 16 12:18:31.880531 kernel: SRAT: PXM 0 -> APIC 0x07 -> Node 0 Jul 16 12:18:31.880540 kernel: SRAT: PXM 0 -> APIC 0x08 -> Node 0 Jul 16 12:18:31.880548 kernel: SRAT: PXM 0 -> APIC 0x09 -> Node 0 Jul 16 12:18:31.880557 kernel: SRAT: PXM 0 -> APIC 0x0a -> Node 0 Jul 16 12:18:31.880565 kernel: SRAT: PXM 0 -> APIC 0x0b -> Node 0 Jul 16 12:18:31.880574 kernel: SRAT: PXM 0 -> APIC 0x0c -> Node 0 Jul 16 12:18:31.880582 kernel: SRAT: PXM 0 -> APIC 0x0d -> Node 0 Jul 16 12:18:31.880591 kernel: SRAT: PXM 0 -> APIC 0x0e -> Node 0 Jul 16 12:18:31.880601 kernel: SRAT: PXM 0 -> APIC 0x0f -> Node 0 Jul 16 12:18:31.880609 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x0009ffff] Jul 16 12:18:31.880618 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00100000-0x7fffffff] Jul 16 12:18:31.880627 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x20800fffff] hotplug Jul 16 12:18:31.880635 kernel: NUMA: Node 0 [mem 0x00000000-0x0009ffff] + [mem 0x00100000-0x7ffdbfff] -> [mem 0x00000000-0x7ffdbfff] Jul 16 12:18:31.880644 kernel: NODE_DATA(0) allocated [mem 0x7ffd6000-0x7ffdbfff] Jul 16 12:18:31.880653 kernel: Zone ranges: Jul 16 12:18:31.880661 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 16 12:18:31.880670 kernel: DMA32 [mem 0x0000000001000000-0x000000007ffdbfff] Jul 16 12:18:31.880680 kernel: Normal empty Jul 16 12:18:31.880689 kernel: Movable zone start for each node Jul 16 12:18:31.880697 kernel: Early memory node ranges Jul 16 12:18:31.880706 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Jul 16 12:18:31.880715 kernel: node 0: [mem 0x0000000000100000-0x000000007ffdbfff] Jul 16 12:18:31.880723 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007ffdbfff] Jul 16 12:18:31.880732 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 16 12:18:31.880740 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Jul 16 12:18:31.880749 kernel: On node 0, zone DMA32: 36 pages in unavailable ranges Jul 16 12:18:31.880759 kernel: ACPI: PM-Timer IO Port: 0x608 Jul 16 12:18:31.880768 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Jul 16 12:18:31.880776 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Jul 16 12:18:31.880785 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Jul 16 12:18:31.880794 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Jul 16 12:18:31.880802 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Jul 16 12:18:31.880811 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Jul 16 12:18:31.880819 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Jul 16 12:18:31.880828 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 16 12:18:31.880838 kernel: TSC deadline timer available Jul 16 12:18:31.880847 kernel: smpboot: Allowing 16 CPUs, 14 hotplug CPUs Jul 16 12:18:31.880856 kernel: [mem 0xc0000000-0xfed1bfff] available for PCI devices Jul 16 12:18:31.880864 kernel: Booting paravirtualized kernel on KVM Jul 16 12:18:31.880873 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 16 12:18:31.880882 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:16 nr_node_ids:1 Jul 16 12:18:31.880890 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u262144 Jul 16 12:18:31.880899 kernel: pcpu-alloc: s188696 r8192 d32488 u262144 alloc=1*2097152 Jul 16 12:18:31.880907 kernel: pcpu-alloc: [0] 00 01 02 03 04 05 06 07 [0] 08 09 10 11 12 13 14 15 Jul 16 12:18:31.880918 kernel: kvm-guest: stealtime: cpu 0, msr 7da1c0c0 Jul 16 12:18:31.880927 kernel: kvm-guest: PV spinlocks enabled Jul 16 12:18:31.880935 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Jul 16 12:18:31.880944 kernel: Built 1 zonelists, mobility grouping on. Total pages: 515804 Jul 16 12:18:31.880952 kernel: Policy zone: DMA32 Jul 16 12:18:31.880962 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 16 12:18:31.880971 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 16 12:18:31.880980 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 16 12:18:31.880990 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Jul 16 12:18:31.880999 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 16 12:18:31.881008 kernel: Memory: 1903832K/2096616K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47476K init, 4104K bss, 192524K reserved, 0K cma-reserved) Jul 16 12:18:31.881022 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=16, Nodes=1 Jul 16 12:18:31.881030 kernel: ftrace: allocating 34607 entries in 136 pages Jul 16 12:18:31.881039 kernel: ftrace: allocated 136 pages with 2 groups Jul 16 12:18:31.881047 kernel: rcu: Hierarchical RCU implementation. Jul 16 12:18:31.881057 kernel: rcu: RCU event tracing is enabled. Jul 16 12:18:31.881066 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=16. Jul 16 12:18:31.881077 kernel: Rude variant of Tasks RCU enabled. Jul 16 12:18:31.881086 kernel: Tracing variant of Tasks RCU enabled. Jul 16 12:18:31.881094 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 16 12:18:31.881103 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=16 Jul 16 12:18:31.881111 kernel: NR_IRQS: 33024, nr_irqs: 552, preallocated irqs: 16 Jul 16 12:18:31.881120 kernel: random: crng init done Jul 16 12:18:31.881129 kernel: Console: colour VGA+ 80x25 Jul 16 12:18:31.881147 kernel: printk: console [tty0] enabled Jul 16 12:18:31.881157 kernel: printk: console [ttyS0] enabled Jul 16 12:18:31.881166 kernel: ACPI: Core revision 20210730 Jul 16 12:18:31.881176 kernel: APIC: Switch to symmetric I/O mode setup Jul 16 12:18:31.881185 kernel: x2apic enabled Jul 16 12:18:31.881196 kernel: Switched APIC routing to physical x2apic. Jul 16 12:18:31.881209 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x2113312ac93, max_idle_ns: 440795244843 ns Jul 16 12:18:31.881230 kernel: Calibrating delay loop (skipped) preset value.. 4589.15 BogoMIPS (lpj=2294576) Jul 16 12:18:31.881240 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Jul 16 12:18:31.881259 kernel: Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 Jul 16 12:18:31.881283 kernel: Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 Jul 16 12:18:31.881293 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 16 12:18:31.881302 kernel: Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks! Jul 16 12:18:31.881311 kernel: Spectre V2 : Spectre BHI mitigation: SW BHB clearing on vm exit Jul 16 12:18:31.881320 kernel: Spectre V2 : Spectre BHI mitigation: SW BHB clearing on syscall Jul 16 12:18:31.881329 kernel: Spectre V2 : Mitigation: Enhanced / Automatic IBRS Jul 16 12:18:31.881338 kernel: Spectre V2 : Spectre v2 / PBRSB-eIBRS: Retire a single CALL on VMEXIT Jul 16 12:18:31.881347 kernel: RETBleed: Mitigation: Enhanced IBRS Jul 16 12:18:31.881356 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jul 16 12:18:31.881365 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Jul 16 12:18:31.881376 kernel: TAA: Mitigation: Clear CPU buffers Jul 16 12:18:31.881385 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Jul 16 12:18:31.881395 kernel: GDS: Unknown: Dependent on hypervisor status Jul 16 12:18:31.881404 kernel: ITS: Mitigation: Aligned branch/return thunks Jul 16 12:18:31.881413 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 16 12:18:31.881422 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 16 12:18:31.881431 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 16 12:18:31.881440 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Jul 16 12:18:31.881449 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Jul 16 12:18:31.881458 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Jul 16 12:18:31.881467 kernel: x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers' Jul 16 12:18:31.881488 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 16 12:18:31.881497 kernel: x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 Jul 16 12:18:31.881506 kernel: x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 Jul 16 12:18:31.881515 kernel: x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 Jul 16 12:18:31.881524 kernel: x86/fpu: xstate_offset[9]: 2432, xstate_sizes[9]: 8 Jul 16 12:18:31.881533 kernel: x86/fpu: Enabled xstate features 0x2e7, context size is 2440 bytes, using 'compacted' format. Jul 16 12:18:31.881542 kernel: Freeing SMP alternatives memory: 32K Jul 16 12:18:31.881551 kernel: pid_max: default: 32768 minimum: 301 Jul 16 12:18:31.881560 kernel: LSM: Security Framework initializing Jul 16 12:18:31.881569 kernel: SELinux: Initializing. Jul 16 12:18:31.881578 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 16 12:18:31.881587 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 16 12:18:31.881598 kernel: smpboot: CPU0: Intel Xeon Processor (Cascadelake) (family: 0x6, model: 0x55, stepping: 0x6) Jul 16 12:18:31.881608 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Jul 16 12:18:31.881617 kernel: signal: max sigframe size: 3632 Jul 16 12:18:31.881626 kernel: rcu: Hierarchical SRCU implementation. Jul 16 12:18:31.881635 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Jul 16 12:18:31.881644 kernel: smp: Bringing up secondary CPUs ... Jul 16 12:18:31.881653 kernel: x86: Booting SMP configuration: Jul 16 12:18:31.881663 kernel: .... node #0, CPUs: #1 Jul 16 12:18:31.881672 kernel: kvm-clock: cpu 1, msr 4019b041, secondary cpu clock Jul 16 12:18:31.881683 kernel: smpboot: CPU 1 Converting physical 0 to logical die 1 Jul 16 12:18:31.881692 kernel: kvm-guest: stealtime: cpu 1, msr 7da5c0c0 Jul 16 12:18:31.881701 kernel: smp: Brought up 1 node, 2 CPUs Jul 16 12:18:31.881710 kernel: smpboot: Max logical packages: 16 Jul 16 12:18:31.881719 kernel: smpboot: Total of 2 processors activated (9178.30 BogoMIPS) Jul 16 12:18:31.881728 kernel: devtmpfs: initialized Jul 16 12:18:31.881738 kernel: x86/mm: Memory block size: 128MB Jul 16 12:18:31.881747 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 16 12:18:31.881756 kernel: futex hash table entries: 4096 (order: 6, 262144 bytes, linear) Jul 16 12:18:31.881765 kernel: pinctrl core: initialized pinctrl subsystem Jul 16 12:18:31.881776 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 16 12:18:31.881785 kernel: audit: initializing netlink subsys (disabled) Jul 16 12:18:31.881794 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 16 12:18:31.881804 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 16 12:18:31.881813 kernel: audit: type=2000 audit(1752668311.238:1): state=initialized audit_enabled=0 res=1 Jul 16 12:18:31.881822 kernel: cpuidle: using governor menu Jul 16 12:18:31.881831 kernel: ACPI: bus type PCI registered Jul 16 12:18:31.881840 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 16 12:18:31.881849 kernel: dca service started, version 1.12.1 Jul 16 12:18:31.881861 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xb0000000-0xbfffffff] (base 0xb0000000) Jul 16 12:18:31.881870 kernel: PCI: MMCONFIG at [mem 0xb0000000-0xbfffffff] reserved in E820 Jul 16 12:18:31.881879 kernel: PCI: Using configuration type 1 for base access Jul 16 12:18:31.881888 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 16 12:18:31.881897 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 16 12:18:31.881906 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 16 12:18:31.881915 kernel: ACPI: Added _OSI(Module Device) Jul 16 12:18:31.881924 kernel: ACPI: Added _OSI(Processor Device) Jul 16 12:18:31.881936 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 16 12:18:31.881945 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 16 12:18:31.881954 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 16 12:18:31.881963 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 16 12:18:31.881973 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 16 12:18:31.881982 kernel: ACPI: Interpreter enabled Jul 16 12:18:31.881991 kernel: ACPI: PM: (supports S0 S5) Jul 16 12:18:31.882000 kernel: ACPI: Using IOAPIC for interrupt routing Jul 16 12:18:31.882015 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 16 12:18:31.882024 kernel: ACPI: Enabled 2 GPEs in block 00 to 3F Jul 16 12:18:31.882036 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 16 12:18:31.882186 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 16 12:18:31.882280 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Jul 16 12:18:31.882368 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Jul 16 12:18:31.882380 kernel: PCI host bridge to bus 0000:00 Jul 16 12:18:31.882466 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 16 12:18:31.893649 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Jul 16 12:18:31.893735 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 16 12:18:31.893814 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xafffffff window] Jul 16 12:18:31.893892 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Jul 16 12:18:31.893968 kernel: pci_bus 0000:00: root bus resource [mem 0x20c0000000-0x28bfffffff window] Jul 16 12:18:31.894052 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 16 12:18:31.894157 kernel: pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 Jul 16 12:18:31.894257 kernel: pci 0000:00:01.0: [1013:00b8] type 00 class 0x030000 Jul 16 12:18:31.894346 kernel: pci 0000:00:01.0: reg 0x10: [mem 0xfa000000-0xfbffffff pref] Jul 16 12:18:31.894434 kernel: pci 0000:00:01.0: reg 0x14: [mem 0xfea50000-0xfea50fff] Jul 16 12:18:31.894536 kernel: pci 0000:00:01.0: reg 0x30: [mem 0xfea40000-0xfea4ffff pref] Jul 16 12:18:31.894629 kernel: pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 16 12:18:31.894724 kernel: pci 0000:00:02.0: [1b36:000c] type 01 class 0x060400 Jul 16 12:18:31.894821 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xfea51000-0xfea51fff] Jul 16 12:18:31.894929 kernel: pci 0000:00:02.1: [1b36:000c] type 01 class 0x060400 Jul 16 12:18:31.895026 kernel: pci 0000:00:02.1: reg 0x10: [mem 0xfea52000-0xfea52fff] Jul 16 12:18:31.895127 kernel: pci 0000:00:02.2: [1b36:000c] type 01 class 0x060400 Jul 16 12:18:31.895222 kernel: pci 0000:00:02.2: reg 0x10: [mem 0xfea53000-0xfea53fff] Jul 16 12:18:31.895315 kernel: pci 0000:00:02.3: [1b36:000c] type 01 class 0x060400 Jul 16 12:18:31.895403 kernel: pci 0000:00:02.3: reg 0x10: [mem 0xfea54000-0xfea54fff] Jul 16 12:18:31.895515 kernel: pci 0000:00:02.4: [1b36:000c] type 01 class 0x060400 Jul 16 12:18:31.895606 kernel: pci 0000:00:02.4: reg 0x10: [mem 0xfea55000-0xfea55fff] Jul 16 12:18:31.895699 kernel: pci 0000:00:02.5: [1b36:000c] type 01 class 0x060400 Jul 16 12:18:31.895787 kernel: pci 0000:00:02.5: reg 0x10: [mem 0xfea56000-0xfea56fff] Jul 16 12:18:31.895878 kernel: pci 0000:00:02.6: [1b36:000c] type 01 class 0x060400 Jul 16 12:18:31.895964 kernel: pci 0000:00:02.6: reg 0x10: [mem 0xfea57000-0xfea57fff] Jul 16 12:18:31.896069 kernel: pci 0000:00:02.7: [1b36:000c] type 01 class 0x060400 Jul 16 12:18:31.896157 kernel: pci 0000:00:02.7: reg 0x10: [mem 0xfea58000-0xfea58fff] Jul 16 12:18:31.896248 kernel: pci 0000:00:03.0: [1af4:1000] type 00 class 0x020000 Jul 16 12:18:31.896335 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc0c0-0xc0df] Jul 16 12:18:31.896428 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfea59000-0xfea59fff] Jul 16 12:18:31.896528 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfd000000-0xfd003fff 64bit pref] Jul 16 12:18:31.896619 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xfea00000-0xfea3ffff pref] Jul 16 12:18:31.896710 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Jul 16 12:18:31.896797 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Jul 16 12:18:31.896888 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfea5a000-0xfea5afff] Jul 16 12:18:31.896973 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfd004000-0xfd007fff 64bit pref] Jul 16 12:18:31.897076 kernel: pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 Jul 16 12:18:31.897164 kernel: pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO Jul 16 12:18:31.897265 kernel: pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 Jul 16 12:18:31.897356 kernel: pci 0000:00:1f.2: reg 0x20: [io 0xc0e0-0xc0ff] Jul 16 12:18:31.897447 kernel: pci 0000:00:1f.2: reg 0x24: [mem 0xfea5b000-0xfea5bfff] Jul 16 12:18:31.899613 kernel: pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 Jul 16 12:18:31.899713 kernel: pci 0000:00:1f.3: reg 0x20: [io 0x0700-0x073f] Jul 16 12:18:31.899812 kernel: pci 0000:01:00.0: [1b36:000e] type 01 class 0x060400 Jul 16 12:18:31.899903 kernel: pci 0000:01:00.0: reg 0x10: [mem 0xfda00000-0xfda000ff 64bit] Jul 16 12:18:31.899996 kernel: pci 0000:00:02.0: PCI bridge to [bus 01-02] Jul 16 12:18:31.900090 kernel: pci 0000:00:02.0: bridge window [mem 0xfd800000-0xfdbfffff] Jul 16 12:18:31.900177 kernel: pci 0000:00:02.0: bridge window [mem 0xfce00000-0xfcffffff 64bit pref] Jul 16 12:18:31.900275 kernel: pci_bus 0000:02: extended config space not accessible Jul 16 12:18:31.900377 kernel: pci 0000:02:01.0: [8086:25ab] type 00 class 0x088000 Jul 16 12:18:31.900485 kernel: pci 0000:02:01.0: reg 0x10: [mem 0xfd800000-0xfd80000f] Jul 16 12:18:31.900581 kernel: pci 0000:01:00.0: PCI bridge to [bus 02] Jul 16 12:18:31.900669 kernel: pci 0000:01:00.0: bridge window [mem 0xfd800000-0xfd9fffff] Jul 16 12:18:31.900763 kernel: pci 0000:03:00.0: [1b36:000d] type 00 class 0x0c0330 Jul 16 12:18:31.900853 kernel: pci 0000:03:00.0: reg 0x10: [mem 0xfe800000-0xfe803fff 64bit] Jul 16 12:18:31.900941 kernel: pci 0000:00:02.1: PCI bridge to [bus 03] Jul 16 12:18:31.901035 kernel: pci 0000:00:02.1: bridge window [mem 0xfe800000-0xfe9fffff] Jul 16 12:18:31.901121 kernel: pci 0000:00:02.1: bridge window [mem 0xfcc00000-0xfcdfffff 64bit pref] Jul 16 12:18:31.901224 kernel: pci 0000:04:00.0: [1af4:1044] type 00 class 0x00ff00 Jul 16 12:18:31.901316 kernel: pci 0000:04:00.0: reg 0x20: [mem 0xfca00000-0xfca03fff 64bit pref] Jul 16 12:18:31.901404 kernel: pci 0000:00:02.2: PCI bridge to [bus 04] Jul 16 12:18:31.901499 kernel: pci 0000:00:02.2: bridge window [mem 0xfe600000-0xfe7fffff] Jul 16 12:18:31.901585 kernel: pci 0000:00:02.2: bridge window [mem 0xfca00000-0xfcbfffff 64bit pref] Jul 16 12:18:31.901671 kernel: pci 0000:00:02.3: PCI bridge to [bus 05] Jul 16 12:18:31.901757 kernel: pci 0000:00:02.3: bridge window [mem 0xfe400000-0xfe5fffff] Jul 16 12:18:31.901846 kernel: pci 0000:00:02.3: bridge window [mem 0xfc800000-0xfc9fffff 64bit pref] Jul 16 12:18:31.901933 kernel: pci 0000:00:02.4: PCI bridge to [bus 06] Jul 16 12:18:31.902027 kernel: pci 0000:00:02.4: bridge window [mem 0xfe200000-0xfe3fffff] Jul 16 12:18:31.902114 kernel: pci 0000:00:02.4: bridge window [mem 0xfc600000-0xfc7fffff 64bit pref] Jul 16 12:18:31.902201 kernel: pci 0000:00:02.5: PCI bridge to [bus 07] Jul 16 12:18:31.902287 kernel: pci 0000:00:02.5: bridge window [mem 0xfe000000-0xfe1fffff] Jul 16 12:18:31.902371 kernel: pci 0000:00:02.5: bridge window [mem 0xfc400000-0xfc5fffff 64bit pref] Jul 16 12:18:31.902458 kernel: pci 0000:00:02.6: PCI bridge to [bus 08] Jul 16 12:18:31.902551 kernel: pci 0000:00:02.6: bridge window [mem 0xfde00000-0xfdffffff] Jul 16 12:18:31.902641 kernel: pci 0000:00:02.6: bridge window [mem 0xfc200000-0xfc3fffff 64bit pref] Jul 16 12:18:31.902733 kernel: pci 0000:00:02.7: PCI bridge to [bus 09] Jul 16 12:18:31.902810 kernel: pci 0000:00:02.7: bridge window [mem 0xfdc00000-0xfddfffff] Jul 16 12:18:31.902888 kernel: pci 0000:00:02.7: bridge window [mem 0xfc000000-0xfc1fffff 64bit pref] Jul 16 12:18:31.902898 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Jul 16 12:18:31.902908 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Jul 16 12:18:31.902916 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 16 12:18:31.902925 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Jul 16 12:18:31.902936 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 10 Jul 16 12:18:31.902944 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 10 Jul 16 12:18:31.902953 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 11 Jul 16 12:18:31.902961 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 11 Jul 16 12:18:31.902969 kernel: ACPI: PCI: Interrupt link GSIA configured for IRQ 16 Jul 16 12:18:31.902994 kernel: ACPI: PCI: Interrupt link GSIB configured for IRQ 17 Jul 16 12:18:31.903003 kernel: ACPI: PCI: Interrupt link GSIC configured for IRQ 18 Jul 16 12:18:31.903018 kernel: ACPI: PCI: Interrupt link GSID configured for IRQ 19 Jul 16 12:18:31.903027 kernel: ACPI: PCI: Interrupt link GSIE configured for IRQ 20 Jul 16 12:18:31.903039 kernel: ACPI: PCI: Interrupt link GSIF configured for IRQ 21 Jul 16 12:18:31.903048 kernel: ACPI: PCI: Interrupt link GSIG configured for IRQ 22 Jul 16 12:18:31.903057 kernel: ACPI: PCI: Interrupt link GSIH configured for IRQ 23 Jul 16 12:18:31.903066 kernel: iommu: Default domain type: Translated Jul 16 12:18:31.903076 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 16 12:18:31.903162 kernel: pci 0000:00:01.0: vgaarb: setting as boot VGA device Jul 16 12:18:31.903245 kernel: pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 16 12:18:31.903330 kernel: pci 0000:00:01.0: vgaarb: bridge control possible Jul 16 12:18:31.903344 kernel: vgaarb: loaded Jul 16 12:18:31.903354 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 16 12:18:31.903364 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 16 12:18:31.903373 kernel: PTP clock support registered Jul 16 12:18:31.903382 kernel: PCI: Using ACPI for IRQ routing Jul 16 12:18:31.903391 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 16 12:18:31.903401 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Jul 16 12:18:31.903410 kernel: e820: reserve RAM buffer [mem 0x7ffdc000-0x7fffffff] Jul 16 12:18:31.903419 kernel: clocksource: Switched to clocksource kvm-clock Jul 16 12:18:31.903430 kernel: VFS: Disk quotas dquot_6.6.0 Jul 16 12:18:31.903440 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 16 12:18:31.903450 kernel: pnp: PnP ACPI init Jul 16 12:18:31.903551 kernel: system 00:04: [mem 0xb0000000-0xbfffffff window] has been reserved Jul 16 12:18:31.903564 kernel: pnp: PnP ACPI: found 5 devices Jul 16 12:18:31.903574 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 16 12:18:31.903583 kernel: NET: Registered PF_INET protocol family Jul 16 12:18:31.903592 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 16 12:18:31.903605 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Jul 16 12:18:31.903615 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 16 12:18:31.903624 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Jul 16 12:18:31.903633 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Jul 16 12:18:31.903642 kernel: TCP: Hash tables configured (established 16384 bind 16384) Jul 16 12:18:31.903651 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 16 12:18:31.903661 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 16 12:18:31.903670 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 16 12:18:31.903680 kernel: NET: Registered PF_XDP protocol family Jul 16 12:18:31.903769 kernel: pci 0000:00:02.0: bridge window [io 0x1000-0x0fff] to [bus 01-02] add_size 1000 Jul 16 12:18:31.903858 kernel: pci 0000:00:02.1: bridge window [io 0x1000-0x0fff] to [bus 03] add_size 1000 Jul 16 12:18:31.903944 kernel: pci 0000:00:02.2: bridge window [io 0x1000-0x0fff] to [bus 04] add_size 1000 Jul 16 12:18:31.904038 kernel: pci 0000:00:02.3: bridge window [io 0x1000-0x0fff] to [bus 05] add_size 1000 Jul 16 12:18:31.904126 kernel: pci 0000:00:02.4: bridge window [io 0x1000-0x0fff] to [bus 06] add_size 1000 Jul 16 12:18:31.904212 kernel: pci 0000:00:02.5: bridge window [io 0x1000-0x0fff] to [bus 07] add_size 1000 Jul 16 12:18:31.904302 kernel: pci 0000:00:02.6: bridge window [io 0x1000-0x0fff] to [bus 08] add_size 1000 Jul 16 12:18:31.904397 kernel: pci 0000:00:02.7: bridge window [io 0x1000-0x0fff] to [bus 09] add_size 1000 Jul 16 12:18:31.914554 kernel: pci 0000:00:02.0: BAR 13: assigned [io 0x1000-0x1fff] Jul 16 12:18:31.914676 kernel: pci 0000:00:02.1: BAR 13: assigned [io 0x2000-0x2fff] Jul 16 12:18:31.914768 kernel: pci 0000:00:02.2: BAR 13: assigned [io 0x3000-0x3fff] Jul 16 12:18:31.914857 kernel: pci 0000:00:02.3: BAR 13: assigned [io 0x4000-0x4fff] Jul 16 12:18:31.914946 kernel: pci 0000:00:02.4: BAR 13: assigned [io 0x5000-0x5fff] Jul 16 12:18:31.915063 kernel: pci 0000:00:02.5: BAR 13: assigned [io 0x6000-0x6fff] Jul 16 12:18:31.915154 kernel: pci 0000:00:02.6: BAR 13: assigned [io 0x7000-0x7fff] Jul 16 12:18:31.915242 kernel: pci 0000:00:02.7: BAR 13: assigned [io 0x8000-0x8fff] Jul 16 12:18:31.915335 kernel: pci 0000:01:00.0: PCI bridge to [bus 02] Jul 16 12:18:31.915425 kernel: pci 0000:01:00.0: bridge window [mem 0xfd800000-0xfd9fffff] Jul 16 12:18:31.915535 kernel: pci 0000:00:02.0: PCI bridge to [bus 01-02] Jul 16 12:18:31.915623 kernel: pci 0000:00:02.0: bridge window [io 0x1000-0x1fff] Jul 16 12:18:31.915708 kernel: pci 0000:00:02.0: bridge window [mem 0xfd800000-0xfdbfffff] Jul 16 12:18:31.915797 kernel: pci 0000:00:02.0: bridge window [mem 0xfce00000-0xfcffffff 64bit pref] Jul 16 12:18:31.915884 kernel: pci 0000:00:02.1: PCI bridge to [bus 03] Jul 16 12:18:31.915970 kernel: pci 0000:00:02.1: bridge window [io 0x2000-0x2fff] Jul 16 12:18:31.916062 kernel: pci 0000:00:02.1: bridge window [mem 0xfe800000-0xfe9fffff] Jul 16 12:18:31.916148 kernel: pci 0000:00:02.1: bridge window [mem 0xfcc00000-0xfcdfffff 64bit pref] Jul 16 12:18:31.916233 kernel: pci 0000:00:02.2: PCI bridge to [bus 04] Jul 16 12:18:31.916323 kernel: pci 0000:00:02.2: bridge window [io 0x3000-0x3fff] Jul 16 12:18:31.916410 kernel: pci 0000:00:02.2: bridge window [mem 0xfe600000-0xfe7fffff] Jul 16 12:18:31.916504 kernel: pci 0000:00:02.2: bridge window [mem 0xfca00000-0xfcbfffff 64bit pref] Jul 16 12:18:31.916590 kernel: pci 0000:00:02.3: PCI bridge to [bus 05] Jul 16 12:18:31.916676 kernel: pci 0000:00:02.3: bridge window [io 0x4000-0x4fff] Jul 16 12:18:31.916762 kernel: pci 0000:00:02.3: bridge window [mem 0xfe400000-0xfe5fffff] Jul 16 12:18:31.916848 kernel: pci 0000:00:02.3: bridge window [mem 0xfc800000-0xfc9fffff 64bit pref] Jul 16 12:18:31.916934 kernel: pci 0000:00:02.4: PCI bridge to [bus 06] Jul 16 12:18:31.917025 kernel: pci 0000:00:02.4: bridge window [io 0x5000-0x5fff] Jul 16 12:18:31.917116 kernel: pci 0000:00:02.4: bridge window [mem 0xfe200000-0xfe3fffff] Jul 16 12:18:31.917200 kernel: pci 0000:00:02.4: bridge window [mem 0xfc600000-0xfc7fffff 64bit pref] Jul 16 12:18:31.917287 kernel: pci 0000:00:02.5: PCI bridge to [bus 07] Jul 16 12:18:31.917372 kernel: pci 0000:00:02.5: bridge window [io 0x6000-0x6fff] Jul 16 12:18:31.917458 kernel: pci 0000:00:02.5: bridge window [mem 0xfe000000-0xfe1fffff] Jul 16 12:18:31.917550 kernel: pci 0000:00:02.5: bridge window [mem 0xfc400000-0xfc5fffff 64bit pref] Jul 16 12:18:31.917636 kernel: pci 0000:00:02.6: PCI bridge to [bus 08] Jul 16 12:18:31.917724 kernel: pci 0000:00:02.6: bridge window [io 0x7000-0x7fff] Jul 16 12:18:31.917827 kernel: pci 0000:00:02.6: bridge window [mem 0xfde00000-0xfdffffff] Jul 16 12:18:31.917917 kernel: pci 0000:00:02.6: bridge window [mem 0xfc200000-0xfc3fffff 64bit pref] Jul 16 12:18:31.918003 kernel: pci 0000:00:02.7: PCI bridge to [bus 09] Jul 16 12:18:31.918095 kernel: pci 0000:00:02.7: bridge window [io 0x8000-0x8fff] Jul 16 12:18:31.918184 kernel: pci 0000:00:02.7: bridge window [mem 0xfdc00000-0xfddfffff] Jul 16 12:18:31.919578 kernel: pci 0000:00:02.7: bridge window [mem 0xfc000000-0xfc1fffff 64bit pref] Jul 16 12:18:31.919766 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Jul 16 12:18:31.919880 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Jul 16 12:18:31.919968 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Jul 16 12:18:31.920062 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xafffffff window] Jul 16 12:18:31.920152 kernel: pci_bus 0000:00: resource 8 [mem 0xc0000000-0xfebfffff window] Jul 16 12:18:31.920239 kernel: pci_bus 0000:00: resource 9 [mem 0x20c0000000-0x28bfffffff window] Jul 16 12:18:31.920341 kernel: pci_bus 0000:01: resource 0 [io 0x1000-0x1fff] Jul 16 12:18:31.920438 kernel: pci_bus 0000:01: resource 1 [mem 0xfd800000-0xfdbfffff] Jul 16 12:18:31.920548 kernel: pci_bus 0000:01: resource 2 [mem 0xfce00000-0xfcffffff 64bit pref] Jul 16 12:18:31.920650 kernel: pci_bus 0000:02: resource 1 [mem 0xfd800000-0xfd9fffff] Jul 16 12:18:31.920749 kernel: pci_bus 0000:03: resource 0 [io 0x2000-0x2fff] Jul 16 12:18:31.920842 kernel: pci_bus 0000:03: resource 1 [mem 0xfe800000-0xfe9fffff] Jul 16 12:18:31.920934 kernel: pci_bus 0000:03: resource 2 [mem 0xfcc00000-0xfcdfffff 64bit pref] Jul 16 12:18:31.921044 kernel: pci_bus 0000:04: resource 0 [io 0x3000-0x3fff] Jul 16 12:18:31.921139 kernel: pci_bus 0000:04: resource 1 [mem 0xfe600000-0xfe7fffff] Jul 16 12:18:31.921230 kernel: pci_bus 0000:04: resource 2 [mem 0xfca00000-0xfcbfffff 64bit pref] Jul 16 12:18:31.921331 kernel: pci_bus 0000:05: resource 0 [io 0x4000-0x4fff] Jul 16 12:18:31.921426 kernel: pci_bus 0000:05: resource 1 [mem 0xfe400000-0xfe5fffff] Jul 16 12:18:31.921547 kernel: pci_bus 0000:05: resource 2 [mem 0xfc800000-0xfc9fffff 64bit pref] Jul 16 12:18:31.921650 kernel: pci_bus 0000:06: resource 0 [io 0x5000-0x5fff] Jul 16 12:18:31.921741 kernel: pci_bus 0000:06: resource 1 [mem 0xfe200000-0xfe3fffff] Jul 16 12:18:31.921837 kernel: pci_bus 0000:06: resource 2 [mem 0xfc600000-0xfc7fffff 64bit pref] Jul 16 12:18:31.921934 kernel: pci_bus 0000:07: resource 0 [io 0x6000-0x6fff] Jul 16 12:18:31.922050 kernel: pci_bus 0000:07: resource 1 [mem 0xfe000000-0xfe1fffff] Jul 16 12:18:31.922143 kernel: pci_bus 0000:07: resource 2 [mem 0xfc400000-0xfc5fffff 64bit pref] Jul 16 12:18:31.922240 kernel: pci_bus 0000:08: resource 0 [io 0x7000-0x7fff] Jul 16 12:18:31.922331 kernel: pci_bus 0000:08: resource 1 [mem 0xfde00000-0xfdffffff] Jul 16 12:18:31.922422 kernel: pci_bus 0000:08: resource 2 [mem 0xfc200000-0xfc3fffff 64bit pref] Jul 16 12:18:31.922531 kernel: pci_bus 0000:09: resource 0 [io 0x8000-0x8fff] Jul 16 12:18:31.922624 kernel: pci_bus 0000:09: resource 1 [mem 0xfdc00000-0xfddfffff] Jul 16 12:18:31.922719 kernel: pci_bus 0000:09: resource 2 [mem 0xfc000000-0xfc1fffff 64bit pref] Jul 16 12:18:31.922733 kernel: ACPI: \_SB_.GSIG: Enabled at IRQ 22 Jul 16 12:18:31.922744 kernel: PCI: CLS 0 bytes, default 64 Jul 16 12:18:31.922755 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Jul 16 12:18:31.922765 kernel: software IO TLB: mapped [mem 0x0000000079800000-0x000000007d800000] (64MB) Jul 16 12:18:31.922775 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Jul 16 12:18:31.922788 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x2113312ac93, max_idle_ns: 440795244843 ns Jul 16 12:18:31.922799 kernel: Initialise system trusted keyrings Jul 16 12:18:31.922809 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Jul 16 12:18:31.922819 kernel: Key type asymmetric registered Jul 16 12:18:31.922829 kernel: Asymmetric key parser 'x509' registered Jul 16 12:18:31.922838 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 16 12:18:31.922849 kernel: io scheduler mq-deadline registered Jul 16 12:18:31.922858 kernel: io scheduler kyber registered Jul 16 12:18:31.922869 kernel: io scheduler bfq registered Jul 16 12:18:31.922972 kernel: pcieport 0000:00:02.0: PME: Signaling with IRQ 24 Jul 16 12:18:31.923081 kernel: pcieport 0000:00:02.0: AER: enabled with IRQ 24 Jul 16 12:18:31.923179 kernel: pcieport 0000:00:02.0: pciehp: Slot #0 AttnBtn+ PwrCtrl+ MRL- AttnInd+ PwrInd+ HotPlug+ Surprise+ Interlock+ NoCompl- IbPresDis- LLActRep+ Jul 16 12:18:31.923279 kernel: pcieport 0000:00:02.1: PME: Signaling with IRQ 25 Jul 16 12:18:31.923374 kernel: pcieport 0000:00:02.1: AER: enabled with IRQ 25 Jul 16 12:18:31.923477 kernel: pcieport 0000:00:02.1: pciehp: Slot #0 AttnBtn+ PwrCtrl+ MRL- AttnInd+ PwrInd+ HotPlug+ Surprise+ Interlock+ NoCompl- IbPresDis- LLActRep+ Jul 16 12:18:31.923580 kernel: pcieport 0000:00:02.2: PME: Signaling with IRQ 26 Jul 16 12:18:31.923677 kernel: pcieport 0000:00:02.2: AER: enabled with IRQ 26 Jul 16 12:18:31.923773 kernel: pcieport 0000:00:02.2: pciehp: Slot #0 AttnBtn+ PwrCtrl+ MRL- AttnInd+ PwrInd+ HotPlug+ Surprise+ Interlock+ NoCompl- IbPresDis- LLActRep+ Jul 16 12:18:31.923870 kernel: pcieport 0000:00:02.3: PME: Signaling with IRQ 27 Jul 16 12:18:31.923967 kernel: pcieport 0000:00:02.3: AER: enabled with IRQ 27 Jul 16 12:18:31.924071 kernel: pcieport 0000:00:02.3: pciehp: Slot #0 AttnBtn+ PwrCtrl+ MRL- AttnInd+ PwrInd+ HotPlug+ Surprise+ Interlock+ NoCompl- IbPresDis- LLActRep+ Jul 16 12:18:31.924171 kernel: pcieport 0000:00:02.4: PME: Signaling with IRQ 28 Jul 16 12:18:31.924265 kernel: pcieport 0000:00:02.4: AER: enabled with IRQ 28 Jul 16 12:18:31.924360 kernel: pcieport 0000:00:02.4: pciehp: Slot #0 AttnBtn+ PwrCtrl+ MRL- AttnInd+ PwrInd+ HotPlug+ Surprise+ Interlock+ NoCompl- IbPresDis- LLActRep+ Jul 16 12:18:31.924456 kernel: pcieport 0000:00:02.5: PME: Signaling with IRQ 29 Jul 16 12:18:31.924597 kernel: pcieport 0000:00:02.5: AER: enabled with IRQ 29 Jul 16 12:18:31.924692 kernel: pcieport 0000:00:02.5: pciehp: Slot #0 AttnBtn+ PwrCtrl+ MRL- AttnInd+ PwrInd+ HotPlug+ Surprise+ Interlock+ NoCompl- IbPresDis- LLActRep+ Jul 16 12:18:31.924792 kernel: pcieport 0000:00:02.6: PME: Signaling with IRQ 30 Jul 16 12:18:31.924886 kernel: pcieport 0000:00:02.6: AER: enabled with IRQ 30 Jul 16 12:18:31.924982 kernel: pcieport 0000:00:02.6: pciehp: Slot #0 AttnBtn+ PwrCtrl+ MRL- AttnInd+ PwrInd+ HotPlug+ Surprise+ Interlock+ NoCompl- IbPresDis- LLActRep+ Jul 16 12:18:31.925085 kernel: pcieport 0000:00:02.7: PME: Signaling with IRQ 31 Jul 16 12:18:31.925179 kernel: pcieport 0000:00:02.7: AER: enabled with IRQ 31 Jul 16 12:18:31.925274 kernel: pcieport 0000:00:02.7: pciehp: Slot #0 AttnBtn+ PwrCtrl+ MRL- AttnInd+ PwrInd+ HotPlug+ Surprise+ Interlock+ NoCompl- IbPresDis- LLActRep+ Jul 16 12:18:31.925290 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 16 12:18:31.925301 kernel: ACPI: \_SB_.GSIH: Enabled at IRQ 23 Jul 16 12:18:31.925311 kernel: ACPI: \_SB_.GSIE: Enabled at IRQ 20 Jul 16 12:18:31.925321 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 16 12:18:31.925331 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 16 12:18:31.925341 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Jul 16 12:18:31.925351 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 16 12:18:31.925361 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 16 12:18:31.925371 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 16 12:18:31.925485 kernel: rtc_cmos 00:03: RTC can wake from S4 Jul 16 12:18:31.925577 kernel: rtc_cmos 00:03: registered as rtc0 Jul 16 12:18:31.925664 kernel: rtc_cmos 00:03: setting system clock to 2025-07-16T12:18:31 UTC (1752668311) Jul 16 12:18:31.925762 kernel: rtc_cmos 00:03: alarms up to one day, y3k, 242 bytes nvram Jul 16 12:18:31.925774 kernel: intel_pstate: CPU model not supported Jul 16 12:18:31.925783 kernel: NET: Registered PF_INET6 protocol family Jul 16 12:18:31.925792 kernel: Segment Routing with IPv6 Jul 16 12:18:31.925804 kernel: In-situ OAM (IOAM) with IPv6 Jul 16 12:18:31.925813 kernel: NET: Registered PF_PACKET protocol family Jul 16 12:18:31.925822 kernel: Key type dns_resolver registered Jul 16 12:18:31.925831 kernel: IPI shorthand broadcast: enabled Jul 16 12:18:31.925840 kernel: sched_clock: Marking stable (786603005, 114449739)->(1122235874, -221183130) Jul 16 12:18:31.925849 kernel: registered taskstats version 1 Jul 16 12:18:31.925858 kernel: Loading compiled-in X.509 certificates Jul 16 12:18:31.925867 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.188-flatcar: c4b3a19d3bd6de5654dc12075428550cf6251289' Jul 16 12:18:31.925877 kernel: Key type .fscrypt registered Jul 16 12:18:31.925886 kernel: Key type fscrypt-provisioning registered Jul 16 12:18:31.925897 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 16 12:18:31.925906 kernel: ima: Allocated hash algorithm: sha1 Jul 16 12:18:31.925915 kernel: ima: No architecture policies found Jul 16 12:18:31.925924 kernel: clk: Disabling unused clocks Jul 16 12:18:31.925933 kernel: Freeing unused kernel image (initmem) memory: 47476K Jul 16 12:18:31.925942 kernel: Write protecting the kernel read-only data: 28672k Jul 16 12:18:31.925952 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 16 12:18:31.925961 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Jul 16 12:18:31.925972 kernel: Run /init as init process Jul 16 12:18:31.925981 kernel: with arguments: Jul 16 12:18:31.925990 kernel: /init Jul 16 12:18:31.925999 kernel: with environment: Jul 16 12:18:31.926015 kernel: HOME=/ Jul 16 12:18:31.926024 kernel: TERM=linux Jul 16 12:18:31.926032 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 16 12:18:31.926044 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 16 12:18:31.926059 systemd[1]: Detected virtualization kvm. Jul 16 12:18:31.926068 systemd[1]: Detected architecture x86-64. Jul 16 12:18:31.926077 systemd[1]: Running in initrd. Jul 16 12:18:31.926103 systemd[1]: No hostname configured, using default hostname. Jul 16 12:18:31.926113 systemd[1]: Hostname set to . Jul 16 12:18:31.926124 systemd[1]: Initializing machine ID from VM UUID. Jul 16 12:18:31.926134 systemd[1]: Queued start job for default target initrd.target. Jul 16 12:18:31.926144 systemd[1]: Started systemd-ask-password-console.path. Jul 16 12:18:31.926156 systemd[1]: Reached target cryptsetup.target. Jul 16 12:18:31.926166 systemd[1]: Reached target paths.target. Jul 16 12:18:31.926176 systemd[1]: Reached target slices.target. Jul 16 12:18:31.926186 systemd[1]: Reached target swap.target. Jul 16 12:18:31.926196 systemd[1]: Reached target timers.target. Jul 16 12:18:31.926210 systemd[1]: Listening on iscsid.socket. Jul 16 12:18:31.926220 systemd[1]: Listening on iscsiuio.socket. Jul 16 12:18:31.926230 systemd[1]: Listening on systemd-journald-audit.socket. Jul 16 12:18:31.926243 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 16 12:18:31.926254 systemd[1]: Listening on systemd-journald.socket. Jul 16 12:18:31.926264 systemd[1]: Listening on systemd-networkd.socket. Jul 16 12:18:31.926274 systemd[1]: Listening on systemd-udevd-control.socket. Jul 16 12:18:31.926284 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 16 12:18:31.926294 systemd[1]: Reached target sockets.target. Jul 16 12:18:31.926305 systemd[1]: Starting kmod-static-nodes.service... Jul 16 12:18:31.926315 systemd[1]: Finished network-cleanup.service. Jul 16 12:18:31.926325 systemd[1]: Starting systemd-fsck-usr.service... Jul 16 12:18:31.926338 systemd[1]: Starting systemd-journald.service... Jul 16 12:18:31.926348 systemd[1]: Starting systemd-modules-load.service... Jul 16 12:18:31.926358 systemd[1]: Starting systemd-resolved.service... Jul 16 12:18:31.926368 systemd[1]: Starting systemd-vconsole-setup.service... Jul 16 12:18:31.926378 systemd[1]: Finished kmod-static-nodes.service. Jul 16 12:18:31.926389 systemd[1]: Finished systemd-fsck-usr.service. Jul 16 12:18:31.926399 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 16 12:18:31.926409 kernel: Bridge firewalling registered Jul 16 12:18:31.926424 systemd-journald[201]: Journal started Jul 16 12:18:31.926481 systemd-journald[201]: Runtime Journal (/run/log/journal/7c520f7a233140d6ac0667ce2d89aa0a) is 4.7M, max 38.1M, 33.3M free. Jul 16 12:18:31.849713 systemd-modules-load[202]: Inserted module 'overlay' Jul 16 12:18:31.937831 kernel: SCSI subsystem initialized Jul 16 12:18:31.937855 kernel: audit: type=1130 audit(1752668311.928:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:31.937870 systemd[1]: Started systemd-resolved.service. Jul 16 12:18:31.937885 systemd[1]: Started systemd-journald.service. Jul 16 12:18:31.937897 kernel: audit: type=1130 audit(1752668311.932:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:31.928000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:31.932000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:31.888801 systemd-modules-load[202]: Inserted module 'br_netfilter' Jul 16 12:18:31.913320 systemd-resolved[203]: Positive Trust Anchors: Jul 16 12:18:31.913333 systemd-resolved[203]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 16 12:18:31.913369 systemd-resolved[203]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 16 12:18:31.916629 systemd-resolved[203]: Defaulting to hostname 'linux'. Jul 16 12:18:31.934140 systemd[1]: Finished systemd-vconsole-setup.service. Jul 16 12:18:31.934623 systemd[1]: Reached target nss-lookup.target. Jul 16 12:18:31.940558 systemd[1]: Starting dracut-cmdline-ask.service... Jul 16 12:18:31.962721 kernel: audit: type=1130 audit(1752668311.933:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:31.962743 kernel: audit: type=1130 audit(1752668311.934:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:31.962756 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 16 12:18:31.962768 kernel: device-mapper: uevent: version 1.0.3 Jul 16 12:18:31.962779 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 16 12:18:31.962793 kernel: audit: type=1130 audit(1752668311.962:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:31.933000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:31.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:31.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:31.944738 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 16 12:18:31.975060 kernel: audit: type=1130 audit(1752668311.964:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:31.975090 kernel: audit: type=1130 audit(1752668311.967:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:31.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:31.967000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:31.961569 systemd-modules-load[202]: Inserted module 'dm_multipath' Jul 16 12:18:31.962149 systemd[1]: Finished systemd-modules-load.service. Jul 16 12:18:31.962661 systemd[1]: Finished dracut-cmdline-ask.service. Jul 16 12:18:31.986778 dracut-cmdline[222]: dracut-dracut-053 Jul 16 12:18:31.986778 dracut-cmdline[222]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 16 12:18:31.965620 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 16 12:18:31.971198 systemd[1]: Starting dracut-cmdline.service... Jul 16 12:18:31.975781 systemd[1]: Starting systemd-sysctl.service... Jul 16 12:18:31.992000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:31.992208 systemd[1]: Finished systemd-sysctl.service. Jul 16 12:18:31.995721 kernel: audit: type=1130 audit(1752668311.992:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:32.077494 kernel: Loading iSCSI transport class v2.0-870. Jul 16 12:18:32.097498 kernel: iscsi: registered transport (tcp) Jul 16 12:18:32.125923 kernel: iscsi: registered transport (qla4xxx) Jul 16 12:18:32.126010 kernel: QLogic iSCSI HBA Driver Jul 16 12:18:32.190683 systemd[1]: Finished dracut-cmdline.service. Jul 16 12:18:32.190000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:32.192061 systemd[1]: Starting dracut-pre-udev.service... Jul 16 12:18:32.195606 kernel: audit: type=1130 audit(1752668312.190:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:32.247546 kernel: raid6: avx512x4 gen() 17526 MB/s Jul 16 12:18:32.264559 kernel: raid6: avx512x4 xor() 7727 MB/s Jul 16 12:18:32.281510 kernel: raid6: avx512x2 gen() 17641 MB/s Jul 16 12:18:32.298544 kernel: raid6: avx512x2 xor() 21655 MB/s Jul 16 12:18:32.315521 kernel: raid6: avx512x1 gen() 17468 MB/s Jul 16 12:18:32.332530 kernel: raid6: avx512x1 xor() 19663 MB/s Jul 16 12:18:32.349533 kernel: raid6: avx2x4 gen() 17594 MB/s Jul 16 12:18:32.366575 kernel: raid6: avx2x4 xor() 7196 MB/s Jul 16 12:18:32.383532 kernel: raid6: avx2x2 gen() 17437 MB/s Jul 16 12:18:32.400531 kernel: raid6: avx2x2 xor() 15852 MB/s Jul 16 12:18:32.417520 kernel: raid6: avx2x1 gen() 13250 MB/s Jul 16 12:18:32.434540 kernel: raid6: avx2x1 xor() 13765 MB/s Jul 16 12:18:32.451568 kernel: raid6: sse2x4 gen() 8163 MB/s Jul 16 12:18:32.468560 kernel: raid6: sse2x4 xor() 5335 MB/s Jul 16 12:18:32.485544 kernel: raid6: sse2x2 gen() 9030 MB/s Jul 16 12:18:32.502544 kernel: raid6: sse2x2 xor() 5230 MB/s Jul 16 12:18:32.519552 kernel: raid6: sse2x1 gen() 8241 MB/s Jul 16 12:18:32.537394 kernel: raid6: sse2x1 xor() 4153 MB/s Jul 16 12:18:32.537550 kernel: raid6: using algorithm avx512x2 gen() 17641 MB/s Jul 16 12:18:32.537590 kernel: raid6: .... xor() 21655 MB/s, rmw enabled Jul 16 12:18:32.537900 kernel: raid6: using avx512x2 recovery algorithm Jul 16 12:18:32.552588 kernel: xor: automatically using best checksumming function avx Jul 16 12:18:32.659504 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 16 12:18:32.669562 systemd[1]: Finished dracut-pre-udev.service. Jul 16 12:18:32.669000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:32.669000 audit: BPF prog-id=7 op=LOAD Jul 16 12:18:32.669000 audit: BPF prog-id=8 op=LOAD Jul 16 12:18:32.670919 systemd[1]: Starting systemd-udevd.service... Jul 16 12:18:32.685487 systemd-udevd[403]: Using default interface naming scheme 'v252'. Jul 16 12:18:32.690904 systemd[1]: Started systemd-udevd.service. Jul 16 12:18:32.694000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:32.696066 systemd[1]: Starting dracut-pre-trigger.service... Jul 16 12:18:32.713450 dracut-pre-trigger[418]: rd.md=0: removing MD RAID activation Jul 16 12:18:32.758000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:32.758178 systemd[1]: Finished dracut-pre-trigger.service. Jul 16 12:18:32.760237 systemd[1]: Starting systemd-udev-trigger.service... Jul 16 12:18:32.815738 systemd[1]: Finished systemd-udev-trigger.service. Jul 16 12:18:32.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:32.877498 kernel: virtio_blk virtio1: [vda] 125829120 512-byte logical blocks (64.4 GB/60.0 GiB) Jul 16 12:18:32.905847 kernel: cryptd: max_cpu_qlen set to 1000 Jul 16 12:18:32.905868 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 16 12:18:32.905888 kernel: GPT:17805311 != 125829119 Jul 16 12:18:32.905900 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 16 12:18:32.905912 kernel: GPT:17805311 != 125829119 Jul 16 12:18:32.905923 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 16 12:18:32.905946 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 16 12:18:32.929522 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (448) Jul 16 12:18:32.937828 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 16 12:18:32.938899 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 16 12:18:32.942488 kernel: ACPI: bus type USB registered Jul 16 12:18:32.947489 kernel: usbcore: registered new interface driver usbfs Jul 16 12:18:32.947523 kernel: usbcore: registered new interface driver hub Jul 16 12:18:32.949483 kernel: usbcore: registered new device driver usb Jul 16 12:18:32.949546 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 16 12:18:32.952437 systemd[1]: Starting disk-uuid.service... Jul 16 12:18:32.952850 kernel: libata version 3.00 loaded. Jul 16 12:18:32.960989 disk-uuid[469]: Primary Header is updated. Jul 16 12:18:32.960989 disk-uuid[469]: Secondary Entries is updated. Jul 16 12:18:32.960989 disk-uuid[469]: Secondary Header is updated. Jul 16 12:18:32.974637 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 16 12:18:33.077053 kernel: AVX2 version of gcm_enc/dec engaged. Jul 16 12:18:33.077082 kernel: AES CTR mode by8 optimization enabled Jul 16 12:18:33.077095 kernel: ahci 0000:00:1f.2: version 3.0 Jul 16 12:18:33.077239 kernel: ACPI: \_SB_.GSIA: Enabled at IRQ 16 Jul 16 12:18:33.077260 kernel: ahci 0000:00:1f.2: AHCI 0001.0000 32 slots 6 ports 1.5 Gbps 0x3f impl SATA mode Jul 16 12:18:33.077350 kernel: ahci 0000:00:1f.2: flags: 64bit ncq only Jul 16 12:18:33.077441 kernel: scsi host0: ahci Jul 16 12:18:33.077563 kernel: scsi host1: ahci Jul 16 12:18:33.077659 kernel: scsi host2: ahci Jul 16 12:18:33.077757 kernel: xhci_hcd 0000:03:00.0: xHCI Host Controller Jul 16 12:18:33.077852 kernel: xhci_hcd 0000:03:00.0: new USB bus registered, assigned bus number 1 Jul 16 12:18:33.077974 kernel: xhci_hcd 0000:03:00.0: hcc params 0x00087001 hci version 0x100 quirks 0x0000000000000010 Jul 16 12:18:33.078073 kernel: xhci_hcd 0000:03:00.0: xHCI Host Controller Jul 16 12:18:33.078171 kernel: xhci_hcd 0000:03:00.0: new USB bus registered, assigned bus number 2 Jul 16 12:18:33.078265 kernel: xhci_hcd 0000:03:00.0: Host supports USB 3.0 SuperSpeed Jul 16 12:18:33.078361 kernel: hub 1-0:1.0: USB hub found Jul 16 12:18:33.078491 kernel: hub 1-0:1.0: 4 ports detected Jul 16 12:18:33.078606 kernel: usb usb2: We don't know the algorithms for LPM for this host, disabling LPM. Jul 16 12:18:33.078776 kernel: hub 2-0:1.0: USB hub found Jul 16 12:18:33.078881 kernel: hub 2-0:1.0: 4 ports detected Jul 16 12:18:33.079010 kernel: scsi host3: ahci Jul 16 12:18:33.079113 kernel: scsi host4: ahci Jul 16 12:18:33.079220 kernel: scsi host5: ahci Jul 16 12:18:33.079320 kernel: ata1: SATA max UDMA/133 abar m4096@0xfea5b000 port 0xfea5b100 irq 38 Jul 16 12:18:33.079337 kernel: ata2: SATA max UDMA/133 abar m4096@0xfea5b000 port 0xfea5b180 irq 38 Jul 16 12:18:33.079349 kernel: ata3: SATA max UDMA/133 abar m4096@0xfea5b000 port 0xfea5b200 irq 38 Jul 16 12:18:33.079361 kernel: ata4: SATA max UDMA/133 abar m4096@0xfea5b000 port 0xfea5b280 irq 38 Jul 16 12:18:33.079383 kernel: ata5: SATA max UDMA/133 abar m4096@0xfea5b000 port 0xfea5b300 irq 38 Jul 16 12:18:33.079394 kernel: ata6: SATA max UDMA/133 abar m4096@0xfea5b000 port 0xfea5b380 irq 38 Jul 16 12:18:33.083301 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 16 12:18:33.279568 kernel: usb 1-1: new high-speed USB device number 2 using xhci_hcd Jul 16 12:18:33.363523 kernel: ata1: SATA link down (SStatus 0 SControl 300) Jul 16 12:18:33.363600 kernel: ata2: SATA link down (SStatus 0 SControl 300) Jul 16 12:18:33.368558 kernel: ata4: SATA link down (SStatus 0 SControl 300) Jul 16 12:18:33.368606 kernel: ata3: SATA link down (SStatus 0 SControl 300) Jul 16 12:18:33.371096 kernel: ata5: SATA link down (SStatus 0 SControl 300) Jul 16 12:18:33.373691 kernel: ata6: SATA link down (SStatus 0 SControl 300) Jul 16 12:18:33.422532 kernel: hid: raw HID events driver (C) Jiri Kosina Jul 16 12:18:33.428049 kernel: usbcore: registered new interface driver usbhid Jul 16 12:18:33.428117 kernel: usbhid: USB HID core driver Jul 16 12:18:33.434228 kernel: input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:02.1/0000:03:00.0/usb1/1-1/1-1:1.0/0003:0627:0001.0001/input/input2 Jul 16 12:18:33.434282 kernel: hid-generic 0003:0627:0001.0001: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:03:00.0-1/input0 Jul 16 12:18:33.972559 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 16 12:18:33.973353 disk-uuid[470]: The operation has completed successfully. Jul 16 12:18:34.013002 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 16 12:18:34.013098 systemd[1]: Finished disk-uuid.service. Jul 16 12:18:34.013000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:34.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:34.014407 systemd[1]: Starting verity-setup.service... Jul 16 12:18:34.034599 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Jul 16 12:18:34.080163 systemd[1]: Found device dev-mapper-usr.device. Jul 16 12:18:34.082231 systemd[1]: Mounting sysusr-usr.mount... Jul 16 12:18:34.084834 systemd[1]: Finished verity-setup.service. Jul 16 12:18:34.084000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:34.163533 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 16 12:18:34.164278 systemd[1]: Mounted sysusr-usr.mount. Jul 16 12:18:34.164819 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 16 12:18:34.165611 systemd[1]: Starting ignition-setup.service... Jul 16 12:18:34.166808 systemd[1]: Starting parse-ip-for-networkd.service... Jul 16 12:18:34.191039 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 16 12:18:34.191121 kernel: BTRFS info (device vda6): using free space tree Jul 16 12:18:34.191144 kernel: BTRFS info (device vda6): has skinny extents Jul 16 12:18:34.210940 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 16 12:18:34.218356 systemd[1]: Finished ignition-setup.service. Jul 16 12:18:34.218000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:34.220271 systemd[1]: Starting ignition-fetch-offline.service... Jul 16 12:18:34.322517 systemd[1]: Finished parse-ip-for-networkd.service. Jul 16 12:18:34.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:34.323000 audit: BPF prog-id=9 op=LOAD Jul 16 12:18:34.324819 systemd[1]: Starting systemd-networkd.service... Jul 16 12:18:34.331429 ignition[640]: Ignition 2.14.0 Jul 16 12:18:34.331444 ignition[640]: Stage: fetch-offline Jul 16 12:18:34.331533 ignition[640]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 16 12:18:34.337000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:34.337202 systemd[1]: Finished ignition-fetch-offline.service. Jul 16 12:18:34.331560 ignition[640]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Jul 16 12:18:34.332736 ignition[640]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Jul 16 12:18:34.332854 ignition[640]: parsed url from cmdline: "" Jul 16 12:18:34.332858 ignition[640]: no config URL provided Jul 16 12:18:34.332863 ignition[640]: reading system config file "/usr/lib/ignition/user.ign" Jul 16 12:18:34.332872 ignition[640]: no config at "/usr/lib/ignition/user.ign" Jul 16 12:18:34.332877 ignition[640]: failed to fetch config: resource requires networking Jul 16 12:18:34.333102 ignition[640]: Ignition finished successfully Jul 16 12:18:34.363142 systemd-networkd[714]: lo: Link UP Jul 16 12:18:34.363170 systemd-networkd[714]: lo: Gained carrier Jul 16 12:18:34.365313 systemd-networkd[714]: Enumeration completed Jul 16 12:18:34.365545 systemd[1]: Started systemd-networkd.service. Jul 16 12:18:34.366000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:34.367494 systemd[1]: Reached target network.target. Jul 16 12:18:34.367741 systemd-networkd[714]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 16 12:18:34.369489 systemd-networkd[714]: eth0: Link UP Jul 16 12:18:34.369497 systemd-networkd[714]: eth0: Gained carrier Jul 16 12:18:34.370528 systemd[1]: Starting ignition-fetch.service... Jul 16 12:18:34.375649 systemd[1]: Starting iscsiuio.service... Jul 16 12:18:34.383841 ignition[716]: Ignition 2.14.0 Jul 16 12:18:34.384574 ignition[716]: Stage: fetch Jul 16 12:18:34.385145 ignition[716]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 16 12:18:34.385757 ignition[716]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Jul 16 12:18:34.385158 systemd[1]: Started iscsiuio.service. Jul 16 12:18:34.386706 ignition[716]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Jul 16 12:18:34.385609 systemd-networkd[714]: eth0: DHCPv4 address 10.244.102.2/30, gateway 10.244.102.1 acquired from 10.244.102.1 Jul 16 12:18:34.386792 ignition[716]: parsed url from cmdline: "" Jul 16 12:18:34.386796 ignition[716]: no config URL provided Jul 16 12:18:34.386801 ignition[716]: reading system config file "/usr/lib/ignition/user.ign" Jul 16 12:18:34.387000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:34.386809 ignition[716]: no config at "/usr/lib/ignition/user.ign" Jul 16 12:18:34.390363 systemd[1]: Starting iscsid.service... Jul 16 12:18:34.394804 iscsid[724]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 16 12:18:34.394804 iscsid[724]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 16 12:18:34.394804 iscsid[724]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 16 12:18:34.394804 iscsid[724]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 16 12:18:34.394804 iscsid[724]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 16 12:18:34.394804 iscsid[724]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 16 12:18:34.397000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:34.396582 systemd[1]: Started iscsid.service. Jul 16 12:18:34.399410 systemd[1]: Starting dracut-initqueue.service... Jul 16 12:18:34.406119 ignition[716]: config drive ("/dev/disk/by-label/config-2") not found. Waiting... Jul 16 12:18:34.406163 ignition[716]: config drive ("/dev/disk/by-label/CONFIG-2") not found. Waiting... Jul 16 12:18:34.406172 ignition[716]: GET http://169.254.169.254/openstack/latest/user_data: attempt #1 Jul 16 12:18:34.419000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:34.419232 systemd[1]: Finished dracut-initqueue.service. Jul 16 12:18:34.419760 systemd[1]: Reached target remote-fs-pre.target. Jul 16 12:18:34.420109 systemd[1]: Reached target remote-cryptsetup.target. Jul 16 12:18:34.420443 systemd[1]: Reached target remote-fs.target. Jul 16 12:18:34.421660 systemd[1]: Starting dracut-pre-mount.service... Jul 16 12:18:34.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:34.432801 systemd[1]: Finished dracut-pre-mount.service. Jul 16 12:18:34.434725 ignition[716]: GET result: OK Jul 16 12:18:34.435106 ignition[716]: parsing config with SHA512: f822382c081b91ae48122960a77db9784261fedb2db2d405552592abda291b0f3cbeef257f1adcb8c4e5e082e8735b759f3088d6e7974dbeabf515e9db0ade1e Jul 16 12:18:34.442185 unknown[716]: fetched base config from "system" Jul 16 12:18:34.442196 unknown[716]: fetched base config from "system" Jul 16 12:18:34.442663 ignition[716]: fetch: fetch complete Jul 16 12:18:34.442202 unknown[716]: fetched user config from "openstack" Jul 16 12:18:34.442669 ignition[716]: fetch: fetch passed Jul 16 12:18:34.442708 ignition[716]: Ignition finished successfully Jul 16 12:18:34.446035 systemd[1]: Finished ignition-fetch.service. Jul 16 12:18:34.445000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:34.447423 systemd[1]: Starting ignition-kargs.service... Jul 16 12:18:34.457536 ignition[739]: Ignition 2.14.0 Jul 16 12:18:34.458178 ignition[739]: Stage: kargs Jul 16 12:18:34.458723 ignition[739]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 16 12:18:34.459294 ignition[739]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Jul 16 12:18:34.460417 ignition[739]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Jul 16 12:18:34.462232 ignition[739]: kargs: kargs passed Jul 16 12:18:34.462725 ignition[739]: Ignition finished successfully Jul 16 12:18:34.464417 systemd[1]: Finished ignition-kargs.service. Jul 16 12:18:34.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:34.466861 systemd[1]: Starting ignition-disks.service... Jul 16 12:18:34.477278 ignition[745]: Ignition 2.14.0 Jul 16 12:18:34.477290 ignition[745]: Stage: disks Jul 16 12:18:34.477429 ignition[745]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 16 12:18:34.477450 ignition[745]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Jul 16 12:18:34.478410 ignition[745]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Jul 16 12:18:34.479508 ignition[745]: disks: disks passed Jul 16 12:18:34.479559 ignition[745]: Ignition finished successfully Jul 16 12:18:34.480642 systemd[1]: Finished ignition-disks.service. Jul 16 12:18:34.482131 systemd[1]: Reached target initrd-root-device.target. Jul 16 12:18:34.481000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:34.483346 systemd[1]: Reached target local-fs-pre.target. Jul 16 12:18:34.484137 systemd[1]: Reached target local-fs.target. Jul 16 12:18:34.484563 systemd[1]: Reached target sysinit.target. Jul 16 12:18:34.485172 systemd[1]: Reached target basic.target. Jul 16 12:18:34.486891 systemd[1]: Starting systemd-fsck-root.service... Jul 16 12:18:34.501149 systemd-fsck[752]: ROOT: clean, 619/1628000 files, 124060/1617920 blocks Jul 16 12:18:34.504751 systemd[1]: Finished systemd-fsck-root.service. Jul 16 12:18:34.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:34.506324 systemd[1]: Mounting sysroot.mount... Jul 16 12:18:34.516486 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 16 12:18:34.517006 systemd[1]: Mounted sysroot.mount. Jul 16 12:18:34.517869 systemd[1]: Reached target initrd-root-fs.target. Jul 16 12:18:34.519792 systemd[1]: Mounting sysroot-usr.mount... Jul 16 12:18:34.521107 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 16 12:18:34.522452 systemd[1]: Starting flatcar-openstack-hostname.service... Jul 16 12:18:34.523369 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 16 12:18:34.524008 systemd[1]: Reached target ignition-diskful.target. Jul 16 12:18:34.525861 systemd[1]: Mounted sysroot-usr.mount. Jul 16 12:18:34.527659 systemd[1]: Starting initrd-setup-root.service... Jul 16 12:18:34.539806 initrd-setup-root[763]: cut: /sysroot/etc/passwd: No such file or directory Jul 16 12:18:34.549116 initrd-setup-root[771]: cut: /sysroot/etc/group: No such file or directory Jul 16 12:18:34.559650 initrd-setup-root[780]: cut: /sysroot/etc/shadow: No such file or directory Jul 16 12:18:34.574480 initrd-setup-root[789]: cut: /sysroot/etc/gshadow: No such file or directory Jul 16 12:18:34.627222 systemd[1]: Finished initrd-setup-root.service. Jul 16 12:18:34.627000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:34.628613 systemd[1]: Starting ignition-mount.service... Jul 16 12:18:34.629766 systemd[1]: Starting sysroot-boot.service... Jul 16 12:18:34.639156 bash[806]: umount: /sysroot/usr/share/oem: not mounted. Jul 16 12:18:34.646396 coreos-metadata[758]: Jul 16 12:18:34.646 INFO Fetching http://169.254.169.254/latest/meta-data/hostname: Attempt #1 Jul 16 12:18:34.653548 ignition[808]: INFO : Ignition 2.14.0 Jul 16 12:18:34.653548 ignition[808]: INFO : Stage: mount Jul 16 12:18:34.654480 ignition[808]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 16 12:18:34.654480 ignition[808]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Jul 16 12:18:34.664000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:34.665763 ignition[808]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Jul 16 12:18:34.665763 ignition[808]: INFO : mount: mount passed Jul 16 12:18:34.665763 ignition[808]: INFO : Ignition finished successfully Jul 16 12:18:34.664560 systemd[1]: Finished ignition-mount.service. Jul 16 12:18:34.668078 coreos-metadata[758]: Jul 16 12:18:34.667 INFO Fetch successful Jul 16 12:18:34.668078 coreos-metadata[758]: Jul 16 12:18:34.667 INFO wrote hostname srv-frvg8.gb1.brightbox.com to /sysroot/etc/hostname Jul 16 12:18:34.669742 systemd[1]: flatcar-openstack-hostname.service: Deactivated successfully. Jul 16 12:18:34.669000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-openstack-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:34.669000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-openstack-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:34.669846 systemd[1]: Finished flatcar-openstack-hostname.service. Jul 16 12:18:34.672970 systemd[1]: Finished sysroot-boot.service. Jul 16 12:18:34.672000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:35.100330 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 16 12:18:35.115547 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/vda6 scanned by mount (815) Jul 16 12:18:35.121203 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 16 12:18:35.121261 kernel: BTRFS info (device vda6): using free space tree Jul 16 12:18:35.121284 kernel: BTRFS info (device vda6): has skinny extents Jul 16 12:18:35.127221 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 16 12:18:35.128943 systemd[1]: Starting ignition-files.service... Jul 16 12:18:35.156851 ignition[835]: INFO : Ignition 2.14.0 Jul 16 12:18:35.156851 ignition[835]: INFO : Stage: files Jul 16 12:18:35.159573 ignition[835]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 16 12:18:35.159573 ignition[835]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Jul 16 12:18:35.159573 ignition[835]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Jul 16 12:18:35.165260 ignition[835]: DEBUG : files: compiled without relabeling support, skipping Jul 16 12:18:35.165260 ignition[835]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 16 12:18:35.165260 ignition[835]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 16 12:18:35.165260 ignition[835]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 16 12:18:35.165260 ignition[835]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 16 12:18:35.173613 ignition[835]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 16 12:18:35.173613 ignition[835]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Jul 16 12:18:35.173613 ignition[835]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.3-linux-amd64.tar.gz: attempt #1 Jul 16 12:18:35.167710 unknown[835]: wrote ssh authorized keys file for user: core Jul 16 12:18:35.361687 ignition[835]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 16 12:18:35.819323 systemd-networkd[714]: eth0: Gained IPv6LL Jul 16 12:18:35.892732 ignition[835]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Jul 16 12:18:35.894151 ignition[835]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 16 12:18:35.895912 ignition[835]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 16 12:18:35.896924 ignition[835]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 16 12:18:35.898304 ignition[835]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 16 12:18:35.899357 ignition[835]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 16 12:18:35.900497 ignition[835]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 16 12:18:35.901215 ignition[835]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 16 12:18:35.901215 ignition[835]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 16 12:18:35.901215 ignition[835]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 16 12:18:35.901215 ignition[835]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 16 12:18:35.901215 ignition[835]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 16 12:18:35.901215 ignition[835]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 16 12:18:35.901215 ignition[835]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 16 12:18:35.905858 ignition[835]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-x86-64.raw: attempt #1 Jul 16 12:18:36.705599 ignition[835]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 16 12:18:37.331204 systemd-networkd[714]: eth0: Ignoring DHCPv6 address 2a02:1348:17d:1980:24:19ff:fef4:6602/128 (valid for 59min 59s, preferred for 59min 59s) which conflicts with 2a02:1348:17d:1980:24:19ff:fef4:6602/64 assigned by NDisc. Jul 16 12:18:37.331218 systemd-networkd[714]: eth0: Hint: use IPv6Token= setting to change the address generated by NDisc or set UseAutonomousPrefix=no. Jul 16 12:18:38.375245 ignition[835]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 16 12:18:38.378187 ignition[835]: INFO : files: op(b): [started] processing unit "coreos-metadata-sshkeys@.service" Jul 16 12:18:38.378187 ignition[835]: INFO : files: op(b): [finished] processing unit "coreos-metadata-sshkeys@.service" Jul 16 12:18:38.378187 ignition[835]: INFO : files: op(c): [started] processing unit "prepare-helm.service" Jul 16 12:18:38.378187 ignition[835]: INFO : files: op(c): op(d): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 16 12:18:38.378187 ignition[835]: INFO : files: op(c): op(d): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 16 12:18:38.378187 ignition[835]: INFO : files: op(c): [finished] processing unit "prepare-helm.service" Jul 16 12:18:38.378187 ignition[835]: INFO : files: op(e): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Jul 16 12:18:38.378187 ignition[835]: INFO : files: op(e): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Jul 16 12:18:38.378187 ignition[835]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 16 12:18:38.378187 ignition[835]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 16 12:18:38.392512 ignition[835]: INFO : files: createResultFile: createFiles: op(10): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 16 12:18:38.393117 ignition[835]: INFO : files: createResultFile: createFiles: op(10): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 16 12:18:38.393117 ignition[835]: INFO : files: files passed Jul 16 12:18:38.393117 ignition[835]: INFO : Ignition finished successfully Jul 16 12:18:38.396246 systemd[1]: Finished ignition-files.service. Jul 16 12:18:38.404372 kernel: kauditd_printk_skb: 27 callbacks suppressed Jul 16 12:18:38.404403 kernel: audit: type=1130 audit(1752668318.397:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.397000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.398954 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 16 12:18:38.401931 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 16 12:18:38.414229 kernel: audit: type=1130 audit(1752668318.407:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.414265 kernel: audit: type=1131 audit(1752668318.407:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.407000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.402979 systemd[1]: Starting ignition-quench.service... Jul 16 12:18:38.417991 kernel: audit: type=1130 audit(1752668318.414:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.414000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.418084 initrd-setup-root-after-ignition[860]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 16 12:18:38.407513 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 16 12:18:38.407634 systemd[1]: Finished ignition-quench.service. Jul 16 12:18:38.414337 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 16 12:18:38.414996 systemd[1]: Reached target ignition-complete.target. Jul 16 12:18:38.419261 systemd[1]: Starting initrd-parse-etc.service... Jul 16 12:18:38.443200 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 16 12:18:38.443431 systemd[1]: Finished initrd-parse-etc.service. Jul 16 12:18:38.445093 systemd[1]: Reached target initrd-fs.target. Jul 16 12:18:38.450779 kernel: audit: type=1130 audit(1752668318.444:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.450812 kernel: audit: type=1131 audit(1752668318.444:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.444000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.444000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.464041 systemd[1]: Reached target initrd.target. Jul 16 12:18:38.464993 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 16 12:18:38.466957 systemd[1]: Starting dracut-pre-pivot.service... Jul 16 12:18:38.488301 systemd[1]: Finished dracut-pre-pivot.service. Jul 16 12:18:38.488000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.490570 systemd[1]: Starting initrd-cleanup.service... Jul 16 12:18:38.495822 kernel: audit: type=1130 audit(1752668318.488:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.504603 systemd[1]: Stopped target nss-lookup.target. Jul 16 12:18:38.505639 systemd[1]: Stopped target remote-cryptsetup.target. Jul 16 12:18:38.506589 systemd[1]: Stopped target timers.target. Jul 16 12:18:38.507436 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 16 12:18:38.508046 systemd[1]: Stopped dracut-pre-pivot.service. Jul 16 12:18:38.508000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.510793 systemd[1]: Stopped target initrd.target. Jul 16 12:18:38.513075 kernel: audit: type=1131 audit(1752668318.508:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.513066 systemd[1]: Stopped target basic.target. Jul 16 12:18:38.514511 systemd[1]: Stopped target ignition-complete.target. Jul 16 12:18:38.516273 systemd[1]: Stopped target ignition-diskful.target. Jul 16 12:18:38.517752 systemd[1]: Stopped target initrd-root-device.target. Jul 16 12:18:38.518997 systemd[1]: Stopped target remote-fs.target. Jul 16 12:18:38.519985 systemd[1]: Stopped target remote-fs-pre.target. Jul 16 12:18:38.521122 systemd[1]: Stopped target sysinit.target. Jul 16 12:18:38.522142 systemd[1]: Stopped target local-fs.target. Jul 16 12:18:38.523113 systemd[1]: Stopped target local-fs-pre.target. Jul 16 12:18:38.524161 systemd[1]: Stopped target swap.target. Jul 16 12:18:38.525107 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 16 12:18:38.530931 kernel: audit: type=1131 audit(1752668318.525:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.525000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.525349 systemd[1]: Stopped dracut-pre-mount.service. Jul 16 12:18:38.526435 systemd[1]: Stopped target cryptsetup.target. Jul 16 12:18:38.536194 kernel: audit: type=1131 audit(1752668318.531:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.531000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.531340 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 16 12:18:38.531509 systemd[1]: Stopped dracut-initqueue.service. Jul 16 12:18:38.537000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.532445 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 16 12:18:38.538000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.532605 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 16 12:18:38.537695 systemd[1]: ignition-files.service: Deactivated successfully. Jul 16 12:18:38.538025 systemd[1]: Stopped ignition-files.service. Jul 16 12:18:38.541496 systemd[1]: Stopping ignition-mount.service... Jul 16 12:18:38.549000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.550000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.552000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.543240 systemd[1]: Stopping iscsiuio.service... Jul 16 12:18:38.555196 ignition[873]: INFO : Ignition 2.14.0 Jul 16 12:18:38.555196 ignition[873]: INFO : Stage: umount Jul 16 12:18:38.556000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.556000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.549018 systemd[1]: Stopping sysroot-boot.service... Jul 16 12:18:38.560183 ignition[873]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 16 12:18:38.560183 ignition[873]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Jul 16 12:18:38.560183 ignition[873]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Jul 16 12:18:38.560183 ignition[873]: INFO : umount: umount passed Jul 16 12:18:38.560183 ignition[873]: INFO : Ignition finished successfully Jul 16 12:18:38.563000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.549417 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 16 12:18:38.564000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.549631 systemd[1]: Stopped systemd-udev-trigger.service. Jul 16 12:18:38.565000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.550192 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 16 12:18:38.566000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.550313 systemd[1]: Stopped dracut-pre-trigger.service. Jul 16 12:18:38.552365 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 16 12:18:38.567000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.552555 systemd[1]: Stopped iscsiuio.service. Jul 16 12:18:38.556306 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 16 12:18:38.556412 systemd[1]: Finished initrd-cleanup.service. Jul 16 12:18:38.560995 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 16 12:18:38.561097 systemd[1]: Stopped ignition-mount.service. Jul 16 12:18:38.564036 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 16 12:18:38.564090 systemd[1]: Stopped ignition-disks.service. Jul 16 12:18:38.564679 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 16 12:18:38.564719 systemd[1]: Stopped ignition-kargs.service. Jul 16 12:18:38.565968 systemd[1]: ignition-fetch.service: Deactivated successfully. Jul 16 12:18:38.566007 systemd[1]: Stopped ignition-fetch.service. Jul 16 12:18:38.566619 systemd[1]: Stopped target network.target. Jul 16 12:18:38.567285 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 16 12:18:38.567328 systemd[1]: Stopped ignition-fetch-offline.service. Jul 16 12:18:38.568045 systemd[1]: Stopped target paths.target. Jul 16 12:18:38.568668 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 16 12:18:38.575689 systemd[1]: Stopped systemd-ask-password-console.path. Jul 16 12:18:38.578000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.576242 systemd[1]: Stopped target slices.target. Jul 16 12:18:38.576581 systemd[1]: Stopped target sockets.target. Jul 16 12:18:38.576941 systemd[1]: iscsid.socket: Deactivated successfully. Jul 16 12:18:38.576972 systemd[1]: Closed iscsid.socket. Jul 16 12:18:38.578401 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 16 12:18:38.578439 systemd[1]: Closed iscsiuio.socket. Jul 16 12:18:38.578789 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 16 12:18:38.578831 systemd[1]: Stopped ignition-setup.service. Jul 16 12:18:38.579637 systemd[1]: Stopping systemd-networkd.service... Jul 16 12:18:38.580110 systemd[1]: Stopping systemd-resolved.service... Jul 16 12:18:38.584000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.581999 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 16 12:18:38.582548 systemd-networkd[714]: eth0: DHCPv6 lease lost Jul 16 12:18:38.583633 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 16 12:18:38.583733 systemd[1]: Stopped systemd-networkd.service. Jul 16 12:18:38.585976 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 16 12:18:38.589000 audit: BPF prog-id=9 op=UNLOAD Jul 16 12:18:38.586012 systemd[1]: Closed systemd-networkd.socket. Jul 16 12:18:38.587110 systemd[1]: Stopping network-cleanup.service... Jul 16 12:18:38.593174 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 16 12:18:38.593257 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 16 12:18:38.594000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.595113 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 16 12:18:38.595173 systemd[1]: Stopped systemd-sysctl.service. Jul 16 12:18:38.596000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.596833 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 16 12:18:38.596876 systemd[1]: Stopped systemd-modules-load.service. Jul 16 12:18:38.597000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.598354 systemd[1]: Stopping systemd-udevd.service... Jul 16 12:18:38.603934 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 16 12:18:38.604467 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 16 12:18:38.604606 systemd[1]: Stopped systemd-resolved.service. Jul 16 12:18:38.605000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.607066 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 16 12:18:38.607152 systemd[1]: Stopped sysroot-boot.service. Jul 16 12:18:38.607000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.609000 audit: BPF prog-id=6 op=UNLOAD Jul 16 12:18:38.610000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.610305 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 16 12:18:38.610417 systemd[1]: Stopped initrd-setup-root.service. Jul 16 12:18:38.612576 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 16 12:18:38.612813 systemd[1]: Stopped network-cleanup.service. Jul 16 12:18:38.613000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.615867 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 16 12:18:38.616127 systemd[1]: Stopped systemd-udevd.service. Jul 16 12:18:38.634000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.635902 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 16 12:18:38.635969 systemd[1]: Closed systemd-udevd-control.socket. Jul 16 12:18:38.637366 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 16 12:18:38.639000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.637413 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 16 12:18:38.640000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.638506 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 16 12:18:38.641000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.638580 systemd[1]: Stopped dracut-pre-udev.service. Jul 16 12:18:38.639745 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 16 12:18:38.639801 systemd[1]: Stopped dracut-cmdline.service. Jul 16 12:18:38.640774 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 16 12:18:38.640815 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 16 12:18:38.642794 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 16 12:18:38.643250 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Jul 16 12:18:38.643331 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Jul 16 12:18:38.649000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.650559 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 16 12:18:38.651000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.650624 systemd[1]: Stopped kmod-static-nodes.service. Jul 16 12:18:38.651000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.651553 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 16 12:18:38.651601 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 16 12:18:38.653811 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Jul 16 12:18:38.658808 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 16 12:18:38.658980 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 16 12:18:38.660000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.660000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:38.660786 systemd[1]: Reached target initrd-switch-root.target. Jul 16 12:18:38.663160 systemd[1]: Starting initrd-switch-root.service... Jul 16 12:18:38.685027 systemd[1]: Switching root. Jul 16 12:18:38.712631 systemd-journald[201]: Journal stopped Jul 16 12:18:41.791133 systemd-journald[201]: Received SIGTERM from PID 1 (systemd). Jul 16 12:18:41.791206 kernel: SELinux: Class mctp_socket not defined in policy. Jul 16 12:18:41.791229 kernel: SELinux: Class anon_inode not defined in policy. Jul 16 12:18:41.791247 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 16 12:18:41.791263 kernel: SELinux: policy capability network_peer_controls=1 Jul 16 12:18:41.791275 kernel: SELinux: policy capability open_perms=1 Jul 16 12:18:41.791290 kernel: SELinux: policy capability extended_socket_class=1 Jul 16 12:18:41.791318 kernel: SELinux: policy capability always_check_network=0 Jul 16 12:18:41.791331 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 16 12:18:41.791344 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 16 12:18:41.791358 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 16 12:18:41.791371 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 16 12:18:41.791385 systemd[1]: Successfully loaded SELinux policy in 51.875ms. Jul 16 12:18:41.791405 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 8.813ms. Jul 16 12:18:41.791421 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 16 12:18:41.791444 systemd[1]: Detected virtualization kvm. Jul 16 12:18:41.791459 systemd[1]: Detected architecture x86-64. Jul 16 12:18:41.793066 systemd[1]: Detected first boot. Jul 16 12:18:41.793094 systemd[1]: Hostname set to . Jul 16 12:18:41.793110 systemd[1]: Initializing machine ID from VM UUID. Jul 16 12:18:41.793136 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 16 12:18:41.793151 systemd[1]: Populated /etc with preset unit settings. Jul 16 12:18:41.793166 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 16 12:18:41.793185 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 16 12:18:41.793204 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 16 12:18:41.793234 systemd[1]: iscsid.service: Deactivated successfully. Jul 16 12:18:41.793254 systemd[1]: Stopped iscsid.service. Jul 16 12:18:41.793269 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 16 12:18:41.793282 systemd[1]: Stopped initrd-switch-root.service. Jul 16 12:18:41.793297 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 16 12:18:41.793321 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 16 12:18:41.793335 systemd[1]: Created slice system-addon\x2drun.slice. Jul 16 12:18:41.793349 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Jul 16 12:18:41.793364 systemd[1]: Created slice system-getty.slice. Jul 16 12:18:41.793381 systemd[1]: Created slice system-modprobe.slice. Jul 16 12:18:41.793401 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 16 12:18:41.793416 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 16 12:18:41.793430 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 16 12:18:41.793443 systemd[1]: Created slice user.slice. Jul 16 12:18:41.793457 systemd[1]: Started systemd-ask-password-console.path. Jul 16 12:18:41.794494 systemd[1]: Started systemd-ask-password-wall.path. Jul 16 12:18:41.794523 systemd[1]: Set up automount boot.automount. Jul 16 12:18:41.794538 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 16 12:18:41.794552 systemd[1]: Stopped target initrd-switch-root.target. Jul 16 12:18:41.794565 systemd[1]: Stopped target initrd-fs.target. Jul 16 12:18:41.794579 systemd[1]: Stopped target initrd-root-fs.target. Jul 16 12:18:41.794593 systemd[1]: Reached target integritysetup.target. Jul 16 12:18:41.794607 systemd[1]: Reached target remote-cryptsetup.target. Jul 16 12:18:41.794621 systemd[1]: Reached target remote-fs.target. Jul 16 12:18:41.794635 systemd[1]: Reached target slices.target. Jul 16 12:18:41.794648 systemd[1]: Reached target swap.target. Jul 16 12:18:41.794667 systemd[1]: Reached target torcx.target. Jul 16 12:18:41.794681 systemd[1]: Reached target veritysetup.target. Jul 16 12:18:41.794695 systemd[1]: Listening on systemd-coredump.socket. Jul 16 12:18:41.794709 systemd[1]: Listening on systemd-initctl.socket. Jul 16 12:18:41.794722 systemd[1]: Listening on systemd-networkd.socket. Jul 16 12:18:41.794737 systemd[1]: Listening on systemd-udevd-control.socket. Jul 16 12:18:41.794751 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 16 12:18:41.794765 systemd[1]: Listening on systemd-userdbd.socket. Jul 16 12:18:41.794779 systemd[1]: Mounting dev-hugepages.mount... Jul 16 12:18:41.794797 systemd[1]: Mounting dev-mqueue.mount... Jul 16 12:18:41.794812 systemd[1]: Mounting media.mount... Jul 16 12:18:41.794825 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 16 12:18:41.794840 systemd[1]: Mounting sys-kernel-debug.mount... Jul 16 12:18:41.794853 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 16 12:18:41.794867 systemd[1]: Mounting tmp.mount... Jul 16 12:18:41.794881 systemd[1]: Starting flatcar-tmpfiles.service... Jul 16 12:18:41.794895 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 16 12:18:41.794909 systemd[1]: Starting kmod-static-nodes.service... Jul 16 12:18:41.794928 systemd[1]: Starting modprobe@configfs.service... Jul 16 12:18:41.794942 systemd[1]: Starting modprobe@dm_mod.service... Jul 16 12:18:41.794955 systemd[1]: Starting modprobe@drm.service... Jul 16 12:18:41.794969 systemd[1]: Starting modprobe@efi_pstore.service... Jul 16 12:18:41.794983 systemd[1]: Starting modprobe@fuse.service... Jul 16 12:18:41.794997 systemd[1]: Starting modprobe@loop.service... Jul 16 12:18:41.795011 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 16 12:18:41.795026 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 16 12:18:41.795039 systemd[1]: Stopped systemd-fsck-root.service. Jul 16 12:18:41.795057 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 16 12:18:41.795072 systemd[1]: Stopped systemd-fsck-usr.service. Jul 16 12:18:41.795085 systemd[1]: Stopped systemd-journald.service. Jul 16 12:18:41.795099 systemd[1]: Starting systemd-journald.service... Jul 16 12:18:41.795113 systemd[1]: Starting systemd-modules-load.service... Jul 16 12:18:41.795127 systemd[1]: Starting systemd-network-generator.service... Jul 16 12:18:41.795141 systemd[1]: Starting systemd-remount-fs.service... Jul 16 12:18:41.795156 systemd[1]: Starting systemd-udev-trigger.service... Jul 16 12:18:41.795170 systemd[1]: verity-setup.service: Deactivated successfully. Jul 16 12:18:41.795188 systemd[1]: Stopped verity-setup.service. Jul 16 12:18:41.795202 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 16 12:18:41.795216 kernel: fuse: init (API version 7.34) Jul 16 12:18:41.795230 systemd[1]: Mounted dev-hugepages.mount. Jul 16 12:18:41.795243 systemd[1]: Mounted dev-mqueue.mount. Jul 16 12:18:41.795257 systemd[1]: Mounted media.mount. Jul 16 12:18:41.795271 systemd[1]: Mounted sys-kernel-debug.mount. Jul 16 12:18:41.795285 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 16 12:18:41.795298 systemd[1]: Mounted tmp.mount. Jul 16 12:18:41.795324 systemd[1]: Finished kmod-static-nodes.service. Jul 16 12:18:41.795339 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 16 12:18:41.795353 systemd[1]: Finished modprobe@configfs.service. Jul 16 12:18:41.795367 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 16 12:18:41.795381 systemd[1]: Finished modprobe@dm_mod.service. Jul 16 12:18:41.795400 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 16 12:18:41.798565 systemd[1]: Finished modprobe@drm.service. Jul 16 12:18:41.798584 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 16 12:18:41.798598 kernel: loop: module loaded Jul 16 12:18:41.798612 systemd[1]: Finished modprobe@efi_pstore.service. Jul 16 12:18:41.798627 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 16 12:18:41.798641 systemd[1]: Finished modprobe@fuse.service. Jul 16 12:18:41.798655 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 16 12:18:41.798671 systemd[1]: Finished modprobe@loop.service. Jul 16 12:18:41.798700 systemd-journald[980]: Journal started Jul 16 12:18:41.798759 systemd-journald[980]: Runtime Journal (/run/log/journal/7c520f7a233140d6ac0667ce2d89aa0a) is 4.7M, max 38.1M, 33.3M free. Jul 16 12:18:38.865000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 16 12:18:38.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 16 12:18:38.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 16 12:18:38.937000 audit: BPF prog-id=10 op=LOAD Jul 16 12:18:38.937000 audit: BPF prog-id=10 op=UNLOAD Jul 16 12:18:38.938000 audit: BPF prog-id=11 op=LOAD Jul 16 12:18:38.938000 audit: BPF prog-id=11 op=UNLOAD Jul 16 12:18:39.028000 audit[906]: AVC avc: denied { associate } for pid=906 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 16 12:18:39.028000 audit[906]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001178d4 a1=c00002ae40 a2=c000029080 a3=32 items=0 ppid=889 pid=906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:18:39.028000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 16 12:18:39.029000 audit[906]: AVC avc: denied { associate } for pid=906 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 16 12:18:39.029000 audit[906]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001179a9 a2=1ed a3=0 items=2 ppid=889 pid=906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:18:39.029000 audit: CWD cwd="/" Jul 16 12:18:39.029000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:39.029000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:39.029000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 16 12:18:41.612000 audit: BPF prog-id=12 op=LOAD Jul 16 12:18:41.612000 audit: BPF prog-id=3 op=UNLOAD Jul 16 12:18:41.612000 audit: BPF prog-id=13 op=LOAD Jul 16 12:18:41.612000 audit: BPF prog-id=14 op=LOAD Jul 16 12:18:41.612000 audit: BPF prog-id=4 op=UNLOAD Jul 16 12:18:41.612000 audit: BPF prog-id=5 op=UNLOAD Jul 16 12:18:41.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.616000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.619000 audit: BPF prog-id=12 op=UNLOAD Jul 16 12:18:41.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.619000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.729000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.731000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.732000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.733000 audit: BPF prog-id=15 op=LOAD Jul 16 12:18:41.733000 audit: BPF prog-id=16 op=LOAD Jul 16 12:18:41.733000 audit: BPF prog-id=17 op=LOAD Jul 16 12:18:41.733000 audit: BPF prog-id=13 op=UNLOAD Jul 16 12:18:41.734000 audit: BPF prog-id=14 op=UNLOAD Jul 16 12:18:41.755000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.774000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.778000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.782000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.782000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.785000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.785000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.789000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 16 12:18:41.789000 audit[980]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=4 a1=7fff70ffec60 a2=4000 a3=7fff70ffecfc items=0 ppid=1 pid=980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:18:41.789000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 16 12:18:41.790000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.790000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.793000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.793000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.798000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.799000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:39.025704 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-07-16T12:18:39Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 16 12:18:41.610189 systemd[1]: Queued start job for default target multi-user.target. Jul 16 12:18:39.026190 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-07-16T12:18:39Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 16 12:18:41.610209 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 16 12:18:39.026211 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-07-16T12:18:39Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 16 12:18:41.614212 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 16 12:18:41.802576 systemd[1]: Finished systemd-modules-load.service. Jul 16 12:18:41.802625 systemd[1]: Started systemd-journald.service. Jul 16 12:18:41.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:39.026261 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-07-16T12:18:39Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 16 12:18:39.026272 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-07-16T12:18:39Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 16 12:18:39.026309 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-07-16T12:18:39Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 16 12:18:41.802933 systemd[1]: Finished systemd-network-generator.service. Jul 16 12:18:39.026323 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-07-16T12:18:39Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 16 12:18:39.026639 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-07-16T12:18:39Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 16 12:18:41.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:39.026684 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-07-16T12:18:39Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 16 12:18:39.026698 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-07-16T12:18:39Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 16 12:18:39.027886 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-07-16T12:18:39Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 16 12:18:39.027924 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-07-16T12:18:39Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 16 12:18:41.803728 systemd[1]: Finished systemd-remount-fs.service. Jul 16 12:18:39.027945 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-07-16T12:18:39Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.100: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.100 Jul 16 12:18:39.027961 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-07-16T12:18:39Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 16 12:18:39.027980 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-07-16T12:18:39Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.100: no such file or directory" path=/var/lib/torcx/store/3510.3.100 Jul 16 12:18:41.803000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:39.027995 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-07-16T12:18:39Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 16 12:18:41.255848 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-07-16T12:18:41Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 16 12:18:41.256157 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-07-16T12:18:41Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 16 12:18:41.256278 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-07-16T12:18:41Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 16 12:18:41.256495 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-07-16T12:18:41Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 16 12:18:41.256551 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-07-16T12:18:41Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 16 12:18:41.256638 /usr/lib/systemd/system-generators/torcx-generator[906]: time="2025-07-16T12:18:41Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 16 12:18:41.806813 systemd[1]: Reached target network-pre.target. Jul 16 12:18:41.808376 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 16 12:18:41.810552 systemd[1]: Mounting sys-kernel-config.mount... Jul 16 12:18:41.815649 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 16 12:18:41.817319 systemd[1]: Starting systemd-hwdb-update.service... Jul 16 12:18:41.818894 systemd[1]: Starting systemd-journal-flush.service... Jul 16 12:18:41.819356 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 16 12:18:41.820545 systemd[1]: Starting systemd-random-seed.service... Jul 16 12:18:41.821160 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 16 12:18:41.823365 systemd[1]: Starting systemd-sysctl.service... Jul 16 12:18:41.827585 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 16 12:18:41.828167 systemd[1]: Mounted sys-kernel-config.mount. Jul 16 12:18:41.835724 systemd-journald[980]: Time spent on flushing to /var/log/journal/7c520f7a233140d6ac0667ce2d89aa0a is 68.983ms for 1301 entries. Jul 16 12:18:41.835724 systemd-journald[980]: System Journal (/var/log/journal/7c520f7a233140d6ac0667ce2d89aa0a) is 8.0M, max 584.8M, 576.8M free. Jul 16 12:18:41.923129 systemd-journald[980]: Received client request to flush runtime journal. Jul 16 12:18:41.840000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.847000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.869000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.887000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.840703 systemd[1]: Finished flatcar-tmpfiles.service. Jul 16 12:18:41.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.845129 systemd[1]: Starting systemd-sysusers.service... Jul 16 12:18:41.846918 systemd[1]: Finished systemd-random-seed.service. Jul 16 12:18:41.848694 systemd[1]: Reached target first-boot-complete.target. Jul 16 12:18:41.869810 systemd[1]: Finished systemd-sysctl.service. Jul 16 12:18:41.887588 systemd[1]: Finished systemd-sysusers.service. Jul 16 12:18:41.896673 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 16 12:18:41.924347 systemd[1]: Finished systemd-journal-flush.service. Jul 16 12:18:41.933000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.933595 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 16 12:18:41.941600 systemd[1]: Finished systemd-udev-trigger.service. Jul 16 12:18:41.943407 systemd[1]: Starting systemd-udev-settle.service... Jul 16 12:18:41.941000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:41.953126 udevadm[1018]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Jul 16 12:18:42.429183 systemd[1]: Finished systemd-hwdb-update.service. Jul 16 12:18:42.431000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:42.432000 audit: BPF prog-id=18 op=LOAD Jul 16 12:18:42.433000 audit: BPF prog-id=19 op=LOAD Jul 16 12:18:42.433000 audit: BPF prog-id=7 op=UNLOAD Jul 16 12:18:42.433000 audit: BPF prog-id=8 op=UNLOAD Jul 16 12:18:42.434670 systemd[1]: Starting systemd-udevd.service... Jul 16 12:18:42.463867 systemd-udevd[1019]: Using default interface naming scheme 'v252'. Jul 16 12:18:42.491000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:42.493000 audit: BPF prog-id=20 op=LOAD Jul 16 12:18:42.490715 systemd[1]: Started systemd-udevd.service. Jul 16 12:18:42.498867 systemd[1]: Starting systemd-networkd.service... Jul 16 12:18:42.507000 audit: BPF prog-id=21 op=LOAD Jul 16 12:18:42.507000 audit: BPF prog-id=22 op=LOAD Jul 16 12:18:42.507000 audit: BPF prog-id=23 op=LOAD Jul 16 12:18:42.508940 systemd[1]: Starting systemd-userdbd.service... Jul 16 12:18:42.540000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:42.540627 systemd[1]: Started systemd-userdbd.service. Jul 16 12:18:42.568649 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 16 12:18:42.627440 systemd-networkd[1034]: lo: Link UP Jul 16 12:18:42.627854 systemd-networkd[1034]: lo: Gained carrier Jul 16 12:18:42.628586 systemd-networkd[1034]: Enumeration completed Jul 16 12:18:42.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:42.628816 systemd[1]: Started systemd-networkd.service. Jul 16 12:18:42.629640 systemd-networkd[1034]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 16 12:18:42.634745 systemd-networkd[1034]: eth0: Link UP Jul 16 12:18:42.634867 systemd-networkd[1034]: eth0: Gained carrier Jul 16 12:18:42.640509 kernel: mousedev: PS/2 mouse device common for all mice Jul 16 12:18:42.645688 systemd-networkd[1034]: eth0: DHCPv4 address 10.244.102.2/30, gateway 10.244.102.1 acquired from 10.244.102.1 Jul 16 12:18:42.657497 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 Jul 16 12:18:42.662540 kernel: ACPI: button: Power Button [PWRF] Jul 16 12:18:42.681191 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 16 12:18:42.688000 audit[1028]: AVC avc: denied { confidentiality } for pid=1028 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 16 12:18:42.688000 audit[1028]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=5640ac911ca0 a1=338ac a2=7fdb87d6bbc5 a3=5 items=110 ppid=1019 pid=1028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:18:42.688000 audit: CWD cwd="/" Jul 16 12:18:42.688000 audit: PATH item=0 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=1 name=(null) inode=13203 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=2 name=(null) inode=13203 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=3 name=(null) inode=13204 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=4 name=(null) inode=13203 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=5 name=(null) inode=13205 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=6 name=(null) inode=13203 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=7 name=(null) inode=13206 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=8 name=(null) inode=13206 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=9 name=(null) inode=13207 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=10 name=(null) inode=13206 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=11 name=(null) inode=13208 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=12 name=(null) inode=13206 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=13 name=(null) inode=13209 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=14 name=(null) inode=13206 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=15 name=(null) inode=13210 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=16 name=(null) inode=13206 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=17 name=(null) inode=13211 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=18 name=(null) inode=13203 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=19 name=(null) inode=13212 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=20 name=(null) inode=13212 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=21 name=(null) inode=13213 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=22 name=(null) inode=13212 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=23 name=(null) inode=13214 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=24 name=(null) inode=13212 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=25 name=(null) inode=13215 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=26 name=(null) inode=13212 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=27 name=(null) inode=13216 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=28 name=(null) inode=13212 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=29 name=(null) inode=13217 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=30 name=(null) inode=13203 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=31 name=(null) inode=13218 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=32 name=(null) inode=13218 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=33 name=(null) inode=13219 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=34 name=(null) inode=13218 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=35 name=(null) inode=13220 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=36 name=(null) inode=13218 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=37 name=(null) inode=13221 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=38 name=(null) inode=13218 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=39 name=(null) inode=13222 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=40 name=(null) inode=13218 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=41 name=(null) inode=13223 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=42 name=(null) inode=13203 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=43 name=(null) inode=13224 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=44 name=(null) inode=13224 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=45 name=(null) inode=13225 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=46 name=(null) inode=13224 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=47 name=(null) inode=13226 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=48 name=(null) inode=13224 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=49 name=(null) inode=13227 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=50 name=(null) inode=13224 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=51 name=(null) inode=13228 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=52 name=(null) inode=13224 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=53 name=(null) inode=13229 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=54 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=55 name=(null) inode=13230 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=56 name=(null) inode=13230 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=57 name=(null) inode=13231 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=58 name=(null) inode=13230 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=59 name=(null) inode=13232 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=60 name=(null) inode=13230 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=61 name=(null) inode=13233 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=62 name=(null) inode=13233 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=63 name=(null) inode=13234 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=64 name=(null) inode=13233 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=65 name=(null) inode=13235 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=66 name=(null) inode=13233 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=67 name=(null) inode=13236 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=68 name=(null) inode=13233 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=69 name=(null) inode=13237 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=70 name=(null) inode=13233 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=71 name=(null) inode=13238 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=72 name=(null) inode=13230 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=73 name=(null) inode=13239 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=74 name=(null) inode=13239 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=75 name=(null) inode=13240 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=76 name=(null) inode=13239 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=77 name=(null) inode=13241 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=78 name=(null) inode=13239 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=79 name=(null) inode=13242 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=80 name=(null) inode=13239 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=81 name=(null) inode=13243 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=82 name=(null) inode=13239 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=83 name=(null) inode=13244 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=84 name=(null) inode=13230 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=85 name=(null) inode=13245 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=86 name=(null) inode=13245 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=87 name=(null) inode=13246 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=88 name=(null) inode=13245 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=89 name=(null) inode=13247 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=90 name=(null) inode=13245 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=91 name=(null) inode=13248 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=92 name=(null) inode=13245 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=93 name=(null) inode=13249 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=94 name=(null) inode=13245 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=95 name=(null) inode=13250 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=96 name=(null) inode=13230 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=97 name=(null) inode=13251 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=98 name=(null) inode=13251 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=99 name=(null) inode=13252 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=100 name=(null) inode=13251 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=101 name=(null) inode=13253 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=102 name=(null) inode=13251 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=103 name=(null) inode=13254 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=104 name=(null) inode=13251 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=105 name=(null) inode=13255 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=106 name=(null) inode=13251 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=107 name=(null) inode=13256 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PATH item=109 name=(null) inode=13257 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:18:42.688000 audit: PROCTITLE proctitle="(udev-worker)" Jul 16 12:18:42.738525 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input4 Jul 16 12:18:42.751491 kernel: i801_smbus 0000:00:1f.3: SMBus using PCI interrupt Jul 16 12:18:42.754243 kernel: i2c i2c-0: 1/1 memory slots populated (from DMI) Jul 16 12:18:42.754424 kernel: i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD Jul 16 12:18:42.910677 systemd[1]: Finished systemd-udev-settle.service. Jul 16 12:18:42.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:42.915778 systemd[1]: Starting lvm2-activation-early.service... Jul 16 12:18:42.950106 lvm[1048]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 16 12:18:42.981980 systemd[1]: Finished lvm2-activation-early.service. Jul 16 12:18:42.982758 systemd[1]: Reached target cryptsetup.target. Jul 16 12:18:42.982000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:42.984984 systemd[1]: Starting lvm2-activation.service... Jul 16 12:18:42.995118 lvm[1049]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 16 12:18:43.013761 systemd[1]: Finished lvm2-activation.service. Jul 16 12:18:43.013000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.014368 systemd[1]: Reached target local-fs-pre.target. Jul 16 12:18:43.014805 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 16 12:18:43.014838 systemd[1]: Reached target local-fs.target. Jul 16 12:18:43.015228 systemd[1]: Reached target machines.target. Jul 16 12:18:43.017002 systemd[1]: Starting ldconfig.service... Jul 16 12:18:43.018083 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 16 12:18:43.018151 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 16 12:18:43.019504 systemd[1]: Starting systemd-boot-update.service... Jul 16 12:18:43.021618 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 16 12:18:43.024130 systemd[1]: Starting systemd-machine-id-commit.service... Jul 16 12:18:43.027888 systemd[1]: Starting systemd-sysext.service... Jul 16 12:18:43.042258 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1051 (bootctl) Jul 16 12:18:43.044063 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 16 12:18:43.049412 systemd[1]: Unmounting usr-share-oem.mount... Jul 16 12:18:43.052158 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 16 12:18:43.052000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.058692 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 16 12:18:43.058889 systemd[1]: Unmounted usr-share-oem.mount. Jul 16 12:18:43.072504 kernel: loop0: detected capacity change from 0 to 229808 Jul 16 12:18:43.090323 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 16 12:18:43.092016 systemd[1]: Finished systemd-machine-id-commit.service. Jul 16 12:18:43.092000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.100503 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 16 12:18:43.119552 kernel: loop1: detected capacity change from 0 to 229808 Jul 16 12:18:43.134897 (sd-sysext)[1063]: Using extensions 'kubernetes'. Jul 16 12:18:43.135333 (sd-sysext)[1063]: Merged extensions into '/usr'. Jul 16 12:18:43.158333 systemd-fsck[1060]: fsck.fat 4.2 (2021-01-31) Jul 16 12:18:43.158333 systemd-fsck[1060]: /dev/vda1: 790 files, 120725/258078 clusters Jul 16 12:18:43.160465 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 16 12:18:43.163384 systemd[1]: Mounting usr-share-oem.mount... Jul 16 12:18:43.164172 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 16 12:18:43.165823 systemd[1]: Starting modprobe@dm_mod.service... Jul 16 12:18:43.167909 systemd[1]: Starting modprobe@efi_pstore.service... Jul 16 12:18:43.171441 systemd[1]: Starting modprobe@loop.service... Jul 16 12:18:43.172877 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 16 12:18:43.173048 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 16 12:18:43.173163 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 16 12:18:43.177000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.177800 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 16 12:18:43.178553 systemd[1]: Mounted usr-share-oem.mount. Jul 16 12:18:43.179275 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 16 12:18:43.179404 systemd[1]: Finished modprobe@dm_mod.service. Jul 16 12:18:43.179000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.179000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.180149 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 16 12:18:43.180273 systemd[1]: Finished modprobe@efi_pstore.service. Jul 16 12:18:43.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.180000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.181532 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 16 12:18:43.181657 systemd[1]: Finished modprobe@loop.service. Jul 16 12:18:43.181000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.181000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.185323 systemd[1]: Finished systemd-sysext.service. Jul 16 12:18:43.186000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.190877 systemd[1]: Mounting boot.mount... Jul 16 12:18:43.195639 systemd[1]: Starting ensure-sysext.service... Jul 16 12:18:43.196288 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 16 12:18:43.196354 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 16 12:18:43.197446 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 16 12:18:43.204747 systemd[1]: Reloading. Jul 16 12:18:43.248373 systemd-tmpfiles[1071]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 16 12:18:43.251387 systemd-tmpfiles[1071]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 16 12:18:43.253874 systemd-tmpfiles[1071]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 16 12:18:43.340898 /usr/lib/systemd/system-generators/torcx-generator[1091]: time="2025-07-16T12:18:43Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 16 12:18:43.341546 /usr/lib/systemd/system-generators/torcx-generator[1091]: time="2025-07-16T12:18:43Z" level=info msg="torcx already run" Jul 16 12:18:43.367936 ldconfig[1050]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 16 12:18:43.444928 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 16 12:18:43.444954 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 16 12:18:43.464557 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 16 12:18:43.528377 kernel: kauditd_printk_skb: 235 callbacks suppressed Jul 16 12:18:43.528746 kernel: audit: type=1334 audit(1752668323.520:161): prog-id=24 op=LOAD Jul 16 12:18:43.520000 audit: BPF prog-id=24 op=LOAD Jul 16 12:18:43.520000 audit: BPF prog-id=20 op=UNLOAD Jul 16 12:18:43.534064 kernel: audit: type=1334 audit(1752668323.520:162): prog-id=20 op=UNLOAD Jul 16 12:18:43.534112 kernel: audit: type=1334 audit(1752668323.527:163): prog-id=25 op=LOAD Jul 16 12:18:43.527000 audit: BPF prog-id=25 op=LOAD Jul 16 12:18:43.537533 kernel: audit: type=1334 audit(1752668323.527:164): prog-id=15 op=UNLOAD Jul 16 12:18:43.527000 audit: BPF prog-id=15 op=UNLOAD Jul 16 12:18:43.536446 systemd[1]: Finished ldconfig.service. Jul 16 12:18:43.528000 audit: BPF prog-id=26 op=LOAD Jul 16 12:18:43.538463 systemd[1]: Mounted boot.mount. Jul 16 12:18:43.528000 audit: BPF prog-id=27 op=LOAD Jul 16 12:18:43.528000 audit: BPF prog-id=16 op=UNLOAD Jul 16 12:18:43.528000 audit: BPF prog-id=17 op=UNLOAD Jul 16 12:18:43.539715 kernel: audit: type=1334 audit(1752668323.528:165): prog-id=26 op=LOAD Jul 16 12:18:43.539796 kernel: audit: type=1334 audit(1752668323.528:166): prog-id=27 op=LOAD Jul 16 12:18:43.539856 kernel: audit: type=1334 audit(1752668323.528:167): prog-id=16 op=UNLOAD Jul 16 12:18:43.539926 kernel: audit: type=1334 audit(1752668323.528:168): prog-id=17 op=UNLOAD Jul 16 12:18:43.539981 kernel: audit: type=1334 audit(1752668323.531:169): prog-id=28 op=LOAD Jul 16 12:18:43.540039 kernel: audit: type=1334 audit(1752668323.531:170): prog-id=29 op=LOAD Jul 16 12:18:43.531000 audit: BPF prog-id=28 op=LOAD Jul 16 12:18:43.531000 audit: BPF prog-id=29 op=LOAD Jul 16 12:18:43.531000 audit: BPF prog-id=18 op=UNLOAD Jul 16 12:18:43.531000 audit: BPF prog-id=19 op=UNLOAD Jul 16 12:18:43.533000 audit: BPF prog-id=30 op=LOAD Jul 16 12:18:43.533000 audit: BPF prog-id=21 op=UNLOAD Jul 16 12:18:43.533000 audit: BPF prog-id=31 op=LOAD Jul 16 12:18:43.533000 audit: BPF prog-id=32 op=LOAD Jul 16 12:18:43.533000 audit: BPF prog-id=22 op=UNLOAD Jul 16 12:18:43.533000 audit: BPF prog-id=23 op=UNLOAD Jul 16 12:18:43.536000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.559000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.559789 systemd[1]: Finished systemd-boot-update.service. Jul 16 12:18:43.570208 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 16 12:18:43.571796 systemd[1]: Starting modprobe@dm_mod.service... Jul 16 12:18:43.574589 systemd[1]: Starting modprobe@efi_pstore.service... Jul 16 12:18:43.578561 systemd[1]: Starting modprobe@loop.service... Jul 16 12:18:43.579450 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 16 12:18:43.579624 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 16 12:18:43.581099 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 16 12:18:43.581000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.581000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.581708 systemd[1]: Finished modprobe@efi_pstore.service. Jul 16 12:18:43.582636 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 16 12:18:43.583000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.583000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.583285 systemd[1]: Finished modprobe@loop.service. Jul 16 12:18:43.584123 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 16 12:18:43.584248 systemd[1]: Finished modprobe@dm_mod.service. Jul 16 12:18:43.584000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.584000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.586443 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 16 12:18:43.586865 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 16 12:18:43.588624 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 16 12:18:43.590218 systemd[1]: Starting modprobe@dm_mod.service... Jul 16 12:18:43.592267 systemd[1]: Starting modprobe@efi_pstore.service... Jul 16 12:18:43.594292 systemd[1]: Starting modprobe@loop.service... Jul 16 12:18:43.595528 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 16 12:18:43.595713 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 16 12:18:43.596787 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 16 12:18:43.597039 systemd[1]: Finished modprobe@dm_mod.service. Jul 16 12:18:43.597000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.597000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.597896 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 16 12:18:43.598226 systemd[1]: Finished modprobe@efi_pstore.service. Jul 16 12:18:43.598000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.598000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.599164 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 16 12:18:43.599509 systemd[1]: Finished modprobe@loop.service. Jul 16 12:18:43.599000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.599000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.602901 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 16 12:18:43.604416 systemd[1]: Starting modprobe@dm_mod.service... Jul 16 12:18:43.606333 systemd[1]: Starting modprobe@drm.service... Jul 16 12:18:43.608241 systemd[1]: Starting modprobe@efi_pstore.service... Jul 16 12:18:43.610683 systemd[1]: Starting modprobe@loop.service... Jul 16 12:18:43.611342 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 16 12:18:43.611481 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 16 12:18:43.613144 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 16 12:18:43.615074 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 16 12:18:43.615323 systemd[1]: Finished modprobe@dm_mod.service. Jul 16 12:18:43.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.615000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.616212 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 16 12:18:43.616545 systemd[1]: Finished modprobe@drm.service. Jul 16 12:18:43.616000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.616000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.617378 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 16 12:18:43.617693 systemd[1]: Finished modprobe@efi_pstore.service. Jul 16 12:18:43.617000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.617000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.618694 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 16 12:18:43.618824 systemd[1]: Finished modprobe@loop.service. Jul 16 12:18:43.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.618000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.620212 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 16 12:18:43.620313 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 16 12:18:43.621621 systemd[1]: Finished ensure-sysext.service. Jul 16 12:18:43.630000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.655810 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 16 12:18:43.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.657717 systemd[1]: Starting audit-rules.service... Jul 16 12:18:43.662000 audit: BPF prog-id=33 op=LOAD Jul 16 12:18:43.668000 audit: BPF prog-id=34 op=LOAD Jul 16 12:18:43.659482 systemd[1]: Starting clean-ca-certificates.service... Jul 16 12:18:43.674000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.661329 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 16 12:18:43.666490 systemd[1]: Starting systemd-resolved.service... Jul 16 12:18:43.669950 systemd[1]: Starting systemd-timesyncd.service... Jul 16 12:18:43.671963 systemd[1]: Starting systemd-update-utmp.service... Jul 16 12:18:43.673043 systemd[1]: Finished clean-ca-certificates.service. Jul 16 12:18:43.675504 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 16 12:18:43.684000 audit[1156]: SYSTEM_BOOT pid=1156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.687579 systemd[1]: Finished systemd-update-utmp.service. Jul 16 12:18:43.687000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.708640 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 16 12:18:43.710571 systemd[1]: Starting systemd-update-done.service... Jul 16 12:18:43.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.720392 systemd[1]: Finished systemd-update-done.service. Jul 16 12:18:43.720000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:18:43.756709 systemd-resolved[1153]: Positive Trust Anchors: Jul 16 12:18:43.756722 systemd-resolved[1153]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 16 12:18:43.756759 systemd-resolved[1153]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 16 12:18:43.760000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 16 12:18:43.760000 audit[1171]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffeccbaca20 a2=420 a3=0 items=0 ppid=1150 pid=1171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:18:43.760000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 16 12:18:43.761782 augenrules[1171]: No rules Jul 16 12:18:43.762180 systemd[1]: Finished audit-rules.service. Jul 16 12:18:43.764450 systemd-resolved[1153]: Using system hostname 'srv-frvg8.gb1.brightbox.com'. Jul 16 12:18:43.766310 systemd[1]: Started systemd-resolved.service. Jul 16 12:18:43.766845 systemd[1]: Reached target network.target. Jul 16 12:18:43.767194 systemd[1]: Reached target nss-lookup.target. Jul 16 12:18:43.770703 systemd[1]: Started systemd-timesyncd.service. Jul 16 12:18:43.771309 systemd[1]: Reached target sysinit.target. Jul 16 12:18:43.771817 systemd[1]: Started motdgen.path. Jul 16 12:18:43.772239 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 16 12:18:43.772722 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 16 12:18:43.773130 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 16 12:18:43.773175 systemd[1]: Reached target paths.target. Jul 16 12:18:43.773553 systemd[1]: Reached target time-set.target. Jul 16 12:18:43.774122 systemd[1]: Started logrotate.timer. Jul 16 12:18:43.774675 systemd[1]: Started mdadm.timer. Jul 16 12:18:43.775054 systemd[1]: Reached target timers.target. Jul 16 12:18:43.775817 systemd[1]: Listening on dbus.socket. Jul 16 12:18:43.777624 systemd[1]: Starting docker.socket... Jul 16 12:18:43.781490 systemd[1]: Listening on sshd.socket. Jul 16 12:18:43.782134 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 16 12:18:43.782659 systemd[1]: Listening on docker.socket. Jul 16 12:18:43.783075 systemd[1]: Reached target sockets.target. Jul 16 12:18:43.783426 systemd[1]: Reached target basic.target. Jul 16 12:18:43.783808 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 16 12:18:43.783840 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 16 12:18:43.785004 systemd[1]: Starting containerd.service... Jul 16 12:18:43.786741 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Jul 16 12:18:43.791344 systemd[1]: Starting dbus.service... Jul 16 12:18:43.795332 systemd[1]: Starting enable-oem-cloudinit.service... Jul 16 12:18:43.797877 systemd[1]: Starting extend-filesystems.service... Jul 16 12:18:43.798601 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 16 12:18:43.800955 systemd[1]: Starting motdgen.service... Jul 16 12:18:43.804372 systemd[1]: Starting prepare-helm.service... Jul 16 12:18:43.832932 jq[1184]: false Jul 16 12:18:43.806968 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 16 12:18:43.811037 systemd[1]: Starting sshd-keygen.service... Jul 16 12:18:43.814658 systemd[1]: Starting systemd-logind.service... Jul 16 12:18:43.815081 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 16 12:18:43.815192 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 16 12:18:43.816757 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 16 12:18:43.817518 systemd[1]: Starting update-engine.service... Jul 16 12:18:43.819615 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 16 12:18:43.836138 jq[1194]: true Jul 16 12:18:43.843812 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 16 12:18:43.844044 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 16 12:18:43.849009 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 16 12:18:43.849207 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 16 12:18:43.855068 tar[1198]: linux-amd64/LICENSE Jul 16 12:18:43.855337 tar[1198]: linux-amd64/helm Jul 16 12:18:43.872810 jq[1207]: true Jul 16 12:18:43.876094 extend-filesystems[1185]: Found loop1 Jul 16 12:18:43.876094 extend-filesystems[1185]: Found vda Jul 16 12:18:43.876094 extend-filesystems[1185]: Found vda1 Jul 16 12:18:43.876094 extend-filesystems[1185]: Found vda2 Jul 16 12:18:43.876094 extend-filesystems[1185]: Found vda3 Jul 16 12:18:43.876094 extend-filesystems[1185]: Found usr Jul 16 12:18:43.876094 extend-filesystems[1185]: Found vda4 Jul 16 12:18:43.876094 extend-filesystems[1185]: Found vda6 Jul 16 12:18:43.876094 extend-filesystems[1185]: Found vda7 Jul 16 12:18:43.876094 extend-filesystems[1185]: Found vda9 Jul 16 12:18:43.876094 extend-filesystems[1185]: Checking size of /dev/vda9 Jul 16 12:18:43.890961 dbus-daemon[1183]: [system] SELinux support is enabled Jul 16 12:18:43.895342 systemd[1]: Started dbus.service. Jul 16 12:18:43.898714 systemd[1]: motdgen.service: Deactivated successfully. Jul 16 12:18:43.898900 systemd[1]: Finished motdgen.service. Jul 16 12:18:43.899478 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 16 12:18:43.899512 systemd[1]: Reached target system-config.target. Jul 16 12:18:43.899912 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 16 12:18:43.899938 systemd[1]: Reached target user-config.target. Jul 16 12:18:43.902978 dbus-daemon[1183]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.2' (uid=244 pid=1034 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Jul 16 12:18:43.907077 systemd[1]: Starting systemd-hostnamed.service... Jul 16 12:18:43.936250 extend-filesystems[1185]: Resized partition /dev/vda9 Jul 16 12:18:43.952402 update_engine[1192]: I0716 12:18:43.951973 1192 main.cc:92] Flatcar Update Engine starting Jul 16 12:18:43.953093 extend-filesystems[1234]: resize2fs 1.46.5 (30-Dec-2021) Jul 16 12:18:43.958321 systemd[1]: Started update-engine.service. Jul 16 12:18:43.958635 kernel: EXT4-fs (vda9): resizing filesystem from 1617920 to 15121403 blocks Jul 16 12:18:43.960745 systemd[1]: Started locksmithd.service. Jul 16 12:18:43.968578 update_engine[1192]: I0716 12:18:43.968546 1192 update_check_scheduler.cc:74] Next update check in 2m47s Jul 16 12:18:44.004087 systemd[1]: Created slice system-sshd.slice. Jul 16 12:18:44.008354 env[1205]: time="2025-07-16T12:18:44.007381915Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 16 12:18:44.012799 bash[1235]: Updated "/home/core/.ssh/authorized_keys" Jul 16 12:18:44.019275 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 16 12:18:44.046806 systemd-logind[1191]: Watching system buttons on /dev/input/event2 (Power Button) Jul 16 12:18:44.047134 systemd-logind[1191]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 16 12:18:44.050509 kernel: EXT4-fs (vda9): resized filesystem to 15121403 Jul 16 12:18:44.055412 dbus-daemon[1183]: [system] Successfully activated service 'org.freedesktop.hostname1' Jul 16 12:18:44.055578 systemd[1]: Started systemd-hostnamed.service. Jul 16 12:18:44.055950 dbus-daemon[1183]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.5' (uid=0 pid=1222 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Jul 16 12:18:44.056997 systemd-logind[1191]: New seat seat0. Jul 16 12:18:44.058424 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 16 12:18:44.059799 systemd[1]: Starting polkit.service... Jul 16 12:18:44.061366 extend-filesystems[1234]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 16 12:18:44.061366 extend-filesystems[1234]: old_desc_blocks = 1, new_desc_blocks = 8 Jul 16 12:18:44.061366 extend-filesystems[1234]: The filesystem on /dev/vda9 is now 15121403 (4k) blocks long. Jul 16 12:18:44.068050 extend-filesystems[1185]: Resized filesystem in /dev/vda9 Jul 16 12:18:44.062801 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 16 12:18:44.063228 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 16 12:18:44.063395 systemd[1]: Finished extend-filesystems.service. Jul 16 12:18:44.069955 systemd[1]: Started systemd-logind.service. Jul 16 12:18:44.087746 polkitd[1242]: Started polkitd version 121 Jul 16 12:18:44.098956 polkitd[1242]: Loading rules from directory /etc/polkit-1/rules.d Jul 16 12:18:44.099036 polkitd[1242]: Loading rules from directory /usr/share/polkit-1/rules.d Jul 16 12:18:44.100057 polkitd[1242]: Finished loading, compiling and executing 2 rules Jul 16 12:18:44.100466 dbus-daemon[1183]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Jul 16 12:18:44.100641 systemd[1]: Started polkit.service. Jul 16 12:18:44.101509 polkitd[1242]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Jul 16 12:18:44.108591 env[1205]: time="2025-07-16T12:18:44.108554309Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 16 12:18:44.109436 systemd-hostnamed[1222]: Hostname set to (static) Jul 16 12:18:44.109862 env[1205]: time="2025-07-16T12:18:44.109839899Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 16 12:18:44.117759 env[1205]: time="2025-07-16T12:18:44.117721641Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.188-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 16 12:18:44.117864 env[1205]: time="2025-07-16T12:18:44.117847137Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 16 12:18:44.118195 env[1205]: time="2025-07-16T12:18:44.118172346Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 16 12:18:44.118278 env[1205]: time="2025-07-16T12:18:44.118263394Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 16 12:18:44.118342 env[1205]: time="2025-07-16T12:18:44.118328380Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 16 12:18:44.118494 env[1205]: time="2025-07-16T12:18:44.118465651Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 16 12:18:44.118633 env[1205]: time="2025-07-16T12:18:44.118618640Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 16 12:18:44.118980 env[1205]: time="2025-07-16T12:18:44.118958688Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 16 12:18:44.119247 env[1205]: time="2025-07-16T12:18:44.119225275Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 16 12:18:44.119329 env[1205]: time="2025-07-16T12:18:44.119314212Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 16 12:18:44.119433 env[1205]: time="2025-07-16T12:18:44.119418704Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 16 12:18:44.119509 env[1205]: time="2025-07-16T12:18:44.119496265Z" level=info msg="metadata content store policy set" policy=shared Jul 16 12:18:44.123224 env[1205]: time="2025-07-16T12:18:44.121294638Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 16 12:18:44.123224 env[1205]: time="2025-07-16T12:18:44.121321589Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 16 12:18:44.123224 env[1205]: time="2025-07-16T12:18:44.121335280Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 16 12:18:44.123224 env[1205]: time="2025-07-16T12:18:44.121387204Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 16 12:18:44.123224 env[1205]: time="2025-07-16T12:18:44.121403118Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 16 12:18:44.123224 env[1205]: time="2025-07-16T12:18:44.121416629Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 16 12:18:44.123224 env[1205]: time="2025-07-16T12:18:44.121428972Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 16 12:18:44.123224 env[1205]: time="2025-07-16T12:18:44.121500621Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 16 12:18:44.123224 env[1205]: time="2025-07-16T12:18:44.121531295Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 16 12:18:44.123224 env[1205]: time="2025-07-16T12:18:44.121548966Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 16 12:18:44.123224 env[1205]: time="2025-07-16T12:18:44.121561719Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 16 12:18:44.123224 env[1205]: time="2025-07-16T12:18:44.121575712Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 16 12:18:44.123224 env[1205]: time="2025-07-16T12:18:44.121672628Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 16 12:18:44.123224 env[1205]: time="2025-07-16T12:18:44.121761215Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 16 12:18:44.123626 env[1205]: time="2025-07-16T12:18:44.122058023Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 16 12:18:44.123626 env[1205]: time="2025-07-16T12:18:44.122092351Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 16 12:18:44.123626 env[1205]: time="2025-07-16T12:18:44.122107964Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 16 12:18:44.123626 env[1205]: time="2025-07-16T12:18:44.122176434Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 16 12:18:44.123626 env[1205]: time="2025-07-16T12:18:44.122189949Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 16 12:18:44.123626 env[1205]: time="2025-07-16T12:18:44.122207362Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 16 12:18:44.123626 env[1205]: time="2025-07-16T12:18:44.122219663Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 16 12:18:44.123626 env[1205]: time="2025-07-16T12:18:44.122292457Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 16 12:18:44.123626 env[1205]: time="2025-07-16T12:18:44.122305556Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 16 12:18:44.123626 env[1205]: time="2025-07-16T12:18:44.122318395Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 16 12:18:44.123626 env[1205]: time="2025-07-16T12:18:44.122330807Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 16 12:18:44.123626 env[1205]: time="2025-07-16T12:18:44.122345963Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 16 12:18:44.123626 env[1205]: time="2025-07-16T12:18:44.122498828Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 16 12:18:44.123626 env[1205]: time="2025-07-16T12:18:44.122514220Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 16 12:18:44.123626 env[1205]: time="2025-07-16T12:18:44.122527050Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 16 12:18:44.124002 env[1205]: time="2025-07-16T12:18:44.122540122Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 16 12:18:44.124002 env[1205]: time="2025-07-16T12:18:44.122554360Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 16 12:18:44.124002 env[1205]: time="2025-07-16T12:18:44.122565533Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 16 12:18:44.124002 env[1205]: time="2025-07-16T12:18:44.122591643Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 16 12:18:44.124002 env[1205]: time="2025-07-16T12:18:44.122643074Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 16 12:18:44.124141 env[1205]: time="2025-07-16T12:18:44.122841435Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 16 12:18:44.124141 env[1205]: time="2025-07-16T12:18:44.122898139Z" level=info msg="Connect containerd service" Jul 16 12:18:44.124141 env[1205]: time="2025-07-16T12:18:44.122938504Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 16 12:18:44.127706 env[1205]: time="2025-07-16T12:18:44.124598713Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 16 12:18:44.127706 env[1205]: time="2025-07-16T12:18:44.124975731Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 16 12:18:44.127706 env[1205]: time="2025-07-16T12:18:44.125015310Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 16 12:18:44.127706 env[1205]: time="2025-07-16T12:18:44.125070035Z" level=info msg="containerd successfully booted in 0.143031s" Jul 16 12:18:44.125165 systemd[1]: Started containerd.service. Jul 16 12:18:44.128035 env[1205]: time="2025-07-16T12:18:44.128003470Z" level=info msg="Start subscribing containerd event" Jul 16 12:18:44.128149 env[1205]: time="2025-07-16T12:18:44.128125210Z" level=info msg="Start recovering state" Jul 16 12:18:44.128286 env[1205]: time="2025-07-16T12:18:44.128272129Z" level=info msg="Start event monitor" Jul 16 12:18:44.128374 env[1205]: time="2025-07-16T12:18:44.128362420Z" level=info msg="Start snapshots syncer" Jul 16 12:18:44.128434 env[1205]: time="2025-07-16T12:18:44.128423130Z" level=info msg="Start cni network conf syncer for default" Jul 16 12:18:44.128503 env[1205]: time="2025-07-16T12:18:44.128491802Z" level=info msg="Start streaming server" Jul 16 12:18:44.266899 systemd-networkd[1034]: eth0: Gained IPv6LL Jul 16 12:18:44.269531 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 16 12:18:44.270281 systemd[1]: Reached target network-online.target. Jul 16 12:18:44.272563 systemd[1]: Starting kubelet.service... Jul 16 12:18:44.613870 tar[1198]: linux-amd64/README.md Jul 16 12:18:44.619109 systemd[1]: Finished prepare-helm.service. Jul 16 12:18:45.396153 systemd-timesyncd[1154]: Contacted time server 213.5.132.231:123 (0.flatcar.pool.ntp.org). Jul 16 12:18:45.396181 systemd-resolved[1153]: Clock change detected. Flushing caches. Jul 16 12:18:45.396358 systemd-timesyncd[1154]: Initial clock synchronization to Wed 2025-07-16 12:18:45.395599 UTC. Jul 16 12:18:45.627992 locksmithd[1236]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 16 12:18:45.924991 sshd_keygen[1208]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 16 12:18:45.950914 systemd[1]: Finished sshd-keygen.service. Jul 16 12:18:45.953143 systemd[1]: Starting issuegen.service... Jul 16 12:18:45.954869 systemd[1]: Started sshd@0-10.244.102.2:22-147.75.109.163:37140.service. Jul 16 12:18:45.959339 systemd[1]: issuegen.service: Deactivated successfully. Jul 16 12:18:45.959539 systemd[1]: Finished issuegen.service. Jul 16 12:18:45.961725 systemd[1]: Starting systemd-user-sessions.service... Jul 16 12:18:45.971212 systemd[1]: Finished systemd-user-sessions.service. Jul 16 12:18:45.973349 systemd[1]: Started getty@tty1.service. Jul 16 12:18:45.976049 systemd[1]: Started serial-getty@ttyS0.service. Jul 16 12:18:45.976685 systemd[1]: Reached target getty.target. Jul 16 12:18:46.215421 systemd[1]: Started kubelet.service. Jul 16 12:18:46.543214 systemd-networkd[1034]: eth0: Ignoring DHCPv6 address 2a02:1348:17d:1980:24:19ff:fef4:6602/128 (valid for 59min 59s, preferred for 59min 59s) which conflicts with 2a02:1348:17d:1980:24:19ff:fef4:6602/64 assigned by NDisc. Jul 16 12:18:46.543229 systemd-networkd[1034]: eth0: Hint: use IPv6Token= setting to change the address generated by NDisc or set UseAutonomousPrefix=no. Jul 16 12:18:46.875830 sshd[1267]: Accepted publickey for core from 147.75.109.163 port 37140 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:18:46.877852 sshd[1267]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:18:46.892748 systemd[1]: Created slice user-500.slice. Jul 16 12:18:46.895898 systemd[1]: Starting user-runtime-dir@500.service... Jul 16 12:18:46.900447 systemd-logind[1191]: New session 1 of user core. Jul 16 12:18:46.910457 systemd[1]: Finished user-runtime-dir@500.service. Jul 16 12:18:46.913560 systemd[1]: Starting user@500.service... Jul 16 12:18:46.917849 (systemd)[1284]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:18:46.999922 systemd[1284]: Queued start job for default target default.target. Jul 16 12:18:47.000473 systemd[1284]: Reached target paths.target. Jul 16 12:18:47.000496 systemd[1284]: Reached target sockets.target. Jul 16 12:18:47.000511 systemd[1284]: Reached target timers.target. Jul 16 12:18:47.000524 systemd[1284]: Reached target basic.target. Jul 16 12:18:47.000564 systemd[1284]: Reached target default.target. Jul 16 12:18:47.000594 systemd[1284]: Startup finished in 67ms. Jul 16 12:18:47.000655 systemd[1]: Started user@500.service. Jul 16 12:18:47.002421 systemd[1]: Started session-1.scope. Jul 16 12:18:47.019000 kubelet[1276]: E0716 12:18:47.018928 1276 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 16 12:18:47.023599 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 16 12:18:47.023957 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 16 12:18:47.024583 systemd[1]: kubelet.service: Consumed 1.362s CPU time. Jul 16 12:18:47.636858 systemd[1]: Started sshd@1-10.244.102.2:22-147.75.109.163:37142.service. Jul 16 12:18:48.531926 sshd[1293]: Accepted publickey for core from 147.75.109.163 port 37142 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:18:48.535347 sshd[1293]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:18:48.547639 systemd-logind[1191]: New session 2 of user core. Jul 16 12:18:48.548619 systemd[1]: Started session-2.scope. Jul 16 12:18:49.147988 sshd[1293]: pam_unix(sshd:session): session closed for user core Jul 16 12:18:49.155250 systemd[1]: sshd@1-10.244.102.2:22-147.75.109.163:37142.service: Deactivated successfully. Jul 16 12:18:49.156671 systemd-logind[1191]: Session 2 logged out. Waiting for processes to exit. Jul 16 12:18:49.156909 systemd[1]: session-2.scope: Deactivated successfully. Jul 16 12:18:49.159094 systemd-logind[1191]: Removed session 2. Jul 16 12:18:49.295116 systemd[1]: Started sshd@2-10.244.102.2:22-147.75.109.163:44514.service. Jul 16 12:18:50.181551 sshd[1300]: Accepted publickey for core from 147.75.109.163 port 44514 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:18:50.185781 sshd[1300]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:18:50.196456 systemd[1]: Started session-3.scope. Jul 16 12:18:50.196744 systemd-logind[1191]: New session 3 of user core. Jul 16 12:18:50.807698 sshd[1300]: pam_unix(sshd:session): session closed for user core Jul 16 12:18:50.814736 systemd-logind[1191]: Session 3 logged out. Waiting for processes to exit. Jul 16 12:18:50.815289 systemd[1]: sshd@2-10.244.102.2:22-147.75.109.163:44514.service: Deactivated successfully. Jul 16 12:18:50.816673 systemd[1]: session-3.scope: Deactivated successfully. Jul 16 12:18:50.818651 systemd-logind[1191]: Removed session 3. Jul 16 12:18:51.711123 coreos-metadata[1180]: Jul 16 12:18:51.710 WARN failed to locate config-drive, using the metadata service API instead Jul 16 12:18:51.759726 coreos-metadata[1180]: Jul 16 12:18:51.759 INFO Fetching http://169.254.169.254/latest/meta-data/public-keys: Attempt #1 Jul 16 12:18:51.788166 coreos-metadata[1180]: Jul 16 12:18:51.787 INFO Fetch successful Jul 16 12:18:51.788745 coreos-metadata[1180]: Jul 16 12:18:51.788 INFO Fetching http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key: Attempt #1 Jul 16 12:18:51.818026 coreos-metadata[1180]: Jul 16 12:18:51.817 INFO Fetch successful Jul 16 12:18:51.820422 unknown[1180]: wrote ssh authorized keys file for user: core Jul 16 12:18:51.834195 update-ssh-keys[1307]: Updated "/home/core/.ssh/authorized_keys" Jul 16 12:18:51.835500 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Jul 16 12:18:51.836120 systemd[1]: Reached target multi-user.target. Jul 16 12:18:51.838519 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 16 12:18:51.849018 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 16 12:18:51.849215 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 16 12:18:51.849641 systemd[1]: Startup finished in 932ms (kernel) + 7.141s (initrd) + 12.281s (userspace) = 20.355s. Jul 16 12:18:54.888518 systemd[1]: Started sshd@3-10.244.102.2:22-80.94.95.115:63362.service. Jul 16 12:18:57.064505 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 16 12:18:57.064973 systemd[1]: Stopped kubelet.service. Jul 16 12:18:57.065068 systemd[1]: kubelet.service: Consumed 1.362s CPU time. Jul 16 12:18:57.068832 systemd[1]: Starting kubelet.service... Jul 16 12:18:57.213782 systemd[1]: Started kubelet.service. Jul 16 12:18:57.287401 kubelet[1316]: E0716 12:18:57.287334 1316 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 16 12:18:57.291362 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 16 12:18:57.291522 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 16 12:18:58.446711 sshd[1310]: Invalid user vpn from 80.94.95.115 port 63362 Jul 16 12:18:58.554268 sshd[1310]: pam_faillock(sshd:auth): User unknown Jul 16 12:18:58.555736 sshd[1310]: pam_unix(sshd:auth): check pass; user unknown Jul 16 12:18:58.555857 sshd[1310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.94.95.115 Jul 16 12:18:58.556918 sshd[1310]: pam_faillock(sshd:auth): User unknown Jul 16 12:19:00.714803 sshd[1310]: Failed password for invalid user vpn from 80.94.95.115 port 63362 ssh2 Jul 16 12:19:00.959996 systemd[1]: Started sshd@4-10.244.102.2:22-147.75.109.163:35962.service. Jul 16 12:19:01.862845 sshd[1322]: Accepted publickey for core from 147.75.109.163 port 35962 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:19:01.866732 sshd[1322]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:19:01.877945 systemd-logind[1191]: New session 4 of user core. Jul 16 12:19:01.878644 systemd[1]: Started session-4.scope. Jul 16 12:19:02.491662 sshd[1322]: pam_unix(sshd:session): session closed for user core Jul 16 12:19:02.498226 systemd-logind[1191]: Session 4 logged out. Waiting for processes to exit. Jul 16 12:19:02.498959 systemd[1]: sshd@4-10.244.102.2:22-147.75.109.163:35962.service: Deactivated successfully. Jul 16 12:19:02.500595 systemd[1]: session-4.scope: Deactivated successfully. Jul 16 12:19:02.501845 systemd-logind[1191]: Removed session 4. Jul 16 12:19:02.640515 systemd[1]: Started sshd@5-10.244.102.2:22-147.75.109.163:35974.service. Jul 16 12:19:03.234617 sshd[1310]: Connection closed by invalid user vpn 80.94.95.115 port 63362 [preauth] Jul 16 12:19:03.237295 systemd[1]: sshd@3-10.244.102.2:22-80.94.95.115:63362.service: Deactivated successfully. Jul 16 12:19:03.547779 sshd[1328]: Accepted publickey for core from 147.75.109.163 port 35974 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:19:03.548202 sshd[1328]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:19:03.557122 systemd-logind[1191]: New session 5 of user core. Jul 16 12:19:03.557742 systemd[1]: Started session-5.scope. Jul 16 12:19:04.163178 sshd[1328]: pam_unix(sshd:session): session closed for user core Jul 16 12:19:04.170697 systemd[1]: sshd@5-10.244.102.2:22-147.75.109.163:35974.service: Deactivated successfully. Jul 16 12:19:04.172541 systemd[1]: session-5.scope: Deactivated successfully. Jul 16 12:19:04.173834 systemd-logind[1191]: Session 5 logged out. Waiting for processes to exit. Jul 16 12:19:04.175185 systemd-logind[1191]: Removed session 5. Jul 16 12:19:04.313010 systemd[1]: Started sshd@6-10.244.102.2:22-147.75.109.163:35986.service. Jul 16 12:19:05.206017 sshd[1335]: Accepted publickey for core from 147.75.109.163 port 35986 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:19:05.208744 sshd[1335]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:19:05.215413 systemd[1]: Started session-6.scope. Jul 16 12:19:05.216296 systemd-logind[1191]: New session 6 of user core. Jul 16 12:19:05.832272 sshd[1335]: pam_unix(sshd:session): session closed for user core Jul 16 12:19:05.838752 systemd[1]: sshd@6-10.244.102.2:22-147.75.109.163:35986.service: Deactivated successfully. Jul 16 12:19:05.839909 systemd[1]: session-6.scope: Deactivated successfully. Jul 16 12:19:05.840834 systemd-logind[1191]: Session 6 logged out. Waiting for processes to exit. Jul 16 12:19:05.842268 systemd-logind[1191]: Removed session 6. Jul 16 12:19:05.983546 systemd[1]: Started sshd@7-10.244.102.2:22-147.75.109.163:35994.service. Jul 16 12:19:06.867752 sshd[1341]: Accepted publickey for core from 147.75.109.163 port 35994 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:19:06.871098 sshd[1341]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:19:06.881798 systemd-logind[1191]: New session 7 of user core. Jul 16 12:19:06.882656 systemd[1]: Started session-7.scope. Jul 16 12:19:07.313649 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 16 12:19:07.313865 systemd[1]: Stopped kubelet.service. Jul 16 12:19:07.315789 systemd[1]: Starting kubelet.service... Jul 16 12:19:07.354760 sudo[1346]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 16 12:19:07.355520 sudo[1346]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 16 12:19:07.365706 dbus-daemon[1183]: \xd0\xedT-\x99U: received setenforce notice (enforcing=1612358048) Jul 16 12:19:07.367791 sudo[1346]: pam_unix(sudo:session): session closed for user root Jul 16 12:19:07.447111 systemd[1]: Started kubelet.service. Jul 16 12:19:07.503794 kubelet[1350]: E0716 12:19:07.503713 1350 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 16 12:19:07.508581 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 16 12:19:07.508822 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 16 12:19:07.511485 sshd[1341]: pam_unix(sshd:session): session closed for user core Jul 16 12:19:07.514541 systemd[1]: sshd@7-10.244.102.2:22-147.75.109.163:35994.service: Deactivated successfully. Jul 16 12:19:07.515754 systemd[1]: session-7.scope: Deactivated successfully. Jul 16 12:19:07.516638 systemd-logind[1191]: Session 7 logged out. Waiting for processes to exit. Jul 16 12:19:07.517943 systemd-logind[1191]: Removed session 7. Jul 16 12:19:07.661952 systemd[1]: Started sshd@8-10.244.102.2:22-147.75.109.163:36008.service. Jul 16 12:19:08.560919 sshd[1357]: Accepted publickey for core from 147.75.109.163 port 36008 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:19:08.565220 sshd[1357]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:19:08.575461 systemd-logind[1191]: New session 8 of user core. Jul 16 12:19:08.575988 systemd[1]: Started session-8.scope. Jul 16 12:19:09.045022 sudo[1361]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 16 12:19:09.046177 sudo[1361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 16 12:19:09.051804 sudo[1361]: pam_unix(sudo:session): session closed for user root Jul 16 12:19:09.059491 sudo[1360]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 16 12:19:09.059802 sudo[1360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 16 12:19:09.075042 systemd[1]: Stopping audit-rules.service... Jul 16 12:19:09.075000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 16 12:19:09.080031 kernel: kauditd_printk_skb: 42 callbacks suppressed Jul 16 12:19:09.080627 kernel: audit: type=1305 audit(1752668349.075:211): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 16 12:19:09.075000 audit[1364]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe530d0010 a2=420 a3=0 items=0 ppid=1 pid=1364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:09.083629 auditctl[1364]: No rules Jul 16 12:19:09.084949 systemd[1]: audit-rules.service: Deactivated successfully. Jul 16 12:19:09.085350 systemd[1]: Stopped audit-rules.service. Jul 16 12:19:09.087414 kernel: audit: type=1300 audit(1752668349.075:211): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe530d0010 a2=420 a3=0 items=0 ppid=1 pid=1364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:09.087487 kernel: audit: type=1327 audit(1752668349.075:211): proctitle=2F7362696E2F617564697463746C002D44 Jul 16 12:19:09.075000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 16 12:19:09.089168 systemd[1]: Starting audit-rules.service... Jul 16 12:19:09.084000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:09.094392 kernel: audit: type=1131 audit(1752668349.084:212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:09.116009 augenrules[1381]: No rules Jul 16 12:19:09.116000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:09.117427 systemd[1]: Finished audit-rules.service. Jul 16 12:19:09.119102 sudo[1360]: pam_unix(sudo:session): session closed for user root Jul 16 12:19:09.117000 audit[1360]: USER_END pid=1360 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 16 12:19:09.127312 kernel: audit: type=1130 audit(1752668349.116:213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:09.127419 kernel: audit: type=1106 audit(1752668349.117:214): pid=1360 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 16 12:19:09.127461 kernel: audit: type=1104 audit(1752668349.117:215): pid=1360 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 16 12:19:09.117000 audit[1360]: CRED_DISP pid=1360 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 16 12:19:09.268035 sshd[1357]: pam_unix(sshd:session): session closed for user core Jul 16 12:19:09.269000 audit[1357]: USER_END pid=1357 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:19:09.272674 systemd[1]: sshd@8-10.244.102.2:22-147.75.109.163:36008.service: Deactivated successfully. Jul 16 12:19:09.274671 systemd[1]: session-8.scope: Deactivated successfully. Jul 16 12:19:09.285444 kernel: audit: type=1106 audit(1752668349.269:216): pid=1357 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:19:09.285634 kernel: audit: type=1104 audit(1752668349.269:217): pid=1357 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:19:09.269000 audit[1357]: CRED_DISP pid=1357 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:19:09.271000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.244.102.2:22-147.75.109.163:36008 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:09.290038 kernel: audit: type=1131 audit(1752668349.271:218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.244.102.2:22-147.75.109.163:36008 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:09.290568 systemd-logind[1191]: Session 8 logged out. Waiting for processes to exit. Jul 16 12:19:09.291876 systemd-logind[1191]: Removed session 8. Jul 16 12:19:09.412810 systemd[1]: Started sshd@9-10.244.102.2:22-147.75.109.163:34840.service. Jul 16 12:19:09.411000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.244.102.2:22-147.75.109.163:34840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:10.308000 audit[1387]: USER_ACCT pid=1387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:19:10.310839 sshd[1387]: Accepted publickey for core from 147.75.109.163 port 34840 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:19:10.311000 audit[1387]: CRED_ACQ pid=1387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:19:10.312000 audit[1387]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe3c8e5340 a2=3 a3=0 items=0 ppid=1 pid=1387 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:10.312000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 16 12:19:10.314976 sshd[1387]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:19:10.323259 systemd-logind[1191]: New session 9 of user core. Jul 16 12:19:10.323855 systemd[1]: Started session-9.scope. Jul 16 12:19:10.329000 audit[1387]: USER_START pid=1387 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:19:10.331000 audit[1389]: CRED_ACQ pid=1389 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:19:10.789000 audit[1390]: USER_ACCT pid=1390 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 16 12:19:10.791085 sudo[1390]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 16 12:19:10.790000 audit[1390]: CRED_REFR pid=1390 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 16 12:19:10.792061 sudo[1390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 16 12:19:10.794000 audit[1390]: USER_START pid=1390 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 16 12:19:10.837902 systemd[1]: Starting docker.service... Jul 16 12:19:10.887852 env[1400]: time="2025-07-16T12:19:10.887783755Z" level=info msg="Starting up" Jul 16 12:19:10.889431 env[1400]: time="2025-07-16T12:19:10.889402968Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 16 12:19:10.889562 env[1400]: time="2025-07-16T12:19:10.889545929Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 16 12:19:10.889650 env[1400]: time="2025-07-16T12:19:10.889630668Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 16 12:19:10.889717 env[1400]: time="2025-07-16T12:19:10.889704059Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 16 12:19:10.892163 env[1400]: time="2025-07-16T12:19:10.892142395Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 16 12:19:10.892276 env[1400]: time="2025-07-16T12:19:10.892260659Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 16 12:19:10.892351 env[1400]: time="2025-07-16T12:19:10.892336839Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 16 12:19:10.892434 env[1400]: time="2025-07-16T12:19:10.892422216Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 16 12:19:10.899428 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport525342246-merged.mount: Deactivated successfully. Jul 16 12:19:10.915743 env[1400]: time="2025-07-16T12:19:10.915698609Z" level=info msg="Loading containers: start." Jul 16 12:19:10.980000 audit[1433]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1433 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:10.980000 audit[1433]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffeffe191c0 a2=0 a3=7ffeffe191ac items=0 ppid=1400 pid=1433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:10.980000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 16 12:19:10.983000 audit[1435]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1435 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:10.983000 audit[1435]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffcb43d6590 a2=0 a3=7ffcb43d657c items=0 ppid=1400 pid=1435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:10.983000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 16 12:19:10.985000 audit[1437]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1437 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:10.985000 audit[1437]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fffa8f30ce0 a2=0 a3=7fffa8f30ccc items=0 ppid=1400 pid=1437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:10.985000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 16 12:19:10.988000 audit[1439]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1439 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:10.988000 audit[1439]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd6e426790 a2=0 a3=7ffd6e42677c items=0 ppid=1400 pid=1439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:10.988000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 16 12:19:10.991000 audit[1441]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:10.991000 audit[1441]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff2de62830 a2=0 a3=7fff2de6281c items=0 ppid=1400 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:10.991000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 16 12:19:11.011000 audit[1446]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1446 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:11.011000 audit[1446]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffdf6cb230 a2=0 a3=7fffdf6cb21c items=0 ppid=1400 pid=1446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:11.011000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 16 12:19:11.019000 audit[1448]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1448 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:11.019000 audit[1448]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff8f0be3b0 a2=0 a3=7fff8f0be39c items=0 ppid=1400 pid=1448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:11.019000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 16 12:19:11.021000 audit[1450]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1450 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:11.021000 audit[1450]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7fffbb933f30 a2=0 a3=7fffbb933f1c items=0 ppid=1400 pid=1450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:11.021000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 16 12:19:11.023000 audit[1452]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1452 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:11.023000 audit[1452]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fff703b9130 a2=0 a3=7fff703b911c items=0 ppid=1400 pid=1452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:11.023000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 16 12:19:11.034000 audit[1456]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1456 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:11.034000 audit[1456]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffdca737530 a2=0 a3=7ffdca73751c items=0 ppid=1400 pid=1456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:11.034000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 16 12:19:11.041000 audit[1457]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1457 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:11.041000 audit[1457]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffdc7cfb670 a2=0 a3=7ffdc7cfb65c items=0 ppid=1400 pid=1457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:11.041000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 16 12:19:11.062602 kernel: Initializing XFRM netlink socket Jul 16 12:19:11.120767 env[1400]: time="2025-07-16T12:19:11.120732492Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 16 12:19:11.153000 audit[1465]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1465 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:11.153000 audit[1465]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffe6c4f3150 a2=0 a3=7ffe6c4f313c items=0 ppid=1400 pid=1465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:11.153000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 16 12:19:11.166000 audit[1468]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1468 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:11.166000 audit[1468]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffdf50a0940 a2=0 a3=7ffdf50a092c items=0 ppid=1400 pid=1468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:11.166000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 16 12:19:11.170000 audit[1471]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1471 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:11.170000 audit[1471]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd6d31c8d0 a2=0 a3=7ffd6d31c8bc items=0 ppid=1400 pid=1471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:11.170000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 16 12:19:11.173000 audit[1473]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1473 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:11.173000 audit[1473]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffc39ab4460 a2=0 a3=7ffc39ab444c items=0 ppid=1400 pid=1473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:11.173000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 16 12:19:11.176000 audit[1475]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1475 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:11.176000 audit[1475]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffcc7774e90 a2=0 a3=7ffcc7774e7c items=0 ppid=1400 pid=1475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:11.176000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 16 12:19:11.178000 audit[1477]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1477 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:11.178000 audit[1477]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffcd814b370 a2=0 a3=7ffcd814b35c items=0 ppid=1400 pid=1477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:11.178000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 16 12:19:11.181000 audit[1479]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1479 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:11.181000 audit[1479]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffddd0239b0 a2=0 a3=7ffddd02399c items=0 ppid=1400 pid=1479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:11.181000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 16 12:19:11.192000 audit[1482]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1482 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:11.192000 audit[1482]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fffdb215640 a2=0 a3=7fffdb21562c items=0 ppid=1400 pid=1482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:11.192000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 16 12:19:11.195000 audit[1484]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1484 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:11.195000 audit[1484]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7fff11e15710 a2=0 a3=7fff11e156fc items=0 ppid=1400 pid=1484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:11.195000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 16 12:19:11.198000 audit[1486]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1486 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:11.198000 audit[1486]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fffd18213e0 a2=0 a3=7fffd18213cc items=0 ppid=1400 pid=1486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:11.198000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 16 12:19:11.200000 audit[1488]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1488 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:11.200000 audit[1488]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffcdc2e9940 a2=0 a3=7ffcdc2e992c items=0 ppid=1400 pid=1488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:11.200000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 16 12:19:11.202623 systemd-networkd[1034]: docker0: Link UP Jul 16 12:19:11.209000 audit[1492]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1492 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:11.209000 audit[1492]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe16b6edb0 a2=0 a3=7ffe16b6ed9c items=0 ppid=1400 pid=1492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:11.209000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 16 12:19:11.215000 audit[1493]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1493 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:11.215000 audit[1493]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff4131a140 a2=0 a3=7fff4131a12c items=0 ppid=1400 pid=1493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:11.215000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 16 12:19:11.217562 env[1400]: time="2025-07-16T12:19:11.217506416Z" level=info msg="Loading containers: done." Jul 16 12:19:11.231871 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1494508983-merged.mount: Deactivated successfully. Jul 16 12:19:11.240741 env[1400]: time="2025-07-16T12:19:11.240679245Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 16 12:19:11.241537 env[1400]: time="2025-07-16T12:19:11.241492028Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 16 12:19:11.241996 env[1400]: time="2025-07-16T12:19:11.241959485Z" level=info msg="Daemon has completed initialization" Jul 16 12:19:11.263312 systemd[1]: Started docker.service. Jul 16 12:19:11.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:11.272552 env[1400]: time="2025-07-16T12:19:11.272495365Z" level=info msg="API listen on /run/docker.sock" Jul 16 12:19:12.268408 env[1205]: time="2025-07-16T12:19:12.268303266Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.3\"" Jul 16 12:19:13.198947 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2571383742.mount: Deactivated successfully. Jul 16 12:19:14.985753 env[1205]: time="2025-07-16T12:19:14.985684401Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:14.988175 env[1205]: time="2025-07-16T12:19:14.988129878Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a92b4b92a991677d355596cc4aa9b0b12cbc38e8cbdc1e476548518ae045bc4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:14.988929 env[1205]: time="2025-07-16T12:19:14.988903800Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:14.990915 env[1205]: time="2025-07-16T12:19:14.990876680Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:125a8b488def5ea24e2de5682ab1abf063163aae4d89ce21811a45f3ecf23816,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:14.992119 env[1205]: time="2025-07-16T12:19:14.992091407Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.3\" returns image reference \"sha256:a92b4b92a991677d355596cc4aa9b0b12cbc38e8cbdc1e476548518ae045bc4a\"" Jul 16 12:19:14.992800 env[1205]: time="2025-07-16T12:19:14.992778922Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.3\"" Jul 16 12:19:16.586698 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 16 12:19:16.586955 kernel: audit: type=1131 audit(1752668356.581:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:16.581000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:16.582388 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Jul 16 12:19:16.605000 audit: BPF prog-id=40 op=UNLOAD Jul 16 12:19:16.605000 audit: BPF prog-id=39 op=UNLOAD Jul 16 12:19:16.608421 kernel: audit: type=1334 audit(1752668356.605:254): prog-id=40 op=UNLOAD Jul 16 12:19:16.608518 kernel: audit: type=1334 audit(1752668356.605:255): prog-id=39 op=UNLOAD Jul 16 12:19:16.608560 kernel: audit: type=1334 audit(1752668356.605:256): prog-id=38 op=UNLOAD Jul 16 12:19:16.605000 audit: BPF prog-id=38 op=UNLOAD Jul 16 12:19:17.367591 env[1205]: time="2025-07-16T12:19:17.367474922Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:17.371177 env[1205]: time="2025-07-16T12:19:17.371116804Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bf97fadcef43049604abcf0caf4f35229fbee25bd0cdb6fdc1d2bbb4f03d9660,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:17.374466 env[1205]: time="2025-07-16T12:19:17.374420311Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:17.377604 env[1205]: time="2025-07-16T12:19:17.377558948Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:96091626e37c5d5920ee6c3203b783cc01a08f287ec0713aeb7809bb62ccea90,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:17.379003 env[1205]: time="2025-07-16T12:19:17.378941000Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.3\" returns image reference \"sha256:bf97fadcef43049604abcf0caf4f35229fbee25bd0cdb6fdc1d2bbb4f03d9660\"" Jul 16 12:19:17.381110 env[1205]: time="2025-07-16T12:19:17.381081866Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.3\"" Jul 16 12:19:17.564337 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Jul 16 12:19:17.571704 kernel: audit: type=1130 audit(1752668357.563:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:17.571848 kernel: audit: type=1131 audit(1752668357.563:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:17.563000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:17.563000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:17.564824 systemd[1]: Stopped kubelet.service. Jul 16 12:19:17.568682 systemd[1]: Starting kubelet.service... Jul 16 12:19:17.698577 systemd[1]: Started kubelet.service. Jul 16 12:19:17.697000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:17.705385 kernel: audit: type=1130 audit(1752668357.697:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:17.756421 kubelet[1535]: E0716 12:19:17.756345 1535 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 16 12:19:17.758799 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 16 12:19:17.758956 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 16 12:19:17.757000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 16 12:19:17.763411 kernel: audit: type=1131 audit(1752668357.757:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 16 12:19:19.734809 env[1205]: time="2025-07-16T12:19:19.734723905Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:19.737335 env[1205]: time="2025-07-16T12:19:19.737281669Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:41376797d5122e388663ab6d0ad583e58cff63e1a0f1eebfb31d615d8f1c1c87,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:19.743556 env[1205]: time="2025-07-16T12:19:19.743522402Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:19.747686 env[1205]: time="2025-07-16T12:19:19.747628859Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:f3a2ffdd7483168205236f7762e9a1933f17dd733bc0188b52bddab9c0762868,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:19.748422 env[1205]: time="2025-07-16T12:19:19.748394707Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.3\" returns image reference \"sha256:41376797d5122e388663ab6d0ad583e58cff63e1a0f1eebfb31d615d8f1c1c87\"" Jul 16 12:19:19.750351 env[1205]: time="2025-07-16T12:19:19.750330446Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.3\"" Jul 16 12:19:22.096444 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1271964909.mount: Deactivated successfully. Jul 16 12:19:22.890207 env[1205]: time="2025-07-16T12:19:22.890135030Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:22.891418 env[1205]: time="2025-07-16T12:19:22.891388318Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:af855adae796077ff822e22c0102f686b2ca7b7c51948889b1825388eaac9234,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:22.893078 env[1205]: time="2025-07-16T12:19:22.893047375Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:22.894504 env[1205]: time="2025-07-16T12:19:22.894479883Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:c69929cfba9e38305eb1e20ca859aeb90e0d2a7326eab9bb1e8298882fe626cd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:22.895170 env[1205]: time="2025-07-16T12:19:22.895138056Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.3\" returns image reference \"sha256:af855adae796077ff822e22c0102f686b2ca7b7c51948889b1825388eaac9234\"" Jul 16 12:19:22.897734 env[1205]: time="2025-07-16T12:19:22.897704612Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Jul 16 12:19:23.859700 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3156513786.mount: Deactivated successfully. Jul 16 12:19:25.203110 env[1205]: time="2025-07-16T12:19:25.203005410Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:25.205328 env[1205]: time="2025-07-16T12:19:25.205289182Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:25.208046 env[1205]: time="2025-07-16T12:19:25.208012294Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:25.210734 env[1205]: time="2025-07-16T12:19:25.210705383Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:25.211908 env[1205]: time="2025-07-16T12:19:25.211866807Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b\"" Jul 16 12:19:25.212720 env[1205]: time="2025-07-16T12:19:25.212693075Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 16 12:19:26.423801 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount862088221.mount: Deactivated successfully. Jul 16 12:19:26.427177 env[1205]: time="2025-07-16T12:19:26.427132922Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:26.429165 env[1205]: time="2025-07-16T12:19:26.429136688Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:26.430883 env[1205]: time="2025-07-16T12:19:26.430859719Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:26.432594 env[1205]: time="2025-07-16T12:19:26.432571274Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:26.433286 env[1205]: time="2025-07-16T12:19:26.433259232Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Jul 16 12:19:26.434775 env[1205]: time="2025-07-16T12:19:26.434732551Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Jul 16 12:19:27.813934 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Jul 16 12:19:27.812000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:27.822399 kernel: audit: type=1130 audit(1752668367.812:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:27.814270 systemd[1]: Stopped kubelet.service. Jul 16 12:19:27.817049 systemd[1]: Starting kubelet.service... Jul 16 12:19:27.812000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:27.828404 kernel: audit: type=1131 audit(1752668367.812:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:27.892267 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2297280300.mount: Deactivated successfully. Jul 16 12:19:27.950227 systemd[1]: Started kubelet.service. Jul 16 12:19:27.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:27.955397 kernel: audit: type=1130 audit(1752668367.949:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:28.011308 kubelet[1545]: E0716 12:19:28.011260 1545 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 16 12:19:28.013078 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 16 12:19:28.013235 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 16 12:19:28.016427 kernel: audit: type=1131 audit(1752668368.012:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 16 12:19:28.012000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 16 12:19:29.508278 update_engine[1192]: I0716 12:19:29.508005 1192 update_attempter.cc:509] Updating boot flags... Jul 16 12:19:30.470462 env[1205]: time="2025-07-16T12:19:30.470317117Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:30.473015 env[1205]: time="2025-07-16T12:19:30.472945195Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:30.475618 env[1205]: time="2025-07-16T12:19:30.475588858Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:30.477668 env[1205]: time="2025-07-16T12:19:30.477641792Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:30.478754 env[1205]: time="2025-07-16T12:19:30.478714185Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1\"" Jul 16 12:19:34.678618 systemd[1]: Stopped kubelet.service. Jul 16 12:19:34.678000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:34.690357 systemd[1]: Starting kubelet.service... Jul 16 12:19:34.692548 kernel: audit: type=1130 audit(1752668374.678:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:34.678000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:34.696397 kernel: audit: type=1131 audit(1752668374.678:266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:34.729964 systemd[1]: Reloading. Jul 16 12:19:34.837926 /usr/lib/systemd/system-generators/torcx-generator[1610]: time="2025-07-16T12:19:34Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 16 12:19:34.841468 /usr/lib/systemd/system-generators/torcx-generator[1610]: time="2025-07-16T12:19:34Z" level=info msg="torcx already run" Jul 16 12:19:34.953255 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 16 12:19:34.953532 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 16 12:19:34.972898 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 16 12:19:35.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.049714 kernel: audit: type=1400 audit(1752668375.041:267): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.049775 kernel: audit: type=1400 audit(1752668375.041:268): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.055381 kernel: audit: type=1400 audit(1752668375.049:269): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.060381 kernel: audit: type=1400 audit(1752668375.049:270): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.067977 kernel: audit: type=1400 audit(1752668375.049:271): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.068036 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 16 12:19:35.068072 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Jul 16 12:19:35.068105 kernel: audit: type=1400 audit(1752668375.049:272): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.049000 audit: BPF prog-id=43 op=LOAD Jul 16 12:19:35.049000 audit: BPF prog-id=24 op=UNLOAD Jul 16 12:19:35.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.051000 audit: BPF prog-id=44 op=LOAD Jul 16 12:19:35.051000 audit: BPF prog-id=34 op=UNLOAD Jul 16 12:19:35.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.055000 audit: BPF prog-id=45 op=LOAD Jul 16 12:19:35.055000 audit: BPF prog-id=33 op=UNLOAD Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit: BPF prog-id=46 op=LOAD Jul 16 12:19:35.061000 audit: BPF prog-id=35 op=UNLOAD Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit: BPF prog-id=47 op=LOAD Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.061000 audit: BPF prog-id=48 op=LOAD Jul 16 12:19:35.061000 audit: BPF prog-id=36 op=UNLOAD Jul 16 12:19:35.061000 audit: BPF prog-id=37 op=UNLOAD Jul 16 12:19:35.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.071000 audit: BPF prog-id=49 op=LOAD Jul 16 12:19:35.071000 audit: BPF prog-id=25 op=UNLOAD Jul 16 12:19:35.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.071000 audit: BPF prog-id=50 op=LOAD Jul 16 12:19:35.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.071000 audit: BPF prog-id=51 op=LOAD Jul 16 12:19:35.071000 audit: BPF prog-id=26 op=UNLOAD Jul 16 12:19:35.071000 audit: BPF prog-id=27 op=UNLOAD Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit: BPF prog-id=52 op=LOAD Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit: BPF prog-id=53 op=LOAD Jul 16 12:19:35.072000 audit: BPF prog-id=28 op=UNLOAD Jul 16 12:19:35.072000 audit: BPF prog-id=29 op=UNLOAD Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.072000 audit: BPF prog-id=54 op=LOAD Jul 16 12:19:35.072000 audit: BPF prog-id=41 op=UNLOAD Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit: BPF prog-id=55 op=LOAD Jul 16 12:19:35.073000 audit: BPF prog-id=30 op=UNLOAD Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit: BPF prog-id=56 op=LOAD Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:35.073000 audit: BPF prog-id=57 op=LOAD Jul 16 12:19:35.073000 audit: BPF prog-id=31 op=UNLOAD Jul 16 12:19:35.073000 audit: BPF prog-id=32 op=UNLOAD Jul 16 12:19:35.096564 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Jul 16 12:19:35.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 16 12:19:35.096649 systemd[1]: kubelet.service: Failed with result 'signal'. Jul 16 12:19:35.096882 systemd[1]: Stopped kubelet.service. Jul 16 12:19:35.098828 systemd[1]: Starting kubelet.service... Jul 16 12:19:35.324000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:35.324287 systemd[1]: Started kubelet.service. Jul 16 12:19:35.385229 kubelet[1661]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 16 12:19:35.385657 kubelet[1661]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 16 12:19:35.385715 kubelet[1661]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 16 12:19:35.385872 kubelet[1661]: I0716 12:19:35.385839 1661 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 16 12:19:36.816563 kubelet[1661]: I0716 12:19:36.816515 1661 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 16 12:19:36.817138 kubelet[1661]: I0716 12:19:36.817119 1661 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 16 12:19:36.817592 kubelet[1661]: I0716 12:19:36.817569 1661 server.go:956] "Client rotation is on, will bootstrap in background" Jul 16 12:19:36.848339 kubelet[1661]: E0716 12:19:36.848218 1661 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.244.102.2:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.244.102.2:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Jul 16 12:19:36.853599 kubelet[1661]: I0716 12:19:36.853533 1661 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 16 12:19:36.865942 kubelet[1661]: E0716 12:19:36.865877 1661 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 16 12:19:36.865942 kubelet[1661]: I0716 12:19:36.865923 1661 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 16 12:19:36.869928 kubelet[1661]: I0716 12:19:36.869879 1661 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 16 12:19:36.870208 kubelet[1661]: I0716 12:19:36.870155 1661 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 16 12:19:36.870406 kubelet[1661]: I0716 12:19:36.870198 1661 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"srv-frvg8.gb1.brightbox.com","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 16 12:19:36.870694 kubelet[1661]: I0716 12:19:36.870412 1661 topology_manager.go:138] "Creating topology manager with none policy" Jul 16 12:19:36.870694 kubelet[1661]: I0716 12:19:36.870423 1661 container_manager_linux.go:303] "Creating device plugin manager" Jul 16 12:19:36.871457 kubelet[1661]: I0716 12:19:36.871429 1661 state_mem.go:36] "Initialized new in-memory state store" Jul 16 12:19:36.873881 kubelet[1661]: I0716 12:19:36.873845 1661 kubelet.go:480] "Attempting to sync node with API server" Jul 16 12:19:36.873881 kubelet[1661]: I0716 12:19:36.873876 1661 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 16 12:19:36.874081 kubelet[1661]: I0716 12:19:36.873914 1661 kubelet.go:386] "Adding apiserver pod source" Jul 16 12:19:36.886530 kubelet[1661]: I0716 12:19:36.886495 1661 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 16 12:19:36.905587 kubelet[1661]: E0716 12:19:36.904951 1661 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.244.102.2:6443/api/v1/nodes?fieldSelector=metadata.name%3Dsrv-frvg8.gb1.brightbox.com&limit=500&resourceVersion=0\": dial tcp 10.244.102.2:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 16 12:19:36.905587 kubelet[1661]: I0716 12:19:36.905273 1661 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 16 12:19:36.906653 kubelet[1661]: I0716 12:19:36.906610 1661 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 16 12:19:36.906947 kubelet[1661]: E0716 12:19:36.906912 1661 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.244.102.2:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.244.102.2:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 16 12:19:36.908107 kubelet[1661]: W0716 12:19:36.908025 1661 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 16 12:19:36.915405 kubelet[1661]: I0716 12:19:36.915327 1661 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 16 12:19:36.915659 kubelet[1661]: I0716 12:19:36.915468 1661 server.go:1289] "Started kubelet" Jul 16 12:19:36.918266 kubelet[1661]: I0716 12:19:36.918206 1661 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 16 12:19:36.920236 kubelet[1661]: I0716 12:19:36.920203 1661 server.go:317] "Adding debug handlers to kubelet server" Jul 16 12:19:36.921945 kubelet[1661]: I0716 12:19:36.921846 1661 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 16 12:19:36.922850 kubelet[1661]: I0716 12:19:36.922802 1661 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 16 12:19:36.930000 audit[1661]: AVC avc: denied { mac_admin } for pid=1661 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:36.930000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 16 12:19:36.930000 audit[1661]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a7b3e0 a1=c000b7aa68 a2=c000a7b3b0 a3=25 items=0 ppid=1 pid=1661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:36.930000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 16 12:19:36.931088 kubelet[1661]: I0716 12:19:36.931063 1661 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 16 12:19:36.930000 audit[1661]: AVC avc: denied { mac_admin } for pid=1661 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:36.930000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 16 12:19:36.930000 audit[1661]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000bae500 a1=c000b7aa80 a2=c000a7b470 a3=25 items=0 ppid=1 pid=1661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:36.930000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 16 12:19:36.931455 kubelet[1661]: I0716 12:19:36.931440 1661 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 16 12:19:36.931635 kubelet[1661]: I0716 12:19:36.931623 1661 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 16 12:19:36.932471 kubelet[1661]: E0716 12:19:36.927413 1661 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.244.102.2:6443/api/v1/namespaces/default/events\": dial tcp 10.244.102.2:6443: connect: connection refused" event="&Event{ObjectMeta:{srv-frvg8.gb1.brightbox.com.1852ba9a4f1a64aa default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:srv-frvg8.gb1.brightbox.com,UID:srv-frvg8.gb1.brightbox.com,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:srv-frvg8.gb1.brightbox.com,},FirstTimestamp:2025-07-16 12:19:36.915403946 +0000 UTC m=+1.581649700,LastTimestamp:2025-07-16 12:19:36.915403946 +0000 UTC m=+1.581649700,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:srv-frvg8.gb1.brightbox.com,}" Jul 16 12:19:36.933792 kubelet[1661]: I0716 12:19:36.932922 1661 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 16 12:19:36.937554 kubelet[1661]: I0716 12:19:36.937537 1661 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 16 12:19:36.937916 kubelet[1661]: E0716 12:19:36.937896 1661 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"srv-frvg8.gb1.brightbox.com\" not found" Jul 16 12:19:36.938308 kubelet[1661]: I0716 12:19:36.938294 1661 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 16 12:19:36.938488 kubelet[1661]: I0716 12:19:36.938477 1661 reconciler.go:26] "Reconciler: start to sync state" Jul 16 12:19:36.940428 kubelet[1661]: E0716 12:19:36.939981 1661 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.244.102.2:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.244.102.2:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 16 12:19:36.940428 kubelet[1661]: E0716 12:19:36.940078 1661 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.244.102.2:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/srv-frvg8.gb1.brightbox.com?timeout=10s\": dial tcp 10.244.102.2:6443: connect: connection refused" interval="200ms" Jul 16 12:19:36.940834 kubelet[1661]: I0716 12:19:36.940799 1661 factory.go:223] Registration of the systemd container factory successfully Jul 16 12:19:36.940937 kubelet[1661]: I0716 12:19:36.940915 1661 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 16 12:19:36.942039 kubelet[1661]: I0716 12:19:36.942016 1661 factory.go:223] Registration of the containerd container factory successfully Jul 16 12:19:36.944000 audit[1677]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1677 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:36.944000 audit[1677]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff214fde60 a2=0 a3=7fff214fde4c items=0 ppid=1661 pid=1677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:36.944000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 16 12:19:36.946000 audit[1678]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1678 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:36.946000 audit[1678]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd00d04390 a2=0 a3=7ffd00d0437c items=0 ppid=1661 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:36.946000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 16 12:19:36.948827 kubelet[1661]: E0716 12:19:36.948810 1661 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 16 12:19:36.949000 audit[1680]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1680 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:36.949000 audit[1680]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe3df35250 a2=0 a3=7ffe3df3523c items=0 ppid=1661 pid=1680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:36.949000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 16 12:19:36.952000 audit[1682]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1682 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:36.952000 audit[1682]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd63203510 a2=0 a3=7ffd632034fc items=0 ppid=1661 pid=1682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:36.952000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 16 12:19:36.964000 audit[1686]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1686 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:36.964000 audit[1686]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7fffa908fe00 a2=0 a3=7fffa908fdec items=0 ppid=1661 pid=1686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:36.964000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 16 12:19:36.965530 kubelet[1661]: I0716 12:19:36.965476 1661 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 16 12:19:36.966000 audit[1687]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1687 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:36.966000 audit[1687]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffdbf277a70 a2=0 a3=7ffdbf277a5c items=0 ppid=1661 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:36.966000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 16 12:19:36.967146 kubelet[1661]: I0716 12:19:36.967018 1661 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 16 12:19:36.967146 kubelet[1661]: I0716 12:19:36.967047 1661 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 16 12:19:36.967146 kubelet[1661]: I0716 12:19:36.967086 1661 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 16 12:19:36.967146 kubelet[1661]: I0716 12:19:36.967095 1661 kubelet.go:2436] "Starting kubelet main sync loop" Jul 16 12:19:36.967146 kubelet[1661]: E0716 12:19:36.967142 1661 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 16 12:19:36.968000 audit[1690]: NETFILTER_CFG table=mangle:32 family=10 entries=1 op=nft_register_chain pid=1690 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:36.968000 audit[1690]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcfe3791f0 a2=0 a3=7ffcfe3791dc items=0 ppid=1661 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:36.968000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 16 12:19:36.971291 kubelet[1661]: E0716 12:19:36.971262 1661 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.244.102.2:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.244.102.2:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 16 12:19:36.971000 audit[1688]: NETFILTER_CFG table=mangle:33 family=2 entries=1 op=nft_register_chain pid=1688 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:36.971000 audit[1688]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc8da1a4f0 a2=0 a3=7ffc8da1a4dc items=0 ppid=1661 pid=1688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:36.971000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 16 12:19:36.973000 audit[1692]: NETFILTER_CFG table=nat:34 family=10 entries=2 op=nft_register_chain pid=1692 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:36.973000 audit[1692]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffc854ed700 a2=0 a3=7ffc854ed6ec items=0 ppid=1661 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:36.973000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 16 12:19:36.973000 audit[1695]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1695 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:36.973000 audit[1695]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc8ff64ae0 a2=0 a3=7ffc8ff64acc items=0 ppid=1661 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:36.973000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 16 12:19:36.975000 audit[1696]: NETFILTER_CFG table=filter:36 family=10 entries=2 op=nft_register_chain pid=1696 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:36.975000 audit[1696]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe36de58f0 a2=0 a3=7ffe36de58dc items=0 ppid=1661 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:36.975000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 16 12:19:36.975000 audit[1698]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=1698 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:36.975000 audit[1698]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe0eb0aea0 a2=0 a3=7ffe0eb0ae8c items=0 ppid=1661 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:36.975000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 16 12:19:36.980802 kubelet[1661]: I0716 12:19:36.980776 1661 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 16 12:19:36.980802 kubelet[1661]: I0716 12:19:36.980795 1661 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 16 12:19:36.980967 kubelet[1661]: I0716 12:19:36.980813 1661 state_mem.go:36] "Initialized new in-memory state store" Jul 16 12:19:36.981718 kubelet[1661]: I0716 12:19:36.981698 1661 policy_none.go:49] "None policy: Start" Jul 16 12:19:36.981806 kubelet[1661]: I0716 12:19:36.981729 1661 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 16 12:19:36.981806 kubelet[1661]: I0716 12:19:36.981746 1661 state_mem.go:35] "Initializing new in-memory state store" Jul 16 12:19:36.986953 systemd[1]: Created slice kubepods.slice. Jul 16 12:19:36.993123 systemd[1]: Created slice kubepods-burstable.slice. Jul 16 12:19:36.996308 systemd[1]: Created slice kubepods-besteffort.slice. Jul 16 12:19:37.001046 kubelet[1661]: E0716 12:19:37.001021 1661 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 16 12:19:37.000000 audit[1661]: AVC avc: denied { mac_admin } for pid=1661 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:37.000000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 16 12:19:37.000000 audit[1661]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d334a0 a1=c000d4d890 a2=c000d33470 a3=25 items=0 ppid=1 pid=1661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:37.000000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 16 12:19:37.001409 kubelet[1661]: E0716 12:19:37.001083 1661 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 16 12:19:37.001409 kubelet[1661]: I0716 12:19:37.001213 1661 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 16 12:19:37.001409 kubelet[1661]: I0716 12:19:37.001225 1661 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 16 12:19:37.002544 kubelet[1661]: I0716 12:19:37.002526 1661 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 16 12:19:37.003033 kubelet[1661]: E0716 12:19:37.003016 1661 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 16 12:19:37.003246 kubelet[1661]: E0716 12:19:37.003228 1661 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"srv-frvg8.gb1.brightbox.com\" not found" Jul 16 12:19:37.083176 systemd[1]: Created slice kubepods-burstable-pod6aa1f6e0eaf5dff90da5bb9e853c6226.slice. Jul 16 12:19:37.091127 kubelet[1661]: E0716 12:19:37.091086 1661 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"srv-frvg8.gb1.brightbox.com\" not found" node="srv-frvg8.gb1.brightbox.com" Jul 16 12:19:37.094949 systemd[1]: Created slice kubepods-burstable-podf5d70d4a42acda3105f2b254755d933c.slice. Jul 16 12:19:37.096693 kubelet[1661]: E0716 12:19:37.096674 1661 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"srv-frvg8.gb1.brightbox.com\" not found" node="srv-frvg8.gb1.brightbox.com" Jul 16 12:19:37.098753 systemd[1]: Created slice kubepods-burstable-podb3126fa5f918a29412c483b3fd1bcada.slice. Jul 16 12:19:37.100199 kubelet[1661]: E0716 12:19:37.100181 1661 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"srv-frvg8.gb1.brightbox.com\" not found" node="srv-frvg8.gb1.brightbox.com" Jul 16 12:19:37.103095 kubelet[1661]: I0716 12:19:37.103073 1661 kubelet_node_status.go:75] "Attempting to register node" node="srv-frvg8.gb1.brightbox.com" Jul 16 12:19:37.103520 kubelet[1661]: E0716 12:19:37.103500 1661 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.244.102.2:6443/api/v1/nodes\": dial tcp 10.244.102.2:6443: connect: connection refused" node="srv-frvg8.gb1.brightbox.com" Jul 16 12:19:37.140797 kubelet[1661]: I0716 12:19:37.140213 1661 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6aa1f6e0eaf5dff90da5bb9e853c6226-ca-certs\") pod \"kube-apiserver-srv-frvg8.gb1.brightbox.com\" (UID: \"6aa1f6e0eaf5dff90da5bb9e853c6226\") " pod="kube-system/kube-apiserver-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:37.141068 kubelet[1661]: I0716 12:19:37.140883 1661 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6aa1f6e0eaf5dff90da5bb9e853c6226-k8s-certs\") pod \"kube-apiserver-srv-frvg8.gb1.brightbox.com\" (UID: \"6aa1f6e0eaf5dff90da5bb9e853c6226\") " pod="kube-system/kube-apiserver-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:37.141068 kubelet[1661]: I0716 12:19:37.140956 1661 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/f5d70d4a42acda3105f2b254755d933c-ca-certs\") pod \"kube-controller-manager-srv-frvg8.gb1.brightbox.com\" (UID: \"f5d70d4a42acda3105f2b254755d933c\") " pod="kube-system/kube-controller-manager-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:37.141068 kubelet[1661]: I0716 12:19:37.141026 1661 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/f5d70d4a42acda3105f2b254755d933c-flexvolume-dir\") pod \"kube-controller-manager-srv-frvg8.gb1.brightbox.com\" (UID: \"f5d70d4a42acda3105f2b254755d933c\") " pod="kube-system/kube-controller-manager-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:37.141231 kubelet[1661]: I0716 12:19:37.141092 1661 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/f5d70d4a42acda3105f2b254755d933c-k8s-certs\") pod \"kube-controller-manager-srv-frvg8.gb1.brightbox.com\" (UID: \"f5d70d4a42acda3105f2b254755d933c\") " pod="kube-system/kube-controller-manager-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:37.141231 kubelet[1661]: I0716 12:19:37.141131 1661 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/f5d70d4a42acda3105f2b254755d933c-kubeconfig\") pod \"kube-controller-manager-srv-frvg8.gb1.brightbox.com\" (UID: \"f5d70d4a42acda3105f2b254755d933c\") " pod="kube-system/kube-controller-manager-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:37.141231 kubelet[1661]: I0716 12:19:37.141192 1661 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6aa1f6e0eaf5dff90da5bb9e853c6226-usr-share-ca-certificates\") pod \"kube-apiserver-srv-frvg8.gb1.brightbox.com\" (UID: \"6aa1f6e0eaf5dff90da5bb9e853c6226\") " pod="kube-system/kube-apiserver-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:37.141405 kubelet[1661]: I0716 12:19:37.141285 1661 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/f5d70d4a42acda3105f2b254755d933c-usr-share-ca-certificates\") pod \"kube-controller-manager-srv-frvg8.gb1.brightbox.com\" (UID: \"f5d70d4a42acda3105f2b254755d933c\") " pod="kube-system/kube-controller-manager-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:37.141405 kubelet[1661]: I0716 12:19:37.141345 1661 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b3126fa5f918a29412c483b3fd1bcada-kubeconfig\") pod \"kube-scheduler-srv-frvg8.gb1.brightbox.com\" (UID: \"b3126fa5f918a29412c483b3fd1bcada\") " pod="kube-system/kube-scheduler-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:37.141832 kubelet[1661]: E0716 12:19:37.141789 1661 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.244.102.2:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/srv-frvg8.gb1.brightbox.com?timeout=10s\": dial tcp 10.244.102.2:6443: connect: connection refused" interval="400ms" Jul 16 12:19:37.306433 kubelet[1661]: I0716 12:19:37.306397 1661 kubelet_node_status.go:75] "Attempting to register node" node="srv-frvg8.gb1.brightbox.com" Jul 16 12:19:37.307245 kubelet[1661]: E0716 12:19:37.307210 1661 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.244.102.2:6443/api/v1/nodes\": dial tcp 10.244.102.2:6443: connect: connection refused" node="srv-frvg8.gb1.brightbox.com" Jul 16 12:19:37.394378 env[1205]: time="2025-07-16T12:19:37.393769003Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-srv-frvg8.gb1.brightbox.com,Uid:6aa1f6e0eaf5dff90da5bb9e853c6226,Namespace:kube-system,Attempt:0,}" Jul 16 12:19:37.398382 env[1205]: time="2025-07-16T12:19:37.398140163Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-srv-frvg8.gb1.brightbox.com,Uid:f5d70d4a42acda3105f2b254755d933c,Namespace:kube-system,Attempt:0,}" Jul 16 12:19:37.401972 env[1205]: time="2025-07-16T12:19:37.401913705Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-srv-frvg8.gb1.brightbox.com,Uid:b3126fa5f918a29412c483b3fd1bcada,Namespace:kube-system,Attempt:0,}" Jul 16 12:19:37.542970 kubelet[1661]: E0716 12:19:37.542891 1661 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.244.102.2:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/srv-frvg8.gb1.brightbox.com?timeout=10s\": dial tcp 10.244.102.2:6443: connect: connection refused" interval="800ms" Jul 16 12:19:37.712029 kubelet[1661]: I0716 12:19:37.711816 1661 kubelet_node_status.go:75] "Attempting to register node" node="srv-frvg8.gb1.brightbox.com" Jul 16 12:19:37.713339 kubelet[1661]: E0716 12:19:37.713246 1661 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.244.102.2:6443/api/v1/nodes\": dial tcp 10.244.102.2:6443: connect: connection refused" node="srv-frvg8.gb1.brightbox.com" Jul 16 12:19:37.753949 kubelet[1661]: E0716 12:19:37.753865 1661 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.244.102.2:6443/api/v1/nodes?fieldSelector=metadata.name%3Dsrv-frvg8.gb1.brightbox.com&limit=500&resourceVersion=0\": dial tcp 10.244.102.2:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 16 12:19:37.785224 kubelet[1661]: E0716 12:19:37.785117 1661 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.244.102.2:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.244.102.2:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 16 12:19:37.950105 kubelet[1661]: E0716 12:19:37.949957 1661 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.244.102.2:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.244.102.2:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 16 12:19:38.343917 kubelet[1661]: E0716 12:19:38.343760 1661 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.244.102.2:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/srv-frvg8.gb1.brightbox.com?timeout=10s\": dial tcp 10.244.102.2:6443: connect: connection refused" interval="1.6s" Jul 16 12:19:38.474242 kubelet[1661]: E0716 12:19:38.474122 1661 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.244.102.2:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.244.102.2:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 16 12:19:38.517428 kubelet[1661]: I0716 12:19:38.517031 1661 kubelet_node_status.go:75] "Attempting to register node" node="srv-frvg8.gb1.brightbox.com" Jul 16 12:19:38.518774 kubelet[1661]: E0716 12:19:38.518716 1661 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.244.102.2:6443/api/v1/nodes\": dial tcp 10.244.102.2:6443: connect: connection refused" node="srv-frvg8.gb1.brightbox.com" Jul 16 12:19:38.614312 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1622381522.mount: Deactivated successfully. Jul 16 12:19:38.618591 env[1205]: time="2025-07-16T12:19:38.618547777Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:38.619775 env[1205]: time="2025-07-16T12:19:38.619739997Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:38.621262 env[1205]: time="2025-07-16T12:19:38.621241014Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:38.622609 env[1205]: time="2025-07-16T12:19:38.622581834Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:38.624301 env[1205]: time="2025-07-16T12:19:38.624276820Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:38.627611 env[1205]: time="2025-07-16T12:19:38.627579496Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:38.628598 env[1205]: time="2025-07-16T12:19:38.628572438Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:38.631066 env[1205]: time="2025-07-16T12:19:38.631035309Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:38.631911 env[1205]: time="2025-07-16T12:19:38.631890393Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:38.633050 env[1205]: time="2025-07-16T12:19:38.633007116Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:38.633777 env[1205]: time="2025-07-16T12:19:38.633756571Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:38.641603 env[1205]: time="2025-07-16T12:19:38.641567182Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:38.665538 env[1205]: time="2025-07-16T12:19:38.665446090Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 16 12:19:38.665724 env[1205]: time="2025-07-16T12:19:38.665511693Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 16 12:19:38.665724 env[1205]: time="2025-07-16T12:19:38.665523763Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 16 12:19:38.665850 env[1205]: time="2025-07-16T12:19:38.665770781Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4e6622d43550f35dc06ff23d715bfe5f5154ff47b5f01dc2deb9b2987f7e36bf pid=1706 runtime=io.containerd.runc.v2 Jul 16 12:19:38.676780 env[1205]: time="2025-07-16T12:19:38.676711839Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 16 12:19:38.677098 env[1205]: time="2025-07-16T12:19:38.677073733Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 16 12:19:38.677206 env[1205]: time="2025-07-16T12:19:38.677186146Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 16 12:19:38.677454 env[1205]: time="2025-07-16T12:19:38.677425437Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/92eef179aba4b4974b640b2ad90f5ae4f407b7040df35f521722591bbf9bd37e pid=1731 runtime=io.containerd.runc.v2 Jul 16 12:19:38.680686 env[1205]: time="2025-07-16T12:19:38.680620942Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 16 12:19:38.680823 env[1205]: time="2025-07-16T12:19:38.680657556Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 16 12:19:38.680823 env[1205]: time="2025-07-16T12:19:38.680668957Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 16 12:19:38.680823 env[1205]: time="2025-07-16T12:19:38.680784211Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3aa12f8b2b0fc2d1b4cf272976deb0fa6eabffb42703251f0483e6fce0629910 pid=1733 runtime=io.containerd.runc.v2 Jul 16 12:19:38.686161 systemd[1]: Started cri-containerd-4e6622d43550f35dc06ff23d715bfe5f5154ff47b5f01dc2deb9b2987f7e36bf.scope. Jul 16 12:19:38.709750 systemd[1]: Started cri-containerd-92eef179aba4b4974b640b2ad90f5ae4f407b7040df35f521722591bbf9bd37e.scope. Jul 16 12:19:38.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.714000 audit: BPF prog-id=58 op=LOAD Jul 16 12:19:38.714000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.714000 audit[1732]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1706 pid=1732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.714000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465363632326434333535306633356463303666663233643731356266 Jul 16 12:19:38.714000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.714000 audit[1732]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1706 pid=1732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.714000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465363632326434333535306633356463303666663233643731356266 Jul 16 12:19:38.714000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.714000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.714000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.714000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.714000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.714000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.714000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.714000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.714000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.714000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.714000 audit: BPF prog-id=59 op=LOAD Jul 16 12:19:38.714000 audit[1732]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003dc7f0 items=0 ppid=1706 pid=1732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.714000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465363632326434333535306633356463303666663233643731356266 Jul 16 12:19:38.715000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.715000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.715000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.715000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.715000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.715000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.715000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.715000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.715000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.715000 audit: BPF prog-id=60 op=LOAD Jul 16 12:19:38.715000 audit[1732]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003dc838 items=0 ppid=1706 pid=1732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465363632326434333535306633356463303666663233643731356266 Jul 16 12:19:38.715000 audit: BPF prog-id=60 op=UNLOAD Jul 16 12:19:38.715000 audit: BPF prog-id=59 op=UNLOAD Jul 16 12:19:38.715000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.715000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.715000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.715000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.715000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.715000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.715000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.715000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.715000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.715000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.715000 audit: BPF prog-id=61 op=LOAD Jul 16 12:19:38.715000 audit[1732]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003dcc48 items=0 ppid=1706 pid=1732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465363632326434333535306633356463303666663233643731356266 Jul 16 12:19:38.726142 systemd[1]: Started cri-containerd-3aa12f8b2b0fc2d1b4cf272976deb0fa6eabffb42703251f0483e6fce0629910.scope. Jul 16 12:19:38.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit: BPF prog-id=62 op=LOAD Jul 16 12:19:38.757000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1763]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1733 pid=1763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.757000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361613132663862326230666332643162346366323732393736646562 Jul 16 12:19:38.757000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1763]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1733 pid=1763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.757000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361613132663862326230666332643162346366323732393736646562 Jul 16 12:19:38.757000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit: BPF prog-id=63 op=LOAD Jul 16 12:19:38.757000 audit[1763]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003988c0 items=0 ppid=1733 pid=1763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.757000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361613132663862326230666332643162346366323732393736646562 Jul 16 12:19:38.757000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.757000 audit: BPF prog-id=64 op=LOAD Jul 16 12:19:38.757000 audit[1763]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000398908 items=0 ppid=1733 pid=1763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.757000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361613132663862326230666332643162346366323732393736646562 Jul 16 12:19:38.757000 audit: BPF prog-id=64 op=UNLOAD Jul 16 12:19:38.757000 audit: BPF prog-id=63 op=UNLOAD Jul 16 12:19:38.758000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.758000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.758000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.758000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.758000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.758000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.758000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.758000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.758000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.758000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.758000 audit: BPF prog-id=65 op=LOAD Jul 16 12:19:38.758000 audit[1763]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000398d18 items=0 ppid=1733 pid=1763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361613132663862326230666332643162346366323732393736646562 Jul 16 12:19:38.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit: BPF prog-id=66 op=LOAD Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1731 pid=1752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932656566313739616261346234393734623634306232616439306635 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1731 pid=1752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932656566313739616261346234393734623634306232616439306635 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit: BPF prog-id=67 op=LOAD Jul 16 12:19:38.766000 audit[1752]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003ee7f0 items=0 ppid=1731 pid=1752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932656566313739616261346234393734623634306232616439306635 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit: BPF prog-id=68 op=LOAD Jul 16 12:19:38.766000 audit[1752]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003ee838 items=0 ppid=1731 pid=1752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932656566313739616261346234393734623634306232616439306635 Jul 16 12:19:38.766000 audit: BPF prog-id=68 op=UNLOAD Jul 16 12:19:38.766000 audit: BPF prog-id=67 op=UNLOAD Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { perfmon } for pid=1752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit[1752]: AVC avc: denied { bpf } for pid=1752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.766000 audit: BPF prog-id=69 op=LOAD Jul 16 12:19:38.766000 audit[1752]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003eec48 items=0 ppid=1731 pid=1752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932656566313739616261346234393734623634306232616439306635 Jul 16 12:19:38.771621 env[1205]: time="2025-07-16T12:19:38.771582847Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-srv-frvg8.gb1.brightbox.com,Uid:6aa1f6e0eaf5dff90da5bb9e853c6226,Namespace:kube-system,Attempt:0,} returns sandbox id \"4e6622d43550f35dc06ff23d715bfe5f5154ff47b5f01dc2deb9b2987f7e36bf\"" Jul 16 12:19:38.776836 env[1205]: time="2025-07-16T12:19:38.776804674Z" level=info msg="CreateContainer within sandbox \"4e6622d43550f35dc06ff23d715bfe5f5154ff47b5f01dc2deb9b2987f7e36bf\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 16 12:19:38.785238 env[1205]: time="2025-07-16T12:19:38.785208084Z" level=info msg="CreateContainer within sandbox \"4e6622d43550f35dc06ff23d715bfe5f5154ff47b5f01dc2deb9b2987f7e36bf\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"21cbc2f8c8c2ae922c171f482a52fb1c39db37a7eaeb36be0b5e18d30b293398\"" Jul 16 12:19:38.785867 env[1205]: time="2025-07-16T12:19:38.785831267Z" level=info msg="StartContainer for \"21cbc2f8c8c2ae922c171f482a52fb1c39db37a7eaeb36be0b5e18d30b293398\"" Jul 16 12:19:38.807177 systemd[1]: Started cri-containerd-21cbc2f8c8c2ae922c171f482a52fb1c39db37a7eaeb36be0b5e18d30b293398.scope. Jul 16 12:19:38.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.834000 audit: BPF prog-id=70 op=LOAD Jul 16 12:19:38.836000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.836000 audit[1812]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1706 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231636263326638633863326165393232633137316634383261353266 Jul 16 12:19:38.836000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.836000 audit[1812]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1706 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231636263326638633863326165393232633137316634383261353266 Jul 16 12:19:38.836000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.836000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.836000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.836000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.836000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.836000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.836000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.836000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.836000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.836000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.836000 audit: BPF prog-id=71 op=LOAD Jul 16 12:19:38.836000 audit[1812]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000388370 items=0 ppid=1706 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231636263326638633863326165393232633137316634383261353266 Jul 16 12:19:38.837000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.837000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.837000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.837000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.837000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.837000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.837000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.837000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.837000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.837000 audit: BPF prog-id=72 op=LOAD Jul 16 12:19:38.837000 audit[1812]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003883b8 items=0 ppid=1706 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231636263326638633863326165393232633137316634383261353266 Jul 16 12:19:38.837000 audit: BPF prog-id=72 op=UNLOAD Jul 16 12:19:38.837000 audit: BPF prog-id=71 op=UNLOAD Jul 16 12:19:38.837000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.837000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.837000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.837000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.837000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.837000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.837000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.837000 audit[1812]: AVC avc: denied { perfmon } for pid=1812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.837000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.837000 audit[1812]: AVC avc: denied { bpf } for pid=1812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.837000 audit: BPF prog-id=73 op=LOAD Jul 16 12:19:38.837000 audit[1812]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003887c8 items=0 ppid=1706 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231636263326638633863326165393232633137316634383261353266 Jul 16 12:19:38.840093 env[1205]: time="2025-07-16T12:19:38.839447321Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-srv-frvg8.gb1.brightbox.com,Uid:f5d70d4a42acda3105f2b254755d933c,Namespace:kube-system,Attempt:0,} returns sandbox id \"3aa12f8b2b0fc2d1b4cf272976deb0fa6eabffb42703251f0483e6fce0629910\"" Jul 16 12:19:38.846390 env[1205]: time="2025-07-16T12:19:38.843769660Z" level=info msg="CreateContainer within sandbox \"3aa12f8b2b0fc2d1b4cf272976deb0fa6eabffb42703251f0483e6fce0629910\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 16 12:19:38.851067 env[1205]: time="2025-07-16T12:19:38.851033541Z" level=info msg="CreateContainer within sandbox \"3aa12f8b2b0fc2d1b4cf272976deb0fa6eabffb42703251f0483e6fce0629910\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"ad89facdb77434daa76e052f3769526e479ca55f1d6fe6ea3dbcca88dccaec8e\"" Jul 16 12:19:38.851423 env[1205]: time="2025-07-16T12:19:38.851398475Z" level=info msg="StartContainer for \"ad89facdb77434daa76e052f3769526e479ca55f1d6fe6ea3dbcca88dccaec8e\"" Jul 16 12:19:38.857680 env[1205]: time="2025-07-16T12:19:38.857647628Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-srv-frvg8.gb1.brightbox.com,Uid:b3126fa5f918a29412c483b3fd1bcada,Namespace:kube-system,Attempt:0,} returns sandbox id \"92eef179aba4b4974b640b2ad90f5ae4f407b7040df35f521722591bbf9bd37e\"" Jul 16 12:19:38.860536 env[1205]: time="2025-07-16T12:19:38.860504806Z" level=info msg="CreateContainer within sandbox \"92eef179aba4b4974b640b2ad90f5ae4f407b7040df35f521722591bbf9bd37e\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 16 12:19:38.875268 env[1205]: time="2025-07-16T12:19:38.868806762Z" level=info msg="CreateContainer within sandbox \"92eef179aba4b4974b640b2ad90f5ae4f407b7040df35f521722591bbf9bd37e\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"f3a1aea308702b5bd7b437ff1e990eb019cfb0f561cd35f8e96d42f178e42262\"" Jul 16 12:19:38.876008 kubelet[1661]: E0716 12:19:38.875972 1661 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.244.102.2:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.244.102.2:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Jul 16 12:19:38.876750 env[1205]: time="2025-07-16T12:19:38.876145773Z" level=info msg="StartContainer for \"f3a1aea308702b5bd7b437ff1e990eb019cfb0f561cd35f8e96d42f178e42262\"" Jul 16 12:19:38.882897 systemd[1]: Started cri-containerd-ad89facdb77434daa76e052f3769526e479ca55f1d6fe6ea3dbcca88dccaec8e.scope. Jul 16 12:19:38.912408 env[1205]: time="2025-07-16T12:19:38.911472813Z" level=info msg="StartContainer for \"21cbc2f8c8c2ae922c171f482a52fb1c39db37a7eaeb36be0b5e18d30b293398\" returns successfully" Jul 16 12:19:38.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.914000 audit: BPF prog-id=74 op=LOAD Jul 16 12:19:38.915000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.915000 audit[1856]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=1733 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164383966616364623737343334646161373665303532663337363935 Jul 16 12:19:38.916000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.916000 audit[1856]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=1733 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164383966616364623737343334646161373665303532663337363935 Jul 16 12:19:38.916000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.916000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.916000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.916000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.916000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.916000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.916000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.916000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.916000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.916000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.916000 audit: BPF prog-id=75 op=LOAD Jul 16 12:19:38.916000 audit[1856]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000295560 items=0 ppid=1733 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164383966616364623737343334646161373665303532663337363935 Jul 16 12:19:38.917000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.917000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.917000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.917000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.917000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.917000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.917000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.917000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.917000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.917000 audit: BPF prog-id=76 op=LOAD Jul 16 12:19:38.917000 audit[1856]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0002955a8 items=0 ppid=1733 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.917000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164383966616364623737343334646161373665303532663337363935 Jul 16 12:19:38.919000 audit: BPF prog-id=76 op=UNLOAD Jul 16 12:19:38.919000 audit: BPF prog-id=75 op=UNLOAD Jul 16 12:19:38.919000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.919000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.919000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.919000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.919000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.919000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.919000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.919000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.919000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.919000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.919000 audit: BPF prog-id=77 op=LOAD Jul 16 12:19:38.919000 audit[1856]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0002959b8 items=0 ppid=1733 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164383966616364623737343334646161373665303532663337363935 Jul 16 12:19:38.932772 systemd[1]: Started cri-containerd-f3a1aea308702b5bd7b437ff1e990eb019cfb0f561cd35f8e96d42f178e42262.scope. Jul 16 12:19:38.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.948000 audit: BPF prog-id=78 op=LOAD Jul 16 12:19:38.950000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.950000 audit[1886]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1731 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.950000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633613161656133303837303262356264376234333766663165393930 Jul 16 12:19:38.950000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.950000 audit[1886]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1731 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.950000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633613161656133303837303262356264376234333766663165393930 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit: BPF prog-id=79 op=LOAD Jul 16 12:19:38.951000 audit[1886]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003009b0 items=0 ppid=1731 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.951000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633613161656133303837303262356264376234333766663165393930 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit: BPF prog-id=80 op=LOAD Jul 16 12:19:38.951000 audit[1886]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003009f8 items=0 ppid=1731 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.951000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633613161656133303837303262356264376234333766663165393930 Jul 16 12:19:38.951000 audit: BPF prog-id=80 op=UNLOAD Jul 16 12:19:38.951000 audit: BPF prog-id=79 op=UNLOAD Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:38.951000 audit: BPF prog-id=81 op=LOAD Jul 16 12:19:38.951000 audit[1886]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000300e08 items=0 ppid=1731 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:38.951000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633613161656133303837303262356264376234333766663165393930 Jul 16 12:19:38.970436 env[1205]: time="2025-07-16T12:19:38.968265340Z" level=info msg="StartContainer for \"ad89facdb77434daa76e052f3769526e479ca55f1d6fe6ea3dbcca88dccaec8e\" returns successfully" Jul 16 12:19:38.982158 kubelet[1661]: E0716 12:19:38.981959 1661 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"srv-frvg8.gb1.brightbox.com\" not found" node="srv-frvg8.gb1.brightbox.com" Jul 16 12:19:38.984306 kubelet[1661]: E0716 12:19:38.984259 1661 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"srv-frvg8.gb1.brightbox.com\" not found" node="srv-frvg8.gb1.brightbox.com" Jul 16 12:19:38.998733 env[1205]: time="2025-07-16T12:19:38.998692074Z" level=info msg="StartContainer for \"f3a1aea308702b5bd7b437ff1e990eb019cfb0f561cd35f8e96d42f178e42262\" returns successfully" Jul 16 12:19:39.986686 kubelet[1661]: E0716 12:19:39.986655 1661 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"srv-frvg8.gb1.brightbox.com\" not found" node="srv-frvg8.gb1.brightbox.com" Jul 16 12:19:39.987122 kubelet[1661]: E0716 12:19:39.987079 1661 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"srv-frvg8.gb1.brightbox.com\" not found" node="srv-frvg8.gb1.brightbox.com" Jul 16 12:19:40.121213 kubelet[1661]: I0716 12:19:40.121177 1661 kubelet_node_status.go:75] "Attempting to register node" node="srv-frvg8.gb1.brightbox.com" Jul 16 12:19:40.988524 kubelet[1661]: E0716 12:19:40.988494 1661 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"srv-frvg8.gb1.brightbox.com\" not found" node="srv-frvg8.gb1.brightbox.com" Jul 16 12:19:41.280409 kernel: kauditd_printk_skb: 572 callbacks suppressed Jul 16 12:19:41.281676 kernel: audit: type=1400 audit(1752668381.275:556): avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525832 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:19:41.275000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525832 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:19:41.275000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c00086fc20 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:19:41.289779 kernel: audit: type=1300 audit(1752668381.275:556): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c00086fc20 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:19:41.275000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:19:41.296397 kernel: audit: type=1327 audit(1752668381.275:556): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:19:41.284000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:19:41.284000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0003ae700 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:19:41.307262 kernel: audit: type=1400 audit(1752668381.284:557): avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:19:41.307346 kernel: audit: type=1300 audit(1752668381.284:557): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0003ae700 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:19:41.307390 kernel: audit: type=1327 audit(1752668381.284:557): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:19:41.284000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:19:41.651000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525832 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:19:41.653000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525828 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:19:41.660618 kernel: audit: type=1400 audit(1752668381.651:558): avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525832 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:19:41.660713 kernel: audit: type=1400 audit(1752668381.653:559): avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525828 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:19:41.653000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c000b2d920 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:19:41.672124 kernel: audit: type=1300 audit(1752668381.653:559): arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c000b2d920 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:19:41.672263 kernel: audit: type=1327 audit(1752668381.653:559): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:19:41.653000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:19:41.660000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525834 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:19:41.660000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c003530000 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:19:41.660000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:19:41.651000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0033baf60 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:19:41.651000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:19:41.660000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:19:41.660000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00489f2c0 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:19:41.660000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:19:41.711000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:19:41.711000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c0057f2d40 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:19:41.711000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:19:41.711000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525832 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:19:41.711000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c0036b7cb0 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:19:41.711000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:19:41.802382 kubelet[1661]: E0716 12:19:41.802333 1661 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"srv-frvg8.gb1.brightbox.com\" not found" node="srv-frvg8.gb1.brightbox.com" Jul 16 12:19:41.846494 kubelet[1661]: I0716 12:19:41.846463 1661 kubelet_node_status.go:78] "Successfully registered node" node="srv-frvg8.gb1.brightbox.com" Jul 16 12:19:41.846713 kubelet[1661]: E0716 12:19:41.846697 1661 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"srv-frvg8.gb1.brightbox.com\": node \"srv-frvg8.gb1.brightbox.com\" not found" Jul 16 12:19:41.917849 kubelet[1661]: I0716 12:19:41.917731 1661 apiserver.go:52] "Watching apiserver" Jul 16 12:19:41.939385 kubelet[1661]: I0716 12:19:41.939301 1661 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 16 12:19:41.939385 kubelet[1661]: I0716 12:19:41.939382 1661 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:41.950190 kubelet[1661]: E0716 12:19:41.950151 1661 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-srv-frvg8.gb1.brightbox.com\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:41.950190 kubelet[1661]: I0716 12:19:41.950184 1661 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:41.953116 kubelet[1661]: E0716 12:19:41.953088 1661 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-srv-frvg8.gb1.brightbox.com\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:41.953116 kubelet[1661]: I0716 12:19:41.953111 1661 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:41.956128 kubelet[1661]: E0716 12:19:41.956098 1661 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-srv-frvg8.gb1.brightbox.com\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:41.988304 kubelet[1661]: I0716 12:19:41.988275 1661 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:41.990201 kubelet[1661]: E0716 12:19:41.990177 1661 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-srv-frvg8.gb1.brightbox.com\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:43.033304 kubelet[1661]: I0716 12:19:43.033252 1661 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:43.040911 kubelet[1661]: I0716 12:19:43.040825 1661 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Jul 16 12:19:44.099202 kubelet[1661]: I0716 12:19:44.099086 1661 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:44.115402 kubelet[1661]: I0716 12:19:44.115346 1661 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Jul 16 12:19:44.313838 systemd[1]: Reloading. Jul 16 12:19:44.415003 /usr/lib/systemd/system-generators/torcx-generator[1958]: time="2025-07-16T12:19:44Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 16 12:19:44.431047 /usr/lib/systemd/system-generators/torcx-generator[1958]: time="2025-07-16T12:19:44Z" level=info msg="torcx already run" Jul 16 12:19:44.528610 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 16 12:19:44.528631 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 16 12:19:44.549889 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 16 12:19:44.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.651000 audit: BPF prog-id=82 op=LOAD Jul 16 12:19:44.651000 audit: BPF prog-id=43 op=UNLOAD Jul 16 12:19:44.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.653000 audit: BPF prog-id=83 op=LOAD Jul 16 12:19:44.653000 audit: BPF prog-id=78 op=UNLOAD Jul 16 12:19:44.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.655000 audit: BPF prog-id=84 op=LOAD Jul 16 12:19:44.655000 audit: BPF prog-id=70 op=UNLOAD Jul 16 12:19:44.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.655000 audit: BPF prog-id=85 op=LOAD Jul 16 12:19:44.655000 audit: BPF prog-id=44 op=UNLOAD Jul 16 12:19:44.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.657000 audit: BPF prog-id=86 op=LOAD Jul 16 12:19:44.657000 audit: BPF prog-id=45 op=UNLOAD Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit: BPF prog-id=87 op=LOAD Jul 16 12:19:44.660000 audit: BPF prog-id=46 op=UNLOAD Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit: BPF prog-id=88 op=LOAD Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.660000 audit: BPF prog-id=89 op=LOAD Jul 16 12:19:44.660000 audit: BPF prog-id=47 op=UNLOAD Jul 16 12:19:44.660000 audit: BPF prog-id=48 op=UNLOAD Jul 16 12:19:44.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.662000 audit: BPF prog-id=90 op=LOAD Jul 16 12:19:44.662000 audit: BPF prog-id=58 op=UNLOAD Jul 16 12:19:44.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.663000 audit: BPF prog-id=91 op=LOAD Jul 16 12:19:44.663000 audit: BPF prog-id=66 op=UNLOAD Jul 16 12:19:44.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.663000 audit: BPF prog-id=92 op=LOAD Jul 16 12:19:44.663000 audit: BPF prog-id=74 op=UNLOAD Jul 16 12:19:44.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.666000 audit: BPF prog-id=93 op=LOAD Jul 16 12:19:44.666000 audit: BPF prog-id=49 op=UNLOAD Jul 16 12:19:44.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.666000 audit: BPF prog-id=94 op=LOAD Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit: BPF prog-id=95 op=LOAD Jul 16 12:19:44.667000 audit: BPF prog-id=50 op=UNLOAD Jul 16 12:19:44.667000 audit: BPF prog-id=51 op=UNLOAD Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit: BPF prog-id=96 op=LOAD Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.667000 audit: BPF prog-id=97 op=LOAD Jul 16 12:19:44.667000 audit: BPF prog-id=52 op=UNLOAD Jul 16 12:19:44.667000 audit: BPF prog-id=53 op=UNLOAD Jul 16 12:19:44.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.668000 audit: BPF prog-id=98 op=LOAD Jul 16 12:19:44.668000 audit: BPF prog-id=62 op=UNLOAD Jul 16 12:19:44.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit: BPF prog-id=99 op=LOAD Jul 16 12:19:44.669000 audit: BPF prog-id=54 op=UNLOAD Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit: BPF prog-id=100 op=LOAD Jul 16 12:19:44.669000 audit: BPF prog-id=55 op=UNLOAD Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit: BPF prog-id=101 op=LOAD Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:44.669000 audit: BPF prog-id=102 op=LOAD Jul 16 12:19:44.669000 audit: BPF prog-id=56 op=UNLOAD Jul 16 12:19:44.669000 audit: BPF prog-id=57 op=UNLOAD Jul 16 12:19:44.691510 systemd[1]: Stopping kubelet.service... Jul 16 12:19:44.711161 systemd[1]: kubelet.service: Deactivated successfully. Jul 16 12:19:44.711871 systemd[1]: Stopped kubelet.service. Jul 16 12:19:44.711000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:44.712355 systemd[1]: kubelet.service: Consumed 2.099s CPU time. Jul 16 12:19:44.717037 systemd[1]: Starting kubelet.service... Jul 16 12:19:45.671000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:19:45.672261 systemd[1]: Started kubelet.service. Jul 16 12:19:45.769910 kubelet[2009]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 16 12:19:45.770624 kubelet[2009]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 16 12:19:45.772580 kubelet[2009]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 16 12:19:45.772807 kubelet[2009]: I0716 12:19:45.772762 2009 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 16 12:19:45.797853 kubelet[2009]: I0716 12:19:45.797801 2009 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 16 12:19:45.797853 kubelet[2009]: I0716 12:19:45.797843 2009 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 16 12:19:45.798650 kubelet[2009]: I0716 12:19:45.798630 2009 server.go:956] "Client rotation is on, will bootstrap in background" Jul 16 12:19:45.804780 kubelet[2009]: I0716 12:19:45.804744 2009 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Jul 16 12:19:45.850438 kubelet[2009]: I0716 12:19:45.847898 2009 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 16 12:19:45.858824 kubelet[2009]: E0716 12:19:45.858029 2009 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 16 12:19:45.858824 kubelet[2009]: I0716 12:19:45.858069 2009 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 16 12:19:45.862139 kubelet[2009]: I0716 12:19:45.861767 2009 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 16 12:19:45.864014 kubelet[2009]: I0716 12:19:45.862491 2009 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 16 12:19:45.864162 kubelet[2009]: I0716 12:19:45.863665 2009 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"srv-frvg8.gb1.brightbox.com","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 16 12:19:45.864162 kubelet[2009]: I0716 12:19:45.864108 2009 topology_manager.go:138] "Creating topology manager with none policy" Jul 16 12:19:45.864162 kubelet[2009]: I0716 12:19:45.864121 2009 container_manager_linux.go:303] "Creating device plugin manager" Jul 16 12:19:45.864556 kubelet[2009]: I0716 12:19:45.864191 2009 state_mem.go:36] "Initialized new in-memory state store" Jul 16 12:19:45.865921 kubelet[2009]: I0716 12:19:45.865351 2009 kubelet.go:480] "Attempting to sync node with API server" Jul 16 12:19:45.867618 kubelet[2009]: I0716 12:19:45.866049 2009 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 16 12:19:45.867618 kubelet[2009]: I0716 12:19:45.866092 2009 kubelet.go:386] "Adding apiserver pod source" Jul 16 12:19:45.867618 kubelet[2009]: I0716 12:19:45.866111 2009 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 16 12:19:45.882258 kubelet[2009]: I0716 12:19:45.881068 2009 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 16 12:19:45.883895 kubelet[2009]: I0716 12:19:45.883858 2009 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 16 12:19:45.888338 kubelet[2009]: I0716 12:19:45.887726 2009 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 16 12:19:45.888338 kubelet[2009]: I0716 12:19:45.887803 2009 server.go:1289] "Started kubelet" Jul 16 12:19:45.895000 audit[2009]: AVC avc: denied { mac_admin } for pid=2009 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:45.895000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 16 12:19:45.895000 audit[2009]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0006cdc20 a1=c000cb2348 a2=c0006cdbf0 a3=25 items=0 ppid=1 pid=2009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:45.895000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 16 12:19:45.896000 audit[2009]: AVC avc: denied { mac_admin } for pid=2009 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:45.896000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 16 12:19:45.898442 kubelet[2009]: I0716 12:19:45.898065 2009 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 16 12:19:45.896000 audit[2009]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0006b1020 a1=c000cb2360 a2=c0006cdcb0 a3=25 items=0 ppid=1 pid=2009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:45.896000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 16 12:19:45.901995 kubelet[2009]: I0716 12:19:45.901944 2009 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 16 12:19:45.905520 kubelet[2009]: I0716 12:19:45.905489 2009 server.go:317] "Adding debug handlers to kubelet server" Jul 16 12:19:45.919256 kubelet[2009]: I0716 12:19:45.919215 2009 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 16 12:19:45.919513 kubelet[2009]: I0716 12:19:45.919490 2009 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 16 12:19:45.933385 kubelet[2009]: E0716 12:19:45.931553 2009 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 16 12:19:45.940129 kubelet[2009]: I0716 12:19:45.940103 2009 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 16 12:19:45.943125 kubelet[2009]: I0716 12:19:45.943099 2009 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 16 12:19:45.943676 kubelet[2009]: I0716 12:19:45.943662 2009 reconciler.go:26] "Reconciler: start to sync state" Jul 16 12:19:45.951639 kubelet[2009]: I0716 12:19:45.951613 2009 factory.go:223] Registration of the systemd container factory successfully Jul 16 12:19:45.951952 kubelet[2009]: I0716 12:19:45.951926 2009 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 16 12:19:45.953234 kubelet[2009]: I0716 12:19:45.953149 2009 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 16 12:19:45.958674 kubelet[2009]: I0716 12:19:45.958655 2009 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 16 12:19:45.958896 kubelet[2009]: I0716 12:19:45.953849 2009 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 16 12:19:45.961820 kubelet[2009]: I0716 12:19:45.961801 2009 factory.go:223] Registration of the containerd container factory successfully Jul 16 12:19:46.008318 kubelet[2009]: I0716 12:19:46.008252 2009 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 16 12:19:46.014436 kubelet[2009]: I0716 12:19:46.014401 2009 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 16 12:19:46.014696 kubelet[2009]: I0716 12:19:46.014685 2009 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 16 12:19:46.014877 kubelet[2009]: I0716 12:19:46.014864 2009 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 16 12:19:46.015014 kubelet[2009]: I0716 12:19:46.015004 2009 kubelet.go:2436] "Starting kubelet main sync loop" Jul 16 12:19:46.015173 kubelet[2009]: E0716 12:19:46.015141 2009 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 16 12:19:46.059704 kubelet[2009]: I0716 12:19:46.059651 2009 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 16 12:19:46.060062 kubelet[2009]: I0716 12:19:46.060046 2009 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 16 12:19:46.060173 kubelet[2009]: I0716 12:19:46.060153 2009 state_mem.go:36] "Initialized new in-memory state store" Jul 16 12:19:46.060454 kubelet[2009]: I0716 12:19:46.060435 2009 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 16 12:19:46.060597 kubelet[2009]: I0716 12:19:46.060567 2009 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 16 12:19:46.060722 kubelet[2009]: I0716 12:19:46.060713 2009 policy_none.go:49] "None policy: Start" Jul 16 12:19:46.060836 kubelet[2009]: I0716 12:19:46.060826 2009 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 16 12:19:46.060920 kubelet[2009]: I0716 12:19:46.060912 2009 state_mem.go:35] "Initializing new in-memory state store" Jul 16 12:19:46.061135 kubelet[2009]: I0716 12:19:46.061125 2009 state_mem.go:75] "Updated machine memory state" Jul 16 12:19:46.069244 kubelet[2009]: E0716 12:19:46.069215 2009 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 16 12:19:46.075229 kubelet[2009]: E0716 12:19:46.075196 2009 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 16 12:19:46.073000 audit[2009]: AVC avc: denied { mac_admin } for pid=2009 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:46.073000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 16 12:19:46.073000 audit[2009]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000f80ae0 a1=c0010618a8 a2=c000f80ab0 a3=25 items=0 ppid=1 pid=2009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:46.073000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 16 12:19:46.076058 kubelet[2009]: I0716 12:19:46.076042 2009 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 16 12:19:46.076239 kubelet[2009]: I0716 12:19:46.076187 2009 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 16 12:19:46.076675 kubelet[2009]: I0716 12:19:46.076661 2009 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 16 12:19:46.078882 kubelet[2009]: E0716 12:19:46.078862 2009 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 16 12:19:46.118772 kubelet[2009]: I0716 12:19:46.118659 2009 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:46.131912 kubelet[2009]: I0716 12:19:46.131869 2009 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:46.139426 kubelet[2009]: I0716 12:19:46.135176 2009 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:46.142921 kubelet[2009]: I0716 12:19:46.142886 2009 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Jul 16 12:19:46.143207 kubelet[2009]: E0716 12:19:46.143188 2009 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-srv-frvg8.gb1.brightbox.com\" already exists" pod="kube-system/kube-apiserver-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:46.145898 kubelet[2009]: I0716 12:19:46.145871 2009 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Jul 16 12:19:46.146226 kubelet[2009]: E0716 12:19:46.146194 2009 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-srv-frvg8.gb1.brightbox.com\" already exists" pod="kube-system/kube-controller-manager-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:46.146401 kubelet[2009]: I0716 12:19:46.146127 2009 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Jul 16 12:19:46.147731 kubelet[2009]: I0716 12:19:46.147705 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6aa1f6e0eaf5dff90da5bb9e853c6226-k8s-certs\") pod \"kube-apiserver-srv-frvg8.gb1.brightbox.com\" (UID: \"6aa1f6e0eaf5dff90da5bb9e853c6226\") " pod="kube-system/kube-apiserver-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:46.147859 kubelet[2009]: I0716 12:19:46.147842 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6aa1f6e0eaf5dff90da5bb9e853c6226-usr-share-ca-certificates\") pod \"kube-apiserver-srv-frvg8.gb1.brightbox.com\" (UID: \"6aa1f6e0eaf5dff90da5bb9e853c6226\") " pod="kube-system/kube-apiserver-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:46.147967 kubelet[2009]: I0716 12:19:46.147944 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/f5d70d4a42acda3105f2b254755d933c-ca-certs\") pod \"kube-controller-manager-srv-frvg8.gb1.brightbox.com\" (UID: \"f5d70d4a42acda3105f2b254755d933c\") " pod="kube-system/kube-controller-manager-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:46.148047 kubelet[2009]: I0716 12:19:46.148035 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/f5d70d4a42acda3105f2b254755d933c-flexvolume-dir\") pod \"kube-controller-manager-srv-frvg8.gb1.brightbox.com\" (UID: \"f5d70d4a42acda3105f2b254755d933c\") " pod="kube-system/kube-controller-manager-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:46.148119 kubelet[2009]: I0716 12:19:46.148107 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/f5d70d4a42acda3105f2b254755d933c-k8s-certs\") pod \"kube-controller-manager-srv-frvg8.gb1.brightbox.com\" (UID: \"f5d70d4a42acda3105f2b254755d933c\") " pod="kube-system/kube-controller-manager-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:46.148194 kubelet[2009]: I0716 12:19:46.148182 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/f5d70d4a42acda3105f2b254755d933c-kubeconfig\") pod \"kube-controller-manager-srv-frvg8.gb1.brightbox.com\" (UID: \"f5d70d4a42acda3105f2b254755d933c\") " pod="kube-system/kube-controller-manager-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:46.148277 kubelet[2009]: I0716 12:19:46.148263 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/f5d70d4a42acda3105f2b254755d933c-usr-share-ca-certificates\") pod \"kube-controller-manager-srv-frvg8.gb1.brightbox.com\" (UID: \"f5d70d4a42acda3105f2b254755d933c\") " pod="kube-system/kube-controller-manager-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:46.148611 kubelet[2009]: I0716 12:19:46.148591 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b3126fa5f918a29412c483b3fd1bcada-kubeconfig\") pod \"kube-scheduler-srv-frvg8.gb1.brightbox.com\" (UID: \"b3126fa5f918a29412c483b3fd1bcada\") " pod="kube-system/kube-scheduler-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:46.148770 kubelet[2009]: I0716 12:19:46.148753 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6aa1f6e0eaf5dff90da5bb9e853c6226-ca-certs\") pod \"kube-apiserver-srv-frvg8.gb1.brightbox.com\" (UID: \"6aa1f6e0eaf5dff90da5bb9e853c6226\") " pod="kube-system/kube-apiserver-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:46.199175 kubelet[2009]: I0716 12:19:46.196818 2009 kubelet_node_status.go:75] "Attempting to register node" node="srv-frvg8.gb1.brightbox.com" Jul 16 12:19:46.220631 kubelet[2009]: I0716 12:19:46.220584 2009 kubelet_node_status.go:124] "Node was previously registered" node="srv-frvg8.gb1.brightbox.com" Jul 16 12:19:46.220997 kubelet[2009]: I0716 12:19:46.220984 2009 kubelet_node_status.go:78] "Successfully registered node" node="srv-frvg8.gb1.brightbox.com" Jul 16 12:19:46.872759 kubelet[2009]: I0716 12:19:46.872687 2009 apiserver.go:52] "Watching apiserver" Jul 16 12:19:46.944049 kubelet[2009]: I0716 12:19:46.943966 2009 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 16 12:19:47.026907 kubelet[2009]: I0716 12:19:47.026734 2009 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-srv-frvg8.gb1.brightbox.com" podStartSLOduration=3.026656678 podStartE2EDuration="3.026656678s" podCreationTimestamp="2025-07-16 12:19:44 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-16 12:19:47.015947564 +0000 UTC m=+1.330707329" watchObservedRunningTime="2025-07-16 12:19:47.026656678 +0000 UTC m=+1.341416470" Jul 16 12:19:47.049020 kubelet[2009]: I0716 12:19:47.048914 2009 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-srv-frvg8.gb1.brightbox.com" podStartSLOduration=4.048889505 podStartE2EDuration="4.048889505s" podCreationTimestamp="2025-07-16 12:19:43 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-16 12:19:47.02750864 +0000 UTC m=+1.342268487" watchObservedRunningTime="2025-07-16 12:19:47.048889505 +0000 UTC m=+1.363649348" Jul 16 12:19:47.063865 kubelet[2009]: I0716 12:19:47.063806 2009 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:47.081194 kubelet[2009]: I0716 12:19:47.081157 2009 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Jul 16 12:19:47.082584 kubelet[2009]: E0716 12:19:47.082555 2009 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-srv-frvg8.gb1.brightbox.com\" already exists" pod="kube-system/kube-scheduler-srv-frvg8.gb1.brightbox.com" Jul 16 12:19:47.082794 kubelet[2009]: I0716 12:19:47.082466 2009 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-srv-frvg8.gb1.brightbox.com" podStartSLOduration=1.082425982 podStartE2EDuration="1.082425982s" podCreationTimestamp="2025-07-16 12:19:46 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-16 12:19:47.049305705 +0000 UTC m=+1.364065517" watchObservedRunningTime="2025-07-16 12:19:47.082425982 +0000 UTC m=+1.397185747" Jul 16 12:19:48.096000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=525859 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 16 12:19:48.102279 kernel: kauditd_printk_skb: 272 callbacks suppressed Jul 16 12:19:48.102671 kernel: audit: type=1400 audit(1752668388.096:813): avc: denied { watch } for pid=1880 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=525859 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 16 12:19:48.096000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00077d180 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:19:48.113494 kernel: audit: type=1300 audit(1752668388.096:813): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00077d180 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:19:48.113732 kernel: audit: type=1327 audit(1752668388.096:813): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:19:48.096000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:19:48.948000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:19:48.957602 kernel: audit: type=1400 audit(1752668388.948:814): avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:19:48.957965 kernel: audit: type=1300 audit(1752668388.948:814): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000a1c180 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:19:48.948000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000a1c180 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:19:48.948000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:19:48.966700 kernel: audit: type=1327 audit(1752668388.948:814): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:19:48.966831 kernel: audit: type=1400 audit(1752668388.948:815): avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:19:48.948000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:19:48.948000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000a1c520 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:19:48.974844 kernel: audit: type=1300 audit(1752668388.948:815): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000a1c520 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:19:48.975003 kernel: audit: type=1327 audit(1752668388.948:815): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:19:48.948000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:19:48.948000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:19:48.983310 kernel: audit: type=1400 audit(1752668388.948:816): avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:19:48.948000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000a1c5a0 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:19:48.948000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:19:48.948000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:19:48.948000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000a1c680 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:19:48.948000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:19:50.154548 kubelet[2009]: I0716 12:19:50.154493 2009 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 16 12:19:50.155419 env[1205]: time="2025-07-16T12:19:50.155361674Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 16 12:19:50.156005 kubelet[2009]: I0716 12:19:50.155983 2009 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 16 12:19:50.972972 systemd[1]: Created slice kubepods-besteffort-pod81095b74_991e_470d_9b1e_945fe5525e92.slice. Jul 16 12:19:50.981383 kubelet[2009]: I0716 12:19:50.981328 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/81095b74-991e-470d-9b1e-945fe5525e92-kube-proxy\") pod \"kube-proxy-f2kbg\" (UID: \"81095b74-991e-470d-9b1e-945fe5525e92\") " pod="kube-system/kube-proxy-f2kbg" Jul 16 12:19:50.981383 kubelet[2009]: I0716 12:19:50.981380 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/81095b74-991e-470d-9b1e-945fe5525e92-lib-modules\") pod \"kube-proxy-f2kbg\" (UID: \"81095b74-991e-470d-9b1e-945fe5525e92\") " pod="kube-system/kube-proxy-f2kbg" Jul 16 12:19:50.981622 kubelet[2009]: I0716 12:19:50.981404 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bbsz5\" (UniqueName: \"kubernetes.io/projected/81095b74-991e-470d-9b1e-945fe5525e92-kube-api-access-bbsz5\") pod \"kube-proxy-f2kbg\" (UID: \"81095b74-991e-470d-9b1e-945fe5525e92\") " pod="kube-system/kube-proxy-f2kbg" Jul 16 12:19:50.981622 kubelet[2009]: I0716 12:19:50.981433 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/81095b74-991e-470d-9b1e-945fe5525e92-xtables-lock\") pod \"kube-proxy-f2kbg\" (UID: \"81095b74-991e-470d-9b1e-945fe5525e92\") " pod="kube-system/kube-proxy-f2kbg" Jul 16 12:19:51.094968 kubelet[2009]: E0716 12:19:51.094889 2009 projected.go:289] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Jul 16 12:19:51.094968 kubelet[2009]: E0716 12:19:51.094961 2009 projected.go:194] Error preparing data for projected volume kube-api-access-bbsz5 for pod kube-system/kube-proxy-f2kbg: configmap "kube-root-ca.crt" not found Jul 16 12:19:51.095262 kubelet[2009]: E0716 12:19:51.095058 2009 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/81095b74-991e-470d-9b1e-945fe5525e92-kube-api-access-bbsz5 podName:81095b74-991e-470d-9b1e-945fe5525e92 nodeName:}" failed. No retries permitted until 2025-07-16 12:19:51.595028018 +0000 UTC m=+5.909787772 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-bbsz5" (UniqueName: "kubernetes.io/projected/81095b74-991e-470d-9b1e-945fe5525e92-kube-api-access-bbsz5") pod "kube-proxy-f2kbg" (UID: "81095b74-991e-470d-9b1e-945fe5525e92") : configmap "kube-root-ca.crt" not found Jul 16 12:19:51.411428 systemd[1]: Created slice kubepods-besteffort-pod8793bd6d_9c70_449a_8257_425eed986682.slice. Jul 16 12:19:51.485779 kubelet[2009]: I0716 12:19:51.485679 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-stwbj\" (UniqueName: \"kubernetes.io/projected/8793bd6d-9c70-449a-8257-425eed986682-kube-api-access-stwbj\") pod \"tigera-operator-747864d56d-tn6vx\" (UID: \"8793bd6d-9c70-449a-8257-425eed986682\") " pod="tigera-operator/tigera-operator-747864d56d-tn6vx" Jul 16 12:19:51.487335 kubelet[2009]: I0716 12:19:51.487282 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/8793bd6d-9c70-449a-8257-425eed986682-var-lib-calico\") pod \"tigera-operator-747864d56d-tn6vx\" (UID: \"8793bd6d-9c70-449a-8257-425eed986682\") " pod="tigera-operator/tigera-operator-747864d56d-tn6vx" Jul 16 12:19:51.601632 kubelet[2009]: I0716 12:19:51.601565 2009 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 16 12:19:51.716060 env[1205]: time="2025-07-16T12:19:51.715533221Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-tn6vx,Uid:8793bd6d-9c70-449a-8257-425eed986682,Namespace:tigera-operator,Attempt:0,}" Jul 16 12:19:51.738947 env[1205]: time="2025-07-16T12:19:51.738680722Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 16 12:19:51.738947 env[1205]: time="2025-07-16T12:19:51.738726802Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 16 12:19:51.738947 env[1205]: time="2025-07-16T12:19:51.738739000Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 16 12:19:51.739426 env[1205]: time="2025-07-16T12:19:51.738953214Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c216ea06c91030ccd25d21331296cba7acf77b109cabce174a8b09f252927cf6 pid=2067 runtime=io.containerd.runc.v2 Jul 16 12:19:51.759998 systemd[1]: Started cri-containerd-c216ea06c91030ccd25d21331296cba7acf77b109cabce174a8b09f252927cf6.scope. Jul 16 12:19:51.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.797000 audit: BPF prog-id=103 op=LOAD Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { bpf } for pid=2078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2067 pid=2078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:51.799000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332313665613036633931303330636364323564323133333132393663 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { perfmon } for pid=2078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2067 pid=2078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:51.799000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332313665613036633931303330636364323564323133333132393663 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { bpf } for pid=2078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { bpf } for pid=2078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { bpf } for pid=2078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { perfmon } for pid=2078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { perfmon } for pid=2078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { perfmon } for pid=2078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { perfmon } for pid=2078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { perfmon } for pid=2078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { bpf } for pid=2078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { bpf } for pid=2078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit: BPF prog-id=104 op=LOAD Jul 16 12:19:51.799000 audit[2078]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000212370 items=0 ppid=2067 pid=2078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:51.799000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332313665613036633931303330636364323564323133333132393663 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { bpf } for pid=2078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { bpf } for pid=2078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { perfmon } for pid=2078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { perfmon } for pid=2078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { perfmon } for pid=2078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { perfmon } for pid=2078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { perfmon } for pid=2078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { bpf } for pid=2078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { bpf } for pid=2078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit: BPF prog-id=105 op=LOAD Jul 16 12:19:51.799000 audit[2078]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0002123b8 items=0 ppid=2067 pid=2078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:51.799000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332313665613036633931303330636364323564323133333132393663 Jul 16 12:19:51.799000 audit: BPF prog-id=105 op=UNLOAD Jul 16 12:19:51.799000 audit: BPF prog-id=104 op=UNLOAD Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { bpf } for pid=2078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { bpf } for pid=2078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { bpf } for pid=2078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { perfmon } for pid=2078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { perfmon } for pid=2078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { perfmon } for pid=2078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { perfmon } for pid=2078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { perfmon } for pid=2078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { bpf } for pid=2078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit[2078]: AVC avc: denied { bpf } for pid=2078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.799000 audit: BPF prog-id=106 op=LOAD Jul 16 12:19:51.799000 audit[2078]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0002127c8 items=0 ppid=2067 pid=2078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:51.799000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332313665613036633931303330636364323564323133333132393663 Jul 16 12:19:51.845910 env[1205]: time="2025-07-16T12:19:51.844570756Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-tn6vx,Uid:8793bd6d-9c70-449a-8257-425eed986682,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"c216ea06c91030ccd25d21331296cba7acf77b109cabce174a8b09f252927cf6\"" Jul 16 12:19:51.850200 env[1205]: time="2025-07-16T12:19:51.849570850Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 16 12:19:51.884532 env[1205]: time="2025-07-16T12:19:51.884442514Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-f2kbg,Uid:81095b74-991e-470d-9b1e-945fe5525e92,Namespace:kube-system,Attempt:0,}" Jul 16 12:19:51.901766 env[1205]: time="2025-07-16T12:19:51.901650670Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 16 12:19:51.901766 env[1205]: time="2025-07-16T12:19:51.901764053Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 16 12:19:51.902096 env[1205]: time="2025-07-16T12:19:51.901789996Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 16 12:19:51.902096 env[1205]: time="2025-07-16T12:19:51.901983601Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3da2149dfc7d9634e664b4fede25a8dbcc56f7d880d6f1aefba6c6f267ba230a pid=2110 runtime=io.containerd.runc.v2 Jul 16 12:19:51.921665 systemd[1]: Started cri-containerd-3da2149dfc7d9634e664b4fede25a8dbcc56f7d880d6f1aefba6c6f267ba230a.scope. Jul 16 12:19:51.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.946000 audit: BPF prog-id=107 op=LOAD Jul 16 12:19:51.950000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.950000 audit[2120]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2110 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:51.950000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364613231343964666337643936333465363634623466656465323561 Jul 16 12:19:51.952000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.952000 audit[2120]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2110 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:51.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364613231343964666337643936333465363634623466656465323561 Jul 16 12:19:51.952000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.952000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.952000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.952000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.952000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.952000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.952000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.952000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.952000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.952000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.952000 audit: BPF prog-id=108 op=LOAD Jul 16 12:19:51.952000 audit[2120]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000e5ce0 items=0 ppid=2110 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:51.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364613231343964666337643936333465363634623466656465323561 Jul 16 12:19:51.953000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.953000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.953000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.953000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.953000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.953000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.953000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.953000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.953000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.953000 audit: BPF prog-id=109 op=LOAD Jul 16 12:19:51.953000 audit[2120]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000e5d28 items=0 ppid=2110 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:51.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364613231343964666337643936333465363634623466656465323561 Jul 16 12:19:51.954000 audit: BPF prog-id=109 op=UNLOAD Jul 16 12:19:51.954000 audit: BPF prog-id=108 op=UNLOAD Jul 16 12:19:51.954000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.954000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.954000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.954000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.954000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.954000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.954000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.954000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.954000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.954000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:51.954000 audit: BPF prog-id=110 op=LOAD Jul 16 12:19:51.954000 audit[2120]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003ce138 items=0 ppid=2110 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:51.954000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364613231343964666337643936333465363634623466656465323561 Jul 16 12:19:51.981425 env[1205]: time="2025-07-16T12:19:51.979420370Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-f2kbg,Uid:81095b74-991e-470d-9b1e-945fe5525e92,Namespace:kube-system,Attempt:0,} returns sandbox id \"3da2149dfc7d9634e664b4fede25a8dbcc56f7d880d6f1aefba6c6f267ba230a\"" Jul 16 12:19:51.989015 env[1205]: time="2025-07-16T12:19:51.988953438Z" level=info msg="CreateContainer within sandbox \"3da2149dfc7d9634e664b4fede25a8dbcc56f7d880d6f1aefba6c6f267ba230a\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 16 12:19:52.004734 env[1205]: time="2025-07-16T12:19:52.004623292Z" level=info msg="CreateContainer within sandbox \"3da2149dfc7d9634e664b4fede25a8dbcc56f7d880d6f1aefba6c6f267ba230a\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"cb7ab1d486e4f74faf7d95f79fcfb0980026b7f2debff2bf9ebabf1f816cf196\"" Jul 16 12:19:52.008639 env[1205]: time="2025-07-16T12:19:52.008571446Z" level=info msg="StartContainer for \"cb7ab1d486e4f74faf7d95f79fcfb0980026b7f2debff2bf9ebabf1f816cf196\"" Jul 16 12:19:52.034939 systemd[1]: Started cri-containerd-cb7ab1d486e4f74faf7d95f79fcfb0980026b7f2debff2bf9ebabf1f816cf196.scope. Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7ff7b299d018 items=0 ppid=2110 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362376162316434383665346637346661663764393566373966636662 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit: BPF prog-id=111 op=LOAD Jul 16 12:19:52.067000 audit[2150]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0001fa908 items=0 ppid=2110 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362376162316434383665346637346661663764393566373966636662 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit: BPF prog-id=112 op=LOAD Jul 16 12:19:52.067000 audit[2150]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0001fa958 items=0 ppid=2110 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362376162316434383665346637346661663764393566373966636662 Jul 16 12:19:52.067000 audit: BPF prog-id=112 op=UNLOAD Jul 16 12:19:52.067000 audit: BPF prog-id=111 op=UNLOAD Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:52.067000 audit: BPF prog-id=113 op=LOAD Jul 16 12:19:52.067000 audit[2150]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0001fa9e8 items=0 ppid=2110 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362376162316434383665346637346661663764393566373966636662 Jul 16 12:19:52.095603 env[1205]: time="2025-07-16T12:19:52.095547085Z" level=info msg="StartContainer for \"cb7ab1d486e4f74faf7d95f79fcfb0980026b7f2debff2bf9ebabf1f816cf196\" returns successfully" Jul 16 12:19:52.399000 audit[2213]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2213 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:52.399000 audit[2213]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdab7732c0 a2=0 a3=7ffdab7732ac items=0 ppid=2161 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.399000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 16 12:19:52.401000 audit[2215]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2215 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:52.401000 audit[2215]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc02aee4d0 a2=0 a3=7ffc02aee4bc items=0 ppid=2161 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.401000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 16 12:19:52.403000 audit[2217]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=2217 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:52.403000 audit[2217]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe88d1c840 a2=0 a3=7ffe88d1c82c items=0 ppid=2161 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.403000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 16 12:19:52.405000 audit[2218]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=2218 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.405000 audit[2218]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd20621fd0 a2=0 a3=7ffd20621fbc items=0 ppid=2161 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.405000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 16 12:19:52.408000 audit[2219]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.408000 audit[2219]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff14337e10 a2=0 a3=7fff14337dfc items=0 ppid=2161 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.408000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 16 12:19:52.409000 audit[2220]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2220 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.409000 audit[2220]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc3eb43540 a2=0 a3=7ffc3eb4352c items=0 ppid=2161 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.409000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 16 12:19:52.509000 audit[2221]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2221 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:52.509000 audit[2221]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc17877770 a2=0 a3=7ffc1787775c items=0 ppid=2161 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.509000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 16 12:19:52.518000 audit[2223]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2223 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:52.518000 audit[2223]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffcad151710 a2=0 a3=7ffcad1516fc items=0 ppid=2161 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.518000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 16 12:19:52.524000 audit[2226]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2226 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:52.524000 audit[2226]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffee2916bf0 a2=0 a3=7ffee2916bdc items=0 ppid=2161 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.524000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 16 12:19:52.526000 audit[2227]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2227 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:52.526000 audit[2227]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe592f2430 a2=0 a3=7ffe592f241c items=0 ppid=2161 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.526000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 16 12:19:52.529000 audit[2229]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2229 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:52.529000 audit[2229]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe06cec080 a2=0 a3=7ffe06cec06c items=0 ppid=2161 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.529000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 16 12:19:52.531000 audit[2230]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2230 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:52.531000 audit[2230]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd5d084160 a2=0 a3=7ffd5d08414c items=0 ppid=2161 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.531000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 16 12:19:52.534000 audit[2232]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2232 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:52.534000 audit[2232]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffda9f39360 a2=0 a3=7ffda9f3934c items=0 ppid=2161 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.534000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 16 12:19:52.540000 audit[2235]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2235 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:52.540000 audit[2235]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffcddf37540 a2=0 a3=7ffcddf3752c items=0 ppid=2161 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.540000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 16 12:19:52.541000 audit[2236]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2236 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:52.541000 audit[2236]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff4902acc0 a2=0 a3=7fff4902acac items=0 ppid=2161 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.541000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 16 12:19:52.544000 audit[2238]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2238 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:52.544000 audit[2238]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdba7c6190 a2=0 a3=7ffdba7c617c items=0 ppid=2161 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.544000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 16 12:19:52.546000 audit[2239]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2239 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:52.546000 audit[2239]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd91dbb360 a2=0 a3=7ffd91dbb34c items=0 ppid=2161 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.546000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 16 12:19:52.549000 audit[2241]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2241 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:52.549000 audit[2241]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff03e46920 a2=0 a3=7fff03e4690c items=0 ppid=2161 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.549000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 16 12:19:52.558000 audit[2244]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2244 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:52.558000 audit[2244]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffe2d10480 a2=0 a3=7fffe2d1046c items=0 ppid=2161 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.558000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 16 12:19:52.567000 audit[2247]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2247 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:52.567000 audit[2247]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdf99e68b0 a2=0 a3=7ffdf99e689c items=0 ppid=2161 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.567000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 16 12:19:52.569000 audit[2248]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2248 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:52.569000 audit[2248]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc706dc9c0 a2=0 a3=7ffc706dc9ac items=0 ppid=2161 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.569000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 16 12:19:52.573000 audit[2250]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2250 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:52.573000 audit[2250]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffd7af68300 a2=0 a3=7ffd7af682ec items=0 ppid=2161 pid=2250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.573000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 16 12:19:52.582000 audit[2253]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2253 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:52.582000 audit[2253]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffb0f98060 a2=0 a3=7fffb0f9804c items=0 ppid=2161 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.582000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 16 12:19:52.583000 audit[2254]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2254 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:52.583000 audit[2254]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd05c72750 a2=0 a3=7ffd05c7273c items=0 ppid=2161 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.583000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 16 12:19:52.587000 audit[2256]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2256 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 16 12:19:52.587000 audit[2256]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffd13272690 a2=0 a3=7ffd1327267c items=0 ppid=2161 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.587000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 16 12:19:52.627000 audit[2262]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2262 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:19:52.627000 audit[2262]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff725e9a70 a2=0 a3=7fff725e9a5c items=0 ppid=2161 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.627000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:19:52.642000 audit[2262]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2262 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:19:52.642000 audit[2262]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7fff725e9a70 a2=0 a3=7fff725e9a5c items=0 ppid=2161 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.642000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:19:52.646000 audit[2267]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2267 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.646000 audit[2267]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc84afdf40 a2=0 a3=7ffc84afdf2c items=0 ppid=2161 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.646000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 16 12:19:52.651000 audit[2269]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2269 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.651000 audit[2269]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff1f392580 a2=0 a3=7fff1f39256c items=0 ppid=2161 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.651000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 16 12:19:52.665000 audit[2272]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2272 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.665000 audit[2272]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffce82142e0 a2=0 a3=7ffce82142cc items=0 ppid=2161 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.665000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 16 12:19:52.667000 audit[2273]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2273 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.667000 audit[2273]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffdaf24c70 a2=0 a3=7fffdaf24c5c items=0 ppid=2161 pid=2273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.667000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 16 12:19:52.671000 audit[2275]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2275 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.671000 audit[2275]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff4f9c5a80 a2=0 a3=7fff4f9c5a6c items=0 ppid=2161 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.671000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 16 12:19:52.672000 audit[2276]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2276 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.672000 audit[2276]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc9cdc3530 a2=0 a3=7ffc9cdc351c items=0 ppid=2161 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.672000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 16 12:19:52.676000 audit[2278]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2278 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.676000 audit[2278]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe86317630 a2=0 a3=7ffe8631761c items=0 ppid=2161 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.676000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 16 12:19:52.687000 audit[2281]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2281 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.687000 audit[2281]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffca2ca8c50 a2=0 a3=7ffca2ca8c3c items=0 ppid=2161 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.687000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 16 12:19:52.689000 audit[2282]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2282 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.689000 audit[2282]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffccc220220 a2=0 a3=7ffccc22020c items=0 ppid=2161 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.689000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 16 12:19:52.695000 audit[2284]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2284 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.695000 audit[2284]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe9e8daee0 a2=0 a3=7ffe9e8daecc items=0 ppid=2161 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.695000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 16 12:19:52.698000 audit[2285]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2285 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.698000 audit[2285]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe0b701430 a2=0 a3=7ffe0b70141c items=0 ppid=2161 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.698000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 16 12:19:52.703000 audit[2287]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2287 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.703000 audit[2287]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe726c5a60 a2=0 a3=7ffe726c5a4c items=0 ppid=2161 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.703000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 16 12:19:52.710000 audit[2290]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2290 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.710000 audit[2290]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd16f8d090 a2=0 a3=7ffd16f8d07c items=0 ppid=2161 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.710000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 16 12:19:52.716000 audit[2293]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2293 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.716000 audit[2293]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffebd363580 a2=0 a3=7ffebd36356c items=0 ppid=2161 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.716000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 16 12:19:52.718000 audit[2294]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2294 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.718000 audit[2294]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcc7b3def0 a2=0 a3=7ffcc7b3dedc items=0 ppid=2161 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.718000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 16 12:19:52.721000 audit[2296]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2296 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.721000 audit[2296]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffc0a4322a0 a2=0 a3=7ffc0a43228c items=0 ppid=2161 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.721000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 16 12:19:52.727000 audit[2299]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2299 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.727000 audit[2299]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffd66e262a0 a2=0 a3=7ffd66e2628c items=0 ppid=2161 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.727000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 16 12:19:52.730000 audit[2300]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2300 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.730000 audit[2300]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffb4596fe0 a2=0 a3=7fffb4596fcc items=0 ppid=2161 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.730000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 16 12:19:52.734000 audit[2302]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2302 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.734000 audit[2302]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffc244b6880 a2=0 a3=7ffc244b686c items=0 ppid=2161 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.734000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 16 12:19:52.736000 audit[2303]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2303 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.736000 audit[2303]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff964cb780 a2=0 a3=7fff964cb76c items=0 ppid=2161 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.736000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 16 12:19:52.740000 audit[2305]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2305 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.740000 audit[2305]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffedfd4e010 a2=0 a3=7ffedfd4dffc items=0 ppid=2161 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.740000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 16 12:19:52.745000 audit[2308]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2308 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 16 12:19:52.745000 audit[2308]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffedc854e80 a2=0 a3=7ffedc854e6c items=0 ppid=2161 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.745000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 16 12:19:52.753000 audit[2310]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2310 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 16 12:19:52.753000 audit[2310]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffdb76a9830 a2=0 a3=7ffdb76a981c items=0 ppid=2161 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.753000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:19:52.754000 audit[2310]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2310 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 16 12:19:52.754000 audit[2310]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffdb76a9830 a2=0 a3=7ffdb76a981c items=0 ppid=2161 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:52.754000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:19:53.950034 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount28576786.mount: Deactivated successfully. Jul 16 12:19:54.899950 env[1205]: time="2025-07-16T12:19:54.899857985Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:54.903095 env[1205]: time="2025-07-16T12:19:54.903038317Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93\"" Jul 16 12:19:54.905078 env[1205]: time="2025-07-16T12:19:54.905013981Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:54.907128 env[1205]: time="2025-07-16T12:19:54.905770673Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:54.907128 env[1205]: time="2025-07-16T12:19:54.906391663Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:19:54.909622 env[1205]: time="2025-07-16T12:19:54.909583272Z" level=info msg="CreateContainer within sandbox \"c216ea06c91030ccd25d21331296cba7acf77b109cabce174a8b09f252927cf6\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 16 12:19:54.918922 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1992518976.mount: Deactivated successfully. Jul 16 12:19:54.926310 env[1205]: time="2025-07-16T12:19:54.924213501Z" level=info msg="CreateContainer within sandbox \"c216ea06c91030ccd25d21331296cba7acf77b109cabce174a8b09f252927cf6\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"101eb42c4fd14ecabf121fe47672120d0de819f91a008891843ffa78d6b2f3a2\"" Jul 16 12:19:54.925553 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1519365420.mount: Deactivated successfully. Jul 16 12:19:54.934983 env[1205]: time="2025-07-16T12:19:54.934828297Z" level=info msg="StartContainer for \"101eb42c4fd14ecabf121fe47672120d0de819f91a008891843ffa78d6b2f3a2\"" Jul 16 12:19:54.953028 kubelet[2009]: I0716 12:19:54.952956 2009 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-f2kbg" podStartSLOduration=4.952930109 podStartE2EDuration="4.952930109s" podCreationTimestamp="2025-07-16 12:19:50 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-16 12:19:53.114339582 +0000 UTC m=+7.429099348" watchObservedRunningTime="2025-07-16 12:19:54.952930109 +0000 UTC m=+9.267689987" Jul 16 12:19:54.967740 systemd[1]: Started cri-containerd-101eb42c4fd14ecabf121fe47672120d0de819f91a008891843ffa78d6b2f3a2.scope. Jul 16 12:19:55.017023 kernel: kauditd_printk_skb: 315 callbacks suppressed Jul 16 12:19:55.017659 kernel: audit: type=1400 audit(1752668395.001:911): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.023156 kernel: audit: type=1400 audit(1752668395.001:912): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.027913 kernel: audit: type=1400 audit(1752668395.001:913): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.031434 kernel: audit: type=1400 audit(1752668395.001:914): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.037582 kernel: audit: type=1400 audit(1752668395.001:915): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.037681 kernel: audit: type=1400 audit(1752668395.001:916): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.040811 kernel: audit: type=1400 audit(1752668395.001:917): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.041214 kernel: audit: type=1400 audit(1752668395.001:918): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.052454 kernel: audit: type=1400 audit(1752668395.001:919): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.058178 kernel: audit: type=1400 audit(1752668395.001:920): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.001000 audit: BPF prog-id=114 op=LOAD Jul 16 12:19:55.017000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.017000 audit[2319]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2067 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:55.017000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130316562343263346664313465636162663132316665343736373231 Jul 16 12:19:55.017000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.017000 audit[2319]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2067 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:55.017000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130316562343263346664313465636162663132316665343736373231 Jul 16 12:19:55.017000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.017000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.017000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.017000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.017000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.017000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.017000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.017000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.017000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.017000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.017000 audit: BPF prog-id=115 op=LOAD Jul 16 12:19:55.017000 audit[2319]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00032cd20 items=0 ppid=2067 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:55.017000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130316562343263346664313465636162663132316665343736373231 Jul 16 12:19:55.021000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.021000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.021000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.021000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.021000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.021000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.021000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.021000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.021000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.021000 audit: BPF prog-id=116 op=LOAD Jul 16 12:19:55.021000 audit[2319]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00032cd68 items=0 ppid=2067 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:55.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130316562343263346664313465636162663132316665343736373231 Jul 16 12:19:55.026000 audit: BPF prog-id=116 op=UNLOAD Jul 16 12:19:55.026000 audit: BPF prog-id=115 op=UNLOAD Jul 16 12:19:55.026000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.026000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.026000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.026000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.026000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.026000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.026000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.026000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.026000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.026000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:19:55.026000 audit: BPF prog-id=117 op=LOAD Jul 16 12:19:55.026000 audit[2319]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00032d178 items=0 ppid=2067 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:19:55.026000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130316562343263346664313465636162663132316665343736373231 Jul 16 12:19:55.087185 env[1205]: time="2025-07-16T12:19:55.087110388Z" level=info msg="StartContainer for \"101eb42c4fd14ecabf121fe47672120d0de819f91a008891843ffa78d6b2f3a2\" returns successfully" Jul 16 12:19:55.148389 kubelet[2009]: I0716 12:19:55.148313 2009 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-tn6vx" podStartSLOduration=1.091089359 podStartE2EDuration="4.14829018s" podCreationTimestamp="2025-07-16 12:19:51 +0000 UTC" firstStartedPulling="2025-07-16 12:19:51.848303705 +0000 UTC m=+6.163063446" lastFinishedPulling="2025-07-16 12:19:54.905504524 +0000 UTC m=+9.220264267" observedRunningTime="2025-07-16 12:19:55.120370788 +0000 UTC m=+9.435130553" watchObservedRunningTime="2025-07-16 12:19:55.14829018 +0000 UTC m=+9.463049946" Jul 16 12:20:02.049400 sudo[1390]: pam_unix(sudo:session): session closed for user root Jul 16 12:20:02.048000 audit[1390]: USER_END pid=1390 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 16 12:20:02.053168 kernel: kauditd_printk_skb: 47 callbacks suppressed Jul 16 12:20:02.053274 kernel: audit: type=1106 audit(1752668402.048:929): pid=1390 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 16 12:20:02.048000 audit[1390]: CRED_DISP pid=1390 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 16 12:20:02.059822 kernel: audit: type=1104 audit(1752668402.048:930): pid=1390 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 16 12:20:02.208881 sshd[1387]: pam_unix(sshd:session): session closed for user core Jul 16 12:20:02.211000 audit[1387]: USER_END pid=1387 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:20:02.211000 audit[1387]: CRED_DISP pid=1387 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:20:02.221287 kernel: audit: type=1106 audit(1752668402.211:931): pid=1387 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:20:02.221347 kernel: audit: type=1104 audit(1752668402.211:932): pid=1387 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:20:02.225450 systemd[1]: sshd@9-10.244.102.2:22-147.75.109.163:34840.service: Deactivated successfully. Jul 16 12:20:02.226401 systemd[1]: session-9.scope: Deactivated successfully. Jul 16 12:20:02.226563 systemd[1]: session-9.scope: Consumed 6.729s CPU time. Jul 16 12:20:02.227486 systemd-logind[1191]: Session 9 logged out. Waiting for processes to exit. Jul 16 12:20:02.228615 systemd-logind[1191]: Removed session 9. Jul 16 12:20:02.224000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.244.102.2:22-147.75.109.163:34840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:20:02.232390 kernel: audit: type=1131 audit(1752668402.224:933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.244.102.2:22-147.75.109.163:34840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:20:03.104000 audit[2398]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2398 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:03.112406 kernel: audit: type=1325 audit(1752668403.104:934): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2398 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:03.104000 audit[2398]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff1967bfb0 a2=0 a3=7fff1967bf9c items=0 ppid=2161 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:03.104000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:03.134783 kernel: audit: type=1300 audit(1752668403.104:934): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff1967bfb0 a2=0 a3=7fff1967bf9c items=0 ppid=2161 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:03.134969 kernel: audit: type=1327 audit(1752668403.104:934): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:03.141000 audit[2398]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2398 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:03.145394 kernel: audit: type=1325 audit(1752668403.141:935): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2398 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:03.141000 audit[2398]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff1967bfb0 a2=0 a3=0 items=0 ppid=2161 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:03.141000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:03.159386 kernel: audit: type=1300 audit(1752668403.141:935): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff1967bfb0 a2=0 a3=0 items=0 ppid=2161 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:03.229000 audit[2400]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2400 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:03.229000 audit[2400]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffec8b5bf00 a2=0 a3=7ffec8b5beec items=0 ppid=2161 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:03.229000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:03.244000 audit[2400]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2400 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:03.244000 audit[2400]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffec8b5bf00 a2=0 a3=0 items=0 ppid=2161 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:03.244000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:06.843000 audit[2402]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2402 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:06.843000 audit[2402]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fffee745810 a2=0 a3=7fffee7457fc items=0 ppid=2161 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:06.843000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:06.850000 audit[2402]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2402 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:06.850000 audit[2402]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffee745810 a2=0 a3=0 items=0 ppid=2161 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:06.850000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:06.863000 audit[2404]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2404 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:06.863000 audit[2404]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fffb982db30 a2=0 a3=7fffb982db1c items=0 ppid=2161 pid=2404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:06.863000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:06.868000 audit[2404]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2404 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:06.868000 audit[2404]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffb982db30 a2=0 a3=0 items=0 ppid=2161 pid=2404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:06.868000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:07.329472 systemd[1]: Created slice kubepods-besteffort-pod622be1f5_5531_42ec_83c7_e6086d1028d8.slice. Jul 16 12:20:07.416609 kubelet[2009]: I0716 12:20:07.416539 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/622be1f5-5531-42ec-83c7-e6086d1028d8-tigera-ca-bundle\") pod \"calico-typha-6b64c9c887-kr2m9\" (UID: \"622be1f5-5531-42ec-83c7-e6086d1028d8\") " pod="calico-system/calico-typha-6b64c9c887-kr2m9" Jul 16 12:20:07.417154 kubelet[2009]: I0716 12:20:07.417134 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/622be1f5-5531-42ec-83c7-e6086d1028d8-typha-certs\") pod \"calico-typha-6b64c9c887-kr2m9\" (UID: \"622be1f5-5531-42ec-83c7-e6086d1028d8\") " pod="calico-system/calico-typha-6b64c9c887-kr2m9" Jul 16 12:20:07.417259 kubelet[2009]: I0716 12:20:07.417245 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-x6kdk\" (UniqueName: \"kubernetes.io/projected/622be1f5-5531-42ec-83c7-e6086d1028d8-kube-api-access-x6kdk\") pod \"calico-typha-6b64c9c887-kr2m9\" (UID: \"622be1f5-5531-42ec-83c7-e6086d1028d8\") " pod="calico-system/calico-typha-6b64c9c887-kr2m9" Jul 16 12:20:07.580425 systemd[1]: Created slice kubepods-besteffort-pod768ab4ed_7535_4297_95b6_c7dec154b141.slice. Jul 16 12:20:07.618799 kubelet[2009]: I0716 12:20:07.618736 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/768ab4ed-7535-4297-95b6-c7dec154b141-cni-net-dir\") pod \"calico-node-nshvb\" (UID: \"768ab4ed-7535-4297-95b6-c7dec154b141\") " pod="calico-system/calico-node-nshvb" Jul 16 12:20:07.618799 kubelet[2009]: I0716 12:20:07.618798 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/768ab4ed-7535-4297-95b6-c7dec154b141-var-run-calico\") pod \"calico-node-nshvb\" (UID: \"768ab4ed-7535-4297-95b6-c7dec154b141\") " pod="calico-system/calico-node-nshvb" Jul 16 12:20:07.619787 kubelet[2009]: I0716 12:20:07.618825 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/768ab4ed-7535-4297-95b6-c7dec154b141-flexvol-driver-host\") pod \"calico-node-nshvb\" (UID: \"768ab4ed-7535-4297-95b6-c7dec154b141\") " pod="calico-system/calico-node-nshvb" Jul 16 12:20:07.619787 kubelet[2009]: I0716 12:20:07.618871 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/768ab4ed-7535-4297-95b6-c7dec154b141-node-certs\") pod \"calico-node-nshvb\" (UID: \"768ab4ed-7535-4297-95b6-c7dec154b141\") " pod="calico-system/calico-node-nshvb" Jul 16 12:20:07.619787 kubelet[2009]: I0716 12:20:07.618890 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/768ab4ed-7535-4297-95b6-c7dec154b141-xtables-lock\") pod \"calico-node-nshvb\" (UID: \"768ab4ed-7535-4297-95b6-c7dec154b141\") " pod="calico-system/calico-node-nshvb" Jul 16 12:20:07.619787 kubelet[2009]: I0716 12:20:07.618938 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/768ab4ed-7535-4297-95b6-c7dec154b141-lib-modules\") pod \"calico-node-nshvb\" (UID: \"768ab4ed-7535-4297-95b6-c7dec154b141\") " pod="calico-system/calico-node-nshvb" Jul 16 12:20:07.619787 kubelet[2009]: I0716 12:20:07.618960 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/768ab4ed-7535-4297-95b6-c7dec154b141-var-lib-calico\") pod \"calico-node-nshvb\" (UID: \"768ab4ed-7535-4297-95b6-c7dec154b141\") " pod="calico-system/calico-node-nshvb" Jul 16 12:20:07.620317 kubelet[2009]: I0716 12:20:07.618978 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/768ab4ed-7535-4297-95b6-c7dec154b141-policysync\") pod \"calico-node-nshvb\" (UID: \"768ab4ed-7535-4297-95b6-c7dec154b141\") " pod="calico-system/calico-node-nshvb" Jul 16 12:20:07.620317 kubelet[2009]: I0716 12:20:07.619027 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-j944b\" (UniqueName: \"kubernetes.io/projected/768ab4ed-7535-4297-95b6-c7dec154b141-kube-api-access-j944b\") pod \"calico-node-nshvb\" (UID: \"768ab4ed-7535-4297-95b6-c7dec154b141\") " pod="calico-system/calico-node-nshvb" Jul 16 12:20:07.620317 kubelet[2009]: I0716 12:20:07.619047 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/768ab4ed-7535-4297-95b6-c7dec154b141-cni-bin-dir\") pod \"calico-node-nshvb\" (UID: \"768ab4ed-7535-4297-95b6-c7dec154b141\") " pod="calico-system/calico-node-nshvb" Jul 16 12:20:07.620317 kubelet[2009]: I0716 12:20:07.619113 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/768ab4ed-7535-4297-95b6-c7dec154b141-cni-log-dir\") pod \"calico-node-nshvb\" (UID: \"768ab4ed-7535-4297-95b6-c7dec154b141\") " pod="calico-system/calico-node-nshvb" Jul 16 12:20:07.620317 kubelet[2009]: I0716 12:20:07.619157 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/768ab4ed-7535-4297-95b6-c7dec154b141-tigera-ca-bundle\") pod \"calico-node-nshvb\" (UID: \"768ab4ed-7535-4297-95b6-c7dec154b141\") " pod="calico-system/calico-node-nshvb" Jul 16 12:20:07.637712 env[1205]: time="2025-07-16T12:20:07.636779575Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6b64c9c887-kr2m9,Uid:622be1f5-5531-42ec-83c7-e6086d1028d8,Namespace:calico-system,Attempt:0,}" Jul 16 12:20:07.655718 env[1205]: time="2025-07-16T12:20:07.655645039Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 16 12:20:07.655927 env[1205]: time="2025-07-16T12:20:07.655903574Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 16 12:20:07.656025 env[1205]: time="2025-07-16T12:20:07.656005738Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 16 12:20:07.656614 env[1205]: time="2025-07-16T12:20:07.656567906Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9fc39078b7c61a1973c69d63668abbd441c08bfc5b304f0e9d2452eed88d7908 pid=2414 runtime=io.containerd.runc.v2 Jul 16 12:20:07.687706 systemd[1]: Started cri-containerd-9fc39078b7c61a1973c69d63668abbd441c08bfc5b304f0e9d2452eed88d7908.scope. Jul 16 12:20:07.721682 kubelet[2009]: E0716 12:20:07.721540 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.721682 kubelet[2009]: W0716 12:20:07.721567 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.721682 kubelet[2009]: E0716 12:20:07.721593 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.725694 kubelet[2009]: E0716 12:20:07.725668 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.725862 kubelet[2009]: W0716 12:20:07.725843 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.725956 kubelet[2009]: E0716 12:20:07.725939 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.726352 kubelet[2009]: E0716 12:20:07.726339 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.726501 kubelet[2009]: W0716 12:20:07.726453 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.726589 kubelet[2009]: E0716 12:20:07.726575 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.730447 kubelet[2009]: E0716 12:20:07.730429 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.730565 kubelet[2009]: W0716 12:20:07.730550 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.730647 kubelet[2009]: E0716 12:20:07.730634 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.741834 kernel: kauditd_printk_skb: 19 callbacks suppressed Jul 16 12:20:07.741983 kernel: audit: type=1400 audit(1752668407.730:942): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.742016 kernel: audit: type=1400 audit(1752668407.730:943): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.742494 kubelet[2009]: E0716 12:20:07.742290 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.742494 kubelet[2009]: W0716 12:20:07.742311 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.742494 kubelet[2009]: E0716 12:20:07.742338 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.746318 kubelet[2009]: E0716 12:20:07.746266 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.746318 kubelet[2009]: W0716 12:20:07.746283 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.746625 kubelet[2009]: E0716 12:20:07.746302 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.753377 kernel: audit: type=1400 audit(1752668407.730:944): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.753457 kernel: audit: type=1400 audit(1752668407.730:945): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.753486 kernel: audit: type=1400 audit(1752668407.730:946): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.753747 kubelet[2009]: E0716 12:20:07.753731 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.753845 kubelet[2009]: W0716 12:20:07.753830 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.759382 kernel: audit: type=1400 audit(1752668407.730:947): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.759458 kernel: audit: type=1400 audit(1752668407.730:948): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.759638 kubelet[2009]: E0716 12:20:07.759618 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.760639 kubelet[2009]: E0716 12:20:07.760626 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.760723 kubelet[2009]: W0716 12:20:07.760709 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.760794 kubelet[2009]: E0716 12:20:07.760782 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.763461 kernel: audit: type=1400 audit(1752668407.730:949): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.765560 kubelet[2009]: E0716 12:20:07.765547 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.765654 kubelet[2009]: W0716 12:20:07.765641 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.765721 kubelet[2009]: E0716 12:20:07.765709 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.766769 kubelet[2009]: E0716 12:20:07.766756 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.766850 kubelet[2009]: W0716 12:20:07.766837 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.766925 kubelet[2009]: E0716 12:20:07.766913 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.769140 kernel: audit: type=1400 audit(1752668407.730:950): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.769204 kernel: audit: type=1400 audit(1752668407.730:951): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.769318 kubelet[2009]: E0716 12:20:07.769306 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.769398 kubelet[2009]: W0716 12:20:07.769386 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.730000 audit: BPF prog-id=118 op=LOAD Jul 16 12:20:07.741000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.741000 audit[2423]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2414 pid=2423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:07.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966633339303738623763363161313937336336396436333636386162 Jul 16 12:20:07.741000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.741000 audit[2423]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2414 pid=2423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:07.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966633339303738623763363161313937336336396436333636386162 Jul 16 12:20:07.741000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.741000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.741000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.741000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.741000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.741000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.741000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.741000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.741000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.741000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.741000 audit: BPF prog-id=119 op=LOAD Jul 16 12:20:07.741000 audit[2423]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000098670 items=0 ppid=2414 pid=2423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:07.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966633339303738623763363161313937336336396436333636386162 Jul 16 12:20:07.742000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.742000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.742000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.742000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.742000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.742000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.742000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.742000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.742000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.742000 audit: BPF prog-id=120 op=LOAD Jul 16 12:20:07.742000 audit[2423]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000986b8 items=0 ppid=2414 pid=2423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:07.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966633339303738623763363161313937336336396436333636386162 Jul 16 12:20:07.742000 audit: BPF prog-id=120 op=UNLOAD Jul 16 12:20:07.742000 audit: BPF prog-id=119 op=UNLOAD Jul 16 12:20:07.743000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.743000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.743000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.743000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.743000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.743000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.743000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.743000 audit[2423]: AVC avc: denied { perfmon } for pid=2423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.743000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.743000 audit[2423]: AVC avc: denied { bpf } for pid=2423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.743000 audit: BPF prog-id=121 op=LOAD Jul 16 12:20:07.743000 audit[2423]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000098ac8 items=0 ppid=2414 pid=2423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:07.743000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966633339303738623763363161313937336336396436333636386162 Jul 16 12:20:07.771677 kubelet[2009]: E0716 12:20:07.771432 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.772333 kubelet[2009]: E0716 12:20:07.771887 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.772333 kubelet[2009]: W0716 12:20:07.771915 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.772333 kubelet[2009]: E0716 12:20:07.771926 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.772754 kubelet[2009]: E0716 12:20:07.772728 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.772754 kubelet[2009]: W0716 12:20:07.772746 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.772839 kubelet[2009]: E0716 12:20:07.772762 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.773289 kubelet[2009]: E0716 12:20:07.773262 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.773289 kubelet[2009]: W0716 12:20:07.773283 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.773414 kubelet[2009]: E0716 12:20:07.773294 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.773570 kubelet[2009]: E0716 12:20:07.773551 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.773570 kubelet[2009]: W0716 12:20:07.773569 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.773648 kubelet[2009]: E0716 12:20:07.773579 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.774458 kubelet[2009]: E0716 12:20:07.774443 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.774554 kubelet[2009]: W0716 12:20:07.774540 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.774642 kubelet[2009]: E0716 12:20:07.774630 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.774963 kubelet[2009]: E0716 12:20:07.774950 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.775059 kubelet[2009]: W0716 12:20:07.775046 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.775145 kubelet[2009]: E0716 12:20:07.775134 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.775830 kubelet[2009]: E0716 12:20:07.775815 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.775929 kubelet[2009]: W0716 12:20:07.775916 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.776016 kubelet[2009]: E0716 12:20:07.776005 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.814674 env[1205]: time="2025-07-16T12:20:07.814558673Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6b64c9c887-kr2m9,Uid:622be1f5-5531-42ec-83c7-e6086d1028d8,Namespace:calico-system,Attempt:0,} returns sandbox id \"9fc39078b7c61a1973c69d63668abbd441c08bfc5b304f0e9d2452eed88d7908\"" Jul 16 12:20:07.827008 env[1205]: time="2025-07-16T12:20:07.825687258Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 16 12:20:07.873440 kubelet[2009]: E0716 12:20:07.873259 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-v4b2s" podUID="4a5efb8c-684a-4214-9e4c-7f907cf4218d" Jul 16 12:20:07.884592 env[1205]: time="2025-07-16T12:20:07.884152231Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-nshvb,Uid:768ab4ed-7535-4297-95b6-c7dec154b141,Namespace:calico-system,Attempt:0,}" Jul 16 12:20:07.897166 kubelet[2009]: E0716 12:20:07.897130 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.897361 kubelet[2009]: W0716 12:20:07.897344 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.897480 kubelet[2009]: E0716 12:20:07.897465 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.898964 kubelet[2009]: E0716 12:20:07.898935 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.899087 kubelet[2009]: W0716 12:20:07.899071 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.899262 kubelet[2009]: E0716 12:20:07.899247 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.899600 kubelet[2009]: E0716 12:20:07.899579 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.899719 kubelet[2009]: W0716 12:20:07.899704 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.900081 kubelet[2009]: E0716 12:20:07.899825 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.900342 kubelet[2009]: E0716 12:20:07.900328 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.900492 kubelet[2009]: W0716 12:20:07.900477 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.900586 kubelet[2009]: E0716 12:20:07.900573 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.900919 kubelet[2009]: E0716 12:20:07.900905 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.901014 kubelet[2009]: W0716 12:20:07.901001 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.901109 kubelet[2009]: E0716 12:20:07.901096 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.901478 kubelet[2009]: E0716 12:20:07.901463 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.901588 kubelet[2009]: W0716 12:20:07.901574 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.901681 kubelet[2009]: E0716 12:20:07.901669 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.901975 kubelet[2009]: E0716 12:20:07.901962 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.903411 kubelet[2009]: W0716 12:20:07.903387 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.903537 kubelet[2009]: E0716 12:20:07.903519 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.903849 kubelet[2009]: E0716 12:20:07.903835 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.903945 kubelet[2009]: W0716 12:20:07.903931 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.904025 kubelet[2009]: E0716 12:20:07.904012 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.904310 kubelet[2009]: E0716 12:20:07.904292 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.904432 kubelet[2009]: W0716 12:20:07.904418 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.908248 kubelet[2009]: E0716 12:20:07.908219 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.908668 kubelet[2009]: E0716 12:20:07.908652 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.908774 kubelet[2009]: W0716 12:20:07.908758 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.908858 kubelet[2009]: E0716 12:20:07.908845 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.909115 kubelet[2009]: E0716 12:20:07.909102 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.909201 kubelet[2009]: W0716 12:20:07.909187 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.909287 kubelet[2009]: E0716 12:20:07.909274 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.909571 kubelet[2009]: E0716 12:20:07.909557 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.909652 kubelet[2009]: W0716 12:20:07.909638 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.909732 kubelet[2009]: E0716 12:20:07.909720 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.909976 kubelet[2009]: E0716 12:20:07.909964 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.910072 kubelet[2009]: W0716 12:20:07.910059 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.910145 kubelet[2009]: E0716 12:20:07.910132 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.910477 kubelet[2009]: E0716 12:20:07.910463 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.910584 kubelet[2009]: W0716 12:20:07.910570 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.910681 kubelet[2009]: E0716 12:20:07.910667 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.910925 kubelet[2009]: E0716 12:20:07.910914 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.911008 kubelet[2009]: W0716 12:20:07.910995 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.911075 kubelet[2009]: E0716 12:20:07.911063 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.911334 kubelet[2009]: E0716 12:20:07.911322 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.911428 kubelet[2009]: W0716 12:20:07.911415 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.911496 kubelet[2009]: E0716 12:20:07.911484 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.911751 kubelet[2009]: E0716 12:20:07.911739 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.911826 kubelet[2009]: W0716 12:20:07.911813 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.911902 kubelet[2009]: E0716 12:20:07.911887 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.912151 kubelet[2009]: E0716 12:20:07.912140 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.912241 kubelet[2009]: W0716 12:20:07.912228 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.912318 kubelet[2009]: E0716 12:20:07.912305 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.912594 kubelet[2009]: E0716 12:20:07.912583 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.912685 kubelet[2009]: W0716 12:20:07.912672 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.912762 kubelet[2009]: E0716 12:20:07.912749 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.913033 kubelet[2009]: E0716 12:20:07.913022 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.913110 kubelet[2009]: W0716 12:20:07.913098 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.913182 kubelet[2009]: E0716 12:20:07.913170 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.913357 env[1205]: time="2025-07-16T12:20:07.908119837Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 16 12:20:07.913554 env[1205]: time="2025-07-16T12:20:07.913502611Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 16 12:20:07.913663 env[1205]: time="2025-07-16T12:20:07.913640398Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 16 12:20:07.914217 env[1205]: time="2025-07-16T12:20:07.914144034Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/aed7cc7611b45e29ff75d489ee55f6e37ee4e77a24f5048739989083d7f7a9f8 pid=2478 runtime=io.containerd.runc.v2 Jul 16 12:20:07.915000 audit[2467]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2467 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:07.921603 kubelet[2009]: E0716 12:20:07.921405 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.921603 kubelet[2009]: W0716 12:20:07.921426 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.921603 kubelet[2009]: E0716 12:20:07.921447 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.921603 kubelet[2009]: I0716 12:20:07.921484 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/4a5efb8c-684a-4214-9e4c-7f907cf4218d-registration-dir\") pod \"csi-node-driver-v4b2s\" (UID: \"4a5efb8c-684a-4214-9e4c-7f907cf4218d\") " pod="calico-system/csi-node-driver-v4b2s" Jul 16 12:20:07.923262 kubelet[2009]: E0716 12:20:07.922069 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.923262 kubelet[2009]: W0716 12:20:07.922093 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.923262 kubelet[2009]: E0716 12:20:07.922112 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.923262 kubelet[2009]: I0716 12:20:07.922140 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/4a5efb8c-684a-4214-9e4c-7f907cf4218d-kubelet-dir\") pod \"csi-node-driver-v4b2s\" (UID: \"4a5efb8c-684a-4214-9e4c-7f907cf4218d\") " pod="calico-system/csi-node-driver-v4b2s" Jul 16 12:20:07.923262 kubelet[2009]: E0716 12:20:07.922486 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.923262 kubelet[2009]: W0716 12:20:07.922498 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.923262 kubelet[2009]: E0716 12:20:07.922517 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.923262 kubelet[2009]: I0716 12:20:07.922542 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/4a5efb8c-684a-4214-9e4c-7f907cf4218d-socket-dir\") pod \"csi-node-driver-v4b2s\" (UID: \"4a5efb8c-684a-4214-9e4c-7f907cf4218d\") " pod="calico-system/csi-node-driver-v4b2s" Jul 16 12:20:07.923262 kubelet[2009]: E0716 12:20:07.922759 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.915000 audit[2467]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffc858e2670 a2=0 a3=7ffc858e265c items=0 ppid=2161 pid=2467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:07.915000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:07.922000 audit[2467]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2467 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:07.924982 kubelet[2009]: W0716 12:20:07.922771 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.924982 kubelet[2009]: E0716 12:20:07.922789 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.924982 kubelet[2009]: I0716 12:20:07.922810 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pvcw6\" (UniqueName: \"kubernetes.io/projected/4a5efb8c-684a-4214-9e4c-7f907cf4218d-kube-api-access-pvcw6\") pod \"csi-node-driver-v4b2s\" (UID: \"4a5efb8c-684a-4214-9e4c-7f907cf4218d\") " pod="calico-system/csi-node-driver-v4b2s" Jul 16 12:20:07.924982 kubelet[2009]: E0716 12:20:07.923030 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.924982 kubelet[2009]: W0716 12:20:07.923042 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.924982 kubelet[2009]: E0716 12:20:07.923059 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.924982 kubelet[2009]: I0716 12:20:07.923147 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/4a5efb8c-684a-4214-9e4c-7f907cf4218d-varrun\") pod \"csi-node-driver-v4b2s\" (UID: \"4a5efb8c-684a-4214-9e4c-7f907cf4218d\") " pod="calico-system/csi-node-driver-v4b2s" Jul 16 12:20:07.924982 kubelet[2009]: E0716 12:20:07.924273 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.925310 kubelet[2009]: W0716 12:20:07.924295 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.925310 kubelet[2009]: E0716 12:20:07.924311 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.925988 kubelet[2009]: E0716 12:20:07.925625 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.925988 kubelet[2009]: W0716 12:20:07.925640 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.925988 kubelet[2009]: E0716 12:20:07.925654 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.925988 kubelet[2009]: E0716 12:20:07.925864 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.925988 kubelet[2009]: W0716 12:20:07.925872 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.925988 kubelet[2009]: E0716 12:20:07.925882 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.926559 kubelet[2009]: E0716 12:20:07.926445 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.926559 kubelet[2009]: W0716 12:20:07.926459 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.926559 kubelet[2009]: E0716 12:20:07.926481 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.926886 kubelet[2009]: E0716 12:20:07.926873 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.926993 kubelet[2009]: W0716 12:20:07.926979 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.927078 kubelet[2009]: E0716 12:20:07.927066 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.927502 kubelet[2009]: E0716 12:20:07.927486 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.927611 kubelet[2009]: W0716 12:20:07.927596 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.927700 kubelet[2009]: E0716 12:20:07.927687 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.928002 kubelet[2009]: E0716 12:20:07.927989 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.928101 kubelet[2009]: W0716 12:20:07.928088 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.928239 kubelet[2009]: E0716 12:20:07.928210 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.928684 kubelet[2009]: E0716 12:20:07.928670 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.929049 kubelet[2009]: W0716 12:20:07.928896 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.929049 kubelet[2009]: E0716 12:20:07.928914 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.929337 kubelet[2009]: E0716 12:20:07.929323 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.929441 kubelet[2009]: W0716 12:20:07.929427 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.929527 kubelet[2009]: E0716 12:20:07.929515 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.929820 kubelet[2009]: E0716 12:20:07.929808 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:07.932434 kubelet[2009]: W0716 12:20:07.932409 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:07.932570 kubelet[2009]: E0716 12:20:07.932555 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:07.941564 systemd[1]: Started cri-containerd-aed7cc7611b45e29ff75d489ee55f6e37ee4e77a24f5048739989083d7f7a9f8.scope. Jul 16 12:20:07.922000 audit[2467]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc858e2670 a2=0 a3=0 items=0 ppid=2161 pid=2467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:07.922000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:07.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.969000 audit: BPF prog-id=122 op=LOAD Jul 16 12:20:07.971000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.971000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2478 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:07.971000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165643763633736313162343565323966663735643438396565353566 Jul 16 12:20:07.972000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.972000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2478 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:07.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165643763633736313162343565323966663735643438396565353566 Jul 16 12:20:07.973000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.973000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.973000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.973000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.973000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.973000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.973000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.973000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.973000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.973000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.973000 audit: BPF prog-id=123 op=LOAD Jul 16 12:20:07.973000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000025070 items=0 ppid=2478 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:07.973000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165643763633736313162343565323966663735643438396565353566 Jul 16 12:20:07.975000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.975000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.975000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.975000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.975000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.975000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.975000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.975000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.975000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.975000 audit: BPF prog-id=124 op=LOAD Jul 16 12:20:07.975000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000250b8 items=0 ppid=2478 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:07.975000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165643763633736313162343565323966663735643438396565353566 Jul 16 12:20:07.977000 audit: BPF prog-id=124 op=UNLOAD Jul 16 12:20:07.977000 audit: BPF prog-id=123 op=UNLOAD Jul 16 12:20:07.977000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.977000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.977000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.977000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.977000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.977000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.977000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.977000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.977000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.977000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:07.977000 audit: BPF prog-id=125 op=LOAD Jul 16 12:20:07.977000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0000254c8 items=0 ppid=2478 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:07.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165643763633736313162343565323966663735643438396565353566 Jul 16 12:20:08.032494 env[1205]: time="2025-07-16T12:20:08.032452824Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-nshvb,Uid:768ab4ed-7535-4297-95b6-c7dec154b141,Namespace:calico-system,Attempt:0,} returns sandbox id \"aed7cc7611b45e29ff75d489ee55f6e37ee4e77a24f5048739989083d7f7a9f8\"" Jul 16 12:20:08.035305 kubelet[2009]: E0716 12:20:08.035278 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.035448 kubelet[2009]: W0716 12:20:08.035433 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.035547 kubelet[2009]: E0716 12:20:08.035535 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.040100 kubelet[2009]: E0716 12:20:08.040074 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.040100 kubelet[2009]: W0716 12:20:08.040093 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.040218 kubelet[2009]: E0716 12:20:08.040112 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.040393 kubelet[2009]: E0716 12:20:08.040381 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.040436 kubelet[2009]: W0716 12:20:08.040393 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.040436 kubelet[2009]: E0716 12:20:08.040409 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.040569 kubelet[2009]: E0716 12:20:08.040559 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.040606 kubelet[2009]: W0716 12:20:08.040570 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.040606 kubelet[2009]: E0716 12:20:08.040579 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.046642 kubelet[2009]: E0716 12:20:08.046621 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.046642 kubelet[2009]: W0716 12:20:08.046638 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.046768 kubelet[2009]: E0716 12:20:08.046660 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.046849 kubelet[2009]: E0716 12:20:08.046837 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.046849 kubelet[2009]: W0716 12:20:08.046848 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.046921 kubelet[2009]: E0716 12:20:08.046857 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.048501 kubelet[2009]: E0716 12:20:08.048479 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.048501 kubelet[2009]: W0716 12:20:08.048495 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.048654 kubelet[2009]: E0716 12:20:08.048508 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.048881 kubelet[2009]: E0716 12:20:08.048865 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.048881 kubelet[2009]: W0716 12:20:08.048879 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.048970 kubelet[2009]: E0716 12:20:08.048890 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.052407 kubelet[2009]: E0716 12:20:08.052375 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.052407 kubelet[2009]: W0716 12:20:08.052390 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.052407 kubelet[2009]: E0716 12:20:08.052402 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.052690 kubelet[2009]: E0716 12:20:08.052633 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.052690 kubelet[2009]: W0716 12:20:08.052645 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.052690 kubelet[2009]: E0716 12:20:08.052654 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.052850 kubelet[2009]: E0716 12:20:08.052818 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.052850 kubelet[2009]: W0716 12:20:08.052825 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.052850 kubelet[2009]: E0716 12:20:08.052832 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.053180 kubelet[2009]: E0716 12:20:08.053165 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.053180 kubelet[2009]: W0716 12:20:08.053178 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.053317 kubelet[2009]: E0716 12:20:08.053190 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.053395 kubelet[2009]: E0716 12:20:08.053379 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.053395 kubelet[2009]: W0716 12:20:08.053389 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.053478 kubelet[2009]: E0716 12:20:08.053401 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.053648 kubelet[2009]: E0716 12:20:08.053637 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.053648 kubelet[2009]: W0716 12:20:08.053646 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.053743 kubelet[2009]: E0716 12:20:08.053654 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.053819 kubelet[2009]: E0716 12:20:08.053808 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.053819 kubelet[2009]: W0716 12:20:08.053818 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.053903 kubelet[2009]: E0716 12:20:08.053825 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.053972 kubelet[2009]: E0716 12:20:08.053962 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.053972 kubelet[2009]: W0716 12:20:08.053971 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.054060 kubelet[2009]: E0716 12:20:08.053979 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.054156 kubelet[2009]: E0716 12:20:08.054141 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.054156 kubelet[2009]: W0716 12:20:08.054151 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.054243 kubelet[2009]: E0716 12:20:08.054164 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.055364 kubelet[2009]: E0716 12:20:08.055343 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.055481 kubelet[2009]: W0716 12:20:08.055467 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.055548 kubelet[2009]: E0716 12:20:08.055536 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.055803 kubelet[2009]: E0716 12:20:08.055791 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.055888 kubelet[2009]: W0716 12:20:08.055876 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.055958 kubelet[2009]: E0716 12:20:08.055947 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.056228 kubelet[2009]: E0716 12:20:08.056186 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.056316 kubelet[2009]: W0716 12:20:08.056304 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.056436 kubelet[2009]: E0716 12:20:08.056424 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.056698 kubelet[2009]: E0716 12:20:08.056687 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.056774 kubelet[2009]: W0716 12:20:08.056762 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.056850 kubelet[2009]: E0716 12:20:08.056839 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.057102 kubelet[2009]: E0716 12:20:08.057090 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.057189 kubelet[2009]: W0716 12:20:08.057177 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.057268 kubelet[2009]: E0716 12:20:08.057257 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.059459 kubelet[2009]: E0716 12:20:08.059435 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.059459 kubelet[2009]: W0716 12:20:08.059451 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.059620 kubelet[2009]: E0716 12:20:08.059466 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.059699 kubelet[2009]: E0716 12:20:08.059684 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.059699 kubelet[2009]: W0716 12:20:08.059696 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.059801 kubelet[2009]: E0716 12:20:08.059705 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.061096 kubelet[2009]: E0716 12:20:08.061057 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.061096 kubelet[2009]: W0716 12:20:08.061071 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.061096 kubelet[2009]: E0716 12:20:08.061082 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:08.080538 kubelet[2009]: E0716 12:20:08.080468 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:08.080538 kubelet[2009]: W0716 12:20:08.080490 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:08.080538 kubelet[2009]: E0716 12:20:08.080512 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:09.016192 kubelet[2009]: E0716 12:20:09.016033 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-v4b2s" podUID="4a5efb8c-684a-4214-9e4c-7f907cf4218d" Jul 16 12:20:09.472578 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4029935359.mount: Deactivated successfully. Jul 16 12:20:11.015938 kubelet[2009]: E0716 12:20:11.015858 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-v4b2s" podUID="4a5efb8c-684a-4214-9e4c-7f907cf4218d" Jul 16 12:20:11.182401 env[1205]: time="2025-07-16T12:20:11.180789422Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:11.186397 env[1205]: time="2025-07-16T12:20:11.186311353Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:11.190462 env[1205]: time="2025-07-16T12:20:11.190350607Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:11.193596 env[1205]: time="2025-07-16T12:20:11.193553588Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:11.195004 env[1205]: time="2025-07-16T12:20:11.194939196Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54\"" Jul 16 12:20:11.198833 env[1205]: time="2025-07-16T12:20:11.198361637Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 16 12:20:11.238854 env[1205]: time="2025-07-16T12:20:11.238801973Z" level=info msg="CreateContainer within sandbox \"9fc39078b7c61a1973c69d63668abbd441c08bfc5b304f0e9d2452eed88d7908\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 16 12:20:11.256695 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1693116598.mount: Deactivated successfully. Jul 16 12:20:11.260081 env[1205]: time="2025-07-16T12:20:11.260017417Z" level=info msg="CreateContainer within sandbox \"9fc39078b7c61a1973c69d63668abbd441c08bfc5b304f0e9d2452eed88d7908\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"b180a2df7af4d18f01a053c957c81dfa1f9e6c1b3453f5e4fb9492117565d6f7\"" Jul 16 12:20:11.262949 env[1205]: time="2025-07-16T12:20:11.261411650Z" level=info msg="StartContainer for \"b180a2df7af4d18f01a053c957c81dfa1f9e6c1b3453f5e4fb9492117565d6f7\"" Jul 16 12:20:11.289673 systemd[1]: Started cri-containerd-b180a2df7af4d18f01a053c957c81dfa1f9e6c1b3453f5e4fb9492117565d6f7.scope. Jul 16 12:20:11.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.325000 audit: BPF prog-id=126 op=LOAD Jul 16 12:20:11.327000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.327000 audit[2581]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2414 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:11.327000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231383061326466376166346431386630316130353363393537633831 Jul 16 12:20:11.327000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.327000 audit[2581]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2414 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:11.327000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231383061326466376166346431386630316130353363393537633831 Jul 16 12:20:11.327000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.327000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.327000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.327000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.327000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.327000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.327000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.327000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.327000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.327000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.327000 audit: BPF prog-id=127 op=LOAD Jul 16 12:20:11.327000 audit[2581]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001eba10 items=0 ppid=2414 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:11.327000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231383061326466376166346431386630316130353363393537633831 Jul 16 12:20:11.328000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.328000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.328000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.328000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.328000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.328000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.328000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.328000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.328000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.328000 audit: BPF prog-id=128 op=LOAD Jul 16 12:20:11.328000 audit[2581]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001eba58 items=0 ppid=2414 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:11.328000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231383061326466376166346431386630316130353363393537633831 Jul 16 12:20:11.329000 audit: BPF prog-id=128 op=UNLOAD Jul 16 12:20:11.329000 audit: BPF prog-id=127 op=UNLOAD Jul 16 12:20:11.329000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.329000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.329000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.329000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.329000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.329000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.329000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.329000 audit[2581]: AVC avc: denied { perfmon } for pid=2581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.329000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.329000 audit[2581]: AVC avc: denied { bpf } for pid=2581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:11.329000 audit: BPF prog-id=129 op=LOAD Jul 16 12:20:11.329000 audit[2581]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0001ebe68 items=0 ppid=2414 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:11.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231383061326466376166346431386630316130353363393537633831 Jul 16 12:20:11.379267 env[1205]: time="2025-07-16T12:20:11.379200752Z" level=info msg="StartContainer for \"b180a2df7af4d18f01a053c957c81dfa1f9e6c1b3453f5e4fb9492117565d6f7\" returns successfully" Jul 16 12:20:12.178327 kubelet[2009]: I0716 12:20:12.178107 2009 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-6b64c9c887-kr2m9" podStartSLOduration=1.805081928 podStartE2EDuration="5.177914201s" podCreationTimestamp="2025-07-16 12:20:07 +0000 UTC" firstStartedPulling="2025-07-16 12:20:07.823998377 +0000 UTC m=+22.138758146" lastFinishedPulling="2025-07-16 12:20:11.196830678 +0000 UTC m=+25.511590419" observedRunningTime="2025-07-16 12:20:12.17566437 +0000 UTC m=+26.490424165" watchObservedRunningTime="2025-07-16 12:20:12.177914201 +0000 UTC m=+26.492674051" Jul 16 12:20:12.247437 kubelet[2009]: E0716 12:20:12.247322 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.248036 kubelet[2009]: W0716 12:20:12.247981 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.248307 kubelet[2009]: E0716 12:20:12.248269 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.249223 kubelet[2009]: E0716 12:20:12.249184 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.249548 kubelet[2009]: W0716 12:20:12.249511 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.249735 kubelet[2009]: E0716 12:20:12.249703 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.250488 kubelet[2009]: E0716 12:20:12.250457 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.250726 kubelet[2009]: W0716 12:20:12.250693 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.251007 kubelet[2009]: E0716 12:20:12.250972 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.251867 kubelet[2009]: E0716 12:20:12.251836 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.252127 kubelet[2009]: W0716 12:20:12.252077 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.252335 kubelet[2009]: E0716 12:20:12.252306 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.253146 kubelet[2009]: E0716 12:20:12.253118 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.253358 kubelet[2009]: W0716 12:20:12.253326 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.253592 kubelet[2009]: E0716 12:20:12.253559 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.253911 kubelet[2009]: E0716 12:20:12.253900 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.254015 kubelet[2009]: W0716 12:20:12.254001 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.254092 kubelet[2009]: E0716 12:20:12.254079 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.254402 kubelet[2009]: E0716 12:20:12.254353 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.254498 kubelet[2009]: W0716 12:20:12.254484 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.254580 kubelet[2009]: E0716 12:20:12.254567 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.254877 kubelet[2009]: E0716 12:20:12.254864 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.254968 kubelet[2009]: W0716 12:20:12.254955 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.255055 kubelet[2009]: E0716 12:20:12.255042 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.255388 kubelet[2009]: E0716 12:20:12.255356 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.255481 kubelet[2009]: W0716 12:20:12.255467 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.255564 kubelet[2009]: E0716 12:20:12.255552 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.255841 kubelet[2009]: E0716 12:20:12.255829 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.255935 kubelet[2009]: W0716 12:20:12.255911 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.256013 kubelet[2009]: E0716 12:20:12.256000 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.256275 kubelet[2009]: E0716 12:20:12.256264 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.256358 kubelet[2009]: W0716 12:20:12.256345 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.256485 kubelet[2009]: E0716 12:20:12.256471 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.256749 kubelet[2009]: E0716 12:20:12.256738 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.256836 kubelet[2009]: W0716 12:20:12.256823 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.256911 kubelet[2009]: E0716 12:20:12.256898 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.257304 kubelet[2009]: E0716 12:20:12.257291 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.257416 kubelet[2009]: W0716 12:20:12.257401 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.257526 kubelet[2009]: E0716 12:20:12.257514 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.257810 kubelet[2009]: E0716 12:20:12.257799 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.257899 kubelet[2009]: W0716 12:20:12.257885 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.257988 kubelet[2009]: E0716 12:20:12.257974 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.258290 kubelet[2009]: E0716 12:20:12.258278 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.258431 kubelet[2009]: W0716 12:20:12.258417 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.258566 kubelet[2009]: E0716 12:20:12.258553 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.288699 kubelet[2009]: E0716 12:20:12.288651 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.289045 kubelet[2009]: W0716 12:20:12.289012 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.289194 kubelet[2009]: E0716 12:20:12.289167 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.289835 kubelet[2009]: E0716 12:20:12.289811 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.290035 kubelet[2009]: W0716 12:20:12.290011 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.290183 kubelet[2009]: E0716 12:20:12.290157 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.290929 kubelet[2009]: E0716 12:20:12.290862 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.291046 kubelet[2009]: W0716 12:20:12.290926 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.291046 kubelet[2009]: E0716 12:20:12.290956 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.291461 kubelet[2009]: E0716 12:20:12.291438 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.291547 kubelet[2009]: W0716 12:20:12.291463 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.291547 kubelet[2009]: E0716 12:20:12.291484 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.291875 kubelet[2009]: E0716 12:20:12.291842 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.291875 kubelet[2009]: W0716 12:20:12.291867 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.292027 kubelet[2009]: E0716 12:20:12.291886 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.292298 kubelet[2009]: E0716 12:20:12.292276 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.292411 kubelet[2009]: W0716 12:20:12.292299 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.292411 kubelet[2009]: E0716 12:20:12.292317 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.293012 kubelet[2009]: E0716 12:20:12.292982 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.293108 kubelet[2009]: W0716 12:20:12.293043 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.293108 kubelet[2009]: E0716 12:20:12.293080 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.294940 kubelet[2009]: E0716 12:20:12.294900 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.295108 kubelet[2009]: W0716 12:20:12.295085 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.295247 kubelet[2009]: E0716 12:20:12.295226 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.296034 kubelet[2009]: E0716 12:20:12.296012 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.296188 kubelet[2009]: W0716 12:20:12.296166 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.296319 kubelet[2009]: E0716 12:20:12.296299 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.296829 kubelet[2009]: E0716 12:20:12.296810 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.297092 kubelet[2009]: W0716 12:20:12.297070 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.297223 kubelet[2009]: E0716 12:20:12.297203 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.297636 kubelet[2009]: E0716 12:20:12.297619 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.297810 kubelet[2009]: W0716 12:20:12.297789 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.297948 kubelet[2009]: E0716 12:20:12.297927 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.298357 kubelet[2009]: E0716 12:20:12.298339 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.298502 kubelet[2009]: W0716 12:20:12.298482 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.298629 kubelet[2009]: E0716 12:20:12.298610 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.299029 kubelet[2009]: E0716 12:20:12.299011 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.299159 kubelet[2009]: W0716 12:20:12.299139 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.299270 kubelet[2009]: E0716 12:20:12.299252 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.299787 kubelet[2009]: E0716 12:20:12.299769 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.299942 kubelet[2009]: W0716 12:20:12.299908 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.300068 kubelet[2009]: E0716 12:20:12.300049 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.300833 kubelet[2009]: E0716 12:20:12.300813 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.300986 kubelet[2009]: W0716 12:20:12.300965 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.301098 kubelet[2009]: E0716 12:20:12.301079 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.301556 kubelet[2009]: E0716 12:20:12.301538 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.301697 kubelet[2009]: W0716 12:20:12.301676 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.301886 kubelet[2009]: E0716 12:20:12.301867 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.303135 kubelet[2009]: E0716 12:20:12.302931 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.303253 kubelet[2009]: W0716 12:20:12.303238 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.303339 kubelet[2009]: E0716 12:20:12.303319 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:12.304824 kubelet[2009]: E0716 12:20:12.304808 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:12.304951 kubelet[2009]: W0716 12:20:12.304938 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:12.305076 kubelet[2009]: E0716 12:20:12.305064 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.016646 kubelet[2009]: E0716 12:20:13.016564 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-v4b2s" podUID="4a5efb8c-684a-4214-9e4c-7f907cf4218d" Jul 16 12:20:13.068750 env[1205]: time="2025-07-16T12:20:13.068662127Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:13.073726 env[1205]: time="2025-07-16T12:20:13.073652687Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:13.078025 env[1205]: time="2025-07-16T12:20:13.077962013Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:13.081565 env[1205]: time="2025-07-16T12:20:13.081524056Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:13.082652 env[1205]: time="2025-07-16T12:20:13.082605560Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e\"" Jul 16 12:20:13.094174 env[1205]: time="2025-07-16T12:20:13.094092985Z" level=info msg="CreateContainer within sandbox \"aed7cc7611b45e29ff75d489ee55f6e37ee4e77a24f5048739989083d7f7a9f8\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 16 12:20:13.119157 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3648605683.mount: Deactivated successfully. Jul 16 12:20:13.124954 env[1205]: time="2025-07-16T12:20:13.124903120Z" level=info msg="CreateContainer within sandbox \"aed7cc7611b45e29ff75d489ee55f6e37ee4e77a24f5048739989083d7f7a9f8\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"881745120de81b00f9948d77e5c61d0bde1be4813418ea6f948a654e7ea091ba\"" Jul 16 12:20:13.126996 env[1205]: time="2025-07-16T12:20:13.125979160Z" level=info msg="StartContainer for \"881745120de81b00f9948d77e5c61d0bde1be4813418ea6f948a654e7ea091ba\"" Jul 16 12:20:13.162443 kubelet[2009]: I0716 12:20:13.162013 2009 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 16 12:20:13.163871 systemd[1]: Started cri-containerd-881745120de81b00f9948d77e5c61d0bde1be4813418ea6f948a654e7ea091ba.scope. Jul 16 12:20:13.168361 kubelet[2009]: E0716 12:20:13.166590 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.168361 kubelet[2009]: W0716 12:20:13.166606 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.168361 kubelet[2009]: E0716 12:20:13.166627 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.168361 kubelet[2009]: E0716 12:20:13.166784 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.168361 kubelet[2009]: W0716 12:20:13.166791 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.168361 kubelet[2009]: E0716 12:20:13.166799 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.168361 kubelet[2009]: E0716 12:20:13.166949 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.168361 kubelet[2009]: W0716 12:20:13.166956 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.168361 kubelet[2009]: E0716 12:20:13.166964 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.168361 kubelet[2009]: E0716 12:20:13.167101 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.168821 kubelet[2009]: W0716 12:20:13.167107 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.168821 kubelet[2009]: E0716 12:20:13.167114 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.168821 kubelet[2009]: E0716 12:20:13.167257 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.168821 kubelet[2009]: W0716 12:20:13.167263 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.168821 kubelet[2009]: E0716 12:20:13.167270 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.168821 kubelet[2009]: E0716 12:20:13.167414 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.168821 kubelet[2009]: W0716 12:20:13.167421 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.168821 kubelet[2009]: E0716 12:20:13.167429 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.168821 kubelet[2009]: E0716 12:20:13.167580 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.168821 kubelet[2009]: W0716 12:20:13.167587 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.169138 kubelet[2009]: E0716 12:20:13.167595 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.169138 kubelet[2009]: E0716 12:20:13.167731 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.169138 kubelet[2009]: W0716 12:20:13.167737 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.169138 kubelet[2009]: E0716 12:20:13.167744 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.169138 kubelet[2009]: E0716 12:20:13.167908 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.169138 kubelet[2009]: W0716 12:20:13.167916 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.169138 kubelet[2009]: E0716 12:20:13.167926 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.169138 kubelet[2009]: E0716 12:20:13.168088 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.169138 kubelet[2009]: W0716 12:20:13.168094 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.169138 kubelet[2009]: E0716 12:20:13.168102 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.170529 kubelet[2009]: E0716 12:20:13.169721 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.170529 kubelet[2009]: W0716 12:20:13.169736 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.170529 kubelet[2009]: E0716 12:20:13.169750 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.170529 kubelet[2009]: E0716 12:20:13.169922 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.170529 kubelet[2009]: W0716 12:20:13.169929 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.170529 kubelet[2009]: E0716 12:20:13.169937 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.170529 kubelet[2009]: E0716 12:20:13.170099 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.170529 kubelet[2009]: W0716 12:20:13.170106 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.170529 kubelet[2009]: E0716 12:20:13.170113 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.170529 kubelet[2009]: E0716 12:20:13.170256 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.170903 kubelet[2009]: W0716 12:20:13.170263 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.170903 kubelet[2009]: E0716 12:20:13.170270 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.170903 kubelet[2009]: E0716 12:20:13.170437 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.170903 kubelet[2009]: W0716 12:20:13.170443 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.170903 kubelet[2009]: E0716 12:20:13.170451 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.199095 kernel: kauditd_printk_skb: 167 callbacks suppressed Jul 16 12:20:13.199647 kernel: audit: type=1400 audit(1752668413.192:998): avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.204720 kubelet[2009]: E0716 12:20:13.202490 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.204720 kubelet[2009]: W0716 12:20:13.202516 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.204720 kubelet[2009]: E0716 12:20:13.202553 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.204720 kubelet[2009]: E0716 12:20:13.202764 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.204720 kubelet[2009]: W0716 12:20:13.202772 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.204720 kubelet[2009]: E0716 12:20:13.202782 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.204720 kubelet[2009]: E0716 12:20:13.202961 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.204720 kubelet[2009]: W0716 12:20:13.202967 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.204720 kubelet[2009]: E0716 12:20:13.202975 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.204720 kubelet[2009]: E0716 12:20:13.203197 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.205661 kubelet[2009]: W0716 12:20:13.203205 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.205661 kubelet[2009]: E0716 12:20:13.203215 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.205661 kubelet[2009]: E0716 12:20:13.203354 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.205661 kubelet[2009]: W0716 12:20:13.203361 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.205661 kubelet[2009]: E0716 12:20:13.203375 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.205661 kubelet[2009]: E0716 12:20:13.203602 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.205661 kubelet[2009]: W0716 12:20:13.203614 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.205661 kubelet[2009]: E0716 12:20:13.203621 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.205661 kubelet[2009]: E0716 12:20:13.203811 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.205661 kubelet[2009]: W0716 12:20:13.203818 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.206039 kubelet[2009]: E0716 12:20:13.203825 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.206039 kubelet[2009]: E0716 12:20:13.204319 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.206039 kubelet[2009]: W0716 12:20:13.204342 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.206039 kubelet[2009]: E0716 12:20:13.204390 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.206039 kubelet[2009]: E0716 12:20:13.204611 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.206039 kubelet[2009]: W0716 12:20:13.204620 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.206039 kubelet[2009]: E0716 12:20:13.204631 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.192000 audit[2654]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f8278599b58 items=0 ppid=2478 pid=2654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:13.211464 kernel: audit: type=1300 audit(1752668413.192:998): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f8278599b58 items=0 ppid=2478 pid=2654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:13.211602 kubelet[2009]: E0716 12:20:13.206536 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.211602 kubelet[2009]: W0716 12:20:13.206552 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.211602 kubelet[2009]: E0716 12:20:13.206566 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.211602 kubelet[2009]: E0716 12:20:13.206835 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.211602 kubelet[2009]: W0716 12:20:13.206843 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.211602 kubelet[2009]: E0716 12:20:13.206863 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.214189 systemd[1]: run-containerd-runc-k8s.io-881745120de81b00f9948d77e5c61d0bde1be4813418ea6f948a654e7ea091ba-runc.nSFrgZ.mount: Deactivated successfully. Jul 16 12:20:13.192000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838313734353132306465383162303066393934386437376535633631 Jul 16 12:20:13.222433 kernel: audit: type=1327 audit(1752668413.192:998): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838313734353132306465383162303066393934386437376535633631 Jul 16 12:20:13.222770 kubelet[2009]: E0716 12:20:13.222726 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.222895 kubelet[2009]: W0716 12:20:13.222878 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.223404 kubelet[2009]: E0716 12:20:13.222996 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.227387 kernel: audit: type=1400 audit(1752668413.192:999): avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.228350 kubelet[2009]: E0716 12:20:13.228328 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.228614 kubelet[2009]: W0716 12:20:13.228594 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.228726 kubelet[2009]: E0716 12:20:13.228712 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.232421 kernel: audit: type=1400 audit(1752668413.192:999): avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.236455 kernel: audit: type=1400 audit(1752668413.192:999): avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.241447 kernel: audit: type=1400 audit(1752668413.192:999): avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.244346 kubelet[2009]: E0716 12:20:13.244315 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.247731 kernel: audit: type=1400 audit(1752668413.192:999): avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.247809 kernel: audit: type=1400 audit(1752668413.192:999): avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.251588 kubelet[2009]: W0716 12:20:13.251556 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.251767 kubelet[2009]: E0716 12:20:13.251751 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.254320 env[1205]: time="2025-07-16T12:20:13.254197288Z" level=info msg="StartContainer for \"881745120de81b00f9948d77e5c61d0bde1be4813418ea6f948a654e7ea091ba\" returns successfully" Jul 16 12:20:13.255435 kernel: audit: type=1400 audit(1752668413.192:999): avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit: BPF prog-id=130 op=LOAD Jul 16 12:20:13.192000 audit[2654]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0002d3b98 items=0 ppid=2478 pid=2654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:13.192000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838313734353132306465383162303066393934386437376535633631 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit: BPF prog-id=131 op=LOAD Jul 16 12:20:13.192000 audit[2654]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0002d3be8 items=0 ppid=2478 pid=2654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:13.192000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838313734353132306465383162303066393934386437376535633631 Jul 16 12:20:13.192000 audit: BPF prog-id=131 op=UNLOAD Jul 16 12:20:13.192000 audit: BPF prog-id=130 op=UNLOAD Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:13.192000 audit: BPF prog-id=132 op=LOAD Jul 16 12:20:13.192000 audit[2654]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0002d3c78 items=0 ppid=2478 pid=2654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:13.192000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838313734353132306465383162303066393934386437376535633631 Jul 16 12:20:13.265310 kubelet[2009]: E0716 12:20:13.265285 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.265993 kubelet[2009]: W0716 12:20:13.265972 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.266108 kubelet[2009]: E0716 12:20:13.266091 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.266473 kubelet[2009]: E0716 12:20:13.266461 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.266583 kubelet[2009]: W0716 12:20:13.266568 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.266722 kubelet[2009]: E0716 12:20:13.266656 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.267078 kubelet[2009]: E0716 12:20:13.267064 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.267221 kubelet[2009]: W0716 12:20:13.267207 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.267318 kubelet[2009]: E0716 12:20:13.267306 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.267952 kubelet[2009]: E0716 12:20:13.267927 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 16 12:20:13.268072 kubelet[2009]: W0716 12:20:13.268059 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 16 12:20:13.268163 kubelet[2009]: E0716 12:20:13.268151 2009 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 16 12:20:13.275946 systemd[1]: cri-containerd-881745120de81b00f9948d77e5c61d0bde1be4813418ea6f948a654e7ea091ba.scope: Deactivated successfully. Jul 16 12:20:13.278000 audit: BPF prog-id=132 op=UNLOAD Jul 16 12:20:13.318740 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-881745120de81b00f9948d77e5c61d0bde1be4813418ea6f948a654e7ea091ba-rootfs.mount: Deactivated successfully. Jul 16 12:20:13.378880 env[1205]: time="2025-07-16T12:20:13.378801072Z" level=info msg="shim disconnected" id=881745120de81b00f9948d77e5c61d0bde1be4813418ea6f948a654e7ea091ba Jul 16 12:20:13.379175 env[1205]: time="2025-07-16T12:20:13.379154138Z" level=warning msg="cleaning up after shim disconnected" id=881745120de81b00f9948d77e5c61d0bde1be4813418ea6f948a654e7ea091ba namespace=k8s.io Jul 16 12:20:13.379266 env[1205]: time="2025-07-16T12:20:13.379251852Z" level=info msg="cleaning up dead shim" Jul 16 12:20:13.388972 env[1205]: time="2025-07-16T12:20:13.388903891Z" level=warning msg="cleanup warnings time=\"2025-07-16T12:20:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2726 runtime=io.containerd.runc.v2\n" Jul 16 12:20:14.169795 env[1205]: time="2025-07-16T12:20:14.169728875Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 16 12:20:15.016382 kubelet[2009]: E0716 12:20:15.016310 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-v4b2s" podUID="4a5efb8c-684a-4214-9e4c-7f907cf4218d" Jul 16 12:20:16.405619 kubelet[2009]: I0716 12:20:16.405464 2009 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 16 12:20:16.455000 audit[2746]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=2746 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:16.455000 audit[2746]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffebc24c360 a2=0 a3=7ffebc24c34c items=0 ppid=2161 pid=2746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:16.455000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:16.460000 audit[2746]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=2746 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:16.460000 audit[2746]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffebc24c360 a2=0 a3=7ffebc24c34c items=0 ppid=2161 pid=2746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:16.460000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:17.016327 kubelet[2009]: E0716 12:20:17.016185 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-v4b2s" podUID="4a5efb8c-684a-4214-9e4c-7f907cf4218d" Jul 16 12:20:19.016647 kubelet[2009]: E0716 12:20:19.016501 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-v4b2s" podUID="4a5efb8c-684a-4214-9e4c-7f907cf4218d" Jul 16 12:20:20.699541 env[1205]: time="2025-07-16T12:20:20.699477073Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:20.702620 env[1205]: time="2025-07-16T12:20:20.702577058Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:20.704448 env[1205]: time="2025-07-16T12:20:20.704414129Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:20.705919 env[1205]: time="2025-07-16T12:20:20.705840936Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630\"" Jul 16 12:20:20.707628 env[1205]: time="2025-07-16T12:20:20.707591633Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:20.715848 env[1205]: time="2025-07-16T12:20:20.715816465Z" level=info msg="CreateContainer within sandbox \"aed7cc7611b45e29ff75d489ee55f6e37ee4e77a24f5048739989083d7f7a9f8\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 16 12:20:20.726291 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1313744212.mount: Deactivated successfully. Jul 16 12:20:20.730227 env[1205]: time="2025-07-16T12:20:20.730188069Z" level=info msg="CreateContainer within sandbox \"aed7cc7611b45e29ff75d489ee55f6e37ee4e77a24f5048739989083d7f7a9f8\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"c48ad69180c684dbb8702cd04dca25e64e69f154a1dfe46e0726c2d6dc1ce07e\"" Jul 16 12:20:20.732208 env[1205]: time="2025-07-16T12:20:20.730956015Z" level=info msg="StartContainer for \"c48ad69180c684dbb8702cd04dca25e64e69f154a1dfe46e0726c2d6dc1ce07e\"" Jul 16 12:20:20.772898 systemd[1]: Started cri-containerd-c48ad69180c684dbb8702cd04dca25e64e69f154a1dfe46e0726c2d6dc1ce07e.scope. Jul 16 12:20:20.796000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.806545 kernel: kauditd_printk_skb: 40 callbacks suppressed Jul 16 12:20:20.806810 kernel: audit: type=1400 audit(1752668420.796:1007): avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.796000 audit[2754]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f5b8029ac38 items=0 ppid=2478 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:20.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334386164363931383063363834646262383730326364303464636132 Jul 16 12:20:20.815800 kernel: audit: type=1300 audit(1752668420.796:1007): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f5b8029ac38 items=0 ppid=2478 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:20.815916 kernel: audit: type=1327 audit(1752668420.796:1007): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334386164363931383063363834646262383730326364303464636132 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.829702 kernel: audit: type=1400 audit(1752668420.805:1008): avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.837547 kernel: audit: type=1400 audit(1752668420.805:1008): avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.837628 kernel: audit: type=1400 audit(1752668420.805:1008): avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.841116 kernel: audit: type=1400 audit(1752668420.805:1008): avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.841802 kernel: audit: type=1400 audit(1752668420.805:1008): avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.847420 kernel: audit: type=1400 audit(1752668420.805:1008): avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.847482 kernel: audit: type=1400 audit(1752668420.805:1008): avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit: BPF prog-id=133 op=LOAD Jul 16 12:20:20.805000 audit[2754]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c00028d1b8 items=0 ppid=2478 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:20.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334386164363931383063363834646262383730326364303464636132 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit: BPF prog-id=134 op=LOAD Jul 16 12:20:20.805000 audit[2754]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c00028d208 items=0 ppid=2478 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:20.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334386164363931383063363834646262383730326364303464636132 Jul 16 12:20:20.805000 audit: BPF prog-id=134 op=UNLOAD Jul 16 12:20:20.805000 audit: BPF prog-id=133 op=UNLOAD Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:20.805000 audit: BPF prog-id=135 op=LOAD Jul 16 12:20:20.805000 audit[2754]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c00028d298 items=0 ppid=2478 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:20.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334386164363931383063363834646262383730326364303464636132 Jul 16 12:20:20.856316 env[1205]: time="2025-07-16T12:20:20.856270285Z" level=info msg="StartContainer for \"c48ad69180c684dbb8702cd04dca25e64e69f154a1dfe46e0726c2d6dc1ce07e\" returns successfully" Jul 16 12:20:21.016211 kubelet[2009]: E0716 12:20:21.015668 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-v4b2s" podUID="4a5efb8c-684a-4214-9e4c-7f907cf4218d" Jul 16 12:20:21.650568 env[1205]: time="2025-07-16T12:20:21.650316964Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 16 12:20:21.655721 systemd[1]: cri-containerd-c48ad69180c684dbb8702cd04dca25e64e69f154a1dfe46e0726c2d6dc1ce07e.scope: Deactivated successfully. Jul 16 12:20:21.656000 audit: BPF prog-id=135 op=UNLOAD Jul 16 12:20:21.676631 env[1205]: time="2025-07-16T12:20:21.676576158Z" level=info msg="shim disconnected" id=c48ad69180c684dbb8702cd04dca25e64e69f154a1dfe46e0726c2d6dc1ce07e Jul 16 12:20:21.676631 env[1205]: time="2025-07-16T12:20:21.676627067Z" level=warning msg="cleaning up after shim disconnected" id=c48ad69180c684dbb8702cd04dca25e64e69f154a1dfe46e0726c2d6dc1ce07e namespace=k8s.io Jul 16 12:20:21.676631 env[1205]: time="2025-07-16T12:20:21.676639287Z" level=info msg="cleaning up dead shim" Jul 16 12:20:21.686034 env[1205]: time="2025-07-16T12:20:21.685985300Z" level=warning msg="cleanup warnings time=\"2025-07-16T12:20:21Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2795 runtime=io.containerd.runc.v2\n" Jul 16 12:20:21.726722 systemd[1]: run-containerd-runc-k8s.io-c48ad69180c684dbb8702cd04dca25e64e69f154a1dfe46e0726c2d6dc1ce07e-runc.nLtRM8.mount: Deactivated successfully. Jul 16 12:20:21.726954 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c48ad69180c684dbb8702cd04dca25e64e69f154a1dfe46e0726c2d6dc1ce07e-rootfs.mount: Deactivated successfully. Jul 16 12:20:21.756188 kubelet[2009]: I0716 12:20:21.743791 2009 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 16 12:20:21.908403 kubelet[2009]: I0716 12:20:21.908247 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/a9e6039e-de2d-4a1f-9793-315b7a02db3c-config-volume\") pod \"coredns-674b8bbfcf-7kxwt\" (UID: \"a9e6039e-de2d-4a1f-9793-315b7a02db3c\") " pod="kube-system/coredns-674b8bbfcf-7kxwt" Jul 16 12:20:21.909242 kubelet[2009]: I0716 12:20:21.909200 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-c9tps\" (UniqueName: \"kubernetes.io/projected/a9e6039e-de2d-4a1f-9793-315b7a02db3c-kube-api-access-c9tps\") pod \"coredns-674b8bbfcf-7kxwt\" (UID: \"a9e6039e-de2d-4a1f-9793-315b7a02db3c\") " pod="kube-system/coredns-674b8bbfcf-7kxwt" Jul 16 12:20:21.943579 systemd[1]: Created slice kubepods-besteffort-poda054c48d_9afd_4483_81bd_e5d032ec6f4b.slice. Jul 16 12:20:21.973244 systemd[1]: Created slice kubepods-burstable-poda9e6039e_de2d_4a1f_9793_315b7a02db3c.slice. Jul 16 12:20:21.978064 systemd[1]: Created slice kubepods-burstable-pod8593d450_6860_4758_9ca4_fd43459b0599.slice. Jul 16 12:20:21.983290 systemd[1]: Created slice kubepods-besteffort-pod236ebe5f_a95d_42df_8840_c8ac6fd743e4.slice. Jul 16 12:20:21.998613 systemd[1]: Created slice kubepods-besteffort-pod94f730db_68a2_4e48_bafd_314eacd16a53.slice. Jul 16 12:20:22.003815 systemd[1]: Created slice kubepods-besteffort-pod2241f06a_ab47_4d15_8e36_a94bf91d7b1d.slice. Jul 16 12:20:22.011741 kubelet[2009]: I0716 12:20:22.011713 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-s4dmr\" (UniqueName: \"kubernetes.io/projected/8593d450-6860-4758-9ca4-fd43459b0599-kube-api-access-s4dmr\") pod \"coredns-674b8bbfcf-n6sg4\" (UID: \"8593d450-6860-4758-9ca4-fd43459b0599\") " pod="kube-system/coredns-674b8bbfcf-n6sg4" Jul 16 12:20:22.011958 kubelet[2009]: I0716 12:20:22.011943 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/2241f06a-ab47-4d15-8e36-a94bf91d7b1d-calico-apiserver-certs\") pod \"calico-apiserver-55dcc56559-cjgqh\" (UID: \"2241f06a-ab47-4d15-8e36-a94bf91d7b1d\") " pod="calico-apiserver/calico-apiserver-55dcc56559-cjgqh" Jul 16 12:20:22.012299 kubelet[2009]: I0716 12:20:22.012086 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/236ebe5f-a95d-42df-8840-c8ac6fd743e4-calico-apiserver-certs\") pod \"calico-apiserver-5944847977-8tj42\" (UID: \"236ebe5f-a95d-42df-8840-c8ac6fd743e4\") " pod="calico-apiserver/calico-apiserver-5944847977-8tj42" Jul 16 12:20:22.012299 kubelet[2009]: I0716 12:20:22.012109 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bdvgw\" (UniqueName: \"kubernetes.io/projected/2241f06a-ab47-4d15-8e36-a94bf91d7b1d-kube-api-access-bdvgw\") pod \"calico-apiserver-55dcc56559-cjgqh\" (UID: \"2241f06a-ab47-4d15-8e36-a94bf91d7b1d\") " pod="calico-apiserver/calico-apiserver-55dcc56559-cjgqh" Jul 16 12:20:22.012299 kubelet[2009]: I0716 12:20:22.012144 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3c9d3cc7-b97b-4b96-a498-6d46ca24e031-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-ttxxf\" (UID: \"3c9d3cc7-b97b-4b96-a498-6d46ca24e031\") " pod="calico-system/goldmane-768f4c5c69-ttxxf" Jul 16 12:20:22.012299 kubelet[2009]: I0716 12:20:22.012163 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rxn6l\" (UniqueName: \"kubernetes.io/projected/a054c48d-9afd-4483-81bd-e5d032ec6f4b-kube-api-access-rxn6l\") pod \"calico-kube-controllers-6c568f6db7-r8npm\" (UID: \"a054c48d-9afd-4483-81bd-e5d032ec6f4b\") " pod="calico-system/calico-kube-controllers-6c568f6db7-r8npm" Jul 16 12:20:22.012299 kubelet[2009]: I0716 12:20:22.012208 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/8593d450-6860-4758-9ca4-fd43459b0599-config-volume\") pod \"coredns-674b8bbfcf-n6sg4\" (UID: \"8593d450-6860-4758-9ca4-fd43459b0599\") " pod="kube-system/coredns-674b8bbfcf-n6sg4" Jul 16 12:20:22.012545 kubelet[2009]: I0716 12:20:22.012525 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb-whisker-ca-bundle\") pod \"whisker-bff5bbd48-wvjht\" (UID: \"dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb\") " pod="calico-system/whisker-bff5bbd48-wvjht" Jul 16 12:20:22.012649 kubelet[2009]: I0716 12:20:22.012636 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/94f730db-68a2-4e48-bafd-314eacd16a53-calico-apiserver-certs\") pod \"calico-apiserver-5944847977-rlssh\" (UID: \"94f730db-68a2-4e48-bafd-314eacd16a53\") " pod="calico-apiserver/calico-apiserver-5944847977-rlssh" Jul 16 12:20:22.012759 kubelet[2009]: I0716 12:20:22.012746 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb-whisker-backend-key-pair\") pod \"whisker-bff5bbd48-wvjht\" (UID: \"dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb\") " pod="calico-system/whisker-bff5bbd48-wvjht" Jul 16 12:20:22.012847 kubelet[2009]: I0716 12:20:22.012834 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hv9p2\" (UniqueName: \"kubernetes.io/projected/dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb-kube-api-access-hv9p2\") pod \"whisker-bff5bbd48-wvjht\" (UID: \"dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb\") " pod="calico-system/whisker-bff5bbd48-wvjht" Jul 16 12:20:22.012962 kubelet[2009]: I0716 12:20:22.012949 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fghh4\" (UniqueName: \"kubernetes.io/projected/94f730db-68a2-4e48-bafd-314eacd16a53-kube-api-access-fghh4\") pod \"calico-apiserver-5944847977-rlssh\" (UID: \"94f730db-68a2-4e48-bafd-314eacd16a53\") " pod="calico-apiserver/calico-apiserver-5944847977-rlssh" Jul 16 12:20:22.013057 kubelet[2009]: I0716 12:20:22.013046 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/3c9d3cc7-b97b-4b96-a498-6d46ca24e031-config\") pod \"goldmane-768f4c5c69-ttxxf\" (UID: \"3c9d3cc7-b97b-4b96-a498-6d46ca24e031\") " pod="calico-system/goldmane-768f4c5c69-ttxxf" Jul 16 12:20:22.013149 kubelet[2009]: I0716 12:20:22.013137 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/3c9d3cc7-b97b-4b96-a498-6d46ca24e031-goldmane-key-pair\") pod \"goldmane-768f4c5c69-ttxxf\" (UID: \"3c9d3cc7-b97b-4b96-a498-6d46ca24e031\") " pod="calico-system/goldmane-768f4c5c69-ttxxf" Jul 16 12:20:22.013234 kubelet[2009]: I0716 12:20:22.013223 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5fgzf\" (UniqueName: \"kubernetes.io/projected/3c9d3cc7-b97b-4b96-a498-6d46ca24e031-kube-api-access-5fgzf\") pod \"goldmane-768f4c5c69-ttxxf\" (UID: \"3c9d3cc7-b97b-4b96-a498-6d46ca24e031\") " pod="calico-system/goldmane-768f4c5c69-ttxxf" Jul 16 12:20:22.013374 kubelet[2009]: I0716 12:20:22.013352 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-twncg\" (UniqueName: \"kubernetes.io/projected/236ebe5f-a95d-42df-8840-c8ac6fd743e4-kube-api-access-twncg\") pod \"calico-apiserver-5944847977-8tj42\" (UID: \"236ebe5f-a95d-42df-8840-c8ac6fd743e4\") " pod="calico-apiserver/calico-apiserver-5944847977-8tj42" Jul 16 12:20:22.013477 kubelet[2009]: I0716 12:20:22.013465 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a054c48d-9afd-4483-81bd-e5d032ec6f4b-tigera-ca-bundle\") pod \"calico-kube-controllers-6c568f6db7-r8npm\" (UID: \"a054c48d-9afd-4483-81bd-e5d032ec6f4b\") " pod="calico-system/calico-kube-controllers-6c568f6db7-r8npm" Jul 16 12:20:22.016814 systemd[1]: Created slice kubepods-besteffort-poddab1ca4b_a229_47ad_bf0e_49f1aa00b1eb.slice. Jul 16 12:20:22.030023 systemd[1]: Created slice kubepods-besteffort-pod3c9d3cc7_b97b_4b96_a498_6d46ca24e031.slice. Jul 16 12:20:22.200553 env[1205]: time="2025-07-16T12:20:22.196982909Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 16 12:20:22.272457 env[1205]: time="2025-07-16T12:20:22.272315432Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6c568f6db7-r8npm,Uid:a054c48d-9afd-4483-81bd-e5d032ec6f4b,Namespace:calico-system,Attempt:0,}" Jul 16 12:20:22.279896 env[1205]: time="2025-07-16T12:20:22.279833103Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-7kxwt,Uid:a9e6039e-de2d-4a1f-9793-315b7a02db3c,Namespace:kube-system,Attempt:0,}" Jul 16 12:20:22.286966 env[1205]: time="2025-07-16T12:20:22.286918428Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-n6sg4,Uid:8593d450-6860-4758-9ca4-fd43459b0599,Namespace:kube-system,Attempt:0,}" Jul 16 12:20:22.300680 env[1205]: time="2025-07-16T12:20:22.300611638Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5944847977-8tj42,Uid:236ebe5f-a95d-42df-8840-c8ac6fd743e4,Namespace:calico-apiserver,Attempt:0,}" Jul 16 12:20:22.304815 env[1205]: time="2025-07-16T12:20:22.304750584Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5944847977-rlssh,Uid:94f730db-68a2-4e48-bafd-314eacd16a53,Namespace:calico-apiserver,Attempt:0,}" Jul 16 12:20:22.316640 env[1205]: time="2025-07-16T12:20:22.316589369Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-55dcc56559-cjgqh,Uid:2241f06a-ab47-4d15-8e36-a94bf91d7b1d,Namespace:calico-apiserver,Attempt:0,}" Jul 16 12:20:22.334993 env[1205]: time="2025-07-16T12:20:22.334951052Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-bff5bbd48-wvjht,Uid:dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb,Namespace:calico-system,Attempt:0,}" Jul 16 12:20:22.335540 env[1205]: time="2025-07-16T12:20:22.335191614Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-ttxxf,Uid:3c9d3cc7-b97b-4b96-a498-6d46ca24e031,Namespace:calico-system,Attempt:0,}" Jul 16 12:20:22.544951 env[1205]: time="2025-07-16T12:20:22.544359045Z" level=error msg="Failed to destroy network for sandbox \"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.545524 env[1205]: time="2025-07-16T12:20:22.545479307Z" level=error msg="encountered an error cleaning up failed sandbox \"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.545678 env[1205]: time="2025-07-16T12:20:22.545649221Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-7kxwt,Uid:a9e6039e-de2d-4a1f-9793-315b7a02db3c,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.550338 kubelet[2009]: E0716 12:20:22.550274 2009 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.550922 kubelet[2009]: E0716 12:20:22.550900 2009 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-7kxwt" Jul 16 12:20:22.551818 kubelet[2009]: E0716 12:20:22.551793 2009 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-7kxwt" Jul 16 12:20:22.552227 kubelet[2009]: E0716 12:20:22.551880 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-7kxwt_kube-system(a9e6039e-de2d-4a1f-9793-315b7a02db3c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-7kxwt_kube-system(a9e6039e-de2d-4a1f-9793-315b7a02db3c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-7kxwt" podUID="a9e6039e-de2d-4a1f-9793-315b7a02db3c" Jul 16 12:20:22.558669 env[1205]: time="2025-07-16T12:20:22.558619256Z" level=error msg="Failed to destroy network for sandbox \"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.559120 env[1205]: time="2025-07-16T12:20:22.559084729Z" level=error msg="encountered an error cleaning up failed sandbox \"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.559263 env[1205]: time="2025-07-16T12:20:22.559234960Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-n6sg4,Uid:8593d450-6860-4758-9ca4-fd43459b0599,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.559878 kubelet[2009]: E0716 12:20:22.559534 2009 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.559878 kubelet[2009]: E0716 12:20:22.559595 2009 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-n6sg4" Jul 16 12:20:22.559878 kubelet[2009]: E0716 12:20:22.559621 2009 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-n6sg4" Jul 16 12:20:22.560092 kubelet[2009]: E0716 12:20:22.559679 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-n6sg4_kube-system(8593d450-6860-4758-9ca4-fd43459b0599)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-n6sg4_kube-system(8593d450-6860-4758-9ca4-fd43459b0599)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-n6sg4" podUID="8593d450-6860-4758-9ca4-fd43459b0599" Jul 16 12:20:22.561231 env[1205]: time="2025-07-16T12:20:22.561190957Z" level=error msg="Failed to destroy network for sandbox \"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.561560 env[1205]: time="2025-07-16T12:20:22.561527912Z" level=error msg="encountered an error cleaning up failed sandbox \"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.561718 env[1205]: time="2025-07-16T12:20:22.561578498Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6c568f6db7-r8npm,Uid:a054c48d-9afd-4483-81bd-e5d032ec6f4b,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.561891 kubelet[2009]: E0716 12:20:22.561864 2009 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.561953 kubelet[2009]: E0716 12:20:22.561910 2009 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6c568f6db7-r8npm" Jul 16 12:20:22.561953 kubelet[2009]: E0716 12:20:22.561932 2009 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6c568f6db7-r8npm" Jul 16 12:20:22.562029 kubelet[2009]: E0716 12:20:22.561979 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-6c568f6db7-r8npm_calico-system(a054c48d-9afd-4483-81bd-e5d032ec6f4b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-6c568f6db7-r8npm_calico-system(a054c48d-9afd-4483-81bd-e5d032ec6f4b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6c568f6db7-r8npm" podUID="a054c48d-9afd-4483-81bd-e5d032ec6f4b" Jul 16 12:20:22.596634 env[1205]: time="2025-07-16T12:20:22.596574244Z" level=error msg="Failed to destroy network for sandbox \"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.596965 env[1205]: time="2025-07-16T12:20:22.596931818Z" level=error msg="encountered an error cleaning up failed sandbox \"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.597029 env[1205]: time="2025-07-16T12:20:22.596986330Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5944847977-8tj42,Uid:236ebe5f-a95d-42df-8840-c8ac6fd743e4,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.597410 kubelet[2009]: E0716 12:20:22.597251 2009 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.597410 kubelet[2009]: E0716 12:20:22.597334 2009 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5944847977-8tj42" Jul 16 12:20:22.597805 kubelet[2009]: E0716 12:20:22.597364 2009 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5944847977-8tj42" Jul 16 12:20:22.597805 kubelet[2009]: E0716 12:20:22.597618 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5944847977-8tj42_calico-apiserver(236ebe5f-a95d-42df-8840-c8ac6fd743e4)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5944847977-8tj42_calico-apiserver(236ebe5f-a95d-42df-8840-c8ac6fd743e4)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5944847977-8tj42" podUID="236ebe5f-a95d-42df-8840-c8ac6fd743e4" Jul 16 12:20:22.607353 env[1205]: time="2025-07-16T12:20:22.607273188Z" level=error msg="Failed to destroy network for sandbox \"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.607700 env[1205]: time="2025-07-16T12:20:22.607660225Z" level=error msg="encountered an error cleaning up failed sandbox \"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.607784 env[1205]: time="2025-07-16T12:20:22.607711413Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-55dcc56559-cjgqh,Uid:2241f06a-ab47-4d15-8e36-a94bf91d7b1d,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.607976 kubelet[2009]: E0716 12:20:22.607937 2009 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.608084 kubelet[2009]: E0716 12:20:22.608008 2009 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-55dcc56559-cjgqh" Jul 16 12:20:22.608084 kubelet[2009]: E0716 12:20:22.608030 2009 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-55dcc56559-cjgqh" Jul 16 12:20:22.608179 kubelet[2009]: E0716 12:20:22.608101 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-55dcc56559-cjgqh_calico-apiserver(2241f06a-ab47-4d15-8e36-a94bf91d7b1d)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-55dcc56559-cjgqh_calico-apiserver(2241f06a-ab47-4d15-8e36-a94bf91d7b1d)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-55dcc56559-cjgqh" podUID="2241f06a-ab47-4d15-8e36-a94bf91d7b1d" Jul 16 12:20:22.625830 env[1205]: time="2025-07-16T12:20:22.625764589Z" level=error msg="Failed to destroy network for sandbox \"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.626234 env[1205]: time="2025-07-16T12:20:22.626198245Z" level=error msg="encountered an error cleaning up failed sandbox \"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.626299 env[1205]: time="2025-07-16T12:20:22.626259917Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5944847977-rlssh,Uid:94f730db-68a2-4e48-bafd-314eacd16a53,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.626914 kubelet[2009]: E0716 12:20:22.626531 2009 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.626914 kubelet[2009]: E0716 12:20:22.626599 2009 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5944847977-rlssh" Jul 16 12:20:22.626914 kubelet[2009]: E0716 12:20:22.626623 2009 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5944847977-rlssh" Jul 16 12:20:22.627149 kubelet[2009]: E0716 12:20:22.626682 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5944847977-rlssh_calico-apiserver(94f730db-68a2-4e48-bafd-314eacd16a53)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5944847977-rlssh_calico-apiserver(94f730db-68a2-4e48-bafd-314eacd16a53)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5944847977-rlssh" podUID="94f730db-68a2-4e48-bafd-314eacd16a53" Jul 16 12:20:22.643563 env[1205]: time="2025-07-16T12:20:22.643497740Z" level=error msg="Failed to destroy network for sandbox \"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.643925 env[1205]: time="2025-07-16T12:20:22.643887696Z" level=error msg="encountered an error cleaning up failed sandbox \"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.643985 env[1205]: time="2025-07-16T12:20:22.643958383Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-ttxxf,Uid:3c9d3cc7-b97b-4b96-a498-6d46ca24e031,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.644472 kubelet[2009]: E0716 12:20:22.644212 2009 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.644472 kubelet[2009]: E0716 12:20:22.644283 2009 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-ttxxf" Jul 16 12:20:22.644472 kubelet[2009]: E0716 12:20:22.644307 2009 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-ttxxf" Jul 16 12:20:22.644629 env[1205]: time="2025-07-16T12:20:22.644339731Z" level=error msg="Failed to destroy network for sandbox \"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.644670 kubelet[2009]: E0716 12:20:22.644397 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-ttxxf_calico-system(3c9d3cc7-b97b-4b96-a498-6d46ca24e031)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-ttxxf_calico-system(3c9d3cc7-b97b-4b96-a498-6d46ca24e031)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-ttxxf" podUID="3c9d3cc7-b97b-4b96-a498-6d46ca24e031" Jul 16 12:20:22.646147 env[1205]: time="2025-07-16T12:20:22.645682489Z" level=error msg="encountered an error cleaning up failed sandbox \"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.646147 env[1205]: time="2025-07-16T12:20:22.645741223Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-bff5bbd48-wvjht,Uid:dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.646600 kubelet[2009]: E0716 12:20:22.645909 2009 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:22.646600 kubelet[2009]: E0716 12:20:22.645950 2009 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-bff5bbd48-wvjht" Jul 16 12:20:22.646600 kubelet[2009]: E0716 12:20:22.645966 2009 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-bff5bbd48-wvjht" Jul 16 12:20:22.646717 kubelet[2009]: E0716 12:20:22.646024 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-bff5bbd48-wvjht_calico-system(dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-bff5bbd48-wvjht_calico-system(dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-bff5bbd48-wvjht" podUID="dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb" Jul 16 12:20:23.027945 systemd[1]: Created slice kubepods-besteffort-pod4a5efb8c_684a_4214_9e4c_7f907cf4218d.slice. Jul 16 12:20:23.031344 env[1205]: time="2025-07-16T12:20:23.031296104Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-v4b2s,Uid:4a5efb8c-684a-4214-9e4c-7f907cf4218d,Namespace:calico-system,Attempt:0,}" Jul 16 12:20:23.109083 env[1205]: time="2025-07-16T12:20:23.109012779Z" level=error msg="Failed to destroy network for sandbox \"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:23.111686 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5-shm.mount: Deactivated successfully. Jul 16 12:20:23.113086 env[1205]: time="2025-07-16T12:20:23.113037556Z" level=error msg="encountered an error cleaning up failed sandbox \"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:23.113328 env[1205]: time="2025-07-16T12:20:23.113296062Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-v4b2s,Uid:4a5efb8c-684a-4214-9e4c-7f907cf4218d,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:23.113678 kubelet[2009]: E0716 12:20:23.113639 2009 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:23.113766 kubelet[2009]: E0716 12:20:23.113710 2009 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-v4b2s" Jul 16 12:20:23.113805 kubelet[2009]: E0716 12:20:23.113768 2009 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-v4b2s" Jul 16 12:20:23.113886 kubelet[2009]: E0716 12:20:23.113861 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-v4b2s_calico-system(4a5efb8c-684a-4214-9e4c-7f907cf4218d)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-v4b2s_calico-system(4a5efb8c-684a-4214-9e4c-7f907cf4218d)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-v4b2s" podUID="4a5efb8c-684a-4214-9e4c-7f907cf4218d" Jul 16 12:20:23.203812 kubelet[2009]: I0716 12:20:23.202825 2009 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" Jul 16 12:20:23.211959 kubelet[2009]: I0716 12:20:23.211919 2009 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" Jul 16 12:20:23.225518 env[1205]: time="2025-07-16T12:20:23.223808761Z" level=info msg="StopPodSandbox for \"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5\"" Jul 16 12:20:23.226480 env[1205]: time="2025-07-16T12:20:23.226288687Z" level=info msg="StopPodSandbox for \"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da\"" Jul 16 12:20:23.231234 kubelet[2009]: I0716 12:20:23.231170 2009 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" Jul 16 12:20:23.234151 env[1205]: time="2025-07-16T12:20:23.232888026Z" level=info msg="StopPodSandbox for \"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1\"" Jul 16 12:20:23.234417 kubelet[2009]: I0716 12:20:23.234085 2009 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" Jul 16 12:20:23.234755 env[1205]: time="2025-07-16T12:20:23.234673767Z" level=info msg="StopPodSandbox for \"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251\"" Jul 16 12:20:23.238149 kubelet[2009]: I0716 12:20:23.238125 2009 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" Jul 16 12:20:23.238728 env[1205]: time="2025-07-16T12:20:23.238699649Z" level=info msg="StopPodSandbox for \"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e\"" Jul 16 12:20:23.239613 kubelet[2009]: I0716 12:20:23.239508 2009 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" Jul 16 12:20:23.241874 env[1205]: time="2025-07-16T12:20:23.240351179Z" level=info msg="StopPodSandbox for \"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8\"" Jul 16 12:20:23.242004 kubelet[2009]: I0716 12:20:23.241617 2009 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" Jul 16 12:20:23.242195 env[1205]: time="2025-07-16T12:20:23.242169662Z" level=info msg="StopPodSandbox for \"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e\"" Jul 16 12:20:23.244763 kubelet[2009]: I0716 12:20:23.244119 2009 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" Jul 16 12:20:23.246729 env[1205]: time="2025-07-16T12:20:23.245216385Z" level=info msg="StopPodSandbox for \"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8\"" Jul 16 12:20:23.246864 kubelet[2009]: I0716 12:20:23.246837 2009 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" Jul 16 12:20:23.247351 env[1205]: time="2025-07-16T12:20:23.247325023Z" level=info msg="StopPodSandbox for \"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7\"" Jul 16 12:20:23.303926 env[1205]: time="2025-07-16T12:20:23.303739952Z" level=error msg="StopPodSandbox for \"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5\" failed" error="failed to destroy network for sandbox \"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:23.305749 kubelet[2009]: E0716 12:20:23.305433 2009 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" Jul 16 12:20:23.305749 kubelet[2009]: E0716 12:20:23.305576 2009 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5"} Jul 16 12:20:23.305749 kubelet[2009]: E0716 12:20:23.305664 2009 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4a5efb8c-684a-4214-9e4c-7f907cf4218d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 16 12:20:23.305749 kubelet[2009]: E0716 12:20:23.305704 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4a5efb8c-684a-4214-9e4c-7f907cf4218d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-v4b2s" podUID="4a5efb8c-684a-4214-9e4c-7f907cf4218d" Jul 16 12:20:23.444297 env[1205]: time="2025-07-16T12:20:23.444191651Z" level=error msg="StopPodSandbox for \"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e\" failed" error="failed to destroy network for sandbox \"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:23.444635 env[1205]: time="2025-07-16T12:20:23.444429829Z" level=error msg="StopPodSandbox for \"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8\" failed" error="failed to destroy network for sandbox \"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:23.445042 kubelet[2009]: E0716 12:20:23.444696 2009 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" Jul 16 12:20:23.445042 kubelet[2009]: E0716 12:20:23.444786 2009 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8"} Jul 16 12:20:23.445042 kubelet[2009]: E0716 12:20:23.444788 2009 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" Jul 16 12:20:23.445042 kubelet[2009]: E0716 12:20:23.444842 2009 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e"} Jul 16 12:20:23.445042 kubelet[2009]: E0716 12:20:23.444890 2009 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 16 12:20:23.445357 kubelet[2009]: E0716 12:20:23.444977 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-bff5bbd48-wvjht" podUID="dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb" Jul 16 12:20:23.446136 kubelet[2009]: E0716 12:20:23.446097 2009 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a054c48d-9afd-4483-81bd-e5d032ec6f4b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 16 12:20:23.446266 kubelet[2009]: E0716 12:20:23.446155 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a054c48d-9afd-4483-81bd-e5d032ec6f4b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6c568f6db7-r8npm" podUID="a054c48d-9afd-4483-81bd-e5d032ec6f4b" Jul 16 12:20:23.459840 env[1205]: time="2025-07-16T12:20:23.459775735Z" level=error msg="StopPodSandbox for \"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da\" failed" error="failed to destroy network for sandbox \"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:23.460226 kubelet[2009]: E0716 12:20:23.460178 2009 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" Jul 16 12:20:23.460326 kubelet[2009]: E0716 12:20:23.460253 2009 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da"} Jul 16 12:20:23.460326 kubelet[2009]: E0716 12:20:23.460302 2009 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"94f730db-68a2-4e48-bafd-314eacd16a53\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 16 12:20:23.460605 kubelet[2009]: E0716 12:20:23.460332 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"94f730db-68a2-4e48-bafd-314eacd16a53\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5944847977-rlssh" podUID="94f730db-68a2-4e48-bafd-314eacd16a53" Jul 16 12:20:23.460686 env[1205]: time="2025-07-16T12:20:23.459677241Z" level=error msg="StopPodSandbox for \"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251\" failed" error="failed to destroy network for sandbox \"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:23.461070 kubelet[2009]: E0716 12:20:23.460887 2009 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" Jul 16 12:20:23.461070 kubelet[2009]: E0716 12:20:23.460961 2009 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251"} Jul 16 12:20:23.461070 kubelet[2009]: E0716 12:20:23.460998 2009 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"8593d450-6860-4758-9ca4-fd43459b0599\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 16 12:20:23.461070 kubelet[2009]: E0716 12:20:23.461037 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"8593d450-6860-4758-9ca4-fd43459b0599\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-n6sg4" podUID="8593d450-6860-4758-9ca4-fd43459b0599" Jul 16 12:20:23.487486 env[1205]: time="2025-07-16T12:20:23.487352753Z" level=error msg="StopPodSandbox for \"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8\" failed" error="failed to destroy network for sandbox \"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:23.487898 kubelet[2009]: E0716 12:20:23.487733 2009 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" Jul 16 12:20:23.487898 kubelet[2009]: E0716 12:20:23.487827 2009 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8"} Jul 16 12:20:23.487898 kubelet[2009]: E0716 12:20:23.487879 2009 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a9e6039e-de2d-4a1f-9793-315b7a02db3c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 16 12:20:23.488694 kubelet[2009]: E0716 12:20:23.487910 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a9e6039e-de2d-4a1f-9793-315b7a02db3c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-7kxwt" podUID="a9e6039e-de2d-4a1f-9793-315b7a02db3c" Jul 16 12:20:23.490952 env[1205]: time="2025-07-16T12:20:23.490464874Z" level=error msg="StopPodSandbox for \"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1\" failed" error="failed to destroy network for sandbox \"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:23.491170 kubelet[2009]: E0716 12:20:23.490781 2009 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" Jul 16 12:20:23.491170 kubelet[2009]: E0716 12:20:23.490846 2009 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1"} Jul 16 12:20:23.491170 kubelet[2009]: E0716 12:20:23.490917 2009 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3c9d3cc7-b97b-4b96-a498-6d46ca24e031\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 16 12:20:23.491170 kubelet[2009]: E0716 12:20:23.490947 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3c9d3cc7-b97b-4b96-a498-6d46ca24e031\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-ttxxf" podUID="3c9d3cc7-b97b-4b96-a498-6d46ca24e031" Jul 16 12:20:23.492098 env[1205]: time="2025-07-16T12:20:23.491889940Z" level=error msg="StopPodSandbox for \"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e\" failed" error="failed to destroy network for sandbox \"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:23.492232 kubelet[2009]: E0716 12:20:23.492139 2009 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" Jul 16 12:20:23.492232 kubelet[2009]: E0716 12:20:23.492194 2009 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e"} Jul 16 12:20:23.492232 kubelet[2009]: E0716 12:20:23.492226 2009 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2241f06a-ab47-4d15-8e36-a94bf91d7b1d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 16 12:20:23.492686 kubelet[2009]: E0716 12:20:23.492255 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2241f06a-ab47-4d15-8e36-a94bf91d7b1d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-55dcc56559-cjgqh" podUID="2241f06a-ab47-4d15-8e36-a94bf91d7b1d" Jul 16 12:20:23.514061 env[1205]: time="2025-07-16T12:20:23.513945712Z" level=error msg="StopPodSandbox for \"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7\" failed" error="failed to destroy network for sandbox \"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 16 12:20:23.514482 kubelet[2009]: E0716 12:20:23.514410 2009 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" Jul 16 12:20:23.514583 kubelet[2009]: E0716 12:20:23.514508 2009 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7"} Jul 16 12:20:23.514583 kubelet[2009]: E0716 12:20:23.514567 2009 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"236ebe5f-a95d-42df-8840-c8ac6fd743e4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 16 12:20:23.514728 kubelet[2009]: E0716 12:20:23.514610 2009 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"236ebe5f-a95d-42df-8840-c8ac6fd743e4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5944847977-8tj42" podUID="236ebe5f-a95d-42df-8840-c8ac6fd743e4" Jul 16 12:20:31.399018 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1919745238.mount: Deactivated successfully. Jul 16 12:20:31.434977 env[1205]: time="2025-07-16T12:20:31.434865564Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:31.438164 env[1205]: time="2025-07-16T12:20:31.438089751Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:31.441659 env[1205]: time="2025-07-16T12:20:31.441603965Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:31.443755 env[1205]: time="2025-07-16T12:20:31.443718467Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:31.444923 env[1205]: time="2025-07-16T12:20:31.444878931Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20\"" Jul 16 12:20:31.507718 env[1205]: time="2025-07-16T12:20:31.507599264Z" level=info msg="CreateContainer within sandbox \"aed7cc7611b45e29ff75d489ee55f6e37ee4e77a24f5048739989083d7f7a9f8\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 16 12:20:31.523483 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1598618941.mount: Deactivated successfully. Jul 16 12:20:31.526724 env[1205]: time="2025-07-16T12:20:31.526684969Z" level=info msg="CreateContainer within sandbox \"aed7cc7611b45e29ff75d489ee55f6e37ee4e77a24f5048739989083d7f7a9f8\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"1faa39897f9455b2e07e74b0e2616aacb515b2dec24d703169cafbe30583400b\"" Jul 16 12:20:31.538201 env[1205]: time="2025-07-16T12:20:31.537198063Z" level=info msg="StartContainer for \"1faa39897f9455b2e07e74b0e2616aacb515b2dec24d703169cafbe30583400b\"" Jul 16 12:20:31.564789 systemd[1]: Started cri-containerd-1faa39897f9455b2e07e74b0e2616aacb515b2dec24d703169cafbe30583400b.scope. Jul 16 12:20:31.605748 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 16 12:20:31.610478 kernel: audit: type=1400 audit(1752668431.600:1014): avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.611649 kernel: audit: type=1300 audit(1752668431.600:1014): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fd88e780728 items=0 ppid=2478 pid=3214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:31.600000 audit[3214]: AVC avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.600000 audit[3214]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fd88e780728 items=0 ppid=2478 pid=3214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:31.600000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166616133393839376639343535623265303765373462306532363136 Jul 16 12:20:31.600000 audit[3214]: AVC avc: denied { bpf } for pid=3214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.621011 kernel: audit: type=1327 audit(1752668431.600:1014): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166616133393839376639343535623265303765373462306532363136 Jul 16 12:20:31.621170 kernel: audit: type=1400 audit(1752668431.600:1015): avc: denied { bpf } for pid=3214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.600000 audit[3214]: AVC avc: denied { bpf } for pid=3214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.623982 kernel: audit: type=1400 audit(1752668431.600:1015): avc: denied { bpf } for pid=3214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.600000 audit[3214]: AVC avc: denied { bpf } for pid=3214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.628490 kernel: audit: type=1400 audit(1752668431.600:1015): avc: denied { bpf } for pid=3214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.600000 audit[3214]: AVC avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.633704 kernel: audit: type=1400 audit(1752668431.600:1015): avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.600000 audit[3214]: AVC avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.640382 kernel: audit: type=1400 audit(1752668431.600:1015): avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.600000 audit[3214]: AVC avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.600000 audit[3214]: AVC avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.655563 kernel: audit: type=1400 audit(1752668431.600:1015): avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.655719 kernel: audit: type=1400 audit(1752668431.600:1015): avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.600000 audit[3214]: AVC avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.600000 audit[3214]: AVC avc: denied { bpf } for pid=3214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.600000 audit[3214]: AVC avc: denied { bpf } for pid=3214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.600000 audit: BPF prog-id=136 op=LOAD Jul 16 12:20:31.600000 audit[3214]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00032a148 items=0 ppid=2478 pid=3214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:31.600000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166616133393839376639343535623265303765373462306532363136 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { bpf } for pid=3214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { bpf } for pid=3214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { bpf } for pid=3214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { bpf } for pid=3214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit: BPF prog-id=137 op=LOAD Jul 16 12:20:31.610000 audit[3214]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00032a198 items=0 ppid=2478 pid=3214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:31.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166616133393839376639343535623265303765373462306532363136 Jul 16 12:20:31.610000 audit: BPF prog-id=137 op=UNLOAD Jul 16 12:20:31.610000 audit: BPF prog-id=136 op=UNLOAD Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { bpf } for pid=3214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { bpf } for pid=3214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { bpf } for pid=3214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { bpf } for pid=3214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: SYSCALL arch=c000003e syscall=321 success=no exit=-11 a0=5 a1=c000197c30 a2=78 a3=c00032a228 items=0 ppid=2478 pid=3214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:31.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166616133393839376639343535623265303765373462306532363136 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { bpf } for pid=3214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { bpf } for pid=3214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { bpf } for pid=3214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { perfmon } for pid=3214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { bpf } for pid=3214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit[3214]: AVC avc: denied { bpf } for pid=3214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:31.610000 audit: BPF prog-id=138 op=LOAD Jul 16 12:20:31.610000 audit[3214]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00032a228 items=0 ppid=2478 pid=3214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:31.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166616133393839376639343535623265303765373462306532363136 Jul 16 12:20:31.669522 env[1205]: time="2025-07-16T12:20:31.663694158Z" level=info msg="StartContainer for \"1faa39897f9455b2e07e74b0e2616aacb515b2dec24d703169cafbe30583400b\" returns successfully" Jul 16 12:20:31.897437 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 16 12:20:31.898903 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 16 12:20:32.099466 env[1205]: time="2025-07-16T12:20:32.099011029Z" level=info msg="StopPodSandbox for \"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e\"" Jul 16 12:20:32.341359 kubelet[2009]: I0716 12:20:32.335442 2009 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-nshvb" podStartSLOduration=1.927132082 podStartE2EDuration="25.328217981s" podCreationTimestamp="2025-07-16 12:20:07 +0000 UTC" firstStartedPulling="2025-07-16 12:20:08.049802033 +0000 UTC m=+22.364561775" lastFinishedPulling="2025-07-16 12:20:31.450887895 +0000 UTC m=+45.765647674" observedRunningTime="2025-07-16 12:20:32.326694077 +0000 UTC m=+46.641453839" watchObservedRunningTime="2025-07-16 12:20:32.328217981 +0000 UTC m=+46.642977746" Jul 16 12:20:32.382675 env[1205]: 2025-07-16 12:20:32.222 [INFO][3266] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" Jul 16 12:20:32.382675 env[1205]: 2025-07-16 12:20:32.223 [INFO][3266] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" iface="eth0" netns="/var/run/netns/cni-2bd9737d-df41-07be-39b9-b43fbafc60e8" Jul 16 12:20:32.382675 env[1205]: 2025-07-16 12:20:32.223 [INFO][3266] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" iface="eth0" netns="/var/run/netns/cni-2bd9737d-df41-07be-39b9-b43fbafc60e8" Jul 16 12:20:32.382675 env[1205]: 2025-07-16 12:20:32.224 [INFO][3266] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" iface="eth0" netns="/var/run/netns/cni-2bd9737d-df41-07be-39b9-b43fbafc60e8" Jul 16 12:20:32.382675 env[1205]: 2025-07-16 12:20:32.224 [INFO][3266] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" Jul 16 12:20:32.382675 env[1205]: 2025-07-16 12:20:32.224 [INFO][3266] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" Jul 16 12:20:32.382675 env[1205]: 2025-07-16 12:20:32.352 [INFO][3273] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" HandleID="k8s-pod-network.c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" Workload="srv--frvg8.gb1.brightbox.com-k8s-whisker--bff5bbd48--wvjht-eth0" Jul 16 12:20:32.382675 env[1205]: 2025-07-16 12:20:32.354 [INFO][3273] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:32.382675 env[1205]: 2025-07-16 12:20:32.355 [INFO][3273] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:32.382675 env[1205]: 2025-07-16 12:20:32.373 [WARNING][3273] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" HandleID="k8s-pod-network.c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" Workload="srv--frvg8.gb1.brightbox.com-k8s-whisker--bff5bbd48--wvjht-eth0" Jul 16 12:20:32.382675 env[1205]: 2025-07-16 12:20:32.373 [INFO][3273] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" HandleID="k8s-pod-network.c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" Workload="srv--frvg8.gb1.brightbox.com-k8s-whisker--bff5bbd48--wvjht-eth0" Jul 16 12:20:32.382675 env[1205]: 2025-07-16 12:20:32.376 [INFO][3273] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:32.382675 env[1205]: 2025-07-16 12:20:32.378 [INFO][3266] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" Jul 16 12:20:32.383683 env[1205]: time="2025-07-16T12:20:32.383646853Z" level=info msg="TearDown network for sandbox \"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e\" successfully" Jul 16 12:20:32.383766 env[1205]: time="2025-07-16T12:20:32.383749223Z" level=info msg="StopPodSandbox for \"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e\" returns successfully" Jul 16 12:20:32.401041 systemd[1]: run-netns-cni\x2d2bd9737d\x2ddf41\x2d07be\x2d39b9\x2db43fbafc60e8.mount: Deactivated successfully. Jul 16 12:20:32.547065 kubelet[2009]: I0716 12:20:32.547019 2009 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-hv9p2\" (UniqueName: \"kubernetes.io/projected/dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb-kube-api-access-hv9p2\") pod \"dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb\" (UID: \"dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb\") " Jul 16 12:20:32.547442 kubelet[2009]: I0716 12:20:32.547310 2009 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb-whisker-ca-bundle\") pod \"dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb\" (UID: \"dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb\") " Jul 16 12:20:32.547571 kubelet[2009]: I0716 12:20:32.547557 2009 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb-whisker-backend-key-pair\") pod \"dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb\" (UID: \"dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb\") " Jul 16 12:20:32.553262 systemd[1]: var-lib-kubelet-pods-dab1ca4b\x2da229\x2d47ad\x2dbf0e\x2d49f1aa00b1eb-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 16 12:20:32.556647 systemd[1]: var-lib-kubelet-pods-dab1ca4b\x2da229\x2d47ad\x2dbf0e\x2d49f1aa00b1eb-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dhv9p2.mount: Deactivated successfully. Jul 16 12:20:32.563285 kubelet[2009]: I0716 12:20:32.561252 2009 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb" (UID: "dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 16 12:20:32.563773 kubelet[2009]: I0716 12:20:32.561190 2009 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb" (UID: "dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 16 12:20:32.565869 kubelet[2009]: I0716 12:20:32.565760 2009 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb-kube-api-access-hv9p2" (OuterVolumeSpecName: "kube-api-access-hv9p2") pod "dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb" (UID: "dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb"). InnerVolumeSpecName "kube-api-access-hv9p2". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 16 12:20:32.648507 kubelet[2009]: I0716 12:20:32.648238 2009 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-hv9p2\" (UniqueName: \"kubernetes.io/projected/dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb-kube-api-access-hv9p2\") on node \"srv-frvg8.gb1.brightbox.com\" DevicePath \"\"" Jul 16 12:20:32.648507 kubelet[2009]: I0716 12:20:32.648324 2009 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb-whisker-ca-bundle\") on node \"srv-frvg8.gb1.brightbox.com\" DevicePath \"\"" Jul 16 12:20:32.648507 kubelet[2009]: I0716 12:20:32.648354 2009 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb-whisker-backend-key-pair\") on node \"srv-frvg8.gb1.brightbox.com\" DevicePath \"\"" Jul 16 12:20:33.310144 kubelet[2009]: I0716 12:20:33.310065 2009 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 16 12:20:33.331286 systemd[1]: Removed slice kubepods-besteffort-poddab1ca4b_a229_47ad_bf0e_49f1aa00b1eb.slice. Jul 16 12:20:33.440458 systemd[1]: Created slice kubepods-besteffort-pod81fe0e8b_5559_4523_8237_4ef86f70bccd.slice. Jul 16 12:20:33.556361 kubelet[2009]: I0716 12:20:33.556318 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/81fe0e8b-5559-4523-8237-4ef86f70bccd-whisker-backend-key-pair\") pod \"whisker-74cd9cb8fb-pvbfq\" (UID: \"81fe0e8b-5559-4523-8237-4ef86f70bccd\") " pod="calico-system/whisker-74cd9cb8fb-pvbfq" Jul 16 12:20:33.556901 kubelet[2009]: I0716 12:20:33.556879 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/81fe0e8b-5559-4523-8237-4ef86f70bccd-whisker-ca-bundle\") pod \"whisker-74cd9cb8fb-pvbfq\" (UID: \"81fe0e8b-5559-4523-8237-4ef86f70bccd\") " pod="calico-system/whisker-74cd9cb8fb-pvbfq" Jul 16 12:20:33.557001 kubelet[2009]: I0716 12:20:33.556987 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hj96q\" (UniqueName: \"kubernetes.io/projected/81fe0e8b-5559-4523-8237-4ef86f70bccd-kube-api-access-hj96q\") pod \"whisker-74cd9cb8fb-pvbfq\" (UID: \"81fe0e8b-5559-4523-8237-4ef86f70bccd\") " pod="calico-system/whisker-74cd9cb8fb-pvbfq" Jul 16 12:20:33.670000 audit[3341]: AVC avc: denied { write } for pid=3341 comm="tee" name="fd" dev="proc" ino=28557 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 16 12:20:33.670000 audit[3341]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdea3ad7c5 a2=241 a3=1b6 items=1 ppid=3305 pid=3341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:33.670000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 16 12:20:33.670000 audit: PATH item=0 name="/dev/fd/63" inode=29470 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:20:33.670000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 16 12:20:33.695000 audit[3347]: AVC avc: denied { write } for pid=3347 comm="tee" name="fd" dev="proc" ino=28567 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 16 12:20:33.699000 audit[3352]: AVC avc: denied { write } for pid=3352 comm="tee" name="fd" dev="proc" ino=28570 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 16 12:20:33.700000 audit[3344]: AVC avc: denied { write } for pid=3344 comm="tee" name="fd" dev="proc" ino=28573 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 16 12:20:33.700000 audit[3344]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffedfd5b7c6 a2=241 a3=1b6 items=1 ppid=3300 pid=3344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:33.700000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 16 12:20:33.700000 audit: PATH item=0 name="/dev/fd/63" inode=29475 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:20:33.700000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 16 12:20:33.695000 audit[3347]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffea667d7c5 a2=241 a3=1b6 items=1 ppid=3303 pid=3347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:33.695000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 16 12:20:33.695000 audit: PATH item=0 name="/dev/fd/63" inode=29478 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:20:33.695000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 16 12:20:33.706000 audit[3356]: AVC avc: denied { write } for pid=3356 comm="tee" name="fd" dev="proc" ino=28578 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 16 12:20:33.699000 audit[3352]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd692ae7c5 a2=241 a3=1b6 items=1 ppid=3308 pid=3352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:33.710000 audit[3350]: AVC avc: denied { write } for pid=3350 comm="tee" name="fd" dev="proc" ino=28582 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 16 12:20:33.699000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 16 12:20:33.699000 audit: PATH item=0 name="/dev/fd/63" inode=28560 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:20:33.699000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 16 12:20:33.712000 audit[3354]: AVC avc: denied { write } for pid=3354 comm="tee" name="fd" dev="proc" ino=28585 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 16 12:20:33.706000 audit[3356]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc5fe067b6 a2=241 a3=1b6 items=1 ppid=3307 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:33.706000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 16 12:20:33.706000 audit: PATH item=0 name="/dev/fd/63" inode=29487 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:20:33.706000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 16 12:20:33.712000 audit[3354]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffda45ba7c7 a2=241 a3=1b6 items=1 ppid=3304 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:33.712000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 16 12:20:33.712000 audit: PATH item=0 name="/dev/fd/63" inode=29486 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:20:33.712000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 16 12:20:33.710000 audit[3350]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe771317b5 a2=241 a3=1b6 items=1 ppid=3302 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:33.710000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 16 12:20:33.710000 audit: PATH item=0 name="/dev/fd/63" inode=29483 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 16 12:20:33.710000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 16 12:20:33.744305 env[1205]: time="2025-07-16T12:20:33.743951107Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-74cd9cb8fb-pvbfq,Uid:81fe0e8b-5559-4523-8237-4ef86f70bccd,Namespace:calico-system,Attempt:0,}" Jul 16 12:20:34.008550 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 16 12:20:34.008848 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1dcf8ebfd19: link becomes ready Jul 16 12:20:34.014990 systemd-networkd[1034]: cali1dcf8ebfd19: Link UP Jul 16 12:20:34.018887 systemd-networkd[1034]: cali1dcf8ebfd19: Gained carrier Jul 16 12:20:34.026421 env[1205]: time="2025-07-16T12:20:34.026359869Z" level=info msg="StopPodSandbox for \"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e\"" Jul 16 12:20:34.026822 env[1205]: time="2025-07-16T12:20:34.026787374Z" level=info msg="StopPodSandbox for \"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7\"" Jul 16 12:20:34.029016 env[1205]: time="2025-07-16T12:20:34.028981209Z" level=info msg="StopPodSandbox for \"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da\"" Jul 16 12:20:34.031921 kubelet[2009]: I0716 12:20:34.031887 2009 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb" path="/var/lib/kubelet/pods/dab1ca4b-a229-47ad-bf0e-49f1aa00b1eb/volumes" Jul 16 12:20:34.052760 env[1205]: 2025-07-16 12:20:33.837 [INFO][3379] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 16 12:20:34.052760 env[1205]: 2025-07-16 12:20:33.872 [INFO][3379] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {srv--frvg8.gb1.brightbox.com-k8s-whisker--74cd9cb8fb--pvbfq-eth0 whisker-74cd9cb8fb- calico-system 81fe0e8b-5559-4523-8237-4ef86f70bccd 937 0 2025-07-16 12:20:33 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:74cd9cb8fb projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s srv-frvg8.gb1.brightbox.com whisker-74cd9cb8fb-pvbfq eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali1dcf8ebfd19 [] [] }} ContainerID="3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29" Namespace="calico-system" Pod="whisker-74cd9cb8fb-pvbfq" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-whisker--74cd9cb8fb--pvbfq-" Jul 16 12:20:34.052760 env[1205]: 2025-07-16 12:20:33.872 [INFO][3379] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29" Namespace="calico-system" Pod="whisker-74cd9cb8fb-pvbfq" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-whisker--74cd9cb8fb--pvbfq-eth0" Jul 16 12:20:34.052760 env[1205]: 2025-07-16 12:20:33.930 [INFO][3391] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29" HandleID="k8s-pod-network.3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29" Workload="srv--frvg8.gb1.brightbox.com-k8s-whisker--74cd9cb8fb--pvbfq-eth0" Jul 16 12:20:34.052760 env[1205]: 2025-07-16 12:20:33.931 [INFO][3391] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29" HandleID="k8s-pod-network.3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29" Workload="srv--frvg8.gb1.brightbox.com-k8s-whisker--74cd9cb8fb--pvbfq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd600), Attrs:map[string]string{"namespace":"calico-system", "node":"srv-frvg8.gb1.brightbox.com", "pod":"whisker-74cd9cb8fb-pvbfq", "timestamp":"2025-07-16 12:20:33.930595679 +0000 UTC"}, Hostname:"srv-frvg8.gb1.brightbox.com", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 16 12:20:34.052760 env[1205]: 2025-07-16 12:20:33.931 [INFO][3391] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:34.052760 env[1205]: 2025-07-16 12:20:33.931 [INFO][3391] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:34.052760 env[1205]: 2025-07-16 12:20:33.931 [INFO][3391] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'srv-frvg8.gb1.brightbox.com' Jul 16 12:20:34.052760 env[1205]: 2025-07-16 12:20:33.942 [INFO][3391] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.052760 env[1205]: 2025-07-16 12:20:33.950 [INFO][3391] ipam/ipam.go 394: Looking up existing affinities for host host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.052760 env[1205]: 2025-07-16 12:20:33.957 [INFO][3391] ipam/ipam.go 511: Trying affinity for 192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.052760 env[1205]: 2025-07-16 12:20:33.961 [INFO][3391] ipam/ipam.go 158: Attempting to load block cidr=192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.052760 env[1205]: 2025-07-16 12:20:33.963 [INFO][3391] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.052760 env[1205]: 2025-07-16 12:20:33.963 [INFO][3391] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.105.192/26 handle="k8s-pod-network.3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.052760 env[1205]: 2025-07-16 12:20:33.966 [INFO][3391] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29 Jul 16 12:20:34.052760 env[1205]: 2025-07-16 12:20:33.971 [INFO][3391] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.105.192/26 handle="k8s-pod-network.3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.052760 env[1205]: 2025-07-16 12:20:33.985 [INFO][3391] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.105.193/26] block=192.168.105.192/26 handle="k8s-pod-network.3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.052760 env[1205]: 2025-07-16 12:20:33.985 [INFO][3391] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.105.193/26] handle="k8s-pod-network.3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.052760 env[1205]: 2025-07-16 12:20:33.985 [INFO][3391] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:34.052760 env[1205]: 2025-07-16 12:20:33.985 [INFO][3391] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.105.193/26] IPv6=[] ContainerID="3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29" HandleID="k8s-pod-network.3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29" Workload="srv--frvg8.gb1.brightbox.com-k8s-whisker--74cd9cb8fb--pvbfq-eth0" Jul 16 12:20:34.054944 env[1205]: 2025-07-16 12:20:33.989 [INFO][3379] cni-plugin/k8s.go 418: Populated endpoint ContainerID="3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29" Namespace="calico-system" Pod="whisker-74cd9cb8fb-pvbfq" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-whisker--74cd9cb8fb--pvbfq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-whisker--74cd9cb8fb--pvbfq-eth0", GenerateName:"whisker-74cd9cb8fb-", Namespace:"calico-system", SelfLink:"", UID:"81fe0e8b-5559-4523-8237-4ef86f70bccd", ResourceVersion:"937", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 33, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"74cd9cb8fb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"", Pod:"whisker-74cd9cb8fb-pvbfq", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.105.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali1dcf8ebfd19", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:34.054944 env[1205]: 2025-07-16 12:20:33.989 [INFO][3379] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.105.193/32] ContainerID="3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29" Namespace="calico-system" Pod="whisker-74cd9cb8fb-pvbfq" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-whisker--74cd9cb8fb--pvbfq-eth0" Jul 16 12:20:34.054944 env[1205]: 2025-07-16 12:20:33.989 [INFO][3379] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali1dcf8ebfd19 ContainerID="3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29" Namespace="calico-system" Pod="whisker-74cd9cb8fb-pvbfq" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-whisker--74cd9cb8fb--pvbfq-eth0" Jul 16 12:20:34.054944 env[1205]: 2025-07-16 12:20:34.012 [INFO][3379] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29" Namespace="calico-system" Pod="whisker-74cd9cb8fb-pvbfq" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-whisker--74cd9cb8fb--pvbfq-eth0" Jul 16 12:20:34.054944 env[1205]: 2025-07-16 12:20:34.012 [INFO][3379] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29" Namespace="calico-system" Pod="whisker-74cd9cb8fb-pvbfq" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-whisker--74cd9cb8fb--pvbfq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-whisker--74cd9cb8fb--pvbfq-eth0", GenerateName:"whisker-74cd9cb8fb-", Namespace:"calico-system", SelfLink:"", UID:"81fe0e8b-5559-4523-8237-4ef86f70bccd", ResourceVersion:"937", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 33, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"74cd9cb8fb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29", Pod:"whisker-74cd9cb8fb-pvbfq", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.105.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali1dcf8ebfd19", MAC:"d6:fb:8b:ef:db:6d", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:34.054944 env[1205]: 2025-07-16 12:20:34.049 [INFO][3379] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29" Namespace="calico-system" Pod="whisker-74cd9cb8fb-pvbfq" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-whisker--74cd9cb8fb--pvbfq-eth0" Jul 16 12:20:34.118604 env[1205]: time="2025-07-16T12:20:34.112579368Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 16 12:20:34.118604 env[1205]: time="2025-07-16T12:20:34.112655197Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 16 12:20:34.118604 env[1205]: time="2025-07-16T12:20:34.112667785Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 16 12:20:34.118604 env[1205]: time="2025-07-16T12:20:34.112836432Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29 pid=3450 runtime=io.containerd.runc.v2 Jul 16 12:20:34.205299 systemd[1]: Started cri-containerd-3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29.scope. Jul 16 12:20:34.332577 env[1205]: 2025-07-16 12:20:34.179 [INFO][3425] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" Jul 16 12:20:34.332577 env[1205]: 2025-07-16 12:20:34.179 [INFO][3425] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" iface="eth0" netns="/var/run/netns/cni-9caba7b4-73f1-0386-9fde-046b8b3868a0" Jul 16 12:20:34.332577 env[1205]: 2025-07-16 12:20:34.179 [INFO][3425] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" iface="eth0" netns="/var/run/netns/cni-9caba7b4-73f1-0386-9fde-046b8b3868a0" Jul 16 12:20:34.332577 env[1205]: 2025-07-16 12:20:34.181 [INFO][3425] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" iface="eth0" netns="/var/run/netns/cni-9caba7b4-73f1-0386-9fde-046b8b3868a0" Jul 16 12:20:34.332577 env[1205]: 2025-07-16 12:20:34.181 [INFO][3425] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" Jul 16 12:20:34.332577 env[1205]: 2025-07-16 12:20:34.181 [INFO][3425] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" Jul 16 12:20:34.332577 env[1205]: 2025-07-16 12:20:34.288 [INFO][3474] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" HandleID="k8s-pod-network.8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:20:34.332577 env[1205]: 2025-07-16 12:20:34.288 [INFO][3474] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:34.332577 env[1205]: 2025-07-16 12:20:34.288 [INFO][3474] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:34.332577 env[1205]: 2025-07-16 12:20:34.304 [WARNING][3474] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" HandleID="k8s-pod-network.8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:20:34.332577 env[1205]: 2025-07-16 12:20:34.305 [INFO][3474] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" HandleID="k8s-pod-network.8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:20:34.332577 env[1205]: 2025-07-16 12:20:34.320 [INFO][3474] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:34.332577 env[1205]: 2025-07-16 12:20:34.325 [INFO][3425] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" Jul 16 12:20:34.333324 env[1205]: time="2025-07-16T12:20:34.333281994Z" level=info msg="TearDown network for sandbox \"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da\" successfully" Jul 16 12:20:34.333471 env[1205]: time="2025-07-16T12:20:34.333453416Z" level=info msg="StopPodSandbox for \"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da\" returns successfully" Jul 16 12:20:34.334418 env[1205]: time="2025-07-16T12:20:34.334394704Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5944847977-rlssh,Uid:94f730db-68a2-4e48-bafd-314eacd16a53,Namespace:calico-apiserver,Attempt:1,}" Jul 16 12:20:34.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.353000 audit: BPF prog-id=139 op=LOAD Jul 16 12:20:34.360000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.360000 audit[3464]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3450 pid=3464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:34.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362613630386364636262613966313665653362343334346236666236 Jul 16 12:20:34.360000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.360000 audit[3464]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3450 pid=3464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:34.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362613630386364636262613966313665653362343334346236666236 Jul 16 12:20:34.360000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.360000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.360000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.360000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.360000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.360000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.360000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.360000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.360000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.360000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.360000 audit: BPF prog-id=140 op=LOAD Jul 16 12:20:34.360000 audit[3464]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c5160 items=0 ppid=3450 pid=3464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:34.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362613630386364636262613966313665653362343334346236666236 Jul 16 12:20:34.361000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.361000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.361000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.361000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.361000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.361000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.361000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.361000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.361000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.361000 audit: BPF prog-id=141 op=LOAD Jul 16 12:20:34.361000 audit[3464]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c51a8 items=0 ppid=3450 pid=3464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:34.361000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362613630386364636262613966313665653362343334346236666236 Jul 16 12:20:34.363000 audit: BPF prog-id=141 op=UNLOAD Jul 16 12:20:34.363000 audit: BPF prog-id=140 op=UNLOAD Jul 16 12:20:34.363000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.363000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.363000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.363000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.363000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.363000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.363000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.363000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.363000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.363000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.363000 audit: BPF prog-id=142 op=LOAD Jul 16 12:20:34.363000 audit[3464]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c55b8 items=0 ppid=3450 pid=3464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:34.363000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362613630386364636262613966313665653362343334346236666236 Jul 16 12:20:34.424313 env[1205]: 2025-07-16 12:20:34.286 [INFO][3451] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" Jul 16 12:20:34.424313 env[1205]: 2025-07-16 12:20:34.286 [INFO][3451] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" iface="eth0" netns="/var/run/netns/cni-63cc62d6-76a1-b2fa-5822-5ae2495fa549" Jul 16 12:20:34.424313 env[1205]: 2025-07-16 12:20:34.286 [INFO][3451] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" iface="eth0" netns="/var/run/netns/cni-63cc62d6-76a1-b2fa-5822-5ae2495fa549" Jul 16 12:20:34.424313 env[1205]: 2025-07-16 12:20:34.287 [INFO][3451] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" iface="eth0" netns="/var/run/netns/cni-63cc62d6-76a1-b2fa-5822-5ae2495fa549" Jul 16 12:20:34.424313 env[1205]: 2025-07-16 12:20:34.287 [INFO][3451] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" Jul 16 12:20:34.424313 env[1205]: 2025-07-16 12:20:34.287 [INFO][3451] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" Jul 16 12:20:34.424313 env[1205]: 2025-07-16 12:20:34.396 [INFO][3489] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" HandleID="k8s-pod-network.7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0" Jul 16 12:20:34.424313 env[1205]: 2025-07-16 12:20:34.396 [INFO][3489] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:34.424313 env[1205]: 2025-07-16 12:20:34.396 [INFO][3489] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:34.424313 env[1205]: 2025-07-16 12:20:34.414 [WARNING][3489] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" HandleID="k8s-pod-network.7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0" Jul 16 12:20:34.424313 env[1205]: 2025-07-16 12:20:34.414 [INFO][3489] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" HandleID="k8s-pod-network.7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0" Jul 16 12:20:34.424313 env[1205]: 2025-07-16 12:20:34.419 [INFO][3489] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:34.424313 env[1205]: 2025-07-16 12:20:34.422 [INFO][3451] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" Jul 16 12:20:34.425068 env[1205]: time="2025-07-16T12:20:34.424484748Z" level=info msg="TearDown network for sandbox \"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e\" successfully" Jul 16 12:20:34.425068 env[1205]: time="2025-07-16T12:20:34.424519189Z" level=info msg="StopPodSandbox for \"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e\" returns successfully" Jul 16 12:20:34.427447 env[1205]: time="2025-07-16T12:20:34.427413597Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-55dcc56559-cjgqh,Uid:2241f06a-ab47-4d15-8e36-a94bf91d7b1d,Namespace:calico-apiserver,Attempt:1,}" Jul 16 12:20:34.508301 env[1205]: 2025-07-16 12:20:34.297 [INFO][3431] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" Jul 16 12:20:34.508301 env[1205]: 2025-07-16 12:20:34.297 [INFO][3431] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" iface="eth0" netns="/var/run/netns/cni-376cd874-d11c-ca8a-447a-2feea48ae22e" Jul 16 12:20:34.508301 env[1205]: 2025-07-16 12:20:34.297 [INFO][3431] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" iface="eth0" netns="/var/run/netns/cni-376cd874-d11c-ca8a-447a-2feea48ae22e" Jul 16 12:20:34.508301 env[1205]: 2025-07-16 12:20:34.299 [INFO][3431] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" iface="eth0" netns="/var/run/netns/cni-376cd874-d11c-ca8a-447a-2feea48ae22e" Jul 16 12:20:34.508301 env[1205]: 2025-07-16 12:20:34.299 [INFO][3431] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" Jul 16 12:20:34.508301 env[1205]: 2025-07-16 12:20:34.299 [INFO][3431] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" Jul 16 12:20:34.508301 env[1205]: 2025-07-16 12:20:34.482 [INFO][3496] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" HandleID="k8s-pod-network.16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:20:34.508301 env[1205]: 2025-07-16 12:20:34.482 [INFO][3496] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:34.508301 env[1205]: 2025-07-16 12:20:34.482 [INFO][3496] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:34.508301 env[1205]: 2025-07-16 12:20:34.497 [WARNING][3496] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" HandleID="k8s-pod-network.16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:20:34.508301 env[1205]: 2025-07-16 12:20:34.497 [INFO][3496] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" HandleID="k8s-pod-network.16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:20:34.508301 env[1205]: 2025-07-16 12:20:34.501 [INFO][3496] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:34.508301 env[1205]: 2025-07-16 12:20:34.503 [INFO][3431] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" Jul 16 12:20:34.509050 env[1205]: time="2025-07-16T12:20:34.509009610Z" level=info msg="TearDown network for sandbox \"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7\" successfully" Jul 16 12:20:34.509149 env[1205]: time="2025-07-16T12:20:34.509131252Z" level=info msg="StopPodSandbox for \"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7\" returns successfully" Jul 16 12:20:34.511289 env[1205]: time="2025-07-16T12:20:34.511250041Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5944847977-8tj42,Uid:236ebe5f-a95d-42df-8840-c8ac6fd743e4,Namespace:calico-apiserver,Attempt:1,}" Jul 16 12:20:34.524648 env[1205]: time="2025-07-16T12:20:34.524559740Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-74cd9cb8fb-pvbfq,Uid:81fe0e8b-5559-4523-8237-4ef86f70bccd,Namespace:calico-system,Attempt:0,} returns sandbox id \"3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29\"" Jul 16 12:20:34.531040 env[1205]: time="2025-07-16T12:20:34.529621348Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 16 12:20:34.592000 audit[3568]: AVC avc: denied { bpf } for pid=3568 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.592000 audit[3568]: AVC avc: denied { bpf } for pid=3568 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.592000 audit[3568]: AVC avc: denied { perfmon } for pid=3568 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.592000 audit[3568]: AVC avc: denied { perfmon } for pid=3568 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.592000 audit[3568]: AVC avc: denied { perfmon } for pid=3568 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.592000 audit[3568]: AVC avc: denied { perfmon } for pid=3568 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.592000 audit[3568]: AVC avc: denied { perfmon } for pid=3568 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.592000 audit[3568]: AVC avc: denied { bpf } for pid=3568 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.592000 audit[3568]: AVC avc: denied { bpf } for pid=3568 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.592000 audit: BPF prog-id=143 op=LOAD Jul 16 12:20:34.592000 audit[3568]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc717fa320 a2=98 a3=1fffffffffffffff items=0 ppid=3311 pid=3568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:34.592000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 16 12:20:34.594000 audit: BPF prog-id=143 op=UNLOAD Jul 16 12:20:34.595000 audit[3568]: AVC avc: denied { bpf } for pid=3568 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.595000 audit[3568]: AVC avc: denied { bpf } for pid=3568 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.595000 audit[3568]: AVC avc: denied { perfmon } for pid=3568 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.595000 audit[3568]: AVC avc: denied { perfmon } for pid=3568 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.595000 audit[3568]: AVC avc: denied { perfmon } for pid=3568 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.595000 audit[3568]: AVC avc: denied { perfmon } for pid=3568 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.595000 audit[3568]: AVC avc: denied { perfmon } for pid=3568 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.595000 audit[3568]: AVC avc: denied { bpf } for pid=3568 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.595000 audit[3568]: AVC avc: denied { bpf } for pid=3568 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.595000 audit: BPF prog-id=144 op=LOAD Jul 16 12:20:34.595000 audit[3568]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc717fa200 a2=94 a3=3 items=0 ppid=3311 pid=3568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:34.595000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 16 12:20:34.595000 audit: BPF prog-id=144 op=UNLOAD Jul 16 12:20:34.595000 audit[3568]: AVC avc: denied { bpf } for pid=3568 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.595000 audit[3568]: AVC avc: denied { bpf } for pid=3568 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.595000 audit[3568]: AVC avc: denied { perfmon } for pid=3568 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.595000 audit[3568]: AVC avc: denied { perfmon } for pid=3568 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.595000 audit[3568]: AVC avc: denied { perfmon } for pid=3568 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.595000 audit[3568]: AVC avc: denied { perfmon } for pid=3568 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.595000 audit[3568]: AVC avc: denied { perfmon } for pid=3568 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.595000 audit[3568]: AVC avc: denied { bpf } for pid=3568 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.595000 audit[3568]: AVC avc: denied { bpf } for pid=3568 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.595000 audit: BPF prog-id=145 op=LOAD Jul 16 12:20:34.595000 audit[3568]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc717fa240 a2=94 a3=7ffc717fa420 items=0 ppid=3311 pid=3568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:34.595000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 16 12:20:34.598000 audit: BPF prog-id=145 op=UNLOAD Jul 16 12:20:34.598000 audit[3568]: AVC avc: denied { perfmon } for pid=3568 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.598000 audit[3568]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffc717fa310 a2=50 a3=a000000085 items=0 ppid=3311 pid=3568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:34.598000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 16 12:20:34.602000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.602000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.602000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.602000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.602000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.602000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.602000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.602000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.602000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.602000 audit: BPF prog-id=146 op=LOAD Jul 16 12:20:34.602000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffad149590 a2=98 a3=3 items=0 ppid=3311 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:34.602000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 16 12:20:34.603000 audit: BPF prog-id=146 op=UNLOAD Jul 16 12:20:34.604000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.604000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.604000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.604000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.604000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.604000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.604000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.604000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.604000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.604000 audit: BPF prog-id=147 op=LOAD Jul 16 12:20:34.604000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffad149380 a2=94 a3=54428f items=0 ppid=3311 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:34.604000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 16 12:20:34.604000 audit: BPF prog-id=147 op=UNLOAD Jul 16 12:20:34.604000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.604000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.604000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.604000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.604000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.604000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.604000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.604000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.604000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.604000 audit: BPF prog-id=148 op=LOAD Jul 16 12:20:34.604000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffad1493b0 a2=94 a3=2 items=0 ppid=3311 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:34.604000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 16 12:20:34.604000 audit: BPF prog-id=148 op=UNLOAD Jul 16 12:20:34.666889 systemd[1]: run-netns-cni\x2d63cc62d6\x2d76a1\x2db2fa\x2d5822\x2d5ae2495fa549.mount: Deactivated successfully. Jul 16 12:20:34.666994 systemd[1]: run-netns-cni\x2d9caba7b4\x2d73f1\x2d0386\x2d9fde\x2d046b8b3868a0.mount: Deactivated successfully. Jul 16 12:20:34.667049 systemd[1]: run-netns-cni\x2d376cd874\x2dd11c\x2dca8a\x2d447a\x2d2feea48ae22e.mount: Deactivated successfully. Jul 16 12:20:34.773819 systemd-networkd[1034]: cali86fa38fe993: Link UP Jul 16 12:20:34.783431 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali86fa38fe993: link becomes ready Jul 16 12:20:34.783861 systemd-networkd[1034]: cali86fa38fe993: Gained carrier Jul 16 12:20:34.812805 env[1205]: 2025-07-16 12:20:34.626 [INFO][3527] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0 calico-apiserver-55dcc56559- calico-apiserver 2241f06a-ab47-4d15-8e36-a94bf91d7b1d 949 0 2025-07-16 12:20:04 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:55dcc56559 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s srv-frvg8.gb1.brightbox.com calico-apiserver-55dcc56559-cjgqh eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali86fa38fe993 [] [] }} ContainerID="c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b" Namespace="calico-apiserver" Pod="calico-apiserver-55dcc56559-cjgqh" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-" Jul 16 12:20:34.812805 env[1205]: 2025-07-16 12:20:34.626 [INFO][3527] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b" Namespace="calico-apiserver" Pod="calico-apiserver-55dcc56559-cjgqh" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0" Jul 16 12:20:34.812805 env[1205]: 2025-07-16 12:20:34.699 [INFO][3589] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b" HandleID="k8s-pod-network.c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0" Jul 16 12:20:34.812805 env[1205]: 2025-07-16 12:20:34.699 [INFO][3589] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b" HandleID="k8s-pod-network.c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000251610), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"srv-frvg8.gb1.brightbox.com", "pod":"calico-apiserver-55dcc56559-cjgqh", "timestamp":"2025-07-16 12:20:34.699276384 +0000 UTC"}, Hostname:"srv-frvg8.gb1.brightbox.com", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 16 12:20:34.812805 env[1205]: 2025-07-16 12:20:34.699 [INFO][3589] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:34.812805 env[1205]: 2025-07-16 12:20:34.699 [INFO][3589] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:34.812805 env[1205]: 2025-07-16 12:20:34.699 [INFO][3589] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'srv-frvg8.gb1.brightbox.com' Jul 16 12:20:34.812805 env[1205]: 2025-07-16 12:20:34.712 [INFO][3589] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.812805 env[1205]: 2025-07-16 12:20:34.727 [INFO][3589] ipam/ipam.go 394: Looking up existing affinities for host host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.812805 env[1205]: 2025-07-16 12:20:34.736 [INFO][3589] ipam/ipam.go 511: Trying affinity for 192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.812805 env[1205]: 2025-07-16 12:20:34.739 [INFO][3589] ipam/ipam.go 158: Attempting to load block cidr=192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.812805 env[1205]: 2025-07-16 12:20:34.742 [INFO][3589] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.812805 env[1205]: 2025-07-16 12:20:34.742 [INFO][3589] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.105.192/26 handle="k8s-pod-network.c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.812805 env[1205]: 2025-07-16 12:20:34.747 [INFO][3589] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b Jul 16 12:20:34.812805 env[1205]: 2025-07-16 12:20:34.754 [INFO][3589] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.105.192/26 handle="k8s-pod-network.c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.812805 env[1205]: 2025-07-16 12:20:34.764 [INFO][3589] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.105.194/26] block=192.168.105.192/26 handle="k8s-pod-network.c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.812805 env[1205]: 2025-07-16 12:20:34.764 [INFO][3589] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.105.194/26] handle="k8s-pod-network.c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.812805 env[1205]: 2025-07-16 12:20:34.764 [INFO][3589] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:34.812805 env[1205]: 2025-07-16 12:20:34.764 [INFO][3589] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.105.194/26] IPv6=[] ContainerID="c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b" HandleID="k8s-pod-network.c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0" Jul 16 12:20:34.813983 env[1205]: 2025-07-16 12:20:34.767 [INFO][3527] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b" Namespace="calico-apiserver" Pod="calico-apiserver-55dcc56559-cjgqh" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0", GenerateName:"calico-apiserver-55dcc56559-", Namespace:"calico-apiserver", SelfLink:"", UID:"2241f06a-ab47-4d15-8e36-a94bf91d7b1d", ResourceVersion:"949", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"55dcc56559", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"", Pod:"calico-apiserver-55dcc56559-cjgqh", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.105.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali86fa38fe993", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:34.813983 env[1205]: 2025-07-16 12:20:34.767 [INFO][3527] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.105.194/32] ContainerID="c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b" Namespace="calico-apiserver" Pod="calico-apiserver-55dcc56559-cjgqh" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0" Jul 16 12:20:34.813983 env[1205]: 2025-07-16 12:20:34.767 [INFO][3527] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali86fa38fe993 ContainerID="c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b" Namespace="calico-apiserver" Pod="calico-apiserver-55dcc56559-cjgqh" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0" Jul 16 12:20:34.813983 env[1205]: 2025-07-16 12:20:34.792 [INFO][3527] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b" Namespace="calico-apiserver" Pod="calico-apiserver-55dcc56559-cjgqh" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0" Jul 16 12:20:34.813983 env[1205]: 2025-07-16 12:20:34.793 [INFO][3527] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b" Namespace="calico-apiserver" Pod="calico-apiserver-55dcc56559-cjgqh" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0", GenerateName:"calico-apiserver-55dcc56559-", Namespace:"calico-apiserver", SelfLink:"", UID:"2241f06a-ab47-4d15-8e36-a94bf91d7b1d", ResourceVersion:"949", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"55dcc56559", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b", Pod:"calico-apiserver-55dcc56559-cjgqh", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.105.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali86fa38fe993", MAC:"5a:b7:fa:20:99:fb", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:34.813983 env[1205]: 2025-07-16 12:20:34.810 [INFO][3527] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b" Namespace="calico-apiserver" Pod="calico-apiserver-55dcc56559-cjgqh" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0" Jul 16 12:20:34.840899 env[1205]: time="2025-07-16T12:20:34.840795034Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 16 12:20:34.841109 env[1205]: time="2025-07-16T12:20:34.841085925Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 16 12:20:34.841244 env[1205]: time="2025-07-16T12:20:34.841222379Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 16 12:20:34.842320 env[1205]: time="2025-07-16T12:20:34.842263374Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b pid=3617 runtime=io.containerd.runc.v2 Jul 16 12:20:34.890195 systemd[1]: run-containerd-runc-k8s.io-c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b-runc.jQo3YW.mount: Deactivated successfully. Jul 16 12:20:34.903805 systemd[1]: Started cri-containerd-c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b.scope. Jul 16 12:20:34.930562 systemd-networkd[1034]: calic4029658a1f: Link UP Jul 16 12:20:34.933487 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic4029658a1f: link becomes ready Jul 16 12:20:34.933682 systemd-networkd[1034]: calic4029658a1f: Gained carrier Jul 16 12:20:34.951816 env[1205]: 2025-07-16 12:20:34.589 [INFO][3509] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0 calico-apiserver-5944847977- calico-apiserver 94f730db-68a2-4e48-bafd-314eacd16a53 948 0 2025-07-16 12:20:02 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5944847977 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s srv-frvg8.gb1.brightbox.com calico-apiserver-5944847977-rlssh eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calic4029658a1f [] [] }} ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Namespace="calico-apiserver" Pod="calico-apiserver-5944847977-rlssh" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-" Jul 16 12:20:34.951816 env[1205]: 2025-07-16 12:20:34.589 [INFO][3509] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Namespace="calico-apiserver" Pod="calico-apiserver-5944847977-rlssh" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:20:34.951816 env[1205]: 2025-07-16 12:20:34.705 [INFO][3578] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" HandleID="k8s-pod-network.87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:20:34.951816 env[1205]: 2025-07-16 12:20:34.707 [INFO][3578] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" HandleID="k8s-pod-network.87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002517b0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"srv-frvg8.gb1.brightbox.com", "pod":"calico-apiserver-5944847977-rlssh", "timestamp":"2025-07-16 12:20:34.705738634 +0000 UTC"}, Hostname:"srv-frvg8.gb1.brightbox.com", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 16 12:20:34.951816 env[1205]: 2025-07-16 12:20:34.708 [INFO][3578] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:34.951816 env[1205]: 2025-07-16 12:20:34.765 [INFO][3578] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:34.951816 env[1205]: 2025-07-16 12:20:34.765 [INFO][3578] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'srv-frvg8.gb1.brightbox.com' Jul 16 12:20:34.951816 env[1205]: 2025-07-16 12:20:34.817 [INFO][3578] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.951816 env[1205]: 2025-07-16 12:20:34.841 [INFO][3578] ipam/ipam.go 394: Looking up existing affinities for host host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.951816 env[1205]: 2025-07-16 12:20:34.857 [INFO][3578] ipam/ipam.go 511: Trying affinity for 192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.951816 env[1205]: 2025-07-16 12:20:34.864 [INFO][3578] ipam/ipam.go 158: Attempting to load block cidr=192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.951816 env[1205]: 2025-07-16 12:20:34.870 [INFO][3578] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.951816 env[1205]: 2025-07-16 12:20:34.870 [INFO][3578] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.105.192/26 handle="k8s-pod-network.87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.951816 env[1205]: 2025-07-16 12:20:34.872 [INFO][3578] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9 Jul 16 12:20:34.951816 env[1205]: 2025-07-16 12:20:34.886 [INFO][3578] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.105.192/26 handle="k8s-pod-network.87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.951816 env[1205]: 2025-07-16 12:20:34.910 [INFO][3578] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.105.195/26] block=192.168.105.192/26 handle="k8s-pod-network.87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.951816 env[1205]: 2025-07-16 12:20:34.910 [INFO][3578] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.105.195/26] handle="k8s-pod-network.87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:34.951816 env[1205]: 2025-07-16 12:20:34.910 [INFO][3578] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:34.951816 env[1205]: 2025-07-16 12:20:34.910 [INFO][3578] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.105.195/26] IPv6=[] ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" HandleID="k8s-pod-network.87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:20:34.952788 env[1205]: 2025-07-16 12:20:34.914 [INFO][3509] cni-plugin/k8s.go 418: Populated endpoint ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Namespace="calico-apiserver" Pod="calico-apiserver-5944847977-rlssh" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0", GenerateName:"calico-apiserver-5944847977-", Namespace:"calico-apiserver", SelfLink:"", UID:"94f730db-68a2-4e48-bafd-314eacd16a53", ResourceVersion:"948", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5944847977", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"", Pod:"calico-apiserver-5944847977-rlssh", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.105.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic4029658a1f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:34.952788 env[1205]: 2025-07-16 12:20:34.914 [INFO][3509] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.105.195/32] ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Namespace="calico-apiserver" Pod="calico-apiserver-5944847977-rlssh" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:20:34.952788 env[1205]: 2025-07-16 12:20:34.914 [INFO][3509] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic4029658a1f ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Namespace="calico-apiserver" Pod="calico-apiserver-5944847977-rlssh" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:20:34.952788 env[1205]: 2025-07-16 12:20:34.935 [INFO][3509] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Namespace="calico-apiserver" Pod="calico-apiserver-5944847977-rlssh" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:20:34.952788 env[1205]: 2025-07-16 12:20:34.936 [INFO][3509] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Namespace="calico-apiserver" Pod="calico-apiserver-5944847977-rlssh" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0", GenerateName:"calico-apiserver-5944847977-", Namespace:"calico-apiserver", SelfLink:"", UID:"94f730db-68a2-4e48-bafd-314eacd16a53", ResourceVersion:"948", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5944847977", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9", Pod:"calico-apiserver-5944847977-rlssh", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.105.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic4029658a1f", MAC:"16:ad:b9:c2:cb:19", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:34.952788 env[1205]: 2025-07-16 12:20:34.949 [INFO][3509] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Namespace="calico-apiserver" Pod="calico-apiserver-5944847977-rlssh" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:20:34.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.960000 audit: BPF prog-id=149 op=LOAD Jul 16 12:20:34.960000 audit[3627]: AVC avc: denied { bpf } for pid=3627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.960000 audit[3627]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3617 pid=3627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:34.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336323036366265653033643132393863353439343935303866353236 Jul 16 12:20:34.960000 audit[3627]: AVC avc: denied { perfmon } for pid=3627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.960000 audit[3627]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3617 pid=3627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:34.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336323036366265653033643132393863353439343935303866353236 Jul 16 12:20:34.960000 audit[3627]: AVC avc: denied { bpf } for pid=3627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.960000 audit[3627]: AVC avc: denied { bpf } for pid=3627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.960000 audit[3627]: AVC avc: denied { bpf } for pid=3627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.960000 audit[3627]: AVC avc: denied { perfmon } for pid=3627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.960000 audit[3627]: AVC avc: denied { perfmon } for pid=3627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.960000 audit[3627]: AVC avc: denied { perfmon } for pid=3627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.960000 audit[3627]: AVC avc: denied { perfmon } for pid=3627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.960000 audit[3627]: AVC avc: denied { perfmon } for pid=3627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.960000 audit[3627]: AVC avc: denied { bpf } for pid=3627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.960000 audit[3627]: AVC avc: denied { bpf } for pid=3627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.960000 audit: BPF prog-id=150 op=LOAD Jul 16 12:20:34.960000 audit[3627]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000306e60 items=0 ppid=3617 pid=3627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:34.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336323036366265653033643132393863353439343935303866353236 Jul 16 12:20:34.960000 audit[3627]: AVC avc: denied { bpf } for pid=3627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.960000 audit[3627]: AVC avc: denied { bpf } for pid=3627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.960000 audit[3627]: AVC avc: denied { perfmon } for pid=3627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.960000 audit[3627]: AVC avc: denied { perfmon } for pid=3627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.960000 audit[3627]: AVC avc: denied { perfmon } for pid=3627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.960000 audit[3627]: AVC avc: denied { perfmon } for pid=3627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.960000 audit[3627]: AVC avc: denied { perfmon } for pid=3627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.960000 audit[3627]: AVC avc: denied { bpf } for pid=3627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.960000 audit[3627]: AVC avc: denied { bpf } for pid=3627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.960000 audit: BPF prog-id=151 op=LOAD Jul 16 12:20:34.960000 audit[3627]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000306ea8 items=0 ppid=3617 pid=3627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:34.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336323036366265653033643132393863353439343935303866353236 Jul 16 12:20:34.960000 audit: BPF prog-id=151 op=UNLOAD Jul 16 12:20:34.961000 audit: BPF prog-id=150 op=UNLOAD Jul 16 12:20:34.961000 audit[3627]: AVC avc: denied { bpf } for pid=3627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.961000 audit[3627]: AVC avc: denied { bpf } for pid=3627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.961000 audit[3627]: AVC avc: denied { bpf } for pid=3627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.961000 audit[3627]: AVC avc: denied { perfmon } for pid=3627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.961000 audit[3627]: AVC avc: denied { perfmon } for pid=3627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.961000 audit[3627]: AVC avc: denied { perfmon } for pid=3627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.961000 audit[3627]: AVC avc: denied { perfmon } for pid=3627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.961000 audit[3627]: AVC avc: denied { perfmon } for pid=3627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.961000 audit[3627]: AVC avc: denied { bpf } for pid=3627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.961000 audit[3627]: AVC avc: denied { bpf } for pid=3627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:34.961000 audit: BPF prog-id=152 op=LOAD Jul 16 12:20:34.961000 audit[3627]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003072b8 items=0 ppid=3617 pid=3627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:34.961000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336323036366265653033643132393863353439343935303866353236 Jul 16 12:20:34.982333 env[1205]: time="2025-07-16T12:20:34.982262450Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 16 12:20:34.982573 env[1205]: time="2025-07-16T12:20:34.982547863Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 16 12:20:34.982675 env[1205]: time="2025-07-16T12:20:34.982654855Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 16 12:20:34.982955 env[1205]: time="2025-07-16T12:20:34.982927281Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9 pid=3658 runtime=io.containerd.runc.v2 Jul 16 12:20:35.017235 env[1205]: time="2025-07-16T12:20:35.017180914Z" level=info msg="StopPodSandbox for \"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8\"" Jul 16 12:20:35.017978 env[1205]: time="2025-07-16T12:20:35.017951879Z" level=info msg="StopPodSandbox for \"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251\"" Jul 16 12:20:35.030205 systemd[1]: Started cri-containerd-87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9.scope. Jul 16 12:20:35.061200 systemd-networkd[1034]: calic2aacc2f376: Link UP Jul 16 12:20:35.067418 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 16 12:20:35.067701 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic2aacc2f376: link becomes ready Jul 16 12:20:35.070581 systemd-networkd[1034]: calic2aacc2f376: Gained carrier Jul 16 12:20:35.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.098000 audit: BPF prog-id=153 op=LOAD Jul 16 12:20:35.100000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.100000 audit[3668]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3658 pid=3668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837656238326363376231613463636661306434613763643361373439 Jul 16 12:20:35.100000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.100000 audit[3668]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3658 pid=3668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837656238326363376231613463636661306434613763643361373439 Jul 16 12:20:35.100000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.100000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.100000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.100000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.100000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.100000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.100000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.100000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.100000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.100000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.100000 audit: BPF prog-id=154 op=LOAD Jul 16 12:20:35.100000 audit[3668]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c20a0 items=0 ppid=3658 pid=3668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837656238326363376231613463636661306434613763643361373439 Jul 16 12:20:35.101000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.101000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.101000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.101000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.101000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.101000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.101000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.101000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.101000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.101000 audit: BPF prog-id=155 op=LOAD Jul 16 12:20:35.101000 audit[3668]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c20e8 items=0 ppid=3658 pid=3668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.101000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837656238326363376231613463636661306434613763643361373439 Jul 16 12:20:35.101000 audit: BPF prog-id=155 op=UNLOAD Jul 16 12:20:35.106000 audit: BPF prog-id=154 op=UNLOAD Jul 16 12:20:35.106000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.106000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.106000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.106000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.106000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.106000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.106000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.106000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.106000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.106000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.106000 audit: BPF prog-id=156 op=LOAD Jul 16 12:20:35.106000 audit[3668]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c24f8 items=0 ppid=3658 pid=3668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.106000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837656238326363376231613463636661306434613763643361373439 Jul 16 12:20:35.111836 env[1205]: time="2025-07-16T12:20:35.111767637Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-55dcc56559-cjgqh,Uid:2241f06a-ab47-4d15-8e36-a94bf91d7b1d,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b\"" Jul 16 12:20:35.119593 env[1205]: 2025-07-16 12:20:34.670 [INFO][3552] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0 calico-apiserver-5944847977- calico-apiserver 236ebe5f-a95d-42df-8840-c8ac6fd743e4 950 0 2025-07-16 12:20:02 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5944847977 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s srv-frvg8.gb1.brightbox.com calico-apiserver-5944847977-8tj42 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calic2aacc2f376 [] [] }} ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Namespace="calico-apiserver" Pod="calico-apiserver-5944847977-8tj42" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-" Jul 16 12:20:35.119593 env[1205]: 2025-07-16 12:20:34.670 [INFO][3552] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Namespace="calico-apiserver" Pod="calico-apiserver-5944847977-8tj42" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:20:35.119593 env[1205]: 2025-07-16 12:20:34.766 [INFO][3597] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" HandleID="k8s-pod-network.ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:20:35.119593 env[1205]: 2025-07-16 12:20:34.766 [INFO][3597] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" HandleID="k8s-pod-network.ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d5650), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"srv-frvg8.gb1.brightbox.com", "pod":"calico-apiserver-5944847977-8tj42", "timestamp":"2025-07-16 12:20:34.766689873 +0000 UTC"}, Hostname:"srv-frvg8.gb1.brightbox.com", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 16 12:20:35.119593 env[1205]: 2025-07-16 12:20:34.767 [INFO][3597] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:35.119593 env[1205]: 2025-07-16 12:20:34.911 [INFO][3597] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:35.119593 env[1205]: 2025-07-16 12:20:34.912 [INFO][3597] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'srv-frvg8.gb1.brightbox.com' Jul 16 12:20:35.119593 env[1205]: 2025-07-16 12:20:34.945 [INFO][3597] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.119593 env[1205]: 2025-07-16 12:20:34.960 [INFO][3597] ipam/ipam.go 394: Looking up existing affinities for host host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.119593 env[1205]: 2025-07-16 12:20:34.985 [INFO][3597] ipam/ipam.go 511: Trying affinity for 192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.119593 env[1205]: 2025-07-16 12:20:34.997 [INFO][3597] ipam/ipam.go 158: Attempting to load block cidr=192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.119593 env[1205]: 2025-07-16 12:20:35.002 [INFO][3597] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.119593 env[1205]: 2025-07-16 12:20:35.002 [INFO][3597] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.105.192/26 handle="k8s-pod-network.ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.119593 env[1205]: 2025-07-16 12:20:35.012 [INFO][3597] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812 Jul 16 12:20:35.119593 env[1205]: 2025-07-16 12:20:35.020 [INFO][3597] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.105.192/26 handle="k8s-pod-network.ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.119593 env[1205]: 2025-07-16 12:20:35.044 [INFO][3597] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.105.196/26] block=192.168.105.192/26 handle="k8s-pod-network.ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.119593 env[1205]: 2025-07-16 12:20:35.044 [INFO][3597] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.105.196/26] handle="k8s-pod-network.ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.119593 env[1205]: 2025-07-16 12:20:35.044 [INFO][3597] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:35.119593 env[1205]: 2025-07-16 12:20:35.045 [INFO][3597] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.105.196/26] IPv6=[] ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" HandleID="k8s-pod-network.ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:20:35.120623 env[1205]: 2025-07-16 12:20:35.054 [INFO][3552] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Namespace="calico-apiserver" Pod="calico-apiserver-5944847977-8tj42" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0", GenerateName:"calico-apiserver-5944847977-", Namespace:"calico-apiserver", SelfLink:"", UID:"236ebe5f-a95d-42df-8840-c8ac6fd743e4", ResourceVersion:"950", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5944847977", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"", Pod:"calico-apiserver-5944847977-8tj42", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.105.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic2aacc2f376", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:35.120623 env[1205]: 2025-07-16 12:20:35.054 [INFO][3552] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.105.196/32] ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Namespace="calico-apiserver" Pod="calico-apiserver-5944847977-8tj42" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:20:35.120623 env[1205]: 2025-07-16 12:20:35.055 [INFO][3552] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic2aacc2f376 ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Namespace="calico-apiserver" Pod="calico-apiserver-5944847977-8tj42" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:20:35.120623 env[1205]: 2025-07-16 12:20:35.071 [INFO][3552] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Namespace="calico-apiserver" Pod="calico-apiserver-5944847977-8tj42" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:20:35.120623 env[1205]: 2025-07-16 12:20:35.072 [INFO][3552] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Namespace="calico-apiserver" Pod="calico-apiserver-5944847977-8tj42" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0", GenerateName:"calico-apiserver-5944847977-", Namespace:"calico-apiserver", SelfLink:"", UID:"236ebe5f-a95d-42df-8840-c8ac6fd743e4", ResourceVersion:"950", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5944847977", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812", Pod:"calico-apiserver-5944847977-8tj42", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.105.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic2aacc2f376", MAC:"ce:6d:f6:d7:bd:81", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:35.120623 env[1205]: 2025-07-16 12:20:35.115 [INFO][3552] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Namespace="calico-apiserver" Pod="calico-apiserver-5944847977-8tj42" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:20:35.189000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.190711 env[1205]: time="2025-07-16T12:20:35.189738625Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 16 12:20:35.190711 env[1205]: time="2025-07-16T12:20:35.189782645Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 16 12:20:35.190711 env[1205]: time="2025-07-16T12:20:35.189795085Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 16 12:20:35.190711 env[1205]: time="2025-07-16T12:20:35.189953108Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812 pid=3736 runtime=io.containerd.runc.v2 Jul 16 12:20:35.189000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.189000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.189000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.189000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.189000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.189000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.189000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.189000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.189000 audit: BPF prog-id=157 op=LOAD Jul 16 12:20:35.189000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffad149270 a2=94 a3=1 items=0 ppid=3311 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.189000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 16 12:20:35.190000 audit: BPF prog-id=157 op=UNLOAD Jul 16 12:20:35.190000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.190000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fffad149340 a2=50 a3=7fffad149420 items=0 ppid=3311 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.190000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 16 12:20:35.249000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.249000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffad149280 a2=28 a3=0 items=0 ppid=3311 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.249000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 16 12:20:35.249000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.249000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffad1492b0 a2=28 a3=0 items=0 ppid=3311 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.249000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 16 12:20:35.249000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.249000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffad1491c0 a2=28 a3=0 items=0 ppid=3311 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.249000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 16 12:20:35.249000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.249000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffad1492d0 a2=28 a3=0 items=0 ppid=3311 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.249000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 16 12:20:35.249000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.249000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffad1492b0 a2=28 a3=0 items=0 ppid=3311 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.249000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 16 12:20:35.249000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.249000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffad1492a0 a2=28 a3=0 items=0 ppid=3311 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.249000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 16 12:20:35.249000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.249000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffad1492d0 a2=28 a3=0 items=0 ppid=3311 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.249000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 16 12:20:35.249000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.249000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffad1492b0 a2=28 a3=0 items=0 ppid=3311 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.249000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 16 12:20:35.249000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.249000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffad1492d0 a2=28 a3=0 items=0 ppid=3311 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.249000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 16 12:20:35.249000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.249000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffad1492a0 a2=28 a3=0 items=0 ppid=3311 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.249000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 16 12:20:35.249000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.249000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffad149310 a2=28 a3=0 items=0 ppid=3311 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.249000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fffad1490c0 a2=50 a3=1 items=0 ppid=3311 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.250000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit: BPF prog-id=158 op=LOAD Jul 16 12:20:35.250000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fffad1490c0 a2=94 a3=5 items=0 ppid=3311 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.250000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 16 12:20:35.250000 audit: BPF prog-id=158 op=UNLOAD Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fffad149170 a2=50 a3=1 items=0 ppid=3311 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.250000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7fffad149290 a2=4 a3=38 items=0 ppid=3311 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.250000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { confidentiality } for pid=3575 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 16 12:20:35.250000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffad1492e0 a2=94 a3=6 items=0 ppid=3311 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.250000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.250000 audit[3575]: AVC avc: denied { confidentiality } for pid=3575 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 16 12:20:35.250000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffad148a90 a2=94 a3=88 items=0 ppid=3311 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.250000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 16 12:20:35.251000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.251000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.251000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.251000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.251000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.251000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.251000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.251000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.251000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.251000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.262200 systemd[1]: Started cri-containerd-ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812.scope. Jul 16 12:20:35.251000 audit[3575]: AVC avc: denied { confidentiality } for pid=3575 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 16 12:20:35.251000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffad148a90 a2=94 a3=88 items=0 ppid=3311 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.251000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 16 12:20:35.283160 env[1205]: 2025-07-16 12:20:35.193 [INFO][3715] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" Jul 16 12:20:35.283160 env[1205]: 2025-07-16 12:20:35.193 [INFO][3715] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" iface="eth0" netns="/var/run/netns/cni-1af8196b-36f9-1f6b-9973-462d54b47e99" Jul 16 12:20:35.283160 env[1205]: 2025-07-16 12:20:35.193 [INFO][3715] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" iface="eth0" netns="/var/run/netns/cni-1af8196b-36f9-1f6b-9973-462d54b47e99" Jul 16 12:20:35.283160 env[1205]: 2025-07-16 12:20:35.201 [INFO][3715] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" iface="eth0" netns="/var/run/netns/cni-1af8196b-36f9-1f6b-9973-462d54b47e99" Jul 16 12:20:35.283160 env[1205]: 2025-07-16 12:20:35.201 [INFO][3715] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" Jul 16 12:20:35.283160 env[1205]: 2025-07-16 12:20:35.201 [INFO][3715] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" Jul 16 12:20:35.283160 env[1205]: 2025-07-16 12:20:35.250 [INFO][3750] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" HandleID="k8s-pod-network.c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0" Jul 16 12:20:35.283160 env[1205]: 2025-07-16 12:20:35.255 [INFO][3750] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:35.283160 env[1205]: 2025-07-16 12:20:35.255 [INFO][3750] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:35.283160 env[1205]: 2025-07-16 12:20:35.275 [WARNING][3750] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" HandleID="k8s-pod-network.c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0" Jul 16 12:20:35.283160 env[1205]: 2025-07-16 12:20:35.275 [INFO][3750] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" HandleID="k8s-pod-network.c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0" Jul 16 12:20:35.283160 env[1205]: 2025-07-16 12:20:35.279 [INFO][3750] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:35.283160 env[1205]: 2025-07-16 12:20:35.281 [INFO][3715] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" Jul 16 12:20:35.283996 env[1205]: time="2025-07-16T12:20:35.283952987Z" level=info msg="TearDown network for sandbox \"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251\" successfully" Jul 16 12:20:35.284123 env[1205]: time="2025-07-16T12:20:35.284105804Z" level=info msg="StopPodSandbox for \"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251\" returns successfully" Jul 16 12:20:35.286248 env[1205]: time="2025-07-16T12:20:35.286206653Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-n6sg4,Uid:8593d450-6860-4758-9ca4-fd43459b0599,Namespace:kube-system,Attempt:1,}" Jul 16 12:20:35.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.302000 audit: BPF prog-id=159 op=LOAD Jul 16 12:20:35.303000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.303000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3736 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363616538336636306165373665323338323135643532343530363830 Jul 16 12:20:35.305000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.305000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3736 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363616538336636306165373665323338323135643532343530363830 Jul 16 12:20:35.305000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.305000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.305000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.305000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.305000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.305000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.305000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.305000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.305000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.305000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.305000 audit: BPF prog-id=160 op=LOAD Jul 16 12:20:35.305000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001dbbd0 items=0 ppid=3736 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363616538336636306165373665323338323135643532343530363830 Jul 16 12:20:35.305000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.305000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.305000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.305000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.305000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.305000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.305000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.305000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.305000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.305000 audit: BPF prog-id=161 op=LOAD Jul 16 12:20:35.305000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001dbc18 items=0 ppid=3736 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363616538336636306165373665323338323135643532343530363830 Jul 16 12:20:35.305000 audit: BPF prog-id=161 op=UNLOAD Jul 16 12:20:35.305000 audit: BPF prog-id=160 op=UNLOAD Jul 16 12:20:35.306000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.306000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.306000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.306000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.306000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.306000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.306000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.306000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.306000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.306000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.306000 audit: BPF prog-id=162 op=LOAD Jul 16 12:20:35.306000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000340028 items=0 ppid=3736 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.306000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363616538336636306165373665323338323135643532343530363830 Jul 16 12:20:35.341719 env[1205]: time="2025-07-16T12:20:35.341675207Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5944847977-rlssh,Uid:94f730db-68a2-4e48-bafd-314eacd16a53,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9\"" Jul 16 12:20:35.370664 env[1205]: 2025-07-16 12:20:35.222 [INFO][3709] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" Jul 16 12:20:35.370664 env[1205]: 2025-07-16 12:20:35.222 [INFO][3709] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" iface="eth0" netns="/var/run/netns/cni-9986add1-83ba-3de0-5b01-50662ed6564b" Jul 16 12:20:35.370664 env[1205]: 2025-07-16 12:20:35.222 [INFO][3709] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" iface="eth0" netns="/var/run/netns/cni-9986add1-83ba-3de0-5b01-50662ed6564b" Jul 16 12:20:35.370664 env[1205]: 2025-07-16 12:20:35.223 [INFO][3709] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" iface="eth0" netns="/var/run/netns/cni-9986add1-83ba-3de0-5b01-50662ed6564b" Jul 16 12:20:35.370664 env[1205]: 2025-07-16 12:20:35.223 [INFO][3709] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" Jul 16 12:20:35.370664 env[1205]: 2025-07-16 12:20:35.223 [INFO][3709] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" Jul 16 12:20:35.370664 env[1205]: 2025-07-16 12:20:35.337 [INFO][3757] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" HandleID="k8s-pod-network.0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0" Jul 16 12:20:35.370664 env[1205]: 2025-07-16 12:20:35.339 [INFO][3757] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:35.370664 env[1205]: 2025-07-16 12:20:35.339 [INFO][3757] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:35.370664 env[1205]: 2025-07-16 12:20:35.354 [WARNING][3757] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" HandleID="k8s-pod-network.0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0" Jul 16 12:20:35.370664 env[1205]: 2025-07-16 12:20:35.354 [INFO][3757] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" HandleID="k8s-pod-network.0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0" Jul 16 12:20:35.370664 env[1205]: 2025-07-16 12:20:35.359 [INFO][3757] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:35.370664 env[1205]: 2025-07-16 12:20:35.361 [INFO][3709] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" Jul 16 12:20:35.373573 env[1205]: time="2025-07-16T12:20:35.373531858Z" level=info msg="TearDown network for sandbox \"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8\" successfully" Jul 16 12:20:35.373725 env[1205]: time="2025-07-16T12:20:35.373707670Z" level=info msg="StopPodSandbox for \"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8\" returns successfully" Jul 16 12:20:35.374574 env[1205]: time="2025-07-16T12:20:35.374546853Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-7kxwt,Uid:a9e6039e-de2d-4a1f-9793-315b7a02db3c,Namespace:kube-system,Attempt:1,}" Jul 16 12:20:35.389000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.389000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.389000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.389000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.389000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.389000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.389000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.389000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.389000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.389000 audit: BPF prog-id=163 op=LOAD Jul 16 12:20:35.389000 audit[3798]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffeb3680f90 a2=98 a3=1999999999999999 items=0 ppid=3311 pid=3798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.389000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 16 12:20:35.389000 audit: BPF prog-id=163 op=UNLOAD Jul 16 12:20:35.389000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.389000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.389000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.389000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.389000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.389000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.389000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.389000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.389000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.389000 audit: BPF prog-id=164 op=LOAD Jul 16 12:20:35.389000 audit[3798]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffeb3680e70 a2=94 a3=ffff items=0 ppid=3311 pid=3798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.389000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 16 12:20:35.390000 audit: BPF prog-id=164 op=UNLOAD Jul 16 12:20:35.390000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.390000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.390000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.390000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.390000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.390000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.390000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.390000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.390000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.390000 audit: BPF prog-id=165 op=LOAD Jul 16 12:20:35.390000 audit[3798]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffeb3680eb0 a2=94 a3=7ffeb3681090 items=0 ppid=3311 pid=3798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.390000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 16 12:20:35.390000 audit: BPF prog-id=165 op=UNLOAD Jul 16 12:20:35.415195 env[1205]: time="2025-07-16T12:20:35.415149072Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5944847977-8tj42,Uid:236ebe5f-a95d-42df-8840-c8ac6fd743e4,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812\"" Jul 16 12:20:35.607279 systemd-networkd[1034]: cali26141c7611b: Link UP Jul 16 12:20:35.621002 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali26141c7611b: link becomes ready Jul 16 12:20:35.626635 systemd-networkd[1034]: cali26141c7611b: Gained carrier Jul 16 12:20:35.654065 env[1205]: 2025-07-16 12:20:35.403 [INFO][3778] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0 coredns-674b8bbfcf- kube-system 8593d450-6860-4758-9ca4-fd43459b0599 965 0 2025-07-16 12:19:51 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s srv-frvg8.gb1.brightbox.com coredns-674b8bbfcf-n6sg4 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali26141c7611b [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748" Namespace="kube-system" Pod="coredns-674b8bbfcf-n6sg4" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-" Jul 16 12:20:35.654065 env[1205]: 2025-07-16 12:20:35.403 [INFO][3778] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748" Namespace="kube-system" Pod="coredns-674b8bbfcf-n6sg4" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0" Jul 16 12:20:35.654065 env[1205]: 2025-07-16 12:20:35.507 [INFO][3815] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748" HandleID="k8s-pod-network.5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0" Jul 16 12:20:35.654065 env[1205]: 2025-07-16 12:20:35.510 [INFO][3815] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748" HandleID="k8s-pod-network.5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d5b60), Attrs:map[string]string{"namespace":"kube-system", "node":"srv-frvg8.gb1.brightbox.com", "pod":"coredns-674b8bbfcf-n6sg4", "timestamp":"2025-07-16 12:20:35.507881419 +0000 UTC"}, Hostname:"srv-frvg8.gb1.brightbox.com", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 16 12:20:35.654065 env[1205]: 2025-07-16 12:20:35.510 [INFO][3815] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:35.654065 env[1205]: 2025-07-16 12:20:35.511 [INFO][3815] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:35.654065 env[1205]: 2025-07-16 12:20:35.511 [INFO][3815] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'srv-frvg8.gb1.brightbox.com' Jul 16 12:20:35.654065 env[1205]: 2025-07-16 12:20:35.534 [INFO][3815] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.654065 env[1205]: 2025-07-16 12:20:35.546 [INFO][3815] ipam/ipam.go 394: Looking up existing affinities for host host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.654065 env[1205]: 2025-07-16 12:20:35.553 [INFO][3815] ipam/ipam.go 511: Trying affinity for 192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.654065 env[1205]: 2025-07-16 12:20:35.555 [INFO][3815] ipam/ipam.go 158: Attempting to load block cidr=192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.654065 env[1205]: 2025-07-16 12:20:35.560 [INFO][3815] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.654065 env[1205]: 2025-07-16 12:20:35.560 [INFO][3815] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.105.192/26 handle="k8s-pod-network.5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.654065 env[1205]: 2025-07-16 12:20:35.566 [INFO][3815] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748 Jul 16 12:20:35.654065 env[1205]: 2025-07-16 12:20:35.574 [INFO][3815] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.105.192/26 handle="k8s-pod-network.5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.654065 env[1205]: 2025-07-16 12:20:35.588 [INFO][3815] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.105.197/26] block=192.168.105.192/26 handle="k8s-pod-network.5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.654065 env[1205]: 2025-07-16 12:20:35.588 [INFO][3815] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.105.197/26] handle="k8s-pod-network.5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.654065 env[1205]: 2025-07-16 12:20:35.588 [INFO][3815] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:35.654065 env[1205]: 2025-07-16 12:20:35.591 [INFO][3815] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.105.197/26] IPv6=[] ContainerID="5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748" HandleID="k8s-pod-network.5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0" Jul 16 12:20:35.655194 env[1205]: 2025-07-16 12:20:35.594 [INFO][3778] cni-plugin/k8s.go 418: Populated endpoint ContainerID="5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748" Namespace="kube-system" Pod="coredns-674b8bbfcf-n6sg4" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"8593d450-6860-4758-9ca4-fd43459b0599", ResourceVersion:"965", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 19, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"", Pod:"coredns-674b8bbfcf-n6sg4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.105.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali26141c7611b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:35.655194 env[1205]: 2025-07-16 12:20:35.594 [INFO][3778] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.105.197/32] ContainerID="5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748" Namespace="kube-system" Pod="coredns-674b8bbfcf-n6sg4" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0" Jul 16 12:20:35.655194 env[1205]: 2025-07-16 12:20:35.594 [INFO][3778] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali26141c7611b ContainerID="5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748" Namespace="kube-system" Pod="coredns-674b8bbfcf-n6sg4" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0" Jul 16 12:20:35.655194 env[1205]: 2025-07-16 12:20:35.629 [INFO][3778] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748" Namespace="kube-system" Pod="coredns-674b8bbfcf-n6sg4" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0" Jul 16 12:20:35.655194 env[1205]: 2025-07-16 12:20:35.630 [INFO][3778] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748" Namespace="kube-system" Pod="coredns-674b8bbfcf-n6sg4" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"8593d450-6860-4758-9ca4-fd43459b0599", ResourceVersion:"965", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 19, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748", Pod:"coredns-674b8bbfcf-n6sg4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.105.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali26141c7611b", MAC:"3a:93:7a:41:ed:c2", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:35.655194 env[1205]: 2025-07-16 12:20:35.647 [INFO][3778] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748" Namespace="kube-system" Pod="coredns-674b8bbfcf-n6sg4" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0" Jul 16 12:20:35.666867 systemd[1]: run-netns-cni\x2d1af8196b\x2d36f9\x2d1f6b\x2d9973\x2d462d54b47e99.mount: Deactivated successfully. Jul 16 12:20:35.667007 systemd[1]: run-netns-cni\x2d9986add1\x2d83ba\x2d3de0\x2d5b01\x2d50662ed6564b.mount: Deactivated successfully. Jul 16 12:20:35.712907 systemd-networkd[1034]: vxlan.calico: Link UP Jul 16 12:20:35.712916 systemd-networkd[1034]: vxlan.calico: Gained carrier Jul 16 12:20:35.725144 env[1205]: time="2025-07-16T12:20:35.712956527Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 16 12:20:35.725144 env[1205]: time="2025-07-16T12:20:35.713006257Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 16 12:20:35.725144 env[1205]: time="2025-07-16T12:20:35.713028270Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 16 12:20:35.725144 env[1205]: time="2025-07-16T12:20:35.713193579Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748 pid=3858 runtime=io.containerd.runc.v2 Jul 16 12:20:35.786153 systemd[1]: run-containerd-runc-k8s.io-5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748-runc.2N4d0F.mount: Deactivated successfully. Jul 16 12:20:35.790648 systemd-networkd[1034]: calic4efd9635b4: Link UP Jul 16 12:20:35.791605 systemd[1]: Started cri-containerd-5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748.scope. Jul 16 12:20:35.796449 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic4efd9635b4: link becomes ready Jul 16 12:20:35.795662 systemd-networkd[1034]: calic4efd9635b4: Gained carrier Jul 16 12:20:35.823725 env[1205]: 2025-07-16 12:20:35.455 [INFO][3800] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0 coredns-674b8bbfcf- kube-system a9e6039e-de2d-4a1f-9793-315b7a02db3c 966 0 2025-07-16 12:19:51 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s srv-frvg8.gb1.brightbox.com coredns-674b8bbfcf-7kxwt eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calic4efd9635b4 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2" Namespace="kube-system" Pod="coredns-674b8bbfcf-7kxwt" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-" Jul 16 12:20:35.823725 env[1205]: 2025-07-16 12:20:35.455 [INFO][3800] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2" Namespace="kube-system" Pod="coredns-674b8bbfcf-7kxwt" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0" Jul 16 12:20:35.823725 env[1205]: 2025-07-16 12:20:35.541 [INFO][3833] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2" HandleID="k8s-pod-network.b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0" Jul 16 12:20:35.823725 env[1205]: 2025-07-16 12:20:35.541 [INFO][3833] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2" HandleID="k8s-pod-network.b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ccff0), Attrs:map[string]string{"namespace":"kube-system", "node":"srv-frvg8.gb1.brightbox.com", "pod":"coredns-674b8bbfcf-7kxwt", "timestamp":"2025-07-16 12:20:35.540985802 +0000 UTC"}, Hostname:"srv-frvg8.gb1.brightbox.com", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 16 12:20:35.823725 env[1205]: 2025-07-16 12:20:35.541 [INFO][3833] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:35.823725 env[1205]: 2025-07-16 12:20:35.588 [INFO][3833] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:35.823725 env[1205]: 2025-07-16 12:20:35.589 [INFO][3833] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'srv-frvg8.gb1.brightbox.com' Jul 16 12:20:35.823725 env[1205]: 2025-07-16 12:20:35.644 [INFO][3833] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.823725 env[1205]: 2025-07-16 12:20:35.673 [INFO][3833] ipam/ipam.go 394: Looking up existing affinities for host host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.823725 env[1205]: 2025-07-16 12:20:35.684 [INFO][3833] ipam/ipam.go 511: Trying affinity for 192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.823725 env[1205]: 2025-07-16 12:20:35.690 [INFO][3833] ipam/ipam.go 158: Attempting to load block cidr=192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.823725 env[1205]: 2025-07-16 12:20:35.706 [INFO][3833] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.823725 env[1205]: 2025-07-16 12:20:35.706 [INFO][3833] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.105.192/26 handle="k8s-pod-network.b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.823725 env[1205]: 2025-07-16 12:20:35.709 [INFO][3833] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2 Jul 16 12:20:35.823725 env[1205]: 2025-07-16 12:20:35.735 [INFO][3833] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.105.192/26 handle="k8s-pod-network.b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.823725 env[1205]: 2025-07-16 12:20:35.751 [INFO][3833] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.105.198/26] block=192.168.105.192/26 handle="k8s-pod-network.b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.823725 env[1205]: 2025-07-16 12:20:35.751 [INFO][3833] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.105.198/26] handle="k8s-pod-network.b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:35.823725 env[1205]: 2025-07-16 12:20:35.751 [INFO][3833] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:35.823725 env[1205]: 2025-07-16 12:20:35.751 [INFO][3833] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.105.198/26] IPv6=[] ContainerID="b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2" HandleID="k8s-pod-network.b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0" Jul 16 12:20:35.825074 env[1205]: 2025-07-16 12:20:35.753 [INFO][3800] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2" Namespace="kube-system" Pod="coredns-674b8bbfcf-7kxwt" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"a9e6039e-de2d-4a1f-9793-315b7a02db3c", ResourceVersion:"966", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 19, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"", Pod:"coredns-674b8bbfcf-7kxwt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.105.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic4efd9635b4", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:35.825074 env[1205]: 2025-07-16 12:20:35.754 [INFO][3800] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.105.198/32] ContainerID="b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2" Namespace="kube-system" Pod="coredns-674b8bbfcf-7kxwt" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0" Jul 16 12:20:35.825074 env[1205]: 2025-07-16 12:20:35.754 [INFO][3800] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic4efd9635b4 ContainerID="b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2" Namespace="kube-system" Pod="coredns-674b8bbfcf-7kxwt" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0" Jul 16 12:20:35.825074 env[1205]: 2025-07-16 12:20:35.797 [INFO][3800] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2" Namespace="kube-system" Pod="coredns-674b8bbfcf-7kxwt" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0" Jul 16 12:20:35.825074 env[1205]: 2025-07-16 12:20:35.798 [INFO][3800] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2" Namespace="kube-system" Pod="coredns-674b8bbfcf-7kxwt" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"a9e6039e-de2d-4a1f-9793-315b7a02db3c", ResourceVersion:"966", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 19, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2", Pod:"coredns-674b8bbfcf-7kxwt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.105.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic4efd9635b4", MAC:"a2:71:aa:c8:6b:7a", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:35.825074 env[1205]: 2025-07-16 12:20:35.821 [INFO][3800] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2" Namespace="kube-system" Pod="coredns-674b8bbfcf-7kxwt" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0" Jul 16 12:20:35.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.838000 audit: BPF prog-id=166 op=LOAD Jul 16 12:20:35.839000 audit[3867]: AVC avc: denied { bpf } for pid=3867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.839000 audit[3867]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3858 pid=3867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562626364316161356137376565303834386165613337653862326339 Jul 16 12:20:35.839000 audit[3867]: AVC avc: denied { perfmon } for pid=3867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.839000 audit[3867]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3858 pid=3867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562626364316161356137376565303834386165613337653862326339 Jul 16 12:20:35.839000 audit[3867]: AVC avc: denied { bpf } for pid=3867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.839000 audit[3867]: AVC avc: denied { bpf } for pid=3867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.839000 audit[3867]: AVC avc: denied { bpf } for pid=3867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.839000 audit[3867]: AVC avc: denied { perfmon } for pid=3867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.839000 audit[3867]: AVC avc: denied { perfmon } for pid=3867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.839000 audit[3867]: AVC avc: denied { perfmon } for pid=3867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.839000 audit[3867]: AVC avc: denied { perfmon } for pid=3867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.839000 audit[3867]: AVC avc: denied { perfmon } for pid=3867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.839000 audit[3867]: AVC avc: denied { bpf } for pid=3867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.839000 audit[3867]: AVC avc: denied { bpf } for pid=3867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.839000 audit: BPF prog-id=167 op=LOAD Jul 16 12:20:35.839000 audit[3867]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00031bc80 items=0 ppid=3858 pid=3867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562626364316161356137376565303834386165613337653862326339 Jul 16 12:20:35.839000 audit[3867]: AVC avc: denied { bpf } for pid=3867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.839000 audit[3867]: AVC avc: denied { bpf } for pid=3867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.839000 audit[3867]: AVC avc: denied { perfmon } for pid=3867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.839000 audit[3867]: AVC avc: denied { perfmon } for pid=3867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.839000 audit[3867]: AVC avc: denied { perfmon } for pid=3867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.839000 audit[3867]: AVC avc: denied { perfmon } for pid=3867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.839000 audit[3867]: AVC avc: denied { perfmon } for pid=3867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.839000 audit[3867]: AVC avc: denied { bpf } for pid=3867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.839000 audit[3867]: AVC avc: denied { bpf } for pid=3867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.839000 audit: BPF prog-id=168 op=LOAD Jul 16 12:20:35.839000 audit[3867]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00031bcc8 items=0 ppid=3858 pid=3867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562626364316161356137376565303834386165613337653862326339 Jul 16 12:20:35.840000 audit: BPF prog-id=168 op=UNLOAD Jul 16 12:20:35.840000 audit: BPF prog-id=167 op=UNLOAD Jul 16 12:20:35.840000 audit[3867]: AVC avc: denied { bpf } for pid=3867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.840000 audit[3867]: AVC avc: denied { bpf } for pid=3867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.840000 audit[3867]: AVC avc: denied { bpf } for pid=3867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.840000 audit[3867]: AVC avc: denied { perfmon } for pid=3867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.840000 audit[3867]: AVC avc: denied { perfmon } for pid=3867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.840000 audit[3867]: AVC avc: denied { perfmon } for pid=3867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.840000 audit[3867]: AVC avc: denied { perfmon } for pid=3867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.840000 audit[3867]: AVC avc: denied { perfmon } for pid=3867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.840000 audit[3867]: AVC avc: denied { bpf } for pid=3867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.840000 audit[3867]: AVC avc: denied { bpf } for pid=3867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.840000 audit: BPF prog-id=169 op=LOAD Jul 16 12:20:35.840000 audit[3867]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00040a0d8 items=0 ppid=3858 pid=3867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.840000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562626364316161356137376565303834386165613337653862326339 Jul 16 12:20:35.850731 env[1205]: time="2025-07-16T12:20:35.850640346Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 16 12:20:35.850934 env[1205]: time="2025-07-16T12:20:35.850907128Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 16 12:20:35.851075 env[1205]: time="2025-07-16T12:20:35.851050975Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 16 12:20:35.851482 env[1205]: time="2025-07-16T12:20:35.851323354Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2 pid=3904 runtime=io.containerd.runc.v2 Jul 16 12:20:35.876728 systemd[1]: Started cri-containerd-b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2.scope. Jul 16 12:20:35.892000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.892000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.892000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.892000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.892000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.892000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.892000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.892000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.892000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.892000 audit: BPF prog-id=170 op=LOAD Jul 16 12:20:35.892000 audit[3929]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd69e76520 a2=98 a3=0 items=0 ppid=3311 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.892000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 16 12:20:35.892000 audit: BPF prog-id=170 op=UNLOAD Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit: BPF prog-id=171 op=LOAD Jul 16 12:20:35.895000 audit[3929]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd69e76330 a2=94 a3=54428f items=0 ppid=3311 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.895000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 16 12:20:35.895000 audit: BPF prog-id=171 op=UNLOAD Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit: BPF prog-id=172 op=LOAD Jul 16 12:20:35.895000 audit[3929]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd69e76360 a2=94 a3=2 items=0 ppid=3311 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.895000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 16 12:20:35.895000 audit: BPF prog-id=172 op=UNLOAD Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd69e76230 a2=28 a3=0 items=0 ppid=3311 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.895000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd69e76260 a2=28 a3=0 items=0 ppid=3311 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.895000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd69e76170 a2=28 a3=0 items=0 ppid=3311 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.895000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd69e76280 a2=28 a3=0 items=0 ppid=3311 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.895000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd69e76260 a2=28 a3=0 items=0 ppid=3311 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.895000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd69e76250 a2=28 a3=0 items=0 ppid=3311 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.895000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd69e76280 a2=28 a3=0 items=0 ppid=3311 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.895000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd69e76260 a2=28 a3=0 items=0 ppid=3311 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.895000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd69e76280 a2=28 a3=0 items=0 ppid=3311 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.895000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd69e76250 a2=28 a3=0 items=0 ppid=3311 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.895000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd69e762c0 a2=28 a3=0 items=0 ppid=3311 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.895000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.895000 audit: BPF prog-id=173 op=LOAD Jul 16 12:20:35.895000 audit[3929]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd69e76130 a2=94 a3=0 items=0 ppid=3311 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.895000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 16 12:20:35.896000 audit: BPF prog-id=173 op=UNLOAD Jul 16 12:20:35.896000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.896000 audit[3929]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffd69e76120 a2=50 a3=2800 items=0 ppid=3311 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.896000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 16 12:20:35.897000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.897000 audit[3929]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffd69e76120 a2=50 a3=2800 items=0 ppid=3311 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.897000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 16 12:20:35.897000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.897000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.897000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.897000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.897000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.897000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.897000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.897000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.897000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.897000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.897000 audit: BPF prog-id=174 op=LOAD Jul 16 12:20:35.897000 audit[3929]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd69e75940 a2=94 a3=2 items=0 ppid=3311 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.897000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 16 12:20:35.897000 audit: BPF prog-id=174 op=UNLOAD Jul 16 12:20:35.897000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.897000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.897000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.897000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.897000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.897000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.897000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.897000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.897000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.897000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.897000 audit: BPF prog-id=175 op=LOAD Jul 16 12:20:35.897000 audit[3929]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd69e75a40 a2=94 a3=30 items=0 ppid=3311 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.897000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 16 12:20:35.902000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.902000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.902000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.902000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.902000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.902000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.902000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.902000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.902000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.902000 audit: BPF prog-id=176 op=LOAD Jul 16 12:20:35.902000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffeb66c38a0 a2=98 a3=0 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.902000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:35.903000 audit: BPF prog-id=176 op=UNLOAD Jul 16 12:20:35.903000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.903000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.903000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.903000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.903000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.903000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.903000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.903000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.903000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.903000 audit: BPF prog-id=177 op=LOAD Jul 16 12:20:35.903000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffeb66c3690 a2=94 a3=54428f items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.903000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:35.903000 audit: BPF prog-id=177 op=UNLOAD Jul 16 12:20:35.903000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.903000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.903000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.903000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.903000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.903000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.903000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.903000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.903000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.903000 audit: BPF prog-id=178 op=LOAD Jul 16 12:20:35.903000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffeb66c36c0 a2=94 a3=2 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.903000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:35.904000 audit: BPF prog-id=178 op=UNLOAD Jul 16 12:20:35.933000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.933000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.933000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.933000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.933000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.933000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.933000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.933000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.933000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.934000 audit: BPF prog-id=179 op=LOAD Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3904 pid=3915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234336261613138323239666337626230383139663339636265616563 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3904 pid=3915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234336261613138323239666337626230383139663339636265616563 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit: BPF prog-id=180 op=LOAD Jul 16 12:20:35.935000 audit[3915]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001d7c00 items=0 ppid=3904 pid=3915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234336261613138323239666337626230383139663339636265616563 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit: BPF prog-id=181 op=LOAD Jul 16 12:20:35.935000 audit[3915]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001d7c48 items=0 ppid=3904 pid=3915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234336261613138323239666337626230383139663339636265616563 Jul 16 12:20:35.935000 audit: BPF prog-id=181 op=UNLOAD Jul 16 12:20:35.935000 audit: BPF prog-id=180 op=UNLOAD Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:35.935000 audit: BPF prog-id=182 op=LOAD Jul 16 12:20:35.935000 audit[3915]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003c0058 items=0 ppid=3904 pid=3915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:35.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234336261613138323239666337626230383139663339636265616563 Jul 16 12:20:35.942086 systemd-networkd[1034]: cali1dcf8ebfd19: Gained IPv6LL Jul 16 12:20:36.021128 env[1205]: time="2025-07-16T12:20:36.021074287Z" level=info msg="StopPodSandbox for \"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5\"" Jul 16 12:20:36.036952 env[1205]: time="2025-07-16T12:20:36.036880016Z" level=info msg="StopPodSandbox for \"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8\"" Jul 16 12:20:36.044920 env[1205]: time="2025-07-16T12:20:36.044867223Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-n6sg4,Uid:8593d450-6860-4758-9ca4-fd43459b0599,Namespace:kube-system,Attempt:1,} returns sandbox id \"5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748\"" Jul 16 12:20:36.062576 env[1205]: time="2025-07-16T12:20:36.062533618Z" level=info msg="CreateContainer within sandbox \"5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 16 12:20:36.074862 systemd-networkd[1034]: calic4029658a1f: Gained IPv6LL Jul 16 12:20:36.110712 env[1205]: time="2025-07-16T12:20:36.110668595Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-7kxwt,Uid:a9e6039e-de2d-4a1f-9793-315b7a02db3c,Namespace:kube-system,Attempt:1,} returns sandbox id \"b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2\"" Jul 16 12:20:36.124514 env[1205]: time="2025-07-16T12:20:36.124472539Z" level=info msg="CreateContainer within sandbox \"b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 16 12:20:36.183715 env[1205]: time="2025-07-16T12:20:36.177302448Z" level=info msg="CreateContainer within sandbox \"5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"c523ad8c2d4eeeaa64b93fb92b9afa56f3d899e6c6e337d09fcfb200a5d5e8c0\"" Jul 16 12:20:36.184046 env[1205]: time="2025-07-16T12:20:36.184016303Z" level=info msg="CreateContainer within sandbox \"b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"889bafcf1fb88b4dcf3f49e51e0cf697d458c9d6fb7c18801bb1be7be830b2f2\"" Jul 16 12:20:36.204973 env[1205]: time="2025-07-16T12:20:36.204935274Z" level=info msg="StartContainer for \"c523ad8c2d4eeeaa64b93fb92b9afa56f3d899e6c6e337d09fcfb200a5d5e8c0\"" Jul 16 12:20:36.224949 env[1205]: time="2025-07-16T12:20:36.224904819Z" level=info msg="StartContainer for \"889bafcf1fb88b4dcf3f49e51e0cf697d458c9d6fb7c18801bb1be7be830b2f2\"" Jul 16 12:20:36.298000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.298000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.298000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.298000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.298000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.298000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.298000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.298000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.298000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.298000 audit: BPF prog-id=183 op=LOAD Jul 16 12:20:36.298000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffeb66c3580 a2=94 a3=1 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.298000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.298000 audit: BPF prog-id=183 op=UNLOAD Jul 16 12:20:36.298000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.298000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffeb66c3650 a2=50 a3=7ffeb66c3730 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.298000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeb66c3590 a2=28 a3=0 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.321000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffeb66c35c0 a2=28 a3=0 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.321000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffeb66c34d0 a2=28 a3=0 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.321000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeb66c35e0 a2=28 a3=0 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.321000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeb66c35c0 a2=28 a3=0 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.321000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeb66c35b0 a2=28 a3=0 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.321000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeb66c35e0 a2=28 a3=0 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.321000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffeb66c35c0 a2=28 a3=0 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.321000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffeb66c35e0 a2=28 a3=0 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.321000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffeb66c35b0 a2=28 a3=0 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.321000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeb66c3620 a2=28 a3=0 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.321000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffeb66c33d0 a2=50 a3=1 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.321000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit: BPF prog-id=184 op=LOAD Jul 16 12:20:36.321000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffeb66c33d0 a2=94 a3=5 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.321000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.321000 audit: BPF prog-id=184 op=UNLOAD Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffeb66c3480 a2=50 a3=1 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.321000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffeb66c35a0 a2=4 a3=38 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.321000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.321000 audit[3933]: AVC avc: denied { confidentiality } for pid=3933 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 16 12:20:36.321000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffeb66c35f0 a2=94 a3=6 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.321000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.324000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.324000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.324000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.324000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.324000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.324000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.324000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.324000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.324000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.324000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.324000 audit[3933]: AVC avc: denied { confidentiality } for pid=3933 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 16 12:20:36.324000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffeb66c2da0 a2=94 a3=88 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.324000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.328000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.328000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.328000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.328000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.328000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.328000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.328000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.328000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.328000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.328000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.328000 audit[3933]: AVC avc: denied { confidentiality } for pid=3933 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 16 12:20:36.328000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffeb66c2da0 a2=94 a3=88 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.328000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.329000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.329000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffeb66c47d0 a2=10 a3=f8f00800 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.329000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.329000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.329000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffeb66c4670 a2=10 a3=3 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.329000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.329000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.329000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffeb66c4610 a2=10 a3=3 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.329000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.329000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.329000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffeb66c4610 a2=10 a3=7 items=0 ppid=3311 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.329000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 16 12:20:36.351405 systemd[1]: Started cri-containerd-c523ad8c2d4eeeaa64b93fb92b9afa56f3d899e6c6e337d09fcfb200a5d5e8c0.scope. Jul 16 12:20:36.389000 audit: BPF prog-id=175 op=UNLOAD Jul 16 12:20:36.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.398000 audit: BPF prog-id=185 op=LOAD Jul 16 12:20:36.398000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.398000 audit[4009]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=3858 pid=4009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.398000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335323361643863326434656565616136346239336662393262396166 Jul 16 12:20:36.398000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.398000 audit[4009]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=3858 pid=4009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.398000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335323361643863326434656565616136346239336662393262396166 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit: BPF prog-id=186 op=LOAD Jul 16 12:20:36.401000 audit[4009]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0001873b0 items=0 ppid=3858 pid=4009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335323361643863326434656565616136346239336662393262396166 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit: BPF prog-id=187 op=LOAD Jul 16 12:20:36.401000 audit[4009]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0001873f8 items=0 ppid=3858 pid=4009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335323361643863326434656565616136346239336662393262396166 Jul 16 12:20:36.401000 audit: BPF prog-id=187 op=UNLOAD Jul 16 12:20:36.401000 audit: BPF prog-id=186 op=UNLOAD Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { perfmon } for pid=4009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit[4009]: AVC avc: denied { bpf } for pid=4009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.401000 audit: BPF prog-id=188 op=LOAD Jul 16 12:20:36.401000 audit[4009]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000187808 items=0 ppid=3858 pid=4009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335323361643863326434656565616136346239336662393262396166 Jul 16 12:20:36.439475 systemd[1]: Started cri-containerd-889bafcf1fb88b4dcf3f49e51e0cf697d458c9d6fb7c18801bb1be7be830b2f2.scope. Jul 16 12:20:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.480000 audit: BPF prog-id=189 op=LOAD Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3904 pid=4010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.481000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838396261666366316662383862346463663366343965353165306366 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3904 pid=4010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.481000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838396261666366316662383862346463663366343965353165306366 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit: BPF prog-id=190 op=LOAD Jul 16 12:20:36.481000 audit[4010]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003883a0 items=0 ppid=3904 pid=4010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.481000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838396261666366316662383862346463663366343965353165306366 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit: BPF prog-id=191 op=LOAD Jul 16 12:20:36.481000 audit[4010]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003883e8 items=0 ppid=3904 pid=4010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.481000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838396261666366316662383862346463663366343965353165306366 Jul 16 12:20:36.481000 audit: BPF prog-id=191 op=UNLOAD Jul 16 12:20:36.481000 audit: BPF prog-id=190 op=UNLOAD Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.481000 audit: BPF prog-id=192 op=LOAD Jul 16 12:20:36.481000 audit[4010]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003887f8 items=0 ppid=3904 pid=4010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.481000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838396261666366316662383862346463663366343965353165306366 Jul 16 12:20:36.517627 systemd-networkd[1034]: cali86fa38fe993: Gained IPv6LL Jul 16 12:20:36.535386 env[1205]: time="2025-07-16T12:20:36.528791056Z" level=info msg="StartContainer for \"c523ad8c2d4eeeaa64b93fb92b9afa56f3d899e6c6e337d09fcfb200a5d5e8c0\" returns successfully" Jul 16 12:20:36.542497 env[1205]: time="2025-07-16T12:20:36.542456231Z" level=info msg="StartContainer for \"889bafcf1fb88b4dcf3f49e51e0cf697d458c9d6fb7c18801bb1be7be830b2f2\" returns successfully" Jul 16 12:20:36.596173 env[1205]: 2025-07-16 12:20:36.368 [INFO][3990] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" Jul 16 12:20:36.596173 env[1205]: 2025-07-16 12:20:36.375 [INFO][3990] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" iface="eth0" netns="/var/run/netns/cni-80653a72-d3c8-7d30-e4cf-f881cf2e9b08" Jul 16 12:20:36.596173 env[1205]: 2025-07-16 12:20:36.375 [INFO][3990] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" iface="eth0" netns="/var/run/netns/cni-80653a72-d3c8-7d30-e4cf-f881cf2e9b08" Jul 16 12:20:36.596173 env[1205]: 2025-07-16 12:20:36.376 [INFO][3990] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" iface="eth0" netns="/var/run/netns/cni-80653a72-d3c8-7d30-e4cf-f881cf2e9b08" Jul 16 12:20:36.596173 env[1205]: 2025-07-16 12:20:36.376 [INFO][3990] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" Jul 16 12:20:36.596173 env[1205]: 2025-07-16 12:20:36.376 [INFO][3990] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" Jul 16 12:20:36.596173 env[1205]: 2025-07-16 12:20:36.555 [INFO][4030] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" HandleID="k8s-pod-network.048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0" Jul 16 12:20:36.596173 env[1205]: 2025-07-16 12:20:36.569 [INFO][4030] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:36.596173 env[1205]: 2025-07-16 12:20:36.570 [INFO][4030] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:36.596173 env[1205]: 2025-07-16 12:20:36.583 [WARNING][4030] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" HandleID="k8s-pod-network.048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0" Jul 16 12:20:36.596173 env[1205]: 2025-07-16 12:20:36.584 [INFO][4030] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" HandleID="k8s-pod-network.048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0" Jul 16 12:20:36.596173 env[1205]: 2025-07-16 12:20:36.589 [INFO][4030] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:36.596173 env[1205]: 2025-07-16 12:20:36.593 [INFO][3990] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" Jul 16 12:20:36.602212 env[1205]: time="2025-07-16T12:20:36.602167781Z" level=info msg="TearDown network for sandbox \"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8\" successfully" Jul 16 12:20:36.602329 env[1205]: time="2025-07-16T12:20:36.602309541Z" level=info msg="StopPodSandbox for \"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8\" returns successfully" Jul 16 12:20:36.603219 env[1205]: time="2025-07-16T12:20:36.603189692Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6c568f6db7-r8npm,Uid:a054c48d-9afd-4483-81bd-e5d032ec6f4b,Namespace:calico-system,Attempt:1,}" Jul 16 12:20:36.644502 env[1205]: 2025-07-16 12:20:36.405 [INFO][3983] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" Jul 16 12:20:36.644502 env[1205]: 2025-07-16 12:20:36.405 [INFO][3983] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" iface="eth0" netns="/var/run/netns/cni-88d91621-df73-2a17-564d-0ce935085610" Jul 16 12:20:36.644502 env[1205]: 2025-07-16 12:20:36.406 [INFO][3983] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" iface="eth0" netns="/var/run/netns/cni-88d91621-df73-2a17-564d-0ce935085610" Jul 16 12:20:36.644502 env[1205]: 2025-07-16 12:20:36.406 [INFO][3983] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" iface="eth0" netns="/var/run/netns/cni-88d91621-df73-2a17-564d-0ce935085610" Jul 16 12:20:36.644502 env[1205]: 2025-07-16 12:20:36.406 [INFO][3983] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" Jul 16 12:20:36.644502 env[1205]: 2025-07-16 12:20:36.406 [INFO][3983] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" Jul 16 12:20:36.644502 env[1205]: 2025-07-16 12:20:36.577 [INFO][4042] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" HandleID="k8s-pod-network.69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" Workload="srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0" Jul 16 12:20:36.644502 env[1205]: 2025-07-16 12:20:36.578 [INFO][4042] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:36.644502 env[1205]: 2025-07-16 12:20:36.589 [INFO][4042] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:36.644502 env[1205]: 2025-07-16 12:20:36.609 [WARNING][4042] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" HandleID="k8s-pod-network.69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" Workload="srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0" Jul 16 12:20:36.644502 env[1205]: 2025-07-16 12:20:36.609 [INFO][4042] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" HandleID="k8s-pod-network.69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" Workload="srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0" Jul 16 12:20:36.644502 env[1205]: 2025-07-16 12:20:36.626 [INFO][4042] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:36.644502 env[1205]: 2025-07-16 12:20:36.630 [INFO][3983] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" Jul 16 12:20:36.645316 env[1205]: time="2025-07-16T12:20:36.645268323Z" level=info msg="TearDown network for sandbox \"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5\" successfully" Jul 16 12:20:36.645504 env[1205]: time="2025-07-16T12:20:36.645485111Z" level=info msg="StopPodSandbox for \"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5\" returns successfully" Jul 16 12:20:36.648414 env[1205]: time="2025-07-16T12:20:36.646359671Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-v4b2s,Uid:4a5efb8c-684a-4214-9e4c-7f907cf4218d,Namespace:calico-system,Attempt:1,}" Jul 16 12:20:36.667449 systemd[1]: run-netns-cni\x2d88d91621\x2ddf73\x2d2a17\x2d564d\x2d0ce935085610.mount: Deactivated successfully. Jul 16 12:20:36.667601 systemd[1]: run-netns-cni\x2d80653a72\x2dd3c8\x2d7d30\x2de4cf\x2df881cf2e9b08.mount: Deactivated successfully. Jul 16 12:20:36.720796 env[1205]: time="2025-07-16T12:20:36.720681394Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:36.726864 env[1205]: time="2025-07-16T12:20:36.726777967Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:36.731786 env[1205]: time="2025-07-16T12:20:36.731751645Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:36.738608 env[1205]: time="2025-07-16T12:20:36.738570894Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:36.739549 env[1205]: time="2025-07-16T12:20:36.739518643Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954\"" Jul 16 12:20:36.748545 env[1205]: time="2025-07-16T12:20:36.748506831Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 16 12:20:36.754419 env[1205]: time="2025-07-16T12:20:36.753419745Z" level=info msg="CreateContainer within sandbox \"3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 16 12:20:36.770032 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount574158453.mount: Deactivated successfully. Jul 16 12:20:36.784409 env[1205]: time="2025-07-16T12:20:36.783957452Z" level=info msg="CreateContainer within sandbox \"3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"71c51e391f0631e477138219dcd4a59a960ac70c25d9c623960a16d5c6245b48\"" Jul 16 12:20:36.787314 env[1205]: time="2025-07-16T12:20:36.786379065Z" level=info msg="StartContainer for \"71c51e391f0631e477138219dcd4a59a960ac70c25d9c623960a16d5c6245b48\"" Jul 16 12:20:36.823468 kernel: kauditd_printk_skb: 1045 callbacks suppressed Jul 16 12:20:36.824036 kernel: audit: type=1400 audit(1752668436.819:1270): avc: denied { getattr } for pid=4023 comm="coredns" path="cgroup:[4026532485]" dev="nsfs" ino=4026532485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c354,c717 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 16 12:20:36.819000 audit[4023]: AVC avc: denied { getattr } for pid=4023 comm="coredns" path="cgroup:[4026532485]" dev="nsfs" ino=4026532485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c354,c717 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 16 12:20:36.819000 audit[4023]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a510 a2=c00012ab98 a3=0 items=0 ppid=3858 pid=4023 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c354,c717 key=(null) Jul 16 12:20:36.830517 kernel: audit: type=1300 audit(1752668436.819:1270): arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a510 a2=c00012ab98 a3=0 items=0 ppid=3858 pid=4023 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c354,c717 key=(null) Jul 16 12:20:36.830604 kernel: audit: type=1327 audit(1752668436.819:1270): proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 16 12:20:36.819000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 16 12:20:36.831066 kernel: audit: type=1400 audit(1752668436.820:1271): avc: denied { getattr } for pid=4058 comm="coredns" path="cgroup:[4026532486]" dev="nsfs" ino=4026532486 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c859 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 16 12:20:36.820000 audit[4058]: AVC avc: denied { getattr } for pid=4058 comm="coredns" path="cgroup:[4026532486]" dev="nsfs" ino=4026532486 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c859 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 16 12:20:36.820000 audit[4058]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c0001964b0 a2=c0004f9a38 a3=0 items=0 ppid=3904 pid=4058 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c859 key=(null) Jul 16 12:20:36.842969 kernel: audit: type=1300 audit(1752668436.820:1271): arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c0001964b0 a2=c0004f9a38 a3=0 items=0 ppid=3904 pid=4058 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c859 key=(null) Jul 16 12:20:36.854412 kernel: audit: type=1327 audit(1752668436.820:1271): proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 16 12:20:36.820000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 16 12:20:36.898068 systemd[1]: Started cri-containerd-71c51e391f0631e477138219dcd4a59a960ac70c25d9c623960a16d5c6245b48.scope. Jul 16 12:20:36.966747 systemd-networkd[1034]: cali26141c7611b: Gained IPv6LL Jul 16 12:20:36.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.972443 kernel: audit: type=1400 audit(1752668436.967:1272): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.976645 kernel: audit: type=1400 audit(1752668436.967:1273): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.980392 kernel: audit: type=1400 audit(1752668436.967:1274): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.985387 kernel: audit: type=1400 audit(1752668436.967:1275): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.967000 audit: BPF prog-id=193 op=LOAD Jul 16 12:20:36.970000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.970000 audit[4133]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3450 pid=4133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.970000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731633531653339316630363331653437373133383231396463643461 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3450 pid=4133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.971000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731633531653339316630363331653437373133383231396463643461 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit: BPF prog-id=194 op=LOAD Jul 16 12:20:36.971000 audit[4133]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00034bd00 items=0 ppid=3450 pid=4133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.971000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731633531653339316630363331653437373133383231396463643461 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit: BPF prog-id=195 op=LOAD Jul 16 12:20:36.971000 audit[4133]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00034bd48 items=0 ppid=3450 pid=4133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.971000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731633531653339316630363331653437373133383231396463643461 Jul 16 12:20:36.971000 audit: BPF prog-id=195 op=UNLOAD Jul 16 12:20:36.971000 audit: BPF prog-id=194 op=UNLOAD Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:36.971000 audit: BPF prog-id=196 op=LOAD Jul 16 12:20:36.971000 audit[4133]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003c6158 items=0 ppid=3450 pid=4133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:36.971000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731633531653339316630363331653437373133383231396463643461 Jul 16 12:20:37.023298 systemd-networkd[1034]: cali14f3dce92eb: Link UP Jul 16 12:20:37.030042 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali14f3dce92eb: link becomes ready Jul 16 12:20:37.028968 systemd-networkd[1034]: cali14f3dce92eb: Gained carrier Jul 16 12:20:37.061121 env[1205]: 2025-07-16 12:20:36.697 [INFO][4095] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0 calico-kube-controllers-6c568f6db7- calico-system a054c48d-9afd-4483-81bd-e5d032ec6f4b 983 0 2025-07-16 12:20:08 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:6c568f6db7 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s srv-frvg8.gb1.brightbox.com calico-kube-controllers-6c568f6db7-r8npm eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali14f3dce92eb [] [] }} ContainerID="9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682" Namespace="calico-system" Pod="calico-kube-controllers-6c568f6db7-r8npm" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-" Jul 16 12:20:37.061121 env[1205]: 2025-07-16 12:20:36.698 [INFO][4095] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682" Namespace="calico-system" Pod="calico-kube-controllers-6c568f6db7-r8npm" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0" Jul 16 12:20:37.061121 env[1205]: 2025-07-16 12:20:36.922 [INFO][4120] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682" HandleID="k8s-pod-network.9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0" Jul 16 12:20:37.061121 env[1205]: 2025-07-16 12:20:36.922 [INFO][4120] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682" HandleID="k8s-pod-network.9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000304780), Attrs:map[string]string{"namespace":"calico-system", "node":"srv-frvg8.gb1.brightbox.com", "pod":"calico-kube-controllers-6c568f6db7-r8npm", "timestamp":"2025-07-16 12:20:36.918088558 +0000 UTC"}, Hostname:"srv-frvg8.gb1.brightbox.com", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 16 12:20:37.061121 env[1205]: 2025-07-16 12:20:36.922 [INFO][4120] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:37.061121 env[1205]: 2025-07-16 12:20:36.922 [INFO][4120] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:37.061121 env[1205]: 2025-07-16 12:20:36.922 [INFO][4120] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'srv-frvg8.gb1.brightbox.com' Jul 16 12:20:37.061121 env[1205]: 2025-07-16 12:20:36.934 [INFO][4120] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:37.061121 env[1205]: 2025-07-16 12:20:36.942 [INFO][4120] ipam/ipam.go 394: Looking up existing affinities for host host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:37.061121 env[1205]: 2025-07-16 12:20:36.957 [INFO][4120] ipam/ipam.go 511: Trying affinity for 192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:37.061121 env[1205]: 2025-07-16 12:20:36.963 [INFO][4120] ipam/ipam.go 158: Attempting to load block cidr=192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:37.061121 env[1205]: 2025-07-16 12:20:36.981 [INFO][4120] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:37.061121 env[1205]: 2025-07-16 12:20:36.981 [INFO][4120] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.105.192/26 handle="k8s-pod-network.9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:37.061121 env[1205]: 2025-07-16 12:20:36.990 [INFO][4120] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682 Jul 16 12:20:37.061121 env[1205]: 2025-07-16 12:20:36.996 [INFO][4120] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.105.192/26 handle="k8s-pod-network.9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:37.061121 env[1205]: 2025-07-16 12:20:37.004 [INFO][4120] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.105.199/26] block=192.168.105.192/26 handle="k8s-pod-network.9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:37.061121 env[1205]: 2025-07-16 12:20:37.004 [INFO][4120] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.105.199/26] handle="k8s-pod-network.9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:37.061121 env[1205]: 2025-07-16 12:20:37.004 [INFO][4120] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:37.061121 env[1205]: 2025-07-16 12:20:37.004 [INFO][4120] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.105.199/26] IPv6=[] ContainerID="9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682" HandleID="k8s-pod-network.9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0" Jul 16 12:20:37.062693 env[1205]: 2025-07-16 12:20:37.007 [INFO][4095] cni-plugin/k8s.go 418: Populated endpoint ContainerID="9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682" Namespace="calico-system" Pod="calico-kube-controllers-6c568f6db7-r8npm" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0", GenerateName:"calico-kube-controllers-6c568f6db7-", Namespace:"calico-system", SelfLink:"", UID:"a054c48d-9afd-4483-81bd-e5d032ec6f4b", ResourceVersion:"983", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6c568f6db7", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"", Pod:"calico-kube-controllers-6c568f6db7-r8npm", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.105.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali14f3dce92eb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:37.062693 env[1205]: 2025-07-16 12:20:37.007 [INFO][4095] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.105.199/32] ContainerID="9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682" Namespace="calico-system" Pod="calico-kube-controllers-6c568f6db7-r8npm" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0" Jul 16 12:20:37.062693 env[1205]: 2025-07-16 12:20:37.007 [INFO][4095] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali14f3dce92eb ContainerID="9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682" Namespace="calico-system" Pod="calico-kube-controllers-6c568f6db7-r8npm" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0" Jul 16 12:20:37.062693 env[1205]: 2025-07-16 12:20:37.034 [INFO][4095] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682" Namespace="calico-system" Pod="calico-kube-controllers-6c568f6db7-r8npm" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0" Jul 16 12:20:37.062693 env[1205]: 2025-07-16 12:20:37.034 [INFO][4095] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682" Namespace="calico-system" Pod="calico-kube-controllers-6c568f6db7-r8npm" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0", GenerateName:"calico-kube-controllers-6c568f6db7-", Namespace:"calico-system", SelfLink:"", UID:"a054c48d-9afd-4483-81bd-e5d032ec6f4b", ResourceVersion:"983", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6c568f6db7", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682", Pod:"calico-kube-controllers-6c568f6db7-r8npm", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.105.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali14f3dce92eb", MAC:"72:1a:66:b2:93:a3", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:37.062693 env[1205]: 2025-07-16 12:20:37.058 [INFO][4095] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682" Namespace="calico-system" Pod="calico-kube-controllers-6c568f6db7-r8npm" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0" Jul 16 12:20:37.085777 env[1205]: time="2025-07-16T12:20:37.085686570Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 16 12:20:37.085777 env[1205]: time="2025-07-16T12:20:37.085779902Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 16 12:20:37.085984 env[1205]: time="2025-07-16T12:20:37.085804539Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 16 12:20:37.086422 env[1205]: time="2025-07-16T12:20:37.086343861Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682 pid=4189 runtime=io.containerd.runc.v2 Jul 16 12:20:37.093719 systemd-networkd[1034]: calic2aacc2f376: Gained IPv6LL Jul 16 12:20:37.126423 systemd[1]: Started cri-containerd-9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682.scope. Jul 16 12:20:37.156000 audit[4169]: NETFILTER_CFG table=nat:101 family=2 entries=15 op=nft_register_chain pid=4169 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 16 12:20:37.156000 audit[4169]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffe68437570 a2=0 a3=7ffe6843755c items=0 ppid=3311 pid=4169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:37.156000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 16 12:20:37.159000 audit[4158]: NETFILTER_CFG table=raw:102 family=2 entries=21 op=nft_register_chain pid=4158 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 16 12:20:37.159000 audit[4158]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffdc8572e20 a2=0 a3=7ffdc8572e0c items=0 ppid=3311 pid=4158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:37.159000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 16 12:20:37.164000 audit[4213]: NETFILTER_CFG table=mangle:103 family=2 entries=16 op=nft_register_chain pid=4213 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 16 12:20:37.164000 audit[4213]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffc1e3bbb90 a2=0 a3=7ffc1e3bbb7c items=0 ppid=3311 pid=4213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:37.164000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 16 12:20:37.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.193000 audit: BPF prog-id=197 op=LOAD Jul 16 12:20:37.194000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.194000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4189 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:37.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963663936613361313337633465346239356238343039373366386433 Jul 16 12:20:37.205000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.205000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4189 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:37.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963663936613361313337633465346239356238343039373366386433 Jul 16 12:20:37.205000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.205000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.205000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.205000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.205000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.205000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.205000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.205000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.205000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.205000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.205000 audit: BPF prog-id=198 op=LOAD Jul 16 12:20:37.205000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003e87f0 items=0 ppid=4189 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:37.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963663936613361313337633465346239356238343039373366386433 Jul 16 12:20:37.210000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.210000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.210000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.210000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.210000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.210000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.210000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.210000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.216752 env[1205]: time="2025-07-16T12:20:37.212885319Z" level=info msg="StartContainer for \"71c51e391f0631e477138219dcd4a59a960ac70c25d9c623960a16d5c6245b48\" returns successfully" Jul 16 12:20:37.210000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.210000 audit: BPF prog-id=199 op=LOAD Jul 16 12:20:37.210000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003e8838 items=0 ppid=4189 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:37.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963663936613361313337633465346239356238343039373366386433 Jul 16 12:20:37.218000 audit: BPF prog-id=199 op=UNLOAD Jul 16 12:20:37.218000 audit: BPF prog-id=198 op=UNLOAD Jul 16 12:20:37.219000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.219000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.219000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.219000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.219000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.219000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.219000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.219000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.219000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.219000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.219000 audit: BPF prog-id=200 op=LOAD Jul 16 12:20:37.219000 audit[4201]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003e8c48 items=0 ppid=4189 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:37.219000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963663936613361313337633465346239356238343039373366386433 Jul 16 12:20:37.221637 systemd-networkd[1034]: cali00db1ea0a18: Link UP Jul 16 12:20:37.235406 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 16 12:20:37.235514 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali00db1ea0a18: link becomes ready Jul 16 12:20:37.231257 systemd-networkd[1034]: cali00db1ea0a18: Gained carrier Jul 16 12:20:37.189000 audit[4207]: NETFILTER_CFG table=filter:104 family=2 entries=200 op=nft_register_chain pid=4207 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 16 12:20:37.189000 audit[4207]: SYSCALL arch=c000003e syscall=46 success=yes exit=119252 a0=3 a1=7ffdd808bd30 a2=0 a3=7ffdd808bd1c items=0 ppid=3311 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:37.189000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 16 12:20:37.256493 env[1205]: 2025-07-16 12:20:36.850 [INFO][4108] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0 csi-node-driver- calico-system 4a5efb8c-684a-4214-9e4c-7f907cf4218d 984 0 2025-07-16 12:20:07 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s srv-frvg8.gb1.brightbox.com csi-node-driver-v4b2s eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali00db1ea0a18 [] [] }} ContainerID="4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21" Namespace="calico-system" Pod="csi-node-driver-v4b2s" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-" Jul 16 12:20:37.256493 env[1205]: 2025-07-16 12:20:36.851 [INFO][4108] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21" Namespace="calico-system" Pod="csi-node-driver-v4b2s" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0" Jul 16 12:20:37.256493 env[1205]: 2025-07-16 12:20:36.954 [INFO][4150] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21" HandleID="k8s-pod-network.4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21" Workload="srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0" Jul 16 12:20:37.256493 env[1205]: 2025-07-16 12:20:36.958 [INFO][4150] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21" HandleID="k8s-pod-network.4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21" Workload="srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd600), Attrs:map[string]string{"namespace":"calico-system", "node":"srv-frvg8.gb1.brightbox.com", "pod":"csi-node-driver-v4b2s", "timestamp":"2025-07-16 12:20:36.954703931 +0000 UTC"}, Hostname:"srv-frvg8.gb1.brightbox.com", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 16 12:20:37.256493 env[1205]: 2025-07-16 12:20:36.958 [INFO][4150] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:37.256493 env[1205]: 2025-07-16 12:20:37.004 [INFO][4150] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:37.256493 env[1205]: 2025-07-16 12:20:37.004 [INFO][4150] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'srv-frvg8.gb1.brightbox.com' Jul 16 12:20:37.256493 env[1205]: 2025-07-16 12:20:37.062 [INFO][4150] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:37.256493 env[1205]: 2025-07-16 12:20:37.110 [INFO][4150] ipam/ipam.go 394: Looking up existing affinities for host host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:37.256493 env[1205]: 2025-07-16 12:20:37.126 [INFO][4150] ipam/ipam.go 511: Trying affinity for 192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:37.256493 env[1205]: 2025-07-16 12:20:37.130 [INFO][4150] ipam/ipam.go 158: Attempting to load block cidr=192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:37.256493 env[1205]: 2025-07-16 12:20:37.135 [INFO][4150] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:37.256493 env[1205]: 2025-07-16 12:20:37.135 [INFO][4150] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.105.192/26 handle="k8s-pod-network.4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:37.256493 env[1205]: 2025-07-16 12:20:37.139 [INFO][4150] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21 Jul 16 12:20:37.256493 env[1205]: 2025-07-16 12:20:37.181 [INFO][4150] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.105.192/26 handle="k8s-pod-network.4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:37.256493 env[1205]: 2025-07-16 12:20:37.199 [INFO][4150] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.105.200/26] block=192.168.105.192/26 handle="k8s-pod-network.4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:37.256493 env[1205]: 2025-07-16 12:20:37.199 [INFO][4150] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.105.200/26] handle="k8s-pod-network.4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:37.256493 env[1205]: 2025-07-16 12:20:37.199 [INFO][4150] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:37.256493 env[1205]: 2025-07-16 12:20:37.199 [INFO][4150] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.105.200/26] IPv6=[] ContainerID="4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21" HandleID="k8s-pod-network.4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21" Workload="srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0" Jul 16 12:20:37.257326 env[1205]: 2025-07-16 12:20:37.201 [INFO][4108] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21" Namespace="calico-system" Pod="csi-node-driver-v4b2s" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"4a5efb8c-684a-4214-9e4c-7f907cf4218d", ResourceVersion:"984", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"", Pod:"csi-node-driver-v4b2s", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.105.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali00db1ea0a18", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:37.257326 env[1205]: 2025-07-16 12:20:37.201 [INFO][4108] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.105.200/32] ContainerID="4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21" Namespace="calico-system" Pod="csi-node-driver-v4b2s" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0" Jul 16 12:20:37.257326 env[1205]: 2025-07-16 12:20:37.201 [INFO][4108] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali00db1ea0a18 ContainerID="4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21" Namespace="calico-system" Pod="csi-node-driver-v4b2s" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0" Jul 16 12:20:37.257326 env[1205]: 2025-07-16 12:20:37.233 [INFO][4108] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21" Namespace="calico-system" Pod="csi-node-driver-v4b2s" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0" Jul 16 12:20:37.257326 env[1205]: 2025-07-16 12:20:37.234 [INFO][4108] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21" Namespace="calico-system" Pod="csi-node-driver-v4b2s" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"4a5efb8c-684a-4214-9e4c-7f907cf4218d", ResourceVersion:"984", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21", Pod:"csi-node-driver-v4b2s", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.105.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali00db1ea0a18", MAC:"c6:8e:a7:69:f1:7b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:37.257326 env[1205]: 2025-07-16 12:20:37.254 [INFO][4108] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21" Namespace="calico-system" Pod="csi-node-driver-v4b2s" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0" Jul 16 12:20:37.277218 env[1205]: time="2025-07-16T12:20:37.277148496Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 16 12:20:37.277471 env[1205]: time="2025-07-16T12:20:37.277444073Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 16 12:20:37.277583 env[1205]: time="2025-07-16T12:20:37.277562470Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 16 12:20:37.277947 env[1205]: time="2025-07-16T12:20:37.277905772Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21 pid=4249 runtime=io.containerd.runc.v2 Jul 16 12:20:37.303781 systemd[1]: Started cri-containerd-4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21.scope. Jul 16 12:20:37.332000 audit[4163]: AVC avc: denied { search } for pid=4163 comm="nginx" name="crypto" dev="proc" ino=33203 scontext=system_u:system_r:svirt_lxc_net_t:s0:c193,c497 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 16 12:20:37.332000 audit[4163]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fa6af2ad728 a2=0 a3=0 items=0 ppid=3450 pid=4163 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c193,c497 key=(null) Jul 16 12:20:37.332000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 16 12:20:37.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.339000 audit: BPF prog-id=201 op=LOAD Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4249 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:37.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465666637666435386161393164656664633063616238383832316561 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4249 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:37.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465666637666435386161393164656664633063616238383832316561 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit: BPF prog-id=202 op=LOAD Jul 16 12:20:37.343000 audit[4261]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0001dd2f0 items=0 ppid=4249 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:37.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465666637666435386161393164656664633063616238383832316561 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit: BPF prog-id=203 op=LOAD Jul 16 12:20:37.343000 audit[4261]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0001dd338 items=0 ppid=4249 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:37.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465666637666435386161393164656664633063616238383832316561 Jul 16 12:20:37.343000 audit: BPF prog-id=203 op=UNLOAD Jul 16 12:20:37.343000 audit: BPF prog-id=202 op=UNLOAD Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:37.343000 audit: BPF prog-id=204 op=LOAD Jul 16 12:20:37.343000 audit[4261]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0001dd748 items=0 ppid=4249 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:37.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465666637666435386161393164656664633063616238383832316561 Jul 16 12:20:37.388240 env[1205]: time="2025-07-16T12:20:37.388193084Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6c568f6db7-r8npm,Uid:a054c48d-9afd-4483-81bd-e5d032ec6f4b,Namespace:calico-system,Attempt:1,} returns sandbox id \"9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682\"" Jul 16 12:20:37.396109 env[1205]: time="2025-07-16T12:20:37.396060384Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-v4b2s,Uid:4a5efb8c-684a-4214-9e4c-7f907cf4218d,Namespace:calico-system,Attempt:1,} returns sandbox id \"4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21\"" Jul 16 12:20:37.412000 audit[4291]: NETFILTER_CFG table=filter:105 family=2 entries=148 op=nft_register_chain pid=4291 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 16 12:20:37.412000 audit[4291]: SYSCALL arch=c000003e syscall=46 success=yes exit=80244 a0=3 a1=7fffc18192c0 a2=0 a3=7fffc18192ac items=0 ppid=3311 pid=4291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:37.412000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 16 12:20:37.416583 kubelet[2009]: I0716 12:20:37.416478 2009 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-7kxwt" podStartSLOduration=46.400250967 podStartE2EDuration="46.400250967s" podCreationTimestamp="2025-07-16 12:19:51 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-16 12:20:37.400158972 +0000 UTC m=+51.714918713" watchObservedRunningTime="2025-07-16 12:20:37.400250967 +0000 UTC m=+51.715010729" Jul 16 12:20:37.417208 kubelet[2009]: I0716 12:20:37.417089 2009 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-n6sg4" podStartSLOduration=46.417075523 podStartE2EDuration="46.417075523s" podCreationTimestamp="2025-07-16 12:19:51 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-16 12:20:37.378494358 +0000 UTC m=+51.693254124" watchObservedRunningTime="2025-07-16 12:20:37.417075523 +0000 UTC m=+51.731835288" Jul 16 12:20:37.440000 audit[4298]: NETFILTER_CFG table=filter:106 family=2 entries=20 op=nft_register_rule pid=4298 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:37.440000 audit[4298]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffefb1406e0 a2=0 a3=7ffefb1406cc items=0 ppid=2161 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:37.440000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:37.445000 audit[4298]: NETFILTER_CFG table=nat:107 family=2 entries=14 op=nft_register_rule pid=4298 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:37.445000 audit[4298]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffefb1406e0 a2=0 a3=0 items=0 ppid=2161 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:37.445000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:37.468000 audit[4300]: NETFILTER_CFG table=filter:108 family=2 entries=20 op=nft_register_rule pid=4300 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:37.468000 audit[4300]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffff2bb4de0 a2=0 a3=7ffff2bb4dcc items=0 ppid=2161 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:37.468000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:37.473000 audit[4300]: NETFILTER_CFG table=nat:109 family=2 entries=14 op=nft_register_rule pid=4300 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:37.473000 audit[4300]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffff2bb4de0 a2=0 a3=0 items=0 ppid=2161 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:37.473000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:37.477795 systemd-networkd[1034]: vxlan.calico: Gained IPv6LL Jul 16 12:20:37.736228 systemd-networkd[1034]: calic4efd9635b4: Gained IPv6LL Jul 16 12:20:37.787530 kubelet[2009]: I0716 12:20:37.787484 2009 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 16 12:20:37.850402 systemd[1]: run-containerd-runc-k8s.io-1faa39897f9455b2e07e74b0e2616aacb515b2dec24d703169cafbe30583400b-runc.bS3LXQ.mount: Deactivated successfully. Jul 16 12:20:38.570000 audit[4348]: NETFILTER_CFG table=filter:110 family=2 entries=17 op=nft_register_rule pid=4348 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:38.570000 audit[4348]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd6dcb1240 a2=0 a3=7ffd6dcb122c items=0 ppid=2161 pid=4348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:38.570000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:38.575000 audit[4348]: NETFILTER_CFG table=nat:111 family=2 entries=35 op=nft_register_chain pid=4348 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:38.575000 audit[4348]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffd6dcb1240 a2=0 a3=7ffd6dcb122c items=0 ppid=2161 pid=4348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:38.575000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:38.665131 systemd[1]: run-containerd-runc-k8s.io-1faa39897f9455b2e07e74b0e2616aacb515b2dec24d703169cafbe30583400b-runc.pm0YEV.mount: Deactivated successfully. Jul 16 12:20:38.757729 systemd-networkd[1034]: cali00db1ea0a18: Gained IPv6LL Jul 16 12:20:38.821637 systemd-networkd[1034]: cali14f3dce92eb: Gained IPv6LL Jul 16 12:20:39.058360 env[1205]: time="2025-07-16T12:20:39.058312852Z" level=info msg="StopPodSandbox for \"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1\"" Jul 16 12:20:39.378464 env[1205]: 2025-07-16 12:20:39.287 [INFO][4359] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" Jul 16 12:20:39.378464 env[1205]: 2025-07-16 12:20:39.287 [INFO][4359] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" iface="eth0" netns="/var/run/netns/cni-dd57e019-98e4-fcfc-c7ca-5d09dd9683c5" Jul 16 12:20:39.378464 env[1205]: 2025-07-16 12:20:39.288 [INFO][4359] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" iface="eth0" netns="/var/run/netns/cni-dd57e019-98e4-fcfc-c7ca-5d09dd9683c5" Jul 16 12:20:39.378464 env[1205]: 2025-07-16 12:20:39.289 [INFO][4359] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" iface="eth0" netns="/var/run/netns/cni-dd57e019-98e4-fcfc-c7ca-5d09dd9683c5" Jul 16 12:20:39.378464 env[1205]: 2025-07-16 12:20:39.289 [INFO][4359] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" Jul 16 12:20:39.378464 env[1205]: 2025-07-16 12:20:39.289 [INFO][4359] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" Jul 16 12:20:39.378464 env[1205]: 2025-07-16 12:20:39.357 [INFO][4366] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" HandleID="k8s-pod-network.24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" Workload="srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0" Jul 16 12:20:39.378464 env[1205]: 2025-07-16 12:20:39.357 [INFO][4366] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:39.378464 env[1205]: 2025-07-16 12:20:39.357 [INFO][4366] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:39.378464 env[1205]: 2025-07-16 12:20:39.364 [WARNING][4366] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" HandleID="k8s-pod-network.24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" Workload="srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0" Jul 16 12:20:39.378464 env[1205]: 2025-07-16 12:20:39.364 [INFO][4366] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" HandleID="k8s-pod-network.24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" Workload="srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0" Jul 16 12:20:39.378464 env[1205]: 2025-07-16 12:20:39.366 [INFO][4366] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:39.378464 env[1205]: 2025-07-16 12:20:39.374 [INFO][4359] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" Jul 16 12:20:39.381888 systemd[1]: run-netns-cni\x2ddd57e019\x2d98e4\x2dfcfc\x2dc7ca\x2d5d09dd9683c5.mount: Deactivated successfully. Jul 16 12:20:39.385314 env[1205]: time="2025-07-16T12:20:39.385274188Z" level=info msg="TearDown network for sandbox \"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1\" successfully" Jul 16 12:20:39.385448 env[1205]: time="2025-07-16T12:20:39.385429602Z" level=info msg="StopPodSandbox for \"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1\" returns successfully" Jul 16 12:20:39.399703 env[1205]: time="2025-07-16T12:20:39.399661751Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-ttxxf,Uid:3c9d3cc7-b97b-4b96-a498-6d46ca24e031,Namespace:calico-system,Attempt:1,}" Jul 16 12:20:39.789994 systemd-networkd[1034]: cali1342ca10d08: Link UP Jul 16 12:20:39.794907 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 16 12:20:39.795012 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1342ca10d08: link becomes ready Jul 16 12:20:39.793585 systemd-networkd[1034]: cali1342ca10d08: Gained carrier Jul 16 12:20:39.866716 env[1205]: 2025-07-16 12:20:39.509 [INFO][4373] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0 goldmane-768f4c5c69- calico-system 3c9d3cc7-b97b-4b96-a498-6d46ca24e031 1025 0 2025-07-16 12:20:07 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s srv-frvg8.gb1.brightbox.com goldmane-768f4c5c69-ttxxf eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali1342ca10d08 [] [] }} ContainerID="354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a" Namespace="calico-system" Pod="goldmane-768f4c5c69-ttxxf" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-" Jul 16 12:20:39.866716 env[1205]: 2025-07-16 12:20:39.509 [INFO][4373] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a" Namespace="calico-system" Pod="goldmane-768f4c5c69-ttxxf" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0" Jul 16 12:20:39.866716 env[1205]: 2025-07-16 12:20:39.611 [INFO][4384] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a" HandleID="k8s-pod-network.354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a" Workload="srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0" Jul 16 12:20:39.866716 env[1205]: 2025-07-16 12:20:39.614 [INFO][4384] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a" HandleID="k8s-pod-network.354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a" Workload="srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000251610), Attrs:map[string]string{"namespace":"calico-system", "node":"srv-frvg8.gb1.brightbox.com", "pod":"goldmane-768f4c5c69-ttxxf", "timestamp":"2025-07-16 12:20:39.611687527 +0000 UTC"}, Hostname:"srv-frvg8.gb1.brightbox.com", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 16 12:20:39.866716 env[1205]: 2025-07-16 12:20:39.614 [INFO][4384] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:39.866716 env[1205]: 2025-07-16 12:20:39.614 [INFO][4384] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:39.866716 env[1205]: 2025-07-16 12:20:39.614 [INFO][4384] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'srv-frvg8.gb1.brightbox.com' Jul 16 12:20:39.866716 env[1205]: 2025-07-16 12:20:39.636 [INFO][4384] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:39.866716 env[1205]: 2025-07-16 12:20:39.660 [INFO][4384] ipam/ipam.go 394: Looking up existing affinities for host host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:39.866716 env[1205]: 2025-07-16 12:20:39.679 [INFO][4384] ipam/ipam.go 511: Trying affinity for 192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:39.866716 env[1205]: 2025-07-16 12:20:39.683 [INFO][4384] ipam/ipam.go 158: Attempting to load block cidr=192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:39.866716 env[1205]: 2025-07-16 12:20:39.686 [INFO][4384] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:39.866716 env[1205]: 2025-07-16 12:20:39.686 [INFO][4384] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.105.192/26 handle="k8s-pod-network.354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:39.866716 env[1205]: 2025-07-16 12:20:39.727 [INFO][4384] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a Jul 16 12:20:39.866716 env[1205]: 2025-07-16 12:20:39.745 [INFO][4384] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.105.192/26 handle="k8s-pod-network.354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:39.866716 env[1205]: 2025-07-16 12:20:39.780 [INFO][4384] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.105.201/26] block=192.168.105.192/26 handle="k8s-pod-network.354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:39.866716 env[1205]: 2025-07-16 12:20:39.780 [INFO][4384] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.105.201/26] handle="k8s-pod-network.354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:20:39.866716 env[1205]: 2025-07-16 12:20:39.780 [INFO][4384] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:39.866716 env[1205]: 2025-07-16 12:20:39.780 [INFO][4384] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.105.201/26] IPv6=[] ContainerID="354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a" HandleID="k8s-pod-network.354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a" Workload="srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0" Jul 16 12:20:39.869188 env[1205]: 2025-07-16 12:20:39.785 [INFO][4373] cni-plugin/k8s.go 418: Populated endpoint ContainerID="354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a" Namespace="calico-system" Pod="goldmane-768f4c5c69-ttxxf" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"3c9d3cc7-b97b-4b96-a498-6d46ca24e031", ResourceVersion:"1025", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"", Pod:"goldmane-768f4c5c69-ttxxf", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.105.201/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali1342ca10d08", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:39.869188 env[1205]: 2025-07-16 12:20:39.785 [INFO][4373] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.105.201/32] ContainerID="354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a" Namespace="calico-system" Pod="goldmane-768f4c5c69-ttxxf" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0" Jul 16 12:20:39.869188 env[1205]: 2025-07-16 12:20:39.785 [INFO][4373] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali1342ca10d08 ContainerID="354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a" Namespace="calico-system" Pod="goldmane-768f4c5c69-ttxxf" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0" Jul 16 12:20:39.869188 env[1205]: 2025-07-16 12:20:39.797 [INFO][4373] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a" Namespace="calico-system" Pod="goldmane-768f4c5c69-ttxxf" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0" Jul 16 12:20:39.869188 env[1205]: 2025-07-16 12:20:39.797 [INFO][4373] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a" Namespace="calico-system" Pod="goldmane-768f4c5c69-ttxxf" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"3c9d3cc7-b97b-4b96-a498-6d46ca24e031", ResourceVersion:"1025", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a", Pod:"goldmane-768f4c5c69-ttxxf", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.105.201/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali1342ca10d08", MAC:"96:10:1a:34:8d:6b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:39.869188 env[1205]: 2025-07-16 12:20:39.864 [INFO][4373] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a" Namespace="calico-system" Pod="goldmane-768f4c5c69-ttxxf" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0" Jul 16 12:20:39.964644 env[1205]: time="2025-07-16T12:20:39.960438793Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 16 12:20:39.964644 env[1205]: time="2025-07-16T12:20:39.960525752Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 16 12:20:39.964644 env[1205]: time="2025-07-16T12:20:39.960538474Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 16 12:20:39.964644 env[1205]: time="2025-07-16T12:20:39.960689860Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a pid=4405 runtime=io.containerd.runc.v2 Jul 16 12:20:40.017307 systemd[1]: Started cri-containerd-354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a.scope. Jul 16 12:20:40.183477 systemd[1]: run-containerd-runc-k8s.io-354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a-runc.vRByf9.mount: Deactivated successfully. Jul 16 12:20:40.221000 audit[4434]: NETFILTER_CFG table=filter:112 family=2 entries=14 op=nft_register_rule pid=4434 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:40.221000 audit[4434]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffdce10a560 a2=0 a3=7ffdce10a54c items=0 ppid=2161 pid=4434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:40.221000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:40.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.229000 audit: BPF prog-id=205 op=LOAD Jul 16 12:20:40.230000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.230000 audit[4417]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4405 pid=4417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:40.230000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335346632316463623030303865386464323630616564343636373862 Jul 16 12:20:40.230000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.230000 audit[4417]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4405 pid=4417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:40.230000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335346632316463623030303865386464323630616564343636373862 Jul 16 12:20:40.230000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.230000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.230000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.230000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.230000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.230000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.230000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.230000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.230000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.230000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.230000 audit: BPF prog-id=206 op=LOAD Jul 16 12:20:40.230000 audit[4417]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000321a60 items=0 ppid=4405 pid=4417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:40.230000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335346632316463623030303865386464323630616564343636373862 Jul 16 12:20:40.230000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.230000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.230000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.230000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.230000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.230000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.230000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.230000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.230000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.230000 audit: BPF prog-id=207 op=LOAD Jul 16 12:20:40.230000 audit[4417]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000321aa8 items=0 ppid=4405 pid=4417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:40.230000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335346632316463623030303865386464323630616564343636373862 Jul 16 12:20:40.231000 audit: BPF prog-id=207 op=UNLOAD Jul 16 12:20:40.231000 audit: BPF prog-id=206 op=UNLOAD Jul 16 12:20:40.231000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.231000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.231000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.231000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.231000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.231000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.231000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.231000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.231000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.231000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:40.231000 audit: BPF prog-id=208 op=LOAD Jul 16 12:20:40.231000 audit[4417]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000321eb8 items=0 ppid=4405 pid=4417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:40.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335346632316463623030303865386464323630616564343636373862 Jul 16 12:20:40.270000 audit[4434]: NETFILTER_CFG table=nat:113 family=2 entries=56 op=nft_register_chain pid=4434 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:40.270000 audit[4434]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffdce10a560 a2=0 a3=7ffdce10a54c items=0 ppid=2161 pid=4434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:40.270000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:40.318046 env[1205]: time="2025-07-16T12:20:40.317982617Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-ttxxf,Uid:3c9d3cc7-b97b-4b96-a498-6d46ca24e031,Namespace:calico-system,Attempt:1,} returns sandbox id \"354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a\"" Jul 16 12:20:40.320000 audit[4444]: NETFILTER_CFG table=filter:114 family=2 entries=48 op=nft_register_chain pid=4444 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 16 12:20:40.320000 audit[4444]: SYSCALL arch=c000003e syscall=46 success=yes exit=26388 a0=3 a1=7ffedd3f9240 a2=0 a3=7ffedd3f922c items=0 ppid=3311 pid=4444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:40.320000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 16 12:20:40.983847 env[1205]: time="2025-07-16T12:20:40.983795760Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:40.985540 env[1205]: time="2025-07-16T12:20:40.985510039Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:40.987313 env[1205]: time="2025-07-16T12:20:40.987288673Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:40.989002 env[1205]: time="2025-07-16T12:20:40.988979006Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:40.989807 env[1205]: time="2025-07-16T12:20:40.989778692Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 16 12:20:40.997082 env[1205]: time="2025-07-16T12:20:40.997054741Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 16 12:20:40.998332 systemd-networkd[1034]: cali1342ca10d08: Gained IPv6LL Jul 16 12:20:41.047248 env[1205]: time="2025-07-16T12:20:41.047102912Z" level=info msg="CreateContainer within sandbox \"c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 16 12:20:41.076776 env[1205]: time="2025-07-16T12:20:41.076731497Z" level=info msg="CreateContainer within sandbox \"c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"28c2db6a7f7d73246305cc434ef79133aa3528eae05fcb90ef80675398351f51\"" Jul 16 12:20:41.078591 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2486139506.mount: Deactivated successfully. Jul 16 12:20:41.103621 env[1205]: time="2025-07-16T12:20:41.101739490Z" level=info msg="StartContainer for \"28c2db6a7f7d73246305cc434ef79133aa3528eae05fcb90ef80675398351f51\"" Jul 16 12:20:41.194292 systemd[1]: run-containerd-runc-k8s.io-28c2db6a7f7d73246305cc434ef79133aa3528eae05fcb90ef80675398351f51-runc.wzobF9.mount: Deactivated successfully. Jul 16 12:20:41.207685 systemd[1]: Started cri-containerd-28c2db6a7f7d73246305cc434ef79133aa3528eae05fcb90ef80675398351f51.scope. Jul 16 12:20:41.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.269000 audit: BPF prog-id=209 op=LOAD Jul 16 12:20:41.270000 audit[4451]: AVC avc: denied { bpf } for pid=4451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.270000 audit[4451]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=3617 pid=4451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:41.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238633264623661376637643733323436333035636334333465663739 Jul 16 12:20:41.270000 audit[4451]: AVC avc: denied { perfmon } for pid=4451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.270000 audit[4451]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=3617 pid=4451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:41.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238633264623661376637643733323436333035636334333465663739 Jul 16 12:20:41.270000 audit[4451]: AVC avc: denied { bpf } for pid=4451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.270000 audit[4451]: AVC avc: denied { bpf } for pid=4451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.270000 audit[4451]: AVC avc: denied { bpf } for pid=4451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.270000 audit[4451]: AVC avc: denied { perfmon } for pid=4451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.270000 audit[4451]: AVC avc: denied { perfmon } for pid=4451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.270000 audit[4451]: AVC avc: denied { perfmon } for pid=4451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.270000 audit[4451]: AVC avc: denied { perfmon } for pid=4451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.270000 audit[4451]: AVC avc: denied { perfmon } for pid=4451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.270000 audit[4451]: AVC avc: denied { bpf } for pid=4451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.270000 audit[4451]: AVC avc: denied { bpf } for pid=4451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.270000 audit: BPF prog-id=210 op=LOAD Jul 16 12:20:41.270000 audit[4451]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c00038cfd0 items=0 ppid=3617 pid=4451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:41.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238633264623661376637643733323436333035636334333465663739 Jul 16 12:20:41.271000 audit[4451]: AVC avc: denied { bpf } for pid=4451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.271000 audit[4451]: AVC avc: denied { bpf } for pid=4451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.271000 audit[4451]: AVC avc: denied { perfmon } for pid=4451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.271000 audit[4451]: AVC avc: denied { perfmon } for pid=4451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.271000 audit[4451]: AVC avc: denied { perfmon } for pid=4451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.271000 audit[4451]: AVC avc: denied { perfmon } for pid=4451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.271000 audit[4451]: AVC avc: denied { perfmon } for pid=4451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.271000 audit[4451]: AVC avc: denied { bpf } for pid=4451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.271000 audit[4451]: AVC avc: denied { bpf } for pid=4451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.271000 audit: BPF prog-id=211 op=LOAD Jul 16 12:20:41.271000 audit[4451]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c00038d018 items=0 ppid=3617 pid=4451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:41.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238633264623661376637643733323436333035636334333465663739 Jul 16 12:20:41.271000 audit: BPF prog-id=211 op=UNLOAD Jul 16 12:20:41.271000 audit: BPF prog-id=210 op=UNLOAD Jul 16 12:20:41.272000 audit[4451]: AVC avc: denied { bpf } for pid=4451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.272000 audit[4451]: AVC avc: denied { bpf } for pid=4451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.272000 audit[4451]: AVC avc: denied { bpf } for pid=4451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.272000 audit[4451]: AVC avc: denied { perfmon } for pid=4451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.272000 audit[4451]: AVC avc: denied { perfmon } for pid=4451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.272000 audit[4451]: AVC avc: denied { perfmon } for pid=4451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.272000 audit[4451]: AVC avc: denied { perfmon } for pid=4451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.272000 audit[4451]: AVC avc: denied { perfmon } for pid=4451 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.272000 audit[4451]: AVC avc: denied { bpf } for pid=4451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.272000 audit[4451]: AVC avc: denied { bpf } for pid=4451 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.272000 audit: BPF prog-id=212 op=LOAD Jul 16 12:20:41.272000 audit[4451]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c00038d428 items=0 ppid=3617 pid=4451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:41.272000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238633264623661376637643733323436333035636334333465663739 Jul 16 12:20:41.289000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:20:41.289000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002d6de20 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:20:41.289000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:20:41.290000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525832 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:20:41.290000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002af5170 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:20:41.290000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:20:41.308751 env[1205]: time="2025-07-16T12:20:41.308709440Z" level=info msg="StartContainer for \"28c2db6a7f7d73246305cc434ef79133aa3528eae05fcb90ef80675398351f51\" returns successfully" Jul 16 12:20:41.362175 env[1205]: time="2025-07-16T12:20:41.362135807Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:41.364022 env[1205]: time="2025-07-16T12:20:41.363988771Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:41.366730 env[1205]: time="2025-07-16T12:20:41.366700691Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:41.369450 env[1205]: time="2025-07-16T12:20:41.369424274Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:41.370119 env[1205]: time="2025-07-16T12:20:41.370093279Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 16 12:20:41.371820 env[1205]: time="2025-07-16T12:20:41.371797888Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 16 12:20:41.375398 env[1205]: time="2025-07-16T12:20:41.375346690Z" level=info msg="CreateContainer within sandbox \"87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 16 12:20:41.394869 env[1205]: time="2025-07-16T12:20:41.394817851Z" level=info msg="CreateContainer within sandbox \"87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"5672481c3db9ac166b5e04ff756591f01548742c761267a896f758b301ecc2d3\"" Jul 16 12:20:41.395817 env[1205]: time="2025-07-16T12:20:41.395789011Z" level=info msg="StartContainer for \"5672481c3db9ac166b5e04ff756591f01548742c761267a896f758b301ecc2d3\"" Jul 16 12:20:41.442243 systemd[1]: Started cri-containerd-5672481c3db9ac166b5e04ff756591f01548742c761267a896f758b301ecc2d3.scope. Jul 16 12:20:41.553725 kubelet[2009]: I0716 12:20:41.550753 2009 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-55dcc56559-cjgqh" podStartSLOduration=31.647101232 podStartE2EDuration="37.528018239s" podCreationTimestamp="2025-07-16 12:20:04 +0000 UTC" firstStartedPulling="2025-07-16 12:20:35.115028055 +0000 UTC m=+49.429787796" lastFinishedPulling="2025-07-16 12:20:40.995945062 +0000 UTC m=+55.310704803" observedRunningTime="2025-07-16 12:20:41.50268712 +0000 UTC m=+55.817446885" watchObservedRunningTime="2025-07-16 12:20:41.528018239 +0000 UTC m=+55.842777980" Jul 16 12:20:41.576000 audit[4502]: NETFILTER_CFG table=filter:115 family=2 entries=14 op=nft_register_rule pid=4502 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:41.576000 audit[4502]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffb4b790d0 a2=0 a3=7fffb4b790bc items=0 ppid=2161 pid=4502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:41.576000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:41.580000 audit[4502]: NETFILTER_CFG table=nat:116 family=2 entries=20 op=nft_register_rule pid=4502 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:41.580000 audit[4502]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fffb4b790d0 a2=0 a3=7fffb4b790bc items=0 ppid=2161 pid=4502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:41.580000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:41.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.584000 audit: BPF prog-id=213 op=LOAD Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { bpf } for pid=4485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3658 pid=4485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:41.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536373234383163336462396163313636623565303466663735363539 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { perfmon } for pid=4485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3658 pid=4485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:41.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536373234383163336462396163313636623565303466663735363539 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { bpf } for pid=4485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { bpf } for pid=4485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { bpf } for pid=4485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { perfmon } for pid=4485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { perfmon } for pid=4485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { perfmon } for pid=4485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { perfmon } for pid=4485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { perfmon } for pid=4485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { bpf } for pid=4485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { bpf } for pid=4485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit: BPF prog-id=214 op=LOAD Jul 16 12:20:41.585000 audit[4485]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000388370 items=0 ppid=3658 pid=4485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:41.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536373234383163336462396163313636623565303466663735363539 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { bpf } for pid=4485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { bpf } for pid=4485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { perfmon } for pid=4485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { perfmon } for pid=4485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { perfmon } for pid=4485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { perfmon } for pid=4485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { perfmon } for pid=4485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { bpf } for pid=4485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { bpf } for pid=4485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit: BPF prog-id=215 op=LOAD Jul 16 12:20:41.585000 audit[4485]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003883b8 items=0 ppid=3658 pid=4485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:41.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536373234383163336462396163313636623565303466663735363539 Jul 16 12:20:41.585000 audit: BPF prog-id=215 op=UNLOAD Jul 16 12:20:41.585000 audit: BPF prog-id=214 op=UNLOAD Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { bpf } for pid=4485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { bpf } for pid=4485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { bpf } for pid=4485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { perfmon } for pid=4485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { perfmon } for pid=4485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { perfmon } for pid=4485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { perfmon } for pid=4485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { perfmon } for pid=4485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { bpf } for pid=4485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit[4485]: AVC avc: denied { bpf } for pid=4485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.585000 audit: BPF prog-id=216 op=LOAD Jul 16 12:20:41.585000 audit[4485]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003887c8 items=0 ppid=3658 pid=4485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:41.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536373234383163336462396163313636623565303466663735363539 Jul 16 12:20:41.635560 env[1205]: time="2025-07-16T12:20:41.635516699Z" level=info msg="StartContainer for \"5672481c3db9ac166b5e04ff756591f01548742c761267a896f758b301ecc2d3\" returns successfully" Jul 16 12:20:41.654000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525828 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:20:41.654000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c014109cb0 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:20:41.654000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:20:41.660000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525834 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:20:41.660000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c014109d70 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:20:41.660000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:20:41.661000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525832 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:20:41.661000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c014109e00 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:20:41.661000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:20:41.694000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:20:41.694000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c00a426320 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:20:41.694000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:20:41.712000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:20:41.712000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c00a426380 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:20:41.712000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:20:41.712000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525832 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:20:41.712000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c010452240 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:20:41.712000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:20:41.758882 env[1205]: time="2025-07-16T12:20:41.758831092Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:41.760893 env[1205]: time="2025-07-16T12:20:41.760855585Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:41.762922 env[1205]: time="2025-07-16T12:20:41.762880112Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:41.765112 env[1205]: time="2025-07-16T12:20:41.765078023Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:41.765936 env[1205]: time="2025-07-16T12:20:41.765908004Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 16 12:20:41.768861 env[1205]: time="2025-07-16T12:20:41.768836568Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 16 12:20:41.771604 env[1205]: time="2025-07-16T12:20:41.771578699Z" level=info msg="CreateContainer within sandbox \"ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 16 12:20:41.792575 env[1205]: time="2025-07-16T12:20:41.789941330Z" level=info msg="CreateContainer within sandbox \"ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18\"" Jul 16 12:20:41.793969 env[1205]: time="2025-07-16T12:20:41.793930067Z" level=info msg="StartContainer for \"eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18\"" Jul 16 12:20:41.871867 systemd[1]: Started cri-containerd-eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18.scope. Jul 16 12:20:41.906002 kernel: kauditd_printk_skb: 413 callbacks suppressed Jul 16 12:20:41.910952 kernel: audit: type=1400 audit(1752668441.899:1405): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.911112 kernel: audit: type=1400 audit(1752668441.899:1406): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.913268 kernel: audit: type=1400 audit(1752668441.899:1407): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.916101 kernel: audit: type=1400 audit(1752668441.899:1408): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.926462 kernel: audit: type=1400 audit(1752668441.899:1409): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.930466 kernel: audit: type=1400 audit(1752668441.899:1410): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.936474 kernel: audit: type=1400 audit(1752668441.899:1411): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.943970 kernel: audit: type=1400 audit(1752668441.899:1412): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.944054 kernel: audit: type=1400 audit(1752668441.899:1413): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.944138 kernel: audit: type=1400 audit(1752668441.912:1414): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.912000 audit: BPF prog-id=217 op=LOAD Jul 16 12:20:41.915000 audit[4526]: AVC avc: denied { bpf } for pid=4526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.915000 audit[4526]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3736 pid=4526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:41.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562393064653464346434636335306134336137303235353865653062 Jul 16 12:20:41.915000 audit[4526]: AVC avc: denied { perfmon } for pid=4526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.915000 audit[4526]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3736 pid=4526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:41.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562393064653464346434636335306134336137303235353865653062 Jul 16 12:20:41.915000 audit[4526]: AVC avc: denied { bpf } for pid=4526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.915000 audit[4526]: AVC avc: denied { bpf } for pid=4526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.915000 audit[4526]: AVC avc: denied { bpf } for pid=4526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.915000 audit[4526]: AVC avc: denied { perfmon } for pid=4526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.915000 audit[4526]: AVC avc: denied { perfmon } for pid=4526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.915000 audit[4526]: AVC avc: denied { perfmon } for pid=4526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.915000 audit[4526]: AVC avc: denied { perfmon } for pid=4526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.915000 audit[4526]: AVC avc: denied { perfmon } for pid=4526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.915000 audit[4526]: AVC avc: denied { bpf } for pid=4526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.915000 audit[4526]: AVC avc: denied { bpf } for pid=4526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.915000 audit: BPF prog-id=218 op=LOAD Jul 16 12:20:41.915000 audit[4526]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00027bdc0 items=0 ppid=3736 pid=4526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:41.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562393064653464346434636335306134336137303235353865653062 Jul 16 12:20:41.918000 audit[4526]: AVC avc: denied { bpf } for pid=4526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.918000 audit[4526]: AVC avc: denied { bpf } for pid=4526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.918000 audit[4526]: AVC avc: denied { perfmon } for pid=4526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.918000 audit[4526]: AVC avc: denied { perfmon } for pid=4526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.918000 audit[4526]: AVC avc: denied { perfmon } for pid=4526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.918000 audit[4526]: AVC avc: denied { perfmon } for pid=4526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.918000 audit[4526]: AVC avc: denied { perfmon } for pid=4526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.918000 audit[4526]: AVC avc: denied { bpf } for pid=4526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.918000 audit[4526]: AVC avc: denied { bpf } for pid=4526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.918000 audit: BPF prog-id=219 op=LOAD Jul 16 12:20:41.918000 audit[4526]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00027be08 items=0 ppid=3736 pid=4526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:41.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562393064653464346434636335306134336137303235353865653062 Jul 16 12:20:41.918000 audit: BPF prog-id=219 op=UNLOAD Jul 16 12:20:41.918000 audit: BPF prog-id=218 op=UNLOAD Jul 16 12:20:41.918000 audit[4526]: AVC avc: denied { bpf } for pid=4526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.918000 audit[4526]: AVC avc: denied { bpf } for pid=4526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.918000 audit[4526]: AVC avc: denied { bpf } for pid=4526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.918000 audit[4526]: AVC avc: denied { perfmon } for pid=4526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.918000 audit[4526]: AVC avc: denied { perfmon } for pid=4526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.918000 audit[4526]: AVC avc: denied { perfmon } for pid=4526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.918000 audit[4526]: AVC avc: denied { perfmon } for pid=4526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.918000 audit[4526]: AVC avc: denied { perfmon } for pid=4526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.918000 audit[4526]: AVC avc: denied { bpf } for pid=4526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.918000 audit[4526]: AVC avc: denied { bpf } for pid=4526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:41.918000 audit: BPF prog-id=220 op=LOAD Jul 16 12:20:41.918000 audit[4526]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00035a218 items=0 ppid=3736 pid=4526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:41.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562393064653464346434636335306134336137303235353865653062 Jul 16 12:20:42.253624 env[1205]: time="2025-07-16T12:20:42.253528947Z" level=info msg="StartContainer for \"eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18\" returns successfully" Jul 16 12:20:42.457855 kubelet[2009]: I0716 12:20:42.457819 2009 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 16 12:20:42.477355 kubelet[2009]: I0716 12:20:42.477280 2009 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5944847977-8tj42" podStartSLOduration=34.126795996 podStartE2EDuration="40.477260349s" podCreationTimestamp="2025-07-16 12:20:02 +0000 UTC" firstStartedPulling="2025-07-16 12:20:35.416992558 +0000 UTC m=+49.731752299" lastFinishedPulling="2025-07-16 12:20:41.767456911 +0000 UTC m=+56.082216652" observedRunningTime="2025-07-16 12:20:42.476239431 +0000 UTC m=+56.790999186" watchObservedRunningTime="2025-07-16 12:20:42.477260349 +0000 UTC m=+56.792020114" Jul 16 12:20:42.555000 audit[4564]: NETFILTER_CFG table=filter:117 family=2 entries=14 op=nft_register_rule pid=4564 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:42.555000 audit[4564]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd40899e90 a2=0 a3=7ffd40899e7c items=0 ppid=2161 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:42.555000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:42.561000 audit[4564]: NETFILTER_CFG table=nat:118 family=2 entries=20 op=nft_register_rule pid=4564 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:42.561000 audit[4564]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffd40899e90 a2=0 a3=7ffd40899e7c items=0 ppid=2161 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:42.561000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:42.679000 audit[4567]: NETFILTER_CFG table=filter:119 family=2 entries=14 op=nft_register_rule pid=4567 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:42.679000 audit[4567]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffdb387c930 a2=0 a3=7ffdb387c91c items=0 ppid=2161 pid=4567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:42.679000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:42.684000 audit[4567]: NETFILTER_CFG table=nat:120 family=2 entries=20 op=nft_register_rule pid=4567 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:42.684000 audit[4567]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffdb387c930 a2=0 a3=7ffdb387c91c items=0 ppid=2161 pid=4567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:42.684000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:43.461461 kubelet[2009]: I0716 12:20:43.461422 2009 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 16 12:20:44.703292 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3680535534.mount: Deactivated successfully. Jul 16 12:20:44.712614 env[1205]: time="2025-07-16T12:20:44.712465370Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:44.715057 env[1205]: time="2025-07-16T12:20:44.715022304Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:44.717117 env[1205]: time="2025-07-16T12:20:44.717088521Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:44.718041 env[1205]: time="2025-07-16T12:20:44.718015867Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:44.719116 env[1205]: time="2025-07-16T12:20:44.719086691Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f\"" Jul 16 12:20:44.728135 env[1205]: time="2025-07-16T12:20:44.727915822Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 16 12:20:44.769856 env[1205]: time="2025-07-16T12:20:44.769800581Z" level=info msg="CreateContainer within sandbox \"3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 16 12:20:44.797603 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2887821543.mount: Deactivated successfully. Jul 16 12:20:44.802097 env[1205]: time="2025-07-16T12:20:44.802043116Z" level=info msg="CreateContainer within sandbox \"3ba608cdcbba9f16ee3b4344b6fb6e11138ba9f3dfe7b18829d3059c35f39e29\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"bfb4bd63b62f00f5b51c152e16f377988d33ad460128d6040a95f0ba20372b09\"" Jul 16 12:20:44.802918 env[1205]: time="2025-07-16T12:20:44.802883718Z" level=info msg="StartContainer for \"bfb4bd63b62f00f5b51c152e16f377988d33ad460128d6040a95f0ba20372b09\"" Jul 16 12:20:44.848332 systemd[1]: Started cri-containerd-bfb4bd63b62f00f5b51c152e16f377988d33ad460128d6040a95f0ba20372b09.scope. Jul 16 12:20:44.965982 systemd[1]: run-containerd-runc-k8s.io-bfb4bd63b62f00f5b51c152e16f377988d33ad460128d6040a95f0ba20372b09-runc.gApPkP.mount: Deactivated successfully. Jul 16 12:20:45.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.024000 audit: BPF prog-id=221 op=LOAD Jul 16 12:20:45.025000 audit[4579]: AVC avc: denied { bpf } for pid=4579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.025000 audit[4579]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3450 pid=4579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:45.025000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266623462643633623632663030663562353163313532653136663337 Jul 16 12:20:45.025000 audit[4579]: AVC avc: denied { perfmon } for pid=4579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.025000 audit[4579]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3450 pid=4579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:45.025000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266623462643633623632663030663562353163313532653136663337 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { bpf } for pid=4579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { bpf } for pid=4579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { bpf } for pid=4579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { perfmon } for pid=4579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { perfmon } for pid=4579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { perfmon } for pid=4579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { perfmon } for pid=4579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { perfmon } for pid=4579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { bpf } for pid=4579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { bpf } for pid=4579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit: BPF prog-id=222 op=LOAD Jul 16 12:20:45.026000 audit[4579]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00022b1e0 items=0 ppid=3450 pid=4579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:45.026000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266623462643633623632663030663562353163313532653136663337 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { bpf } for pid=4579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { bpf } for pid=4579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { perfmon } for pid=4579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { perfmon } for pid=4579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { perfmon } for pid=4579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { perfmon } for pid=4579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { perfmon } for pid=4579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { bpf } for pid=4579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { bpf } for pid=4579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit: BPF prog-id=223 op=LOAD Jul 16 12:20:45.026000 audit[4579]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00022b228 items=0 ppid=3450 pid=4579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:45.026000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266623462643633623632663030663562353163313532653136663337 Jul 16 12:20:45.026000 audit: BPF prog-id=223 op=UNLOAD Jul 16 12:20:45.026000 audit: BPF prog-id=222 op=UNLOAD Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { bpf } for pid=4579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { bpf } for pid=4579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { bpf } for pid=4579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { perfmon } for pid=4579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { perfmon } for pid=4579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { perfmon } for pid=4579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { perfmon } for pid=4579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { perfmon } for pid=4579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { bpf } for pid=4579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit[4579]: AVC avc: denied { bpf } for pid=4579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:45.026000 audit: BPF prog-id=224 op=LOAD Jul 16 12:20:45.026000 audit[4579]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00022b638 items=0 ppid=3450 pid=4579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:45.026000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266623462643633623632663030663562353163313532653136663337 Jul 16 12:20:45.095348 env[1205]: time="2025-07-16T12:20:45.095294139Z" level=info msg="StartContainer for \"bfb4bd63b62f00f5b51c152e16f377988d33ad460128d6040a95f0ba20372b09\" returns successfully" Jul 16 12:20:45.537766 kubelet[2009]: I0716 12:20:45.537688 2009 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5944847977-rlssh" podStartSLOduration=37.513153192 podStartE2EDuration="43.537648123s" podCreationTimestamp="2025-07-16 12:20:02 +0000 UTC" firstStartedPulling="2025-07-16 12:20:35.347061846 +0000 UTC m=+49.661821588" lastFinishedPulling="2025-07-16 12:20:41.371556759 +0000 UTC m=+55.686316519" observedRunningTime="2025-07-16 12:20:42.502342091 +0000 UTC m=+56.817101852" watchObservedRunningTime="2025-07-16 12:20:45.537648123 +0000 UTC m=+59.852407864" Jul 16 12:20:45.538705 kubelet[2009]: I0716 12:20:45.537815 2009 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-74cd9cb8fb-pvbfq" podStartSLOduration=2.33630046 podStartE2EDuration="12.537809454s" podCreationTimestamp="2025-07-16 12:20:33 +0000 UTC" firstStartedPulling="2025-07-16 12:20:34.526078424 +0000 UTC m=+48.840838165" lastFinishedPulling="2025-07-16 12:20:44.727587417 +0000 UTC m=+59.042347159" observedRunningTime="2025-07-16 12:20:45.535683252 +0000 UTC m=+59.850443018" watchObservedRunningTime="2025-07-16 12:20:45.537809454 +0000 UTC m=+59.852569197" Jul 16 12:20:45.905000 audit[4613]: NETFILTER_CFG table=filter:121 family=2 entries=13 op=nft_register_rule pid=4613 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:45.905000 audit[4613]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffc44fc6460 a2=0 a3=7ffc44fc644c items=0 ppid=2161 pid=4613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:45.905000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:45.917000 audit[4613]: NETFILTER_CFG table=nat:122 family=2 entries=27 op=nft_register_chain pid=4613 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:45.917000 audit[4613]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffc44fc6460 a2=0 a3=7ffc44fc644c items=0 ppid=2161 pid=4613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:45.917000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:45.949398 env[1205]: time="2025-07-16T12:20:45.949021794Z" level=info msg="StopPodSandbox for \"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1\"" Jul 16 12:20:46.593425 env[1205]: 2025-07-16 12:20:46.282 [WARNING][4622] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"3c9d3cc7-b97b-4b96-a498-6d46ca24e031", ResourceVersion:"1033", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a", Pod:"goldmane-768f4c5c69-ttxxf", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.105.201/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali1342ca10d08", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:46.593425 env[1205]: 2025-07-16 12:20:46.294 [INFO][4622] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" Jul 16 12:20:46.593425 env[1205]: 2025-07-16 12:20:46.294 [INFO][4622] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" iface="eth0" netns="" Jul 16 12:20:46.593425 env[1205]: 2025-07-16 12:20:46.294 [INFO][4622] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" Jul 16 12:20:46.593425 env[1205]: 2025-07-16 12:20:46.294 [INFO][4622] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" Jul 16 12:20:46.593425 env[1205]: 2025-07-16 12:20:46.536 [INFO][4631] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" HandleID="k8s-pod-network.24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" Workload="srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0" Jul 16 12:20:46.593425 env[1205]: 2025-07-16 12:20:46.537 [INFO][4631] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:46.593425 env[1205]: 2025-07-16 12:20:46.538 [INFO][4631] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:46.593425 env[1205]: 2025-07-16 12:20:46.563 [WARNING][4631] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" HandleID="k8s-pod-network.24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" Workload="srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0" Jul 16 12:20:46.593425 env[1205]: 2025-07-16 12:20:46.563 [INFO][4631] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" HandleID="k8s-pod-network.24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" Workload="srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0" Jul 16 12:20:46.593425 env[1205]: 2025-07-16 12:20:46.576 [INFO][4631] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:46.593425 env[1205]: 2025-07-16 12:20:46.591 [INFO][4622] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" Jul 16 12:20:46.593425 env[1205]: time="2025-07-16T12:20:46.593457806Z" level=info msg="TearDown network for sandbox \"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1\" successfully" Jul 16 12:20:46.593425 env[1205]: time="2025-07-16T12:20:46.593488526Z" level=info msg="StopPodSandbox for \"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1\" returns successfully" Jul 16 12:20:46.738297 env[1205]: time="2025-07-16T12:20:46.737695733Z" level=info msg="RemovePodSandbox for \"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1\"" Jul 16 12:20:46.738297 env[1205]: time="2025-07-16T12:20:46.737757557Z" level=info msg="Forcibly stopping sandbox \"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1\"" Jul 16 12:20:47.177670 env[1205]: 2025-07-16 12:20:46.982 [WARNING][4649] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"3c9d3cc7-b97b-4b96-a498-6d46ca24e031", ResourceVersion:"1033", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a", Pod:"goldmane-768f4c5c69-ttxxf", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.105.201/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali1342ca10d08", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:47.177670 env[1205]: 2025-07-16 12:20:46.983 [INFO][4649] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" Jul 16 12:20:47.177670 env[1205]: 2025-07-16 12:20:46.983 [INFO][4649] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" iface="eth0" netns="" Jul 16 12:20:47.177670 env[1205]: 2025-07-16 12:20:46.983 [INFO][4649] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" Jul 16 12:20:47.177670 env[1205]: 2025-07-16 12:20:46.983 [INFO][4649] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" Jul 16 12:20:47.177670 env[1205]: 2025-07-16 12:20:47.118 [INFO][4656] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" HandleID="k8s-pod-network.24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" Workload="srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0" Jul 16 12:20:47.177670 env[1205]: 2025-07-16 12:20:47.119 [INFO][4656] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:47.177670 env[1205]: 2025-07-16 12:20:47.119 [INFO][4656] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:47.177670 env[1205]: 2025-07-16 12:20:47.141 [WARNING][4656] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" HandleID="k8s-pod-network.24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" Workload="srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0" Jul 16 12:20:47.177670 env[1205]: 2025-07-16 12:20:47.141 [INFO][4656] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" HandleID="k8s-pod-network.24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" Workload="srv--frvg8.gb1.brightbox.com-k8s-goldmane--768f4c5c69--ttxxf-eth0" Jul 16 12:20:47.177670 env[1205]: 2025-07-16 12:20:47.146 [INFO][4656] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:47.177670 env[1205]: 2025-07-16 12:20:47.151 [INFO][4649] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1" Jul 16 12:20:47.188722 env[1205]: time="2025-07-16T12:20:47.179511311Z" level=info msg="TearDown network for sandbox \"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1\" successfully" Jul 16 12:20:47.188722 env[1205]: time="2025-07-16T12:20:47.184899240Z" level=info msg="RemovePodSandbox \"24b159be0ffe7f65a18f0754f44022dc21c20b097e5309121efc25a7131a1af1\" returns successfully" Jul 16 12:20:47.221857 env[1205]: time="2025-07-16T12:20:47.221801483Z" level=info msg="StopPodSandbox for \"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da\"" Jul 16 12:20:47.484709 env[1205]: 2025-07-16 12:20:47.382 [WARNING][4671] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0", GenerateName:"calico-apiserver-5944847977-", Namespace:"calico-apiserver", SelfLink:"", UID:"94f730db-68a2-4e48-bafd-314eacd16a53", ResourceVersion:"1054", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5944847977", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9", Pod:"calico-apiserver-5944847977-rlssh", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.105.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic4029658a1f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:47.484709 env[1205]: 2025-07-16 12:20:47.383 [INFO][4671] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" Jul 16 12:20:47.484709 env[1205]: 2025-07-16 12:20:47.383 [INFO][4671] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" iface="eth0" netns="" Jul 16 12:20:47.484709 env[1205]: 2025-07-16 12:20:47.383 [INFO][4671] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" Jul 16 12:20:47.484709 env[1205]: 2025-07-16 12:20:47.383 [INFO][4671] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" Jul 16 12:20:47.484709 env[1205]: 2025-07-16 12:20:47.461 [INFO][4680] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" HandleID="k8s-pod-network.8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:20:47.484709 env[1205]: 2025-07-16 12:20:47.461 [INFO][4680] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:47.484709 env[1205]: 2025-07-16 12:20:47.461 [INFO][4680] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:47.484709 env[1205]: 2025-07-16 12:20:47.475 [WARNING][4680] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" HandleID="k8s-pod-network.8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:20:47.484709 env[1205]: 2025-07-16 12:20:47.475 [INFO][4680] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" HandleID="k8s-pod-network.8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:20:47.484709 env[1205]: 2025-07-16 12:20:47.478 [INFO][4680] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:47.484709 env[1205]: 2025-07-16 12:20:47.480 [INFO][4671] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" Jul 16 12:20:47.484709 env[1205]: time="2025-07-16T12:20:47.484634754Z" level=info msg="TearDown network for sandbox \"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da\" successfully" Jul 16 12:20:47.484709 env[1205]: time="2025-07-16T12:20:47.484667972Z" level=info msg="StopPodSandbox for \"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da\" returns successfully" Jul 16 12:20:47.505722 env[1205]: time="2025-07-16T12:20:47.505608314Z" level=info msg="RemovePodSandbox for \"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da\"" Jul 16 12:20:47.505722 env[1205]: time="2025-07-16T12:20:47.505673782Z" level=info msg="Forcibly stopping sandbox \"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da\"" Jul 16 12:20:47.742161 env[1205]: 2025-07-16 12:20:47.632 [WARNING][4700] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0", GenerateName:"calico-apiserver-5944847977-", Namespace:"calico-apiserver", SelfLink:"", UID:"94f730db-68a2-4e48-bafd-314eacd16a53", ResourceVersion:"1054", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5944847977", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9", Pod:"calico-apiserver-5944847977-rlssh", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.105.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic4029658a1f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:47.742161 env[1205]: 2025-07-16 12:20:47.633 [INFO][4700] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" Jul 16 12:20:47.742161 env[1205]: 2025-07-16 12:20:47.633 [INFO][4700] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" iface="eth0" netns="" Jul 16 12:20:47.742161 env[1205]: 2025-07-16 12:20:47.633 [INFO][4700] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" Jul 16 12:20:47.742161 env[1205]: 2025-07-16 12:20:47.633 [INFO][4700] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" Jul 16 12:20:47.742161 env[1205]: 2025-07-16 12:20:47.703 [INFO][4707] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" HandleID="k8s-pod-network.8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:20:47.742161 env[1205]: 2025-07-16 12:20:47.703 [INFO][4707] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:47.742161 env[1205]: 2025-07-16 12:20:47.704 [INFO][4707] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:47.742161 env[1205]: 2025-07-16 12:20:47.727 [WARNING][4707] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" HandleID="k8s-pod-network.8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:20:47.742161 env[1205]: 2025-07-16 12:20:47.727 [INFO][4707] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" HandleID="k8s-pod-network.8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:20:47.742161 env[1205]: 2025-07-16 12:20:47.730 [INFO][4707] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:47.742161 env[1205]: 2025-07-16 12:20:47.734 [INFO][4700] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da" Jul 16 12:20:47.742161 env[1205]: time="2025-07-16T12:20:47.742107148Z" level=info msg="TearDown network for sandbox \"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da\" successfully" Jul 16 12:20:47.747780 env[1205]: time="2025-07-16T12:20:47.747731509Z" level=info msg="RemovePodSandbox \"8fc0728a79c443d6151460f575f2ec7677bde04c9791d70ae5017fce6a0f33da\" returns successfully" Jul 16 12:20:47.748292 env[1205]: time="2025-07-16T12:20:47.748266759Z" level=info msg="StopPodSandbox for \"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251\"" Jul 16 12:20:47.986539 env[1205]: 2025-07-16 12:20:47.873 [WARNING][4723] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"8593d450-6860-4758-9ca4-fd43459b0599", ResourceVersion:"1014", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 19, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748", Pod:"coredns-674b8bbfcf-n6sg4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.105.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali26141c7611b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:47.986539 env[1205]: 2025-07-16 12:20:47.873 [INFO][4723] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" Jul 16 12:20:47.986539 env[1205]: 2025-07-16 12:20:47.873 [INFO][4723] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" iface="eth0" netns="" Jul 16 12:20:47.986539 env[1205]: 2025-07-16 12:20:47.873 [INFO][4723] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" Jul 16 12:20:47.986539 env[1205]: 2025-07-16 12:20:47.874 [INFO][4723] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" Jul 16 12:20:47.986539 env[1205]: 2025-07-16 12:20:47.940 [INFO][4730] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" HandleID="k8s-pod-network.c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0" Jul 16 12:20:47.986539 env[1205]: 2025-07-16 12:20:47.940 [INFO][4730] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:47.986539 env[1205]: 2025-07-16 12:20:47.940 [INFO][4730] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:47.986539 env[1205]: 2025-07-16 12:20:47.964 [WARNING][4730] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" HandleID="k8s-pod-network.c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0" Jul 16 12:20:47.986539 env[1205]: 2025-07-16 12:20:47.964 [INFO][4730] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" HandleID="k8s-pod-network.c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0" Jul 16 12:20:47.986539 env[1205]: 2025-07-16 12:20:47.967 [INFO][4730] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:47.986539 env[1205]: 2025-07-16 12:20:47.980 [INFO][4723] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" Jul 16 12:20:47.988235 env[1205]: time="2025-07-16T12:20:47.986569786Z" level=info msg="TearDown network for sandbox \"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251\" successfully" Jul 16 12:20:47.988235 env[1205]: time="2025-07-16T12:20:47.986603893Z" level=info msg="StopPodSandbox for \"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251\" returns successfully" Jul 16 12:20:47.988235 env[1205]: time="2025-07-16T12:20:47.988065435Z" level=info msg="RemovePodSandbox for \"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251\"" Jul 16 12:20:47.988235 env[1205]: time="2025-07-16T12:20:47.988096605Z" level=info msg="Forcibly stopping sandbox \"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251\"" Jul 16 12:20:48.281233 env[1205]: 2025-07-16 12:20:48.168 [WARNING][4745] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"8593d450-6860-4758-9ca4-fd43459b0599", ResourceVersion:"1014", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 19, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"5bbcd1aa5a77ee0848aea37e8b2c9faf19d62832d5954fe6a5eec96a05d28748", Pod:"coredns-674b8bbfcf-n6sg4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.105.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali26141c7611b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:48.281233 env[1205]: 2025-07-16 12:20:48.168 [INFO][4745] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" Jul 16 12:20:48.281233 env[1205]: 2025-07-16 12:20:48.168 [INFO][4745] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" iface="eth0" netns="" Jul 16 12:20:48.281233 env[1205]: 2025-07-16 12:20:48.168 [INFO][4745] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" Jul 16 12:20:48.281233 env[1205]: 2025-07-16 12:20:48.168 [INFO][4745] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" Jul 16 12:20:48.281233 env[1205]: 2025-07-16 12:20:48.250 [INFO][4753] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" HandleID="k8s-pod-network.c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0" Jul 16 12:20:48.281233 env[1205]: 2025-07-16 12:20:48.251 [INFO][4753] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:48.281233 env[1205]: 2025-07-16 12:20:48.251 [INFO][4753] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:48.281233 env[1205]: 2025-07-16 12:20:48.262 [WARNING][4753] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" HandleID="k8s-pod-network.c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0" Jul 16 12:20:48.281233 env[1205]: 2025-07-16 12:20:48.262 [INFO][4753] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" HandleID="k8s-pod-network.c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--n6sg4-eth0" Jul 16 12:20:48.281233 env[1205]: 2025-07-16 12:20:48.270 [INFO][4753] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:48.281233 env[1205]: 2025-07-16 12:20:48.278 [INFO][4745] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251" Jul 16 12:20:48.283590 env[1205]: time="2025-07-16T12:20:48.281255635Z" level=info msg="TearDown network for sandbox \"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251\" successfully" Jul 16 12:20:48.286135 env[1205]: time="2025-07-16T12:20:48.286088717Z" level=info msg="RemovePodSandbox \"c558d6d3f8e9406911933bcecca755c413d7de6356bb956566b46e191b878251\" returns successfully" Jul 16 12:20:48.291035 env[1205]: time="2025-07-16T12:20:48.291000334Z" level=info msg="StopPodSandbox for \"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8\"" Jul 16 12:20:48.552620 env[1205]: 2025-07-16 12:20:48.388 [WARNING][4770] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0", GenerateName:"calico-kube-controllers-6c568f6db7-", Namespace:"calico-system", SelfLink:"", UID:"a054c48d-9afd-4483-81bd-e5d032ec6f4b", ResourceVersion:"992", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6c568f6db7", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682", Pod:"calico-kube-controllers-6c568f6db7-r8npm", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.105.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali14f3dce92eb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:48.552620 env[1205]: 2025-07-16 12:20:48.388 [INFO][4770] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" Jul 16 12:20:48.552620 env[1205]: 2025-07-16 12:20:48.388 [INFO][4770] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" iface="eth0" netns="" Jul 16 12:20:48.552620 env[1205]: 2025-07-16 12:20:48.388 [INFO][4770] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" Jul 16 12:20:48.552620 env[1205]: 2025-07-16 12:20:48.389 [INFO][4770] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" Jul 16 12:20:48.552620 env[1205]: 2025-07-16 12:20:48.493 [INFO][4777] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" HandleID="k8s-pod-network.048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0" Jul 16 12:20:48.552620 env[1205]: 2025-07-16 12:20:48.493 [INFO][4777] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:48.552620 env[1205]: 2025-07-16 12:20:48.493 [INFO][4777] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:48.552620 env[1205]: 2025-07-16 12:20:48.526 [WARNING][4777] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" HandleID="k8s-pod-network.048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0" Jul 16 12:20:48.552620 env[1205]: 2025-07-16 12:20:48.526 [INFO][4777] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" HandleID="k8s-pod-network.048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0" Jul 16 12:20:48.552620 env[1205]: 2025-07-16 12:20:48.532 [INFO][4777] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:48.552620 env[1205]: 2025-07-16 12:20:48.546 [INFO][4770] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" Jul 16 12:20:48.552620 env[1205]: time="2025-07-16T12:20:48.552564237Z" level=info msg="TearDown network for sandbox \"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8\" successfully" Jul 16 12:20:48.552620 env[1205]: time="2025-07-16T12:20:48.552607139Z" level=info msg="StopPodSandbox for \"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8\" returns successfully" Jul 16 12:20:48.555478 env[1205]: time="2025-07-16T12:20:48.553123121Z" level=info msg="RemovePodSandbox for \"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8\"" Jul 16 12:20:48.555478 env[1205]: time="2025-07-16T12:20:48.553152774Z" level=info msg="Forcibly stopping sandbox \"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8\"" Jul 16 12:20:48.959000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:20:48.974599 kernel: kauditd_printk_skb: 122 callbacks suppressed Jul 16 12:20:48.978763 kernel: audit: type=1400 audit(1752668448.959:1447): avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:20:48.979254 kernel: audit: type=1300 audit(1752668448.959:1447): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002ff0440 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:20:48.959000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002ff0440 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:20:48.959000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:20:48.984391 kernel: audit: type=1327 audit(1752668448.959:1447): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:20:48.986000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:20:48.990498 kernel: audit: type=1400 audit(1752668448.986:1448): avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:20:48.986000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c003025200 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:20:48.996389 kernel: audit: type=1300 audit(1752668448.986:1448): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c003025200 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:20:48.986000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:20:49.003387 kernel: audit: type=1327 audit(1752668448.986:1448): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:20:49.009000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:20:49.012000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:20:49.016460 kernel: audit: type=1400 audit(1752668449.009:1449): avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:20:49.016544 kernel: audit: type=1400 audit(1752668449.012:1450): avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:20:49.012000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c003025240 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:20:49.027385 kernel: audit: type=1300 audit(1752668449.012:1450): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c003025240 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:20:49.027481 kernel: audit: type=1327 audit(1752668449.012:1450): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:20:49.012000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:20:49.009000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c003025220 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:20:49.009000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:20:49.075400 env[1205]: 2025-07-16 12:20:48.782 [WARNING][4792] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0", GenerateName:"calico-kube-controllers-6c568f6db7-", Namespace:"calico-system", SelfLink:"", UID:"a054c48d-9afd-4483-81bd-e5d032ec6f4b", ResourceVersion:"992", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6c568f6db7", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682", Pod:"calico-kube-controllers-6c568f6db7-r8npm", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.105.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali14f3dce92eb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:49.075400 env[1205]: 2025-07-16 12:20:48.782 [INFO][4792] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" Jul 16 12:20:49.075400 env[1205]: 2025-07-16 12:20:48.782 [INFO][4792] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" iface="eth0" netns="" Jul 16 12:20:49.075400 env[1205]: 2025-07-16 12:20:48.782 [INFO][4792] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" Jul 16 12:20:49.075400 env[1205]: 2025-07-16 12:20:48.783 [INFO][4792] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" Jul 16 12:20:49.075400 env[1205]: 2025-07-16 12:20:48.942 [INFO][4799] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" HandleID="k8s-pod-network.048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0" Jul 16 12:20:49.075400 env[1205]: 2025-07-16 12:20:48.954 [INFO][4799] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:49.075400 env[1205]: 2025-07-16 12:20:48.955 [INFO][4799] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:49.075400 env[1205]: 2025-07-16 12:20:49.049 [WARNING][4799] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" HandleID="k8s-pod-network.048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0" Jul 16 12:20:49.075400 env[1205]: 2025-07-16 12:20:49.050 [INFO][4799] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" HandleID="k8s-pod-network.048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--kube--controllers--6c568f6db7--r8npm-eth0" Jul 16 12:20:49.075400 env[1205]: 2025-07-16 12:20:49.067 [INFO][4799] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:49.075400 env[1205]: 2025-07-16 12:20:49.072 [INFO][4792] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8" Jul 16 12:20:49.076579 env[1205]: time="2025-07-16T12:20:49.075442795Z" level=info msg="TearDown network for sandbox \"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8\" successfully" Jul 16 12:20:49.087447 env[1205]: time="2025-07-16T12:20:49.082798983Z" level=info msg="RemovePodSandbox \"048f5dd44d15bbb617cc239dd447ffe7a38ea06251fa7412a590d10c63bd22d8\" returns successfully" Jul 16 12:20:49.087447 env[1205]: time="2025-07-16T12:20:49.083857530Z" level=info msg="StopPodSandbox for \"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5\"" Jul 16 12:20:49.439313 env[1205]: 2025-07-16 12:20:49.239 [WARNING][4815] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"4a5efb8c-684a-4214-9e4c-7f907cf4218d", ResourceVersion:"997", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21", Pod:"csi-node-driver-v4b2s", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.105.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali00db1ea0a18", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:49.439313 env[1205]: 2025-07-16 12:20:49.239 [INFO][4815] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" Jul 16 12:20:49.439313 env[1205]: 2025-07-16 12:20:49.239 [INFO][4815] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" iface="eth0" netns="" Jul 16 12:20:49.439313 env[1205]: 2025-07-16 12:20:49.239 [INFO][4815] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" Jul 16 12:20:49.439313 env[1205]: 2025-07-16 12:20:49.240 [INFO][4815] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" Jul 16 12:20:49.439313 env[1205]: 2025-07-16 12:20:49.354 [INFO][4822] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" HandleID="k8s-pod-network.69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" Workload="srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0" Jul 16 12:20:49.439313 env[1205]: 2025-07-16 12:20:49.355 [INFO][4822] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:49.439313 env[1205]: 2025-07-16 12:20:49.355 [INFO][4822] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:49.439313 env[1205]: 2025-07-16 12:20:49.429 [WARNING][4822] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" HandleID="k8s-pod-network.69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" Workload="srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0" Jul 16 12:20:49.439313 env[1205]: 2025-07-16 12:20:49.429 [INFO][4822] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" HandleID="k8s-pod-network.69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" Workload="srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0" Jul 16 12:20:49.439313 env[1205]: 2025-07-16 12:20:49.433 [INFO][4822] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:49.439313 env[1205]: 2025-07-16 12:20:49.437 [INFO][4815] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" Jul 16 12:20:49.441325 env[1205]: time="2025-07-16T12:20:49.439341233Z" level=info msg="TearDown network for sandbox \"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5\" successfully" Jul 16 12:20:49.441325 env[1205]: time="2025-07-16T12:20:49.439399771Z" level=info msg="StopPodSandbox for \"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5\" returns successfully" Jul 16 12:20:49.441325 env[1205]: time="2025-07-16T12:20:49.441007006Z" level=info msg="RemovePodSandbox for \"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5\"" Jul 16 12:20:49.441325 env[1205]: time="2025-07-16T12:20:49.441045920Z" level=info msg="Forcibly stopping sandbox \"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5\"" Jul 16 12:20:49.776359 env[1205]: 2025-07-16 12:20:49.650 [WARNING][4837] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"4a5efb8c-684a-4214-9e4c-7f907cf4218d", ResourceVersion:"997", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21", Pod:"csi-node-driver-v4b2s", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.105.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali00db1ea0a18", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:49.776359 env[1205]: 2025-07-16 12:20:49.650 [INFO][4837] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" Jul 16 12:20:49.776359 env[1205]: 2025-07-16 12:20:49.650 [INFO][4837] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" iface="eth0" netns="" Jul 16 12:20:49.776359 env[1205]: 2025-07-16 12:20:49.650 [INFO][4837] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" Jul 16 12:20:49.776359 env[1205]: 2025-07-16 12:20:49.650 [INFO][4837] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" Jul 16 12:20:49.776359 env[1205]: 2025-07-16 12:20:49.742 [INFO][4844] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" HandleID="k8s-pod-network.69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" Workload="srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0" Jul 16 12:20:49.776359 env[1205]: 2025-07-16 12:20:49.742 [INFO][4844] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:49.776359 env[1205]: 2025-07-16 12:20:49.742 [INFO][4844] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:49.776359 env[1205]: 2025-07-16 12:20:49.755 [WARNING][4844] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" HandleID="k8s-pod-network.69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" Workload="srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0" Jul 16 12:20:49.776359 env[1205]: 2025-07-16 12:20:49.755 [INFO][4844] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" HandleID="k8s-pod-network.69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" Workload="srv--frvg8.gb1.brightbox.com-k8s-csi--node--driver--v4b2s-eth0" Jul 16 12:20:49.776359 env[1205]: 2025-07-16 12:20:49.760 [INFO][4844] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:49.776359 env[1205]: 2025-07-16 12:20:49.773 [INFO][4837] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5" Jul 16 12:20:49.776359 env[1205]: time="2025-07-16T12:20:49.776291556Z" level=info msg="TearDown network for sandbox \"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5\" successfully" Jul 16 12:20:49.781586 env[1205]: time="2025-07-16T12:20:49.781539924Z" level=info msg="RemovePodSandbox \"69fb59d98e534484dc408d85e589e4bd8ccff5d67ab59dd8adb057efb03051f5\" returns successfully" Jul 16 12:20:49.782171 env[1205]: time="2025-07-16T12:20:49.782143150Z" level=info msg="StopPodSandbox for \"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e\"" Jul 16 12:20:49.944000 audit[4539]: AVC avc: denied { watch } for pid=4539 comm="apiserver" path="/calico-apiserver-certs/..2025_07_16_12_20_22.548963480/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c474,c739 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c474,c739 tclass=file permissive=0 Jul 16 12:20:49.944000 audit[4539]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00161fca0 a2=fc6 a3=0 items=0 ppid=3736 pid=4539 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c474,c739 key=(null) Jul 16 12:20:49.944000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 16 12:20:50.097295 env[1205]: 2025-07-16 12:20:49.917 [WARNING][4860] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0", GenerateName:"calico-apiserver-55dcc56559-", Namespace:"calico-apiserver", SelfLink:"", UID:"2241f06a-ab47-4d15-8e36-a94bf91d7b1d", ResourceVersion:"1042", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"55dcc56559", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b", Pod:"calico-apiserver-55dcc56559-cjgqh", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.105.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali86fa38fe993", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:50.097295 env[1205]: 2025-07-16 12:20:49.917 [INFO][4860] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" Jul 16 12:20:50.097295 env[1205]: 2025-07-16 12:20:49.917 [INFO][4860] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" iface="eth0" netns="" Jul 16 12:20:50.097295 env[1205]: 2025-07-16 12:20:49.917 [INFO][4860] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" Jul 16 12:20:50.097295 env[1205]: 2025-07-16 12:20:49.917 [INFO][4860] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" Jul 16 12:20:50.097295 env[1205]: 2025-07-16 12:20:50.018 [INFO][4867] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" HandleID="k8s-pod-network.7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0" Jul 16 12:20:50.097295 env[1205]: 2025-07-16 12:20:50.019 [INFO][4867] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:50.097295 env[1205]: 2025-07-16 12:20:50.019 [INFO][4867] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:50.097295 env[1205]: 2025-07-16 12:20:50.065 [WARNING][4867] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" HandleID="k8s-pod-network.7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0" Jul 16 12:20:50.097295 env[1205]: 2025-07-16 12:20:50.066 [INFO][4867] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" HandleID="k8s-pod-network.7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0" Jul 16 12:20:50.097295 env[1205]: 2025-07-16 12:20:50.077 [INFO][4867] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:50.097295 env[1205]: 2025-07-16 12:20:50.088 [INFO][4860] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" Jul 16 12:20:50.099394 env[1205]: time="2025-07-16T12:20:50.097320596Z" level=info msg="TearDown network for sandbox \"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e\" successfully" Jul 16 12:20:50.099394 env[1205]: time="2025-07-16T12:20:50.097354668Z" level=info msg="StopPodSandbox for \"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e\" returns successfully" Jul 16 12:20:50.099394 env[1205]: time="2025-07-16T12:20:50.098049130Z" level=info msg="RemovePodSandbox for \"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e\"" Jul 16 12:20:50.099394 env[1205]: time="2025-07-16T12:20:50.098092283Z" level=info msg="Forcibly stopping sandbox \"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e\"" Jul 16 12:20:50.287000 audit[4461]: AVC avc: denied { watch } for pid=4461 comm="apiserver" path="/calico-apiserver-certs/..2025_07_16_12_20_22.3586990452/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c509,c728 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c509,c728 tclass=file permissive=0 Jul 16 12:20:50.287000 audit[4461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001039ba0 a2=fc6 a3=0 items=0 ppid=3617 pid=4461 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c509,c728 key=(null) Jul 16 12:20:50.287000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 16 12:20:50.552942 env[1205]: 2025-07-16 12:20:50.336 [WARNING][4882] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0", GenerateName:"calico-apiserver-55dcc56559-", Namespace:"calico-apiserver", SelfLink:"", UID:"2241f06a-ab47-4d15-8e36-a94bf91d7b1d", ResourceVersion:"1042", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"55dcc56559", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"c62066bee03d1298c54949508f5260e5ceac2b2e5961af22773544fa326b480b", Pod:"calico-apiserver-55dcc56559-cjgqh", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.105.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali86fa38fe993", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:50.552942 env[1205]: 2025-07-16 12:20:50.336 [INFO][4882] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" Jul 16 12:20:50.552942 env[1205]: 2025-07-16 12:20:50.336 [INFO][4882] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" iface="eth0" netns="" Jul 16 12:20:50.552942 env[1205]: 2025-07-16 12:20:50.336 [INFO][4882] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" Jul 16 12:20:50.552942 env[1205]: 2025-07-16 12:20:50.336 [INFO][4882] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" Jul 16 12:20:50.552942 env[1205]: 2025-07-16 12:20:50.498 [INFO][4889] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" HandleID="k8s-pod-network.7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0" Jul 16 12:20:50.552942 env[1205]: 2025-07-16 12:20:50.503 [INFO][4889] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:50.552942 env[1205]: 2025-07-16 12:20:50.503 [INFO][4889] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:50.552942 env[1205]: 2025-07-16 12:20:50.525 [WARNING][4889] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" HandleID="k8s-pod-network.7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0" Jul 16 12:20:50.552942 env[1205]: 2025-07-16 12:20:50.525 [INFO][4889] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" HandleID="k8s-pod-network.7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--cjgqh-eth0" Jul 16 12:20:50.552942 env[1205]: 2025-07-16 12:20:50.530 [INFO][4889] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:50.552942 env[1205]: 2025-07-16 12:20:50.547 [INFO][4882] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e" Jul 16 12:20:50.562446 env[1205]: time="2025-07-16T12:20:50.560784139Z" level=info msg="TearDown network for sandbox \"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e\" successfully" Jul 16 12:20:50.589278 env[1205]: time="2025-07-16T12:20:50.589101532Z" level=info msg="RemovePodSandbox \"7f75f51352d2560d0399fda899fa3825c1da2f1f6c319e1aa468980b5271c67e\" returns successfully" Jul 16 12:20:50.670127 env[1205]: time="2025-07-16T12:20:50.670066419Z" level=info msg="StopPodSandbox for \"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8\"" Jul 16 12:20:50.782000 audit[4495]: AVC avc: denied { watch } for pid=4495 comm="apiserver" path="/calico-apiserver-certs/..2025_07_16_12_20_22.714655769/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c676,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c676,c893 tclass=file permissive=0 Jul 16 12:20:50.782000 audit[4495]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000b56ac0 a2=fc6 a3=0 items=0 ppid=3658 pid=4495 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c676,c893 key=(null) Jul 16 12:20:50.782000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 16 12:20:51.100000 audit[4912]: NETFILTER_CFG table=filter:123 family=2 entries=11 op=nft_register_rule pid=4912 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:51.100000 audit[4912]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fffb8ed6ea0 a2=0 a3=7fffb8ed6e8c items=0 ppid=2161 pid=4912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:51.100000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:51.108000 audit[4912]: NETFILTER_CFG table=nat:124 family=2 entries=29 op=nft_register_chain pid=4912 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:20:51.108000 audit[4912]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7fffb8ed6ea0 a2=0 a3=7fffb8ed6e8c items=0 ppid=2161 pid=4912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:51.108000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:20:51.160643 env[1205]: time="2025-07-16T12:20:51.158957276Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:51.179448 env[1205]: time="2025-07-16T12:20:51.166179902Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:51.179448 env[1205]: time="2025-07-16T12:20:51.168645385Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:51.179448 env[1205]: time="2025-07-16T12:20:51.170308561Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:51.179448 env[1205]: time="2025-07-16T12:20:51.170963482Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a\"" Jul 16 12:20:51.408523 env[1205]: 2025-07-16 12:20:51.146 [WARNING][4903] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"a9e6039e-de2d-4a1f-9793-315b7a02db3c", ResourceVersion:"1015", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 19, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2", Pod:"coredns-674b8bbfcf-7kxwt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.105.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic4efd9635b4", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:51.408523 env[1205]: 2025-07-16 12:20:51.154 [INFO][4903] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" Jul 16 12:20:51.408523 env[1205]: 2025-07-16 12:20:51.154 [INFO][4903] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" iface="eth0" netns="" Jul 16 12:20:51.408523 env[1205]: 2025-07-16 12:20:51.154 [INFO][4903] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" Jul 16 12:20:51.408523 env[1205]: 2025-07-16 12:20:51.154 [INFO][4903] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" Jul 16 12:20:51.408523 env[1205]: 2025-07-16 12:20:51.385 [INFO][4914] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" HandleID="k8s-pod-network.0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0" Jul 16 12:20:51.408523 env[1205]: 2025-07-16 12:20:51.387 [INFO][4914] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:51.408523 env[1205]: 2025-07-16 12:20:51.387 [INFO][4914] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:51.408523 env[1205]: 2025-07-16 12:20:51.399 [WARNING][4914] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" HandleID="k8s-pod-network.0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0" Jul 16 12:20:51.408523 env[1205]: 2025-07-16 12:20:51.399 [INFO][4914] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" HandleID="k8s-pod-network.0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0" Jul 16 12:20:51.408523 env[1205]: 2025-07-16 12:20:51.401 [INFO][4914] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:51.408523 env[1205]: 2025-07-16 12:20:51.405 [INFO][4903] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" Jul 16 12:20:51.408523 env[1205]: time="2025-07-16T12:20:51.407582727Z" level=info msg="TearDown network for sandbox \"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8\" successfully" Jul 16 12:20:51.408523 env[1205]: time="2025-07-16T12:20:51.407617959Z" level=info msg="StopPodSandbox for \"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8\" returns successfully" Jul 16 12:20:51.576145 env[1205]: time="2025-07-16T12:20:51.575648371Z" level=info msg="RemovePodSandbox for \"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8\"" Jul 16 12:20:51.576145 env[1205]: time="2025-07-16T12:20:51.575737593Z" level=info msg="Forcibly stopping sandbox \"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8\"" Jul 16 12:20:51.730983 env[1205]: time="2025-07-16T12:20:51.729992500Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 16 12:20:52.260508 env[1205]: 2025-07-16 12:20:51.877 [WARNING][4928] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"a9e6039e-de2d-4a1f-9793-315b7a02db3c", ResourceVersion:"1015", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 19, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"b43baa18229fc7bb0819f39cbeaecdd4167aee02bfe7f7d615d259b196b30ed2", Pod:"coredns-674b8bbfcf-7kxwt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.105.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic4efd9635b4", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:52.260508 env[1205]: 2025-07-16 12:20:51.879 [INFO][4928] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" Jul 16 12:20:52.260508 env[1205]: 2025-07-16 12:20:51.879 [INFO][4928] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" iface="eth0" netns="" Jul 16 12:20:52.260508 env[1205]: 2025-07-16 12:20:51.879 [INFO][4928] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" Jul 16 12:20:52.260508 env[1205]: 2025-07-16 12:20:51.879 [INFO][4928] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" Jul 16 12:20:52.260508 env[1205]: 2025-07-16 12:20:52.173 [INFO][4936] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" HandleID="k8s-pod-network.0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0" Jul 16 12:20:52.260508 env[1205]: 2025-07-16 12:20:52.181 [INFO][4936] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:52.260508 env[1205]: 2025-07-16 12:20:52.182 [INFO][4936] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:52.260508 env[1205]: 2025-07-16 12:20:52.238 [WARNING][4936] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" HandleID="k8s-pod-network.0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0" Jul 16 12:20:52.260508 env[1205]: 2025-07-16 12:20:52.238 [INFO][4936] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" HandleID="k8s-pod-network.0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" Workload="srv--frvg8.gb1.brightbox.com-k8s-coredns--674b8bbfcf--7kxwt-eth0" Jul 16 12:20:52.260508 env[1205]: 2025-07-16 12:20:52.250 [INFO][4936] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:52.260508 env[1205]: 2025-07-16 12:20:52.254 [INFO][4928] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8" Jul 16 12:20:52.278340 env[1205]: time="2025-07-16T12:20:52.260844410Z" level=info msg="TearDown network for sandbox \"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8\" successfully" Jul 16 12:20:52.278340 env[1205]: time="2025-07-16T12:20:52.278140804Z" level=info msg="RemovePodSandbox \"0a967ac226e4ec9960b4ce4bf85b6c8f9cc980f6f5ac38e1d7990d0d39e2d9c8\" returns successfully" Jul 16 12:20:52.364486 env[1205]: time="2025-07-16T12:20:52.364432024Z" level=info msg="StopPodSandbox for \"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e\"" Jul 16 12:20:52.519607 env[1205]: time="2025-07-16T12:20:52.519469753Z" level=info msg="CreateContainer within sandbox \"9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 16 12:20:52.548922 env[1205]: time="2025-07-16T12:20:52.546005604Z" level=info msg="CreateContainer within sandbox \"9cf96a3a137c4e4b95b840973f8d36b3dd22a3f1e5e20ee5473ef27eec01f682\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"b7b4cee5afa2c5ccb34395f3c076eb4cfc1a3bfd4c189318fdcd70631378f1f9\"" Jul 16 12:20:52.548082 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3436822860.mount: Deactivated successfully. Jul 16 12:20:52.587619 env[1205]: time="2025-07-16T12:20:52.587165556Z" level=info msg="StartContainer for \"b7b4cee5afa2c5ccb34395f3c076eb4cfc1a3bfd4c189318fdcd70631378f1f9\"" Jul 16 12:20:52.674338 systemd[1]: Started cri-containerd-b7b4cee5afa2c5ccb34395f3c076eb4cfc1a3bfd4c189318fdcd70631378f1f9.scope. Jul 16 12:20:52.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.777000 audit: BPF prog-id=225 op=LOAD Jul 16 12:20:52.781000 audit[4967]: AVC avc: denied { bpf } for pid=4967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.781000 audit[4967]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4189 pid=4967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:52.781000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237623463656535616661326335636362333433393566336330373665 Jul 16 12:20:52.782000 audit[4967]: AVC avc: denied { perfmon } for pid=4967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.782000 audit[4967]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4189 pid=4967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:52.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237623463656535616661326335636362333433393566336330373665 Jul 16 12:20:52.782000 audit[4967]: AVC avc: denied { bpf } for pid=4967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.782000 audit[4967]: AVC avc: denied { bpf } for pid=4967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.782000 audit[4967]: AVC avc: denied { bpf } for pid=4967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.782000 audit[4967]: AVC avc: denied { perfmon } for pid=4967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.782000 audit[4967]: AVC avc: denied { perfmon } for pid=4967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.782000 audit[4967]: AVC avc: denied { perfmon } for pid=4967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.782000 audit[4967]: AVC avc: denied { perfmon } for pid=4967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.782000 audit[4967]: AVC avc: denied { perfmon } for pid=4967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.782000 audit[4967]: AVC avc: denied { bpf } for pid=4967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.782000 audit[4967]: AVC avc: denied { bpf } for pid=4967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.782000 audit: BPF prog-id=226 op=LOAD Jul 16 12:20:52.782000 audit[4967]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002edf80 items=0 ppid=4189 pid=4967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:52.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237623463656535616661326335636362333433393566336330373665 Jul 16 12:20:52.783000 audit[4967]: AVC avc: denied { bpf } for pid=4967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.783000 audit[4967]: AVC avc: denied { bpf } for pid=4967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.783000 audit[4967]: AVC avc: denied { perfmon } for pid=4967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.783000 audit[4967]: AVC avc: denied { perfmon } for pid=4967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.783000 audit[4967]: AVC avc: denied { perfmon } for pid=4967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.783000 audit[4967]: AVC avc: denied { perfmon } for pid=4967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.783000 audit[4967]: AVC avc: denied { perfmon } for pid=4967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.783000 audit[4967]: AVC avc: denied { bpf } for pid=4967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.783000 audit[4967]: AVC avc: denied { bpf } for pid=4967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.783000 audit: BPF prog-id=227 op=LOAD Jul 16 12:20:52.783000 audit[4967]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002edfc8 items=0 ppid=4189 pid=4967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:52.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237623463656535616661326335636362333433393566336330373665 Jul 16 12:20:52.783000 audit: BPF prog-id=227 op=UNLOAD Jul 16 12:20:52.783000 audit: BPF prog-id=226 op=UNLOAD Jul 16 12:20:52.783000 audit[4967]: AVC avc: denied { bpf } for pid=4967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.783000 audit[4967]: AVC avc: denied { bpf } for pid=4967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.783000 audit[4967]: AVC avc: denied { bpf } for pid=4967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.783000 audit[4967]: AVC avc: denied { perfmon } for pid=4967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.783000 audit[4967]: AVC avc: denied { perfmon } for pid=4967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.783000 audit[4967]: AVC avc: denied { perfmon } for pid=4967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.783000 audit[4967]: AVC avc: denied { perfmon } for pid=4967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.783000 audit[4967]: AVC avc: denied { perfmon } for pid=4967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.783000 audit[4967]: AVC avc: denied { bpf } for pid=4967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.783000 audit[4967]: AVC avc: denied { bpf } for pid=4967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:52.783000 audit: BPF prog-id=228 op=LOAD Jul 16 12:20:52.783000 audit[4967]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003d43d8 items=0 ppid=4189 pid=4967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:52.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237623463656535616661326335636362333433393566336330373665 Jul 16 12:20:52.881197 env[1205]: time="2025-07-16T12:20:52.881148521Z" level=info msg="StartContainer for \"b7b4cee5afa2c5ccb34395f3c076eb4cfc1a3bfd4c189318fdcd70631378f1f9\" returns successfully" Jul 16 12:20:52.895210 env[1205]: 2025-07-16 12:20:52.640 [WARNING][4953] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-whisker--bff5bbd48--wvjht-eth0" Jul 16 12:20:52.895210 env[1205]: 2025-07-16 12:20:52.641 [INFO][4953] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" Jul 16 12:20:52.895210 env[1205]: 2025-07-16 12:20:52.641 [INFO][4953] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" iface="eth0" netns="" Jul 16 12:20:52.895210 env[1205]: 2025-07-16 12:20:52.641 [INFO][4953] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" Jul 16 12:20:52.895210 env[1205]: 2025-07-16 12:20:52.641 [INFO][4953] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" Jul 16 12:20:52.895210 env[1205]: 2025-07-16 12:20:52.851 [INFO][4975] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" HandleID="k8s-pod-network.c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" Workload="srv--frvg8.gb1.brightbox.com-k8s-whisker--bff5bbd48--wvjht-eth0" Jul 16 12:20:52.895210 env[1205]: 2025-07-16 12:20:52.852 [INFO][4975] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:52.895210 env[1205]: 2025-07-16 12:20:52.852 [INFO][4975] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:52.895210 env[1205]: 2025-07-16 12:20:52.882 [WARNING][4975] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" HandleID="k8s-pod-network.c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" Workload="srv--frvg8.gb1.brightbox.com-k8s-whisker--bff5bbd48--wvjht-eth0" Jul 16 12:20:52.895210 env[1205]: 2025-07-16 12:20:52.882 [INFO][4975] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" HandleID="k8s-pod-network.c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" Workload="srv--frvg8.gb1.brightbox.com-k8s-whisker--bff5bbd48--wvjht-eth0" Jul 16 12:20:52.895210 env[1205]: 2025-07-16 12:20:52.887 [INFO][4975] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:52.895210 env[1205]: 2025-07-16 12:20:52.892 [INFO][4953] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" Jul 16 12:20:52.895210 env[1205]: time="2025-07-16T12:20:52.895062806Z" level=info msg="TearDown network for sandbox \"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e\" successfully" Jul 16 12:20:52.895210 env[1205]: time="2025-07-16T12:20:52.895094610Z" level=info msg="StopPodSandbox for \"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e\" returns successfully" Jul 16 12:20:52.901437 env[1205]: time="2025-07-16T12:20:52.901306911Z" level=info msg="RemovePodSandbox for \"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e\"" Jul 16 12:20:52.902155 env[1205]: time="2025-07-16T12:20:52.901351065Z" level=info msg="Forcibly stopping sandbox \"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e\"" Jul 16 12:20:53.123300 env[1205]: 2025-07-16 12:20:52.991 [WARNING][5007] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-whisker--bff5bbd48--wvjht-eth0" Jul 16 12:20:53.123300 env[1205]: 2025-07-16 12:20:52.991 [INFO][5007] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" Jul 16 12:20:53.123300 env[1205]: 2025-07-16 12:20:52.991 [INFO][5007] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" iface="eth0" netns="" Jul 16 12:20:53.123300 env[1205]: 2025-07-16 12:20:52.991 [INFO][5007] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" Jul 16 12:20:53.123300 env[1205]: 2025-07-16 12:20:52.991 [INFO][5007] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" Jul 16 12:20:53.123300 env[1205]: 2025-07-16 12:20:53.077 [INFO][5019] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" HandleID="k8s-pod-network.c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" Workload="srv--frvg8.gb1.brightbox.com-k8s-whisker--bff5bbd48--wvjht-eth0" Jul 16 12:20:53.123300 env[1205]: 2025-07-16 12:20:53.087 [INFO][5019] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:53.123300 env[1205]: 2025-07-16 12:20:53.088 [INFO][5019] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:53.123300 env[1205]: 2025-07-16 12:20:53.114 [WARNING][5019] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" HandleID="k8s-pod-network.c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" Workload="srv--frvg8.gb1.brightbox.com-k8s-whisker--bff5bbd48--wvjht-eth0" Jul 16 12:20:53.123300 env[1205]: 2025-07-16 12:20:53.115 [INFO][5019] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" HandleID="k8s-pod-network.c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" Workload="srv--frvg8.gb1.brightbox.com-k8s-whisker--bff5bbd48--wvjht-eth0" Jul 16 12:20:53.123300 env[1205]: 2025-07-16 12:20:53.118 [INFO][5019] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:53.123300 env[1205]: 2025-07-16 12:20:53.121 [INFO][5007] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e" Jul 16 12:20:53.125504 env[1205]: time="2025-07-16T12:20:53.124307779Z" level=info msg="TearDown network for sandbox \"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e\" successfully" Jul 16 12:20:53.135450 env[1205]: time="2025-07-16T12:20:53.135400362Z" level=info msg="RemovePodSandbox \"c308ddff40ad6c64c59981c1e1af21efc78fc106c7fb31b1cc149c2113d04e1e\" returns successfully" Jul 16 12:20:53.172040 env[1205]: time="2025-07-16T12:20:53.171375140Z" level=info msg="StopPodSandbox for \"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7\"" Jul 16 12:20:53.541276 env[1205]: 2025-07-16 12:20:53.327 [WARNING][5042] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0", GenerateName:"calico-apiserver-5944847977-", Namespace:"calico-apiserver", SelfLink:"", UID:"236ebe5f-a95d-42df-8840-c8ac6fd743e4", ResourceVersion:"1087", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5944847977", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812", Pod:"calico-apiserver-5944847977-8tj42", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.105.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic2aacc2f376", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:53.541276 env[1205]: 2025-07-16 12:20:53.329 [INFO][5042] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" Jul 16 12:20:53.541276 env[1205]: 2025-07-16 12:20:53.329 [INFO][5042] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" iface="eth0" netns="" Jul 16 12:20:53.541276 env[1205]: 2025-07-16 12:20:53.329 [INFO][5042] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" Jul 16 12:20:53.541276 env[1205]: 2025-07-16 12:20:53.329 [INFO][5042] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" Jul 16 12:20:53.541276 env[1205]: 2025-07-16 12:20:53.454 [INFO][5049] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" HandleID="k8s-pod-network.16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:20:53.541276 env[1205]: 2025-07-16 12:20:53.458 [INFO][5049] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:53.541276 env[1205]: 2025-07-16 12:20:53.458 [INFO][5049] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:53.541276 env[1205]: 2025-07-16 12:20:53.503 [WARNING][5049] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" HandleID="k8s-pod-network.16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:20:53.541276 env[1205]: 2025-07-16 12:20:53.503 [INFO][5049] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" HandleID="k8s-pod-network.16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:20:53.541276 env[1205]: 2025-07-16 12:20:53.519 [INFO][5049] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:53.541276 env[1205]: 2025-07-16 12:20:53.528 [INFO][5042] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" Jul 16 12:20:53.551636 env[1205]: time="2025-07-16T12:20:53.541482780Z" level=info msg="TearDown network for sandbox \"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7\" successfully" Jul 16 12:20:53.551636 env[1205]: time="2025-07-16T12:20:53.541533247Z" level=info msg="StopPodSandbox for \"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7\" returns successfully" Jul 16 12:20:53.551636 env[1205]: time="2025-07-16T12:20:53.545283816Z" level=info msg="RemovePodSandbox for \"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7\"" Jul 16 12:20:53.551636 env[1205]: time="2025-07-16T12:20:53.545364449Z" level=info msg="Forcibly stopping sandbox \"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7\"" Jul 16 12:20:53.952424 env[1205]: 2025-07-16 12:20:53.755 [WARNING][5064] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0", GenerateName:"calico-apiserver-5944847977-", Namespace:"calico-apiserver", SelfLink:"", UID:"236ebe5f-a95d-42df-8840-c8ac6fd743e4", ResourceVersion:"1087", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 20, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5944847977", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812", Pod:"calico-apiserver-5944847977-8tj42", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.105.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic2aacc2f376", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:20:53.952424 env[1205]: 2025-07-16 12:20:53.757 [INFO][5064] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" Jul 16 12:20:53.952424 env[1205]: 2025-07-16 12:20:53.757 [INFO][5064] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" iface="eth0" netns="" Jul 16 12:20:53.952424 env[1205]: 2025-07-16 12:20:53.757 [INFO][5064] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" Jul 16 12:20:53.952424 env[1205]: 2025-07-16 12:20:53.757 [INFO][5064] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" Jul 16 12:20:53.952424 env[1205]: 2025-07-16 12:20:53.917 [INFO][5071] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" HandleID="k8s-pod-network.16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:20:53.952424 env[1205]: 2025-07-16 12:20:53.921 [INFO][5071] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:20:53.952424 env[1205]: 2025-07-16 12:20:53.923 [INFO][5071] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:20:53.952424 env[1205]: 2025-07-16 12:20:53.944 [WARNING][5071] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" HandleID="k8s-pod-network.16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:20:53.952424 env[1205]: 2025-07-16 12:20:53.944 [INFO][5071] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" HandleID="k8s-pod-network.16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:20:53.952424 env[1205]: 2025-07-16 12:20:53.947 [INFO][5071] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:20:53.952424 env[1205]: 2025-07-16 12:20:53.949 [INFO][5064] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7" Jul 16 12:20:53.952424 env[1205]: time="2025-07-16T12:20:53.951400413Z" level=info msg="TearDown network for sandbox \"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7\" successfully" Jul 16 12:20:53.974156 env[1205]: time="2025-07-16T12:20:53.968179801Z" level=info msg="RemovePodSandbox \"16bf77a438ab5f0a90f8c0fa395c6ac3886f8c14026397c17cead506cf5aafd7\" returns successfully" Jul 16 12:20:54.490660 kubelet[2009]: I0716 12:20:54.460926 2009 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-6c568f6db7-r8npm" podStartSLOduration=32.036953547 podStartE2EDuration="46.350200826s" podCreationTimestamp="2025-07-16 12:20:08 +0000 UTC" firstStartedPulling="2025-07-16 12:20:37.393613309 +0000 UTC m=+51.708373051" lastFinishedPulling="2025-07-16 12:20:51.706860588 +0000 UTC m=+66.021620330" observedRunningTime="2025-07-16 12:20:54.010456791 +0000 UTC m=+68.325216546" watchObservedRunningTime="2025-07-16 12:20:54.350200826 +0000 UTC m=+68.664960591" Jul 16 12:20:55.262725 env[1205]: time="2025-07-16T12:20:55.262651754Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:55.283458 env[1205]: time="2025-07-16T12:20:55.266872039Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:55.283458 env[1205]: time="2025-07-16T12:20:55.271609176Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:55.283458 env[1205]: time="2025-07-16T12:20:55.273694616Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:20:55.283458 env[1205]: time="2025-07-16T12:20:55.274407644Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d\"" Jul 16 12:20:55.555483 env[1205]: time="2025-07-16T12:20:55.554875691Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 16 12:20:55.651478 env[1205]: time="2025-07-16T12:20:55.651330931Z" level=info msg="CreateContainer within sandbox \"4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 16 12:20:55.669078 env[1205]: time="2025-07-16T12:20:55.669034919Z" level=info msg="CreateContainer within sandbox \"4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"25dc8a48fd0fa57d30129bc0507d4e3c3cd617a21cd29d1fa76a7f5b3290bf16\"" Jul 16 12:20:55.672437 env[1205]: time="2025-07-16T12:20:55.672407025Z" level=info msg="StartContainer for \"25dc8a48fd0fa57d30129bc0507d4e3c3cd617a21cd29d1fa76a7f5b3290bf16\"" Jul 16 12:20:55.758583 systemd[1]: run-containerd-runc-k8s.io-25dc8a48fd0fa57d30129bc0507d4e3c3cd617a21cd29d1fa76a7f5b3290bf16-runc.vUtDL6.mount: Deactivated successfully. Jul 16 12:20:55.782739 systemd[1]: Started cri-containerd-25dc8a48fd0fa57d30129bc0507d4e3c3cd617a21cd29d1fa76a7f5b3290bf16.scope. Jul 16 12:20:55.920000 audit[5105]: AVC avc: denied { perfmon } for pid=5105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.947450 kernel: kauditd_printk_skb: 74 callbacks suppressed Jul 16 12:20:55.948498 kernel: audit: type=1400 audit(1752668455.920:1474): avc: denied { perfmon } for pid=5105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.949198 kernel: audit: type=1300 audit(1752668455.920:1474): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fce05305288 items=0 ppid=4249 pid=5105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:55.949242 kernel: audit: type=1327 audit(1752668455.920:1474): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235646338613438666430666135376433303132396263303530376434 Jul 16 12:20:55.949470 kernel: audit: type=1400 audit(1752668455.920:1475): avc: denied { bpf } for pid=5105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.920000 audit[5105]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fce05305288 items=0 ppid=4249 pid=5105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:55.954161 kernel: audit: type=1400 audit(1752668455.920:1475): avc: denied { bpf } for pid=5105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235646338613438666430666135376433303132396263303530376434 Jul 16 12:20:55.920000 audit[5105]: AVC avc: denied { bpf } for pid=5105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.920000 audit[5105]: AVC avc: denied { bpf } for pid=5105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.920000 audit[5105]: AVC avc: denied { bpf } for pid=5105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.963230 kernel: audit: type=1400 audit(1752668455.920:1475): avc: denied { bpf } for pid=5105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.920000 audit[5105]: AVC avc: denied { perfmon } for pid=5105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.968385 kernel: audit: type=1400 audit(1752668455.920:1475): avc: denied { perfmon } for pid=5105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.920000 audit[5105]: AVC avc: denied { perfmon } for pid=5105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.975384 kernel: audit: type=1400 audit(1752668455.920:1475): avc: denied { perfmon } for pid=5105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.920000 audit[5105]: AVC avc: denied { perfmon } for pid=5105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.981408 kernel: audit: type=1400 audit(1752668455.920:1475): avc: denied { perfmon } for pid=5105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.920000 audit[5105]: AVC avc: denied { perfmon } for pid=5105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.988476 kernel: audit: type=1400 audit(1752668455.920:1475): avc: denied { perfmon } for pid=5105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.920000 audit[5105]: AVC avc: denied { perfmon } for pid=5105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.920000 audit[5105]: AVC avc: denied { bpf } for pid=5105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.920000 audit[5105]: AVC avc: denied { bpf } for pid=5105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.920000 audit: BPF prog-id=229 op=LOAD Jul 16 12:20:55.920000 audit[5105]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003da528 items=0 ppid=4249 pid=5105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:55.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235646338613438666430666135376433303132396263303530376434 Jul 16 12:20:55.935000 audit[5105]: AVC avc: denied { bpf } for pid=5105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.935000 audit[5105]: AVC avc: denied { bpf } for pid=5105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.935000 audit[5105]: AVC avc: denied { perfmon } for pid=5105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.935000 audit[5105]: AVC avc: denied { perfmon } for pid=5105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.935000 audit[5105]: AVC avc: denied { perfmon } for pid=5105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.935000 audit[5105]: AVC avc: denied { perfmon } for pid=5105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.935000 audit[5105]: AVC avc: denied { perfmon } for pid=5105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.935000 audit[5105]: AVC avc: denied { bpf } for pid=5105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.935000 audit[5105]: AVC avc: denied { bpf } for pid=5105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.935000 audit: BPF prog-id=230 op=LOAD Jul 16 12:20:55.935000 audit[5105]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003da578 items=0 ppid=4249 pid=5105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:55.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235646338613438666430666135376433303132396263303530376434 Jul 16 12:20:55.935000 audit: BPF prog-id=230 op=UNLOAD Jul 16 12:20:55.935000 audit: BPF prog-id=229 op=UNLOAD Jul 16 12:20:55.935000 audit[5105]: AVC avc: denied { bpf } for pid=5105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.935000 audit[5105]: AVC avc: denied { bpf } for pid=5105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.935000 audit[5105]: AVC avc: denied { bpf } for pid=5105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.935000 audit[5105]: AVC avc: denied { perfmon } for pid=5105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.935000 audit[5105]: AVC avc: denied { perfmon } for pid=5105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.935000 audit[5105]: AVC avc: denied { perfmon } for pid=5105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.935000 audit[5105]: AVC avc: denied { perfmon } for pid=5105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.935000 audit[5105]: AVC avc: denied { perfmon } for pid=5105 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.935000 audit[5105]: AVC avc: denied { bpf } for pid=5105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.935000 audit[5105]: AVC avc: denied { bpf } for pid=5105 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:20:55.935000 audit: BPF prog-id=231 op=LOAD Jul 16 12:20:55.935000 audit[5105]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003da608 items=0 ppid=4249 pid=5105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:20:55.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235646338613438666430666135376433303132396263303530376434 Jul 16 12:20:56.005182 env[1205]: time="2025-07-16T12:20:56.004545374Z" level=info msg="StartContainer for \"25dc8a48fd0fa57d30129bc0507d4e3c3cd617a21cd29d1fa76a7f5b3290bf16\" returns successfully" Jul 16 12:20:58.983527 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4264006327.mount: Deactivated successfully. Jul 16 12:21:00.030216 env[1205]: time="2025-07-16T12:21:00.030162085Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:21:00.038500 env[1205]: time="2025-07-16T12:21:00.032566140Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:21:00.038500 env[1205]: time="2025-07-16T12:21:00.035081949Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:21:00.038500 env[1205]: time="2025-07-16T12:21:00.038027228Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:21:00.040271 env[1205]: time="2025-07-16T12:21:00.040233323Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b\"" Jul 16 12:21:00.085402 env[1205]: time="2025-07-16T12:21:00.085172876Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 16 12:21:00.173097 env[1205]: time="2025-07-16T12:21:00.173047120Z" level=info msg="CreateContainer within sandbox \"354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 16 12:21:00.198432 env[1205]: time="2025-07-16T12:21:00.198382952Z" level=info msg="CreateContainer within sandbox \"354f21dcb0008e8dd260aed46678b9a6e8b614d1b4bec0b5d7b8e86bcf602e0a\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"36af0aef6420d8c3c1c693ca3c4dec62c8501ca59a35caedb76ac04c87b90989\"" Jul 16 12:21:00.200190 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4133380089.mount: Deactivated successfully. Jul 16 12:21:00.209861 env[1205]: time="2025-07-16T12:21:00.209812023Z" level=info msg="StartContainer for \"36af0aef6420d8c3c1c693ca3c4dec62c8501ca59a35caedb76ac04c87b90989\"" Jul 16 12:21:00.313025 systemd[1]: Started cri-containerd-36af0aef6420d8c3c1c693ca3c4dec62c8501ca59a35caedb76ac04c87b90989.scope. Jul 16 12:21:00.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.340000 audit: BPF prog-id=232 op=LOAD Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { bpf } for pid=5147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4405 pid=5147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:00.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336616630616566363432306438633363316336393363613363346465 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { perfmon } for pid=5147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=4405 pid=5147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:00.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336616630616566363432306438633363316336393363613363346465 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { bpf } for pid=5147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { bpf } for pid=5147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { bpf } for pid=5147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { perfmon } for pid=5147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { perfmon } for pid=5147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { perfmon } for pid=5147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { perfmon } for pid=5147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { perfmon } for pid=5147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { bpf } for pid=5147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { bpf } for pid=5147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit: BPF prog-id=233 op=LOAD Jul 16 12:21:00.341000 audit[5147]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000398030 items=0 ppid=4405 pid=5147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:00.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336616630616566363432306438633363316336393363613363346465 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { bpf } for pid=5147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { bpf } for pid=5147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { perfmon } for pid=5147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { perfmon } for pid=5147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { perfmon } for pid=5147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { perfmon } for pid=5147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { perfmon } for pid=5147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { bpf } for pid=5147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { bpf } for pid=5147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit: BPF prog-id=234 op=LOAD Jul 16 12:21:00.341000 audit[5147]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000398078 items=0 ppid=4405 pid=5147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:00.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336616630616566363432306438633363316336393363613363346465 Jul 16 12:21:00.341000 audit: BPF prog-id=234 op=UNLOAD Jul 16 12:21:00.341000 audit: BPF prog-id=233 op=UNLOAD Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { bpf } for pid=5147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { bpf } for pid=5147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { bpf } for pid=5147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { perfmon } for pid=5147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { perfmon } for pid=5147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { perfmon } for pid=5147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { perfmon } for pid=5147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { perfmon } for pid=5147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { bpf } for pid=5147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit[5147]: AVC avc: denied { bpf } for pid=5147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:00.341000 audit: BPF prog-id=235 op=LOAD Jul 16 12:21:00.341000 audit[5147]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000398488 items=0 ppid=4405 pid=5147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:00.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336616630616566363432306438633363316336393363613363346465 Jul 16 12:21:00.397801 env[1205]: time="2025-07-16T12:21:00.397632490Z" level=info msg="StartContainer for \"36af0aef6420d8c3c1c693ca3c4dec62c8501ca59a35caedb76ac04c87b90989\" returns successfully" Jul 16 12:21:01.213240 systemd[1]: run-containerd-runc-k8s.io-36af0aef6420d8c3c1c693ca3c4dec62c8501ca59a35caedb76ac04c87b90989-runc.aVGoWm.mount: Deactivated successfully. Jul 16 12:21:01.637399 systemd[1]: run-containerd-runc-k8s.io-36af0aef6420d8c3c1c693ca3c4dec62c8501ca59a35caedb76ac04c87b90989-runc.YOiRLd.mount: Deactivated successfully. Jul 16 12:21:02.263624 kubelet[2009]: I0716 12:21:02.240913 2009 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-ttxxf" podStartSLOduration=35.478615249 podStartE2EDuration="55.199960419s" podCreationTimestamp="2025-07-16 12:20:07 +0000 UTC" firstStartedPulling="2025-07-16 12:20:40.343639304 +0000 UTC m=+54.658399070" lastFinishedPulling="2025-07-16 12:21:00.064984475 +0000 UTC m=+74.379744240" observedRunningTime="2025-07-16 12:21:02.16439801 +0000 UTC m=+76.479157769" watchObservedRunningTime="2025-07-16 12:21:02.199960419 +0000 UTC m=+76.514720185" Jul 16 12:21:02.527560 env[1205]: time="2025-07-16T12:21:02.527440596Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:21:02.531601 env[1205]: time="2025-07-16T12:21:02.530618760Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:21:02.533019 env[1205]: time="2025-07-16T12:21:02.532991090Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:21:02.535149 env[1205]: time="2025-07-16T12:21:02.535122197Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 16 12:21:02.536998 env[1205]: time="2025-07-16T12:21:02.536967610Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866\"" Jul 16 12:21:02.701000 audit[5198]: NETFILTER_CFG table=filter:125 family=2 entries=10 op=nft_register_rule pid=5198 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:02.724239 kernel: kauditd_printk_skb: 90 callbacks suppressed Jul 16 12:21:02.731300 kernel: audit: type=1325 audit(1752668462.701:1498): table=filter:125 family=2 entries=10 op=nft_register_rule pid=5198 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:02.732563 kernel: audit: type=1300 audit(1752668462.701:1498): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffcfbda9b10 a2=0 a3=7ffcfbda9afc items=0 ppid=2161 pid=5198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:02.732625 kernel: audit: type=1327 audit(1752668462.701:1498): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:02.733778 kernel: audit: type=1325 audit(1752668462.718:1499): table=nat:126 family=2 entries=24 op=nft_register_rule pid=5198 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:02.733823 kernel: audit: type=1300 audit(1752668462.718:1499): arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffcfbda9b10 a2=0 a3=7ffcfbda9afc items=0 ppid=2161 pid=5198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:02.735036 kernel: audit: type=1327 audit(1752668462.718:1499): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:02.701000 audit[5198]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffcfbda9b10 a2=0 a3=7ffcfbda9afc items=0 ppid=2161 pid=5198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:02.701000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:02.718000 audit[5198]: NETFILTER_CFG table=nat:126 family=2 entries=24 op=nft_register_rule pid=5198 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:02.718000 audit[5198]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffcfbda9b10 a2=0 a3=7ffcfbda9afc items=0 ppid=2161 pid=5198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:02.718000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:03.918325 env[1205]: time="2025-07-16T12:21:03.918270792Z" level=info msg="CreateContainer within sandbox \"4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 16 12:21:03.962262 env[1205]: time="2025-07-16T12:21:03.953009043Z" level=info msg="CreateContainer within sandbox \"4eff7fd58aa91defdc0cab88821ead5ea27ece561efbdbb714590a3b3ca74d21\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"0a7ba8c61ee1cdf7bf50a9d192aa980fba1800f105ed0b24c6c7f4a90fe6adae\"" Jul 16 12:21:03.951124 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2319455929.mount: Deactivated successfully. Jul 16 12:21:04.361231 env[1205]: time="2025-07-16T12:21:04.360734098Z" level=info msg="StartContainer for \"0a7ba8c61ee1cdf7bf50a9d192aa980fba1800f105ed0b24c6c7f4a90fe6adae\"" Jul 16 12:21:04.483752 systemd[1]: Started cri-containerd-0a7ba8c61ee1cdf7bf50a9d192aa980fba1800f105ed0b24c6c7f4a90fe6adae.scope. Jul 16 12:21:04.655431 systemd[1]: run-containerd-runc-k8s.io-b7b4cee5afa2c5ccb34395f3c076eb4cfc1a3bfd4c189318fdcd70631378f1f9-runc.DAVAez.mount: Deactivated successfully. Jul 16 12:21:04.674538 kernel: audit: type=1400 audit(1752668464.667:1500): avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.693362 kernel: audit: type=1300 audit(1752668464.667:1500): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f8f143b69b8 items=0 ppid=4249 pid=5245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:04.693823 kernel: audit: type=1327 audit(1752668464.667:1500): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061376261386336316565316364663762663530613964313932616139 Jul 16 12:21:04.693869 kernel: audit: type=1400 audit(1752668464.674:1501): avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.667000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.667000 audit[5245]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f8f143b69b8 items=0 ppid=4249 pid=5245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:04.667000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061376261386336316565316364663762663530613964313932616139 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit: BPF prog-id=236 op=LOAD Jul 16 12:21:04.674000 audit[5245]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0002192c8 items=0 ppid=4249 pid=5245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:04.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061376261386336316565316364663762663530613964313932616139 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit: BPF prog-id=237 op=LOAD Jul 16 12:21:04.674000 audit[5245]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c000219318 items=0 ppid=4249 pid=5245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:04.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061376261386336316565316364663762663530613964313932616139 Jul 16 12:21:04.674000 audit: BPF prog-id=237 op=UNLOAD Jul 16 12:21:04.674000 audit: BPF prog-id=236 op=UNLOAD Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:04.674000 audit: BPF prog-id=238 op=LOAD Jul 16 12:21:04.674000 audit[5245]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0002193a8 items=0 ppid=4249 pid=5245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:04.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061376261386336316565316364663762663530613964313932616139 Jul 16 12:21:04.736495 env[1205]: time="2025-07-16T12:21:04.736440870Z" level=info msg="StartContainer for \"0a7ba8c61ee1cdf7bf50a9d192aa980fba1800f105ed0b24c6c7f4a90fe6adae\" returns successfully" Jul 16 12:21:05.605866 kubelet[2009]: E0716 12:21:05.605812 2009 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1.546s" Jul 16 12:21:05.903429 kubelet[2009]: I0716 12:21:05.901273 2009 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-v4b2s" podStartSLOduration=33.568276773 podStartE2EDuration="58.889723393s" podCreationTimestamp="2025-07-16 12:20:07 +0000 UTC" firstStartedPulling="2025-07-16 12:20:37.397667437 +0000 UTC m=+51.712427179" lastFinishedPulling="2025-07-16 12:21:02.719114022 +0000 UTC m=+77.033873799" observedRunningTime="2025-07-16 12:21:05.865564376 +0000 UTC m=+80.180324135" watchObservedRunningTime="2025-07-16 12:21:05.889723393 +0000 UTC m=+80.204483158" Jul 16 12:21:05.993070 kubelet[2009]: I0716 12:21:05.990331 2009 csi_plugin.go:106] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 16 12:21:06.003024 kubelet[2009]: I0716 12:21:06.002983 2009 csi_plugin.go:119] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 16 12:21:06.314000 audit[5275]: NETFILTER_CFG table=filter:127 family=2 entries=9 op=nft_register_rule pid=5275 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:06.314000 audit[5275]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd75c78bb0 a2=0 a3=7ffd75c78b9c items=0 ppid=2161 pid=5275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:06.314000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:06.339000 audit[5275]: NETFILTER_CFG table=nat:128 family=2 entries=31 op=nft_register_chain pid=5275 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:06.339000 audit[5275]: SYSCALL arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7ffd75c78bb0 a2=0 a3=7ffd75c78b9c items=0 ppid=2161 pid=5275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:06.339000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:09.397216 kubelet[2009]: I0716 12:21:09.396507 2009 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 16 12:21:10.037196 kernel: kauditd_printk_skb: 45 callbacks suppressed Jul 16 12:21:10.051778 kernel: audit: type=1325 audit(1752668470.022:1508): table=filter:129 family=2 entries=8 op=nft_register_rule pid=5300 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:10.022000 audit[5300]: NETFILTER_CFG table=filter:129 family=2 entries=8 op=nft_register_rule pid=5300 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:10.022000 audit[5300]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff8d0da840 a2=0 a3=7fff8d0da82c items=0 ppid=2161 pid=5300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:10.089920 kernel: audit: type=1300 audit(1752668470.022:1508): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff8d0da840 a2=0 a3=7fff8d0da82c items=0 ppid=2161 pid=5300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:10.090019 kernel: audit: type=1327 audit(1752668470.022:1508): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:10.090048 kernel: audit: type=1325 audit(1752668470.072:1509): table=nat:130 family=2 entries=38 op=nft_register_chain pid=5300 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:10.090074 kernel: audit: type=1300 audit(1752668470.072:1509): arch=c000003e syscall=46 success=yes exit=12772 a0=3 a1=7fff8d0da840 a2=0 a3=7fff8d0da82c items=0 ppid=2161 pid=5300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:10.022000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:10.072000 audit[5300]: NETFILTER_CFG table=nat:130 family=2 entries=38 op=nft_register_chain pid=5300 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:10.072000 audit[5300]: SYSCALL arch=c000003e syscall=46 success=yes exit=12772 a0=3 a1=7fff8d0da840 a2=0 a3=7fff8d0da82c items=0 ppid=2161 pid=5300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:10.072000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:10.095438 kernel: audit: type=1327 audit(1752668470.072:1509): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:10.119000 audit[5302]: NETFILTER_CFG table=filter:131 family=2 entries=8 op=nft_register_rule pid=5302 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:10.127889 kernel: audit: type=1325 audit(1752668470.119:1510): table=filter:131 family=2 entries=8 op=nft_register_rule pid=5302 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:10.128209 kernel: audit: type=1300 audit(1752668470.119:1510): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe6f6457f0 a2=0 a3=7ffe6f6457dc items=0 ppid=2161 pid=5302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:10.119000 audit[5302]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe6f6457f0 a2=0 a3=7ffe6f6457dc items=0 ppid=2161 pid=5302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:10.119000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:10.131422 kernel: audit: type=1327 audit(1752668470.119:1510): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:10.131000 audit[5302]: NETFILTER_CFG table=nat:132 family=2 entries=40 op=nft_register_rule pid=5302 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:10.131000 audit[5302]: SYSCALL arch=c000003e syscall=46 success=yes exit=12772 a0=3 a1=7ffe6f6457f0 a2=0 a3=7ffe6f6457dc items=0 ppid=2161 pid=5302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:10.136457 kernel: audit: type=1325 audit(1752668470.131:1511): table=nat:132 family=2 entries=40 op=nft_register_rule pid=5302 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:10.131000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:10.265286 kubelet[2009]: I0716 12:21:10.264048 2009 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 16 12:21:10.523573 env[1205]: time="2025-07-16T12:21:10.523382990Z" level=info msg="StopContainer for \"5672481c3db9ac166b5e04ff756591f01548742c761267a896f758b301ecc2d3\" with timeout 30 (s)" Jul 16 12:21:10.538685 env[1205]: time="2025-07-16T12:21:10.530629268Z" level=info msg="Stop container \"5672481c3db9ac166b5e04ff756591f01548742c761267a896f758b301ecc2d3\" with signal terminated" Jul 16 12:21:10.582552 kubelet[2009]: I0716 12:21:10.582503 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/06e53abb-788b-4624-9093-89d9eeb550f0-calico-apiserver-certs\") pod \"calico-apiserver-55dcc56559-vb9jx\" (UID: \"06e53abb-788b-4624-9093-89d9eeb550f0\") " pod="calico-apiserver/calico-apiserver-55dcc56559-vb9jx" Jul 16 12:21:10.584998 systemd[1]: Created slice kubepods-besteffort-pod06e53abb_788b_4624_9093_89d9eeb550f0.slice. Jul 16 12:21:10.586000 audit: BPF prog-id=213 op=UNLOAD Jul 16 12:21:10.587857 systemd[1]: cri-containerd-5672481c3db9ac166b5e04ff756591f01548742c761267a896f758b301ecc2d3.scope: Deactivated successfully. Jul 16 12:21:10.588061 systemd[1]: cri-containerd-5672481c3db9ac166b5e04ff756591f01548742c761267a896f758b301ecc2d3.scope: Consumed 1.543s CPU time. Jul 16 12:21:10.596000 audit: BPF prog-id=216 op=UNLOAD Jul 16 12:21:10.603396 kubelet[2009]: I0716 12:21:10.600476 2009 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vbt8j\" (UniqueName: \"kubernetes.io/projected/06e53abb-788b-4624-9093-89d9eeb550f0-kube-api-access-vbt8j\") pod \"calico-apiserver-55dcc56559-vb9jx\" (UID: \"06e53abb-788b-4624-9093-89d9eeb550f0\") " pod="calico-apiserver/calico-apiserver-55dcc56559-vb9jx" Jul 16 12:21:10.663766 env[1205]: time="2025-07-16T12:21:10.663709700Z" level=info msg="shim disconnected" id=5672481c3db9ac166b5e04ff756591f01548742c761267a896f758b301ecc2d3 Jul 16 12:21:10.664154 env[1205]: time="2025-07-16T12:21:10.663983112Z" level=warning msg="cleaning up after shim disconnected" id=5672481c3db9ac166b5e04ff756591f01548742c761267a896f758b301ecc2d3 namespace=k8s.io Jul 16 12:21:10.664154 env[1205]: time="2025-07-16T12:21:10.663999528Z" level=info msg="cleaning up dead shim" Jul 16 12:21:10.670427 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5672481c3db9ac166b5e04ff756591f01548742c761267a896f758b301ecc2d3-rootfs.mount: Deactivated successfully. Jul 16 12:21:10.696626 env[1205]: time="2025-07-16T12:21:10.696501329Z" level=warning msg="cleanup warnings time=\"2025-07-16T12:21:10Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5318 runtime=io.containerd.runc.v2\n" Jul 16 12:21:10.710722 env[1205]: time="2025-07-16T12:21:10.710673252Z" level=info msg="StopContainer for \"5672481c3db9ac166b5e04ff756591f01548742c761267a896f758b301ecc2d3\" returns successfully" Jul 16 12:21:10.727715 env[1205]: time="2025-07-16T12:21:10.727585623Z" level=info msg="StopPodSandbox for \"87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9\"" Jul 16 12:21:10.728069 env[1205]: time="2025-07-16T12:21:10.728044469Z" level=info msg="Container to stop \"5672481c3db9ac166b5e04ff756591f01548742c761267a896f758b301ecc2d3\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 16 12:21:10.739386 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9-shm.mount: Deactivated successfully. Jul 16 12:21:10.793560 systemd[1]: cri-containerd-87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9.scope: Deactivated successfully. Jul 16 12:21:10.792000 audit: BPF prog-id=153 op=UNLOAD Jul 16 12:21:10.796000 audit: BPF prog-id=156 op=UNLOAD Jul 16 12:21:10.829052 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9-rootfs.mount: Deactivated successfully. Jul 16 12:21:10.831995 env[1205]: time="2025-07-16T12:21:10.831944384Z" level=info msg="shim disconnected" id=87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9 Jul 16 12:21:10.832327 env[1205]: time="2025-07-16T12:21:10.832304801Z" level=warning msg="cleaning up after shim disconnected" id=87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9 namespace=k8s.io Jul 16 12:21:10.832612 env[1205]: time="2025-07-16T12:21:10.832593123Z" level=info msg="cleaning up dead shim" Jul 16 12:21:10.857728 env[1205]: time="2025-07-16T12:21:10.857683169Z" level=warning msg="cleanup warnings time=\"2025-07-16T12:21:10Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5351 runtime=io.containerd.runc.v2\n" Jul 16 12:21:10.982676 env[1205]: time="2025-07-16T12:21:10.982628902Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-55dcc56559-vb9jx,Uid:06e53abb-788b-4624-9093-89d9eeb550f0,Namespace:calico-apiserver,Attempt:0,}" Jul 16 12:21:11.111058 systemd-networkd[1034]: calic4029658a1f: Link DOWN Jul 16 12:21:11.111068 systemd-networkd[1034]: calic4029658a1f: Lost carrier Jul 16 12:21:11.396404 kubelet[2009]: I0716 12:21:11.396211 2009 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Jul 16 12:21:11.411413 env[1205]: 2025-07-16 12:21:11.073 [INFO][5373] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Jul 16 12:21:11.411413 env[1205]: 2025-07-16 12:21:11.075 [INFO][5373] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" iface="eth0" netns="/var/run/netns/cni-b114fdc7-7ca6-3c28-3bf1-8bcbc2277fe3" Jul 16 12:21:11.411413 env[1205]: 2025-07-16 12:21:11.077 [INFO][5373] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" iface="eth0" netns="/var/run/netns/cni-b114fdc7-7ca6-3c28-3bf1-8bcbc2277fe3" Jul 16 12:21:11.411413 env[1205]: 2025-07-16 12:21:11.120 [INFO][5373] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" after=43.943638ms iface="eth0" netns="/var/run/netns/cni-b114fdc7-7ca6-3c28-3bf1-8bcbc2277fe3" Jul 16 12:21:11.411413 env[1205]: 2025-07-16 12:21:11.121 [INFO][5373] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Jul 16 12:21:11.411413 env[1205]: 2025-07-16 12:21:11.121 [INFO][5373] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Jul 16 12:21:11.411413 env[1205]: 2025-07-16 12:21:11.280 [INFO][5394] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" HandleID="k8s-pod-network.87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:21:11.411413 env[1205]: 2025-07-16 12:21:11.282 [INFO][5394] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:21:11.411413 env[1205]: 2025-07-16 12:21:11.283 [INFO][5394] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:21:11.411413 env[1205]: 2025-07-16 12:21:11.404 [INFO][5394] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" HandleID="k8s-pod-network.87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:21:11.411413 env[1205]: 2025-07-16 12:21:11.404 [INFO][5394] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" HandleID="k8s-pod-network.87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:21:11.411413 env[1205]: 2025-07-16 12:21:11.406 [INFO][5394] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:21:11.411413 env[1205]: 2025-07-16 12:21:11.409 [INFO][5373] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Jul 16 12:21:11.414403 env[1205]: time="2025-07-16T12:21:11.411488070Z" level=info msg="TearDown network for sandbox \"87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9\" successfully" Jul 16 12:21:11.414403 env[1205]: time="2025-07-16T12:21:11.411537299Z" level=info msg="StopPodSandbox for \"87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9\" returns successfully" Jul 16 12:21:11.510116 systemd-networkd[1034]: cali5397bc6e5b1: Link UP Jul 16 12:21:11.515184 systemd-networkd[1034]: cali5397bc6e5b1: Gained carrier Jul 16 12:21:11.515388 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali5397bc6e5b1: link becomes ready Jul 16 12:21:11.566723 env[1205]: 2025-07-16 12:21:11.148 [INFO][5379] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--vb9jx-eth0 calico-apiserver-55dcc56559- calico-apiserver 06e53abb-788b-4624-9093-89d9eeb550f0 1203 0 2025-07-16 12:21:10 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:55dcc56559 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s srv-frvg8.gb1.brightbox.com calico-apiserver-55dcc56559-vb9jx eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali5397bc6e5b1 [] [] }} ContainerID="8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86" Namespace="calico-apiserver" Pod="calico-apiserver-55dcc56559-vb9jx" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--vb9jx-" Jul 16 12:21:11.566723 env[1205]: 2025-07-16 12:21:11.148 [INFO][5379] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86" Namespace="calico-apiserver" Pod="calico-apiserver-55dcc56559-vb9jx" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--vb9jx-eth0" Jul 16 12:21:11.566723 env[1205]: 2025-07-16 12:21:11.280 [INFO][5400] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86" HandleID="k8s-pod-network.8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--vb9jx-eth0" Jul 16 12:21:11.566723 env[1205]: 2025-07-16 12:21:11.283 [INFO][5400] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86" HandleID="k8s-pod-network.8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--vb9jx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd6c0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"srv-frvg8.gb1.brightbox.com", "pod":"calico-apiserver-55dcc56559-vb9jx", "timestamp":"2025-07-16 12:21:11.280848218 +0000 UTC"}, Hostname:"srv-frvg8.gb1.brightbox.com", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 16 12:21:11.566723 env[1205]: 2025-07-16 12:21:11.283 [INFO][5400] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:21:11.566723 env[1205]: 2025-07-16 12:21:11.406 [INFO][5400] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:21:11.566723 env[1205]: 2025-07-16 12:21:11.406 [INFO][5400] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'srv-frvg8.gb1.brightbox.com' Jul 16 12:21:11.566723 env[1205]: 2025-07-16 12:21:11.420 [INFO][5400] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:21:11.566723 env[1205]: 2025-07-16 12:21:11.431 [INFO][5400] ipam/ipam.go 394: Looking up existing affinities for host host="srv-frvg8.gb1.brightbox.com" Jul 16 12:21:11.566723 env[1205]: 2025-07-16 12:21:11.440 [INFO][5400] ipam/ipam.go 511: Trying affinity for 192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:21:11.566723 env[1205]: 2025-07-16 12:21:11.442 [INFO][5400] ipam/ipam.go 158: Attempting to load block cidr=192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:21:11.566723 env[1205]: 2025-07-16 12:21:11.446 [INFO][5400] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.105.192/26 host="srv-frvg8.gb1.brightbox.com" Jul 16 12:21:11.566723 env[1205]: 2025-07-16 12:21:11.446 [INFO][5400] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.105.192/26 handle="k8s-pod-network.8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:21:11.566723 env[1205]: 2025-07-16 12:21:11.452 [INFO][5400] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86 Jul 16 12:21:11.566723 env[1205]: 2025-07-16 12:21:11.470 [INFO][5400] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.105.192/26 handle="k8s-pod-network.8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:21:11.566723 env[1205]: 2025-07-16 12:21:11.483 [INFO][5400] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.105.202/26] block=192.168.105.192/26 handle="k8s-pod-network.8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:21:11.566723 env[1205]: 2025-07-16 12:21:11.483 [INFO][5400] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.105.202/26] handle="k8s-pod-network.8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86" host="srv-frvg8.gb1.brightbox.com" Jul 16 12:21:11.566723 env[1205]: 2025-07-16 12:21:11.483 [INFO][5400] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:21:11.566723 env[1205]: 2025-07-16 12:21:11.483 [INFO][5400] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.105.202/26] IPv6=[] ContainerID="8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86" HandleID="k8s-pod-network.8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--vb9jx-eth0" Jul 16 12:21:11.576897 env[1205]: 2025-07-16 12:21:11.488 [INFO][5379] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86" Namespace="calico-apiserver" Pod="calico-apiserver-55dcc56559-vb9jx" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--vb9jx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--vb9jx-eth0", GenerateName:"calico-apiserver-55dcc56559-", Namespace:"calico-apiserver", SelfLink:"", UID:"06e53abb-788b-4624-9093-89d9eeb550f0", ResourceVersion:"1203", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 21, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"55dcc56559", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"", Pod:"calico-apiserver-55dcc56559-vb9jx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.105.202/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5397bc6e5b1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:21:11.576897 env[1205]: 2025-07-16 12:21:11.489 [INFO][5379] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.105.202/32] ContainerID="8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86" Namespace="calico-apiserver" Pod="calico-apiserver-55dcc56559-vb9jx" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--vb9jx-eth0" Jul 16 12:21:11.576897 env[1205]: 2025-07-16 12:21:11.489 [INFO][5379] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali5397bc6e5b1 ContainerID="8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86" Namespace="calico-apiserver" Pod="calico-apiserver-55dcc56559-vb9jx" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--vb9jx-eth0" Jul 16 12:21:11.576897 env[1205]: 2025-07-16 12:21:11.520 [INFO][5379] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86" Namespace="calico-apiserver" Pod="calico-apiserver-55dcc56559-vb9jx" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--vb9jx-eth0" Jul 16 12:21:11.576897 env[1205]: 2025-07-16 12:21:11.521 [INFO][5379] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86" Namespace="calico-apiserver" Pod="calico-apiserver-55dcc56559-vb9jx" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--vb9jx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--vb9jx-eth0", GenerateName:"calico-apiserver-55dcc56559-", Namespace:"calico-apiserver", SelfLink:"", UID:"06e53abb-788b-4624-9093-89d9eeb550f0", ResourceVersion:"1203", Generation:0, CreationTimestamp:time.Date(2025, time.July, 16, 12, 21, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"55dcc56559", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"srv-frvg8.gb1.brightbox.com", ContainerID:"8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86", Pod:"calico-apiserver-55dcc56559-vb9jx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.105.202/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5397bc6e5b1", MAC:"3e:9a:de:03:3f:a5", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 16 12:21:11.576897 env[1205]: 2025-07-16 12:21:11.561 [INFO][5379] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86" Namespace="calico-apiserver" Pod="calico-apiserver-55dcc56559-vb9jx" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--55dcc56559--vb9jx-eth0" Jul 16 12:21:11.615434 env[1205]: time="2025-07-16T12:21:11.615058574Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 16 12:21:11.615434 env[1205]: time="2025-07-16T12:21:11.615121434Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 16 12:21:11.615434 env[1205]: time="2025-07-16T12:21:11.615134812Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 16 12:21:11.616377 env[1205]: time="2025-07-16T12:21:11.616096298Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86 pid=5426 runtime=io.containerd.runc.v2 Jul 16 12:21:11.612000 audit[5427]: NETFILTER_CFG table=filter:133 family=2 entries=39 op=nft_register_rule pid=5427 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 16 12:21:11.612000 audit[5427]: SYSCALL arch=c000003e syscall=46 success=yes exit=4224 a0=3 a1=7ffca9d79460 a2=0 a3=7ffca9d7944c items=0 ppid=3311 pid=5427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:11.612000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 16 12:21:11.617000 audit[5427]: NETFILTER_CFG table=filter:134 family=2 entries=2 op=nft_unregister_chain pid=5427 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 16 12:21:11.617000 audit[5427]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffca9d79460 a2=0 a3=55d028985000 items=0 ppid=3311 pid=5427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:11.617000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 16 12:21:11.666410 systemd[1]: run-netns-cni\x2db114fdc7\x2d7ca6\x2d3c28\x2d3bf1\x2d8bcbc2277fe3.mount: Deactivated successfully. Jul 16 12:21:11.689039 systemd[1]: Started cri-containerd-8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86.scope. Jul 16 12:21:11.687000 audit[5448]: NETFILTER_CFG table=filter:135 family=2 entries=53 op=nft_register_chain pid=5448 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 16 12:21:11.687000 audit[5448]: SYSCALL arch=c000003e syscall=46 success=yes exit=26608 a0=3 a1=7ffe0923c5c0 a2=0 a3=7ffe0923c5ac items=0 ppid=3311 pid=5448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:11.687000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 16 12:21:11.892636 kubelet[2009]: I0716 12:21:11.892587 2009 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-fghh4\" (UniqueName: \"kubernetes.io/projected/94f730db-68a2-4e48-bafd-314eacd16a53-kube-api-access-fghh4\") pod \"94f730db-68a2-4e48-bafd-314eacd16a53\" (UID: \"94f730db-68a2-4e48-bafd-314eacd16a53\") " Jul 16 12:21:11.893179 kubelet[2009]: I0716 12:21:11.892689 2009 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/94f730db-68a2-4e48-bafd-314eacd16a53-calico-apiserver-certs\") pod \"94f730db-68a2-4e48-bafd-314eacd16a53\" (UID: \"94f730db-68a2-4e48-bafd-314eacd16a53\") " Jul 16 12:21:12.010000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.010000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.010000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.010000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.010000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.010000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.010000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.010000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.010000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.010000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.010000 audit: BPF prog-id=239 op=LOAD Jul 16 12:21:12.014877 systemd[1]: var-lib-kubelet-pods-94f730db\x2d68a2\x2d4e48\x2dbafd\x2d314eacd16a53-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dfghh4.mount: Deactivated successfully. Jul 16 12:21:12.014985 systemd[1]: var-lib-kubelet-pods-94f730db\x2d68a2\x2d4e48\x2dbafd\x2d314eacd16a53-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { bpf } for pid=5437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=5426 pid=5437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:12.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861376431383530623337353533313462343230666538323130653935 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { perfmon } for pid=5437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=5426 pid=5437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:12.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861376431383530623337353533313462343230666538323130653935 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { bpf } for pid=5437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { bpf } for pid=5437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { bpf } for pid=5437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { perfmon } for pid=5437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { perfmon } for pid=5437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { perfmon } for pid=5437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { perfmon } for pid=5437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { perfmon } for pid=5437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { bpf } for pid=5437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { bpf } for pid=5437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit: BPF prog-id=240 op=LOAD Jul 16 12:21:12.015000 audit[5437]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00019c470 items=0 ppid=5426 pid=5437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:12.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861376431383530623337353533313462343230666538323130653935 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { bpf } for pid=5437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { bpf } for pid=5437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { perfmon } for pid=5437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { perfmon } for pid=5437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { perfmon } for pid=5437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { perfmon } for pid=5437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { perfmon } for pid=5437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { bpf } for pid=5437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { bpf } for pid=5437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit: BPF prog-id=241 op=LOAD Jul 16 12:21:12.015000 audit[5437]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00019c4b8 items=0 ppid=5426 pid=5437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:12.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861376431383530623337353533313462343230666538323130653935 Jul 16 12:21:12.015000 audit: BPF prog-id=241 op=UNLOAD Jul 16 12:21:12.015000 audit: BPF prog-id=240 op=UNLOAD Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { bpf } for pid=5437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { bpf } for pid=5437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { bpf } for pid=5437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { perfmon } for pid=5437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { perfmon } for pid=5437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { perfmon } for pid=5437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { perfmon } for pid=5437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { perfmon } for pid=5437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { bpf } for pid=5437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit[5437]: AVC avc: denied { bpf } for pid=5437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.015000 audit: BPF prog-id=242 op=LOAD Jul 16 12:21:12.015000 audit[5437]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00019c8c8 items=0 ppid=5426 pid=5437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:12.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861376431383530623337353533313462343230666538323130653935 Jul 16 12:21:12.070888 kubelet[2009]: I0716 12:21:12.059463 2009 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/94f730db-68a2-4e48-bafd-314eacd16a53-kube-api-access-fghh4" (OuterVolumeSpecName: "kube-api-access-fghh4") pod "94f730db-68a2-4e48-bafd-314eacd16a53" (UID: "94f730db-68a2-4e48-bafd-314eacd16a53"). InnerVolumeSpecName "kube-api-access-fghh4". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 16 12:21:12.096003 kubelet[2009]: I0716 12:21:12.095910 2009 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/94f730db-68a2-4e48-bafd-314eacd16a53-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "94f730db-68a2-4e48-bafd-314eacd16a53" (UID: "94f730db-68a2-4e48-bafd-314eacd16a53"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 16 12:21:12.186724 kubelet[2009]: I0716 12:21:12.186678 2009 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-fghh4\" (UniqueName: \"kubernetes.io/projected/94f730db-68a2-4e48-bafd-314eacd16a53-kube-api-access-fghh4\") on node \"srv-frvg8.gb1.brightbox.com\" DevicePath \"\"" Jul 16 12:21:12.186724 kubelet[2009]: I0716 12:21:12.186712 2009 reconciler_common.go:299] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/94f730db-68a2-4e48-bafd-314eacd16a53-calico-apiserver-certs\") on node \"srv-frvg8.gb1.brightbox.com\" DevicePath \"\"" Jul 16 12:21:12.240763 systemd[1]: Removed slice kubepods-besteffort-pod94f730db_68a2_4e48_bafd_314eacd16a53.slice. Jul 16 12:21:12.240859 systemd[1]: kubepods-besteffort-pod94f730db_68a2_4e48_bafd_314eacd16a53.slice: Consumed 1.584s CPU time. Jul 16 12:21:12.312550 env[1205]: time="2025-07-16T12:21:12.310882989Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-55dcc56559-vb9jx,Uid:06e53abb-788b-4624-9093-89d9eeb550f0,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86\"" Jul 16 12:21:12.379087 env[1205]: time="2025-07-16T12:21:12.379039171Z" level=info msg="CreateContainer within sandbox \"8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 16 12:21:12.406067 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2922727992.mount: Deactivated successfully. Jul 16 12:21:12.408694 env[1205]: time="2025-07-16T12:21:12.408653018Z" level=info msg="CreateContainer within sandbox \"8a7d1850b3755314b420fe8210e956fafadaeaf53ea217d7237c911f480d3f86\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"051dc44d302f1155a73146750410f2c85e23d341b2736ef0a12decb9be43e7ac\"" Jul 16 12:21:12.411770 env[1205]: time="2025-07-16T12:21:12.411736976Z" level=info msg="StartContainer for \"051dc44d302f1155a73146750410f2c85e23d341b2736ef0a12decb9be43e7ac\"" Jul 16 12:21:12.455400 systemd[1]: Started cri-containerd-051dc44d302f1155a73146750410f2c85e23d341b2736ef0a12decb9be43e7ac.scope. Jul 16 12:21:12.513000 audit[5483]: NETFILTER_CFG table=filter:136 family=2 entries=8 op=nft_register_rule pid=5483 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:12.513000 audit[5483]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc2b193760 a2=0 a3=7ffc2b19374c items=0 ppid=2161 pid=5483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:12.513000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:12.520000 audit[5483]: NETFILTER_CFG table=nat:137 family=2 entries=40 op=nft_register_rule pid=5483 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:12.520000 audit[5483]: SYSCALL arch=c000003e syscall=46 success=yes exit=12772 a0=3 a1=7ffc2b193760 a2=0 a3=7ffc2b19374c items=0 ppid=2161 pid=5483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:12.520000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:12.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.531000 audit: BPF prog-id=243 op=LOAD Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { bpf } for pid=5471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=5426 pid=5471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:12.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035316463343464333032663131353561373331343637353034313066 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { perfmon } for pid=5471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=5426 pid=5471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:12.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035316463343464333032663131353561373331343637353034313066 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { bpf } for pid=5471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { bpf } for pid=5471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { bpf } for pid=5471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { perfmon } for pid=5471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { perfmon } for pid=5471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { perfmon } for pid=5471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { perfmon } for pid=5471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { perfmon } for pid=5471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { bpf } for pid=5471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { bpf } for pid=5471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit: BPF prog-id=244 op=LOAD Jul 16 12:21:12.533000 audit[5471]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000363fc0 items=0 ppid=5426 pid=5471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:12.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035316463343464333032663131353561373331343637353034313066 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { bpf } for pid=5471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { bpf } for pid=5471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { perfmon } for pid=5471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { perfmon } for pid=5471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { perfmon } for pid=5471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { perfmon } for pid=5471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { perfmon } for pid=5471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { bpf } for pid=5471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { bpf } for pid=5471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit: BPF prog-id=245 op=LOAD Jul 16 12:21:12.533000 audit[5471]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003c8008 items=0 ppid=5426 pid=5471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:12.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035316463343464333032663131353561373331343637353034313066 Jul 16 12:21:12.533000 audit: BPF prog-id=245 op=UNLOAD Jul 16 12:21:12.533000 audit: BPF prog-id=244 op=UNLOAD Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { bpf } for pid=5471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { bpf } for pid=5471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { bpf } for pid=5471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { perfmon } for pid=5471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { perfmon } for pid=5471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { perfmon } for pid=5471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { perfmon } for pid=5471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { perfmon } for pid=5471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { bpf } for pid=5471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit[5471]: AVC avc: denied { bpf } for pid=5471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 16 12:21:12.533000 audit: BPF prog-id=246 op=LOAD Jul 16 12:21:12.533000 audit[5471]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003c8418 items=0 ppid=5426 pid=5471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:12.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035316463343464333032663131353561373331343637353034313066 Jul 16 12:21:12.572483 env[1205]: time="2025-07-16T12:21:12.572429059Z" level=info msg="StartContainer for \"051dc44d302f1155a73146750410f2c85e23d341b2736ef0a12decb9be43e7ac\" returns successfully" Jul 16 12:21:13.401875 systemd-networkd[1034]: cali5397bc6e5b1: Gained IPv6LL Jul 16 12:21:13.930000 audit[5505]: NETFILTER_CFG table=filter:138 family=2 entries=8 op=nft_register_rule pid=5505 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:13.930000 audit[5505]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc3ab8ba80 a2=0 a3=7ffc3ab8ba6c items=0 ppid=2161 pid=5505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:13.930000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:13.935000 audit[5505]: NETFILTER_CFG table=nat:139 family=2 entries=40 op=nft_register_rule pid=5505 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:13.935000 audit[5505]: SYSCALL arch=c000003e syscall=46 success=yes exit=12772 a0=3 a1=7ffc3ab8ba80 a2=0 a3=7ffc3ab8ba6c items=0 ppid=2161 pid=5505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:13.935000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:14.093416 kubelet[2009]: I0716 12:21:14.090678 2009 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="94f730db-68a2-4e48-bafd-314eacd16a53" path="/var/lib/kubelet/pods/94f730db-68a2-4e48-bafd-314eacd16a53/volumes" Jul 16 12:21:15.310740 kernel: kauditd_printk_skb: 141 callbacks suppressed Jul 16 12:21:15.325797 kernel: audit: type=1400 audit(1752668475.300:1559): avc: denied { watch } for pid=5484 comm="apiserver" path="/calico-apiserver-certs/..2025_07_16_12_21_10.552943873/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c592,c601 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c592,c601 tclass=file permissive=0 Jul 16 12:21:15.326104 kernel: audit: type=1300 audit(1752668475.300:1559): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00287cec0 a2=fc6 a3=0 items=0 ppid=5426 pid=5484 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c592,c601 key=(null) Jul 16 12:21:15.326657 kernel: audit: type=1327 audit(1752668475.300:1559): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 16 12:21:15.300000 audit[5484]: AVC avc: denied { watch } for pid=5484 comm="apiserver" path="/calico-apiserver-certs/..2025_07_16_12_21_10.552943873/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c592,c601 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c592,c601 tclass=file permissive=0 Jul 16 12:21:15.300000 audit[5484]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00287cec0 a2=fc6 a3=0 items=0 ppid=5426 pid=5484 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c592,c601 key=(null) Jul 16 12:21:15.300000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 16 12:21:15.831859 kubelet[2009]: I0716 12:21:15.764931 2009 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-55dcc56559-vb9jx" podStartSLOduration=5.680574057 podStartE2EDuration="5.680574057s" podCreationTimestamp="2025-07-16 12:21:10 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-16 12:21:13.71656932 +0000 UTC m=+88.031329086" watchObservedRunningTime="2025-07-16 12:21:15.680574057 +0000 UTC m=+89.995333798" Jul 16 12:21:15.902000 audit[5507]: NETFILTER_CFG table=filter:140 family=2 entries=8 op=nft_register_rule pid=5507 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:15.920494 kernel: audit: type=1325 audit(1752668475.902:1560): table=filter:140 family=2 entries=8 op=nft_register_rule pid=5507 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:15.927501 kernel: audit: type=1300 audit(1752668475.902:1560): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff5afb7590 a2=0 a3=7fff5afb757c items=0 ppid=2161 pid=5507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:15.928024 kernel: audit: type=1327 audit(1752668475.902:1560): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:15.928329 kernel: audit: type=1325 audit(1752668475.921:1561): table=nat:141 family=2 entries=42 op=nft_register_chain pid=5507 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:15.928616 kernel: audit: type=1300 audit(1752668475.921:1561): arch=c000003e syscall=46 success=yes exit=12900 a0=3 a1=7fff5afb7590 a2=0 a3=7fff5afb757c items=0 ppid=2161 pid=5507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:15.902000 audit[5507]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff5afb7590 a2=0 a3=7fff5afb757c items=0 ppid=2161 pid=5507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:15.902000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:15.921000 audit[5507]: NETFILTER_CFG table=nat:141 family=2 entries=42 op=nft_register_chain pid=5507 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:15.921000 audit[5507]: SYSCALL arch=c000003e syscall=46 success=yes exit=12900 a0=3 a1=7fff5afb7590 a2=0 a3=7fff5afb757c items=0 ppid=2161 pid=5507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:15.921000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:15.934177 kernel: audit: type=1327 audit(1752668475.921:1561): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:15.957000 audit[5509]: NETFILTER_CFG table=filter:142 family=2 entries=8 op=nft_register_rule pid=5509 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:15.957000 audit[5509]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc228f1e30 a2=0 a3=7ffc228f1e1c items=0 ppid=2161 pid=5509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:15.964918 kernel: audit: type=1325 audit(1752668475.957:1562): table=filter:142 family=2 entries=8 op=nft_register_rule pid=5509 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:15.957000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:15.966000 audit[5509]: NETFILTER_CFG table=nat:143 family=2 entries=26 op=nft_register_rule pid=5509 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:15.966000 audit[5509]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffc228f1e30 a2=0 a3=7ffc228f1e1c items=0 ppid=2161 pid=5509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:15.966000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:16.657484 env[1205]: time="2025-07-16T12:21:16.657315403Z" level=info msg="StopContainer for \"eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18\" with timeout 30 (s)" Jul 16 12:21:16.670968 env[1205]: time="2025-07-16T12:21:16.661108699Z" level=info msg="Stop container \"eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18\" with signal terminated" Jul 16 12:21:16.756769 systemd[1]: cri-containerd-eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18.scope: Deactivated successfully. Jul 16 12:21:16.757000 audit: BPF prog-id=217 op=UNLOAD Jul 16 12:21:16.761000 audit: BPF prog-id=220 op=UNLOAD Jul 16 12:21:16.759115 systemd[1]: cri-containerd-eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18.scope: Consumed 1.374s CPU time. Jul 16 12:21:16.833706 env[1205]: time="2025-07-16T12:21:16.833647157Z" level=info msg="shim disconnected" id=eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18 Jul 16 12:21:16.836361 env[1205]: time="2025-07-16T12:21:16.836327566Z" level=warning msg="cleaning up after shim disconnected" id=eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18 namespace=k8s.io Jul 16 12:21:16.836564 env[1205]: time="2025-07-16T12:21:16.836543510Z" level=info msg="cleaning up dead shim" Jul 16 12:21:16.844150 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18-rootfs.mount: Deactivated successfully. Jul 16 12:21:16.855034 env[1205]: time="2025-07-16T12:21:16.854992895Z" level=warning msg="cleanup warnings time=\"2025-07-16T12:21:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5527 runtime=io.containerd.runc.v2\n" Jul 16 12:21:16.871513 env[1205]: time="2025-07-16T12:21:16.871475824Z" level=info msg="StopContainer for \"eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18\" returns successfully" Jul 16 12:21:16.873312 env[1205]: time="2025-07-16T12:21:16.873284476Z" level=info msg="StopPodSandbox for \"ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812\"" Jul 16 12:21:16.873568 env[1205]: time="2025-07-16T12:21:16.873541435Z" level=info msg="Container to stop \"eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 16 12:21:16.876784 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812-shm.mount: Deactivated successfully. Jul 16 12:21:16.898000 audit: BPF prog-id=159 op=UNLOAD Jul 16 12:21:16.899968 systemd[1]: cri-containerd-ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812.scope: Deactivated successfully. Jul 16 12:21:16.902000 audit: BPF prog-id=162 op=UNLOAD Jul 16 12:21:16.934843 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812-rootfs.mount: Deactivated successfully. Jul 16 12:21:16.937592 env[1205]: time="2025-07-16T12:21:16.937544787Z" level=info msg="shim disconnected" id=ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812 Jul 16 12:21:16.937805 env[1205]: time="2025-07-16T12:21:16.937785226Z" level=warning msg="cleaning up after shim disconnected" id=ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812 namespace=k8s.io Jul 16 12:21:16.937877 env[1205]: time="2025-07-16T12:21:16.937863194Z" level=info msg="cleaning up dead shim" Jul 16 12:21:16.952518 env[1205]: time="2025-07-16T12:21:16.952472454Z" level=warning msg="cleanup warnings time=\"2025-07-16T12:21:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5557 runtime=io.containerd.runc.v2\n" Jul 16 12:21:17.163598 systemd-networkd[1034]: calic2aacc2f376: Link DOWN Jul 16 12:21:17.163607 systemd-networkd[1034]: calic2aacc2f376: Lost carrier Jul 16 12:21:17.438095 env[1205]: 2025-07-16 12:21:17.124 [INFO][5581] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Jul 16 12:21:17.438095 env[1205]: 2025-07-16 12:21:17.127 [INFO][5581] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" iface="eth0" netns="/var/run/netns/cni-62016f61-0510-a83a-04f0-d2a2287de6b9" Jul 16 12:21:17.438095 env[1205]: 2025-07-16 12:21:17.129 [INFO][5581] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" iface="eth0" netns="/var/run/netns/cni-62016f61-0510-a83a-04f0-d2a2287de6b9" Jul 16 12:21:17.438095 env[1205]: 2025-07-16 12:21:17.154 [INFO][5581] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" after=26.343059ms iface="eth0" netns="/var/run/netns/cni-62016f61-0510-a83a-04f0-d2a2287de6b9" Jul 16 12:21:17.438095 env[1205]: 2025-07-16 12:21:17.154 [INFO][5581] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Jul 16 12:21:17.438095 env[1205]: 2025-07-16 12:21:17.154 [INFO][5581] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Jul 16 12:21:17.438095 env[1205]: 2025-07-16 12:21:17.277 [INFO][5591] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" HandleID="k8s-pod-network.ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:21:17.438095 env[1205]: 2025-07-16 12:21:17.279 [INFO][5591] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:21:17.438095 env[1205]: 2025-07-16 12:21:17.280 [INFO][5591] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:21:17.438095 env[1205]: 2025-07-16 12:21:17.417 [INFO][5591] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" HandleID="k8s-pod-network.ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:21:17.438095 env[1205]: 2025-07-16 12:21:17.417 [INFO][5591] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" HandleID="k8s-pod-network.ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:21:17.438095 env[1205]: 2025-07-16 12:21:17.421 [INFO][5591] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:21:17.438095 env[1205]: 2025-07-16 12:21:17.427 [INFO][5581] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Jul 16 12:21:17.450125 env[1205]: time="2025-07-16T12:21:17.440207928Z" level=info msg="TearDown network for sandbox \"ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812\" successfully" Jul 16 12:21:17.450125 env[1205]: time="2025-07-16T12:21:17.440246168Z" level=info msg="StopPodSandbox for \"ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812\" returns successfully" Jul 16 12:21:17.443610 systemd[1]: run-netns-cni\x2d62016f61\x2d0510\x2da83a\x2d04f0\x2dd2a2287de6b9.mount: Deactivated successfully. Jul 16 12:21:17.454000 audit[5607]: NETFILTER_CFG table=filter:144 family=2 entries=59 op=nft_register_rule pid=5607 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 16 12:21:17.454000 audit[5607]: SYSCALL arch=c000003e syscall=46 success=yes exit=9064 a0=3 a1=7ffdf8ff2130 a2=0 a3=7ffdf8ff211c items=0 ppid=3311 pid=5607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:17.454000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 16 12:21:17.456000 audit[5607]: NETFILTER_CFG table=filter:145 family=2 entries=4 op=nft_unregister_chain pid=5607 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 16 12:21:17.456000 audit[5607]: SYSCALL arch=c000003e syscall=46 success=yes exit=560 a0=3 a1=7ffdf8ff2130 a2=0 a3=55cd76640000 items=0 ppid=3311 pid=5607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:17.456000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 16 12:21:17.657941 kubelet[2009]: I0716 12:21:17.657890 2009 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-twncg\" (UniqueName: \"kubernetes.io/projected/236ebe5f-a95d-42df-8840-c8ac6fd743e4-kube-api-access-twncg\") pod \"236ebe5f-a95d-42df-8840-c8ac6fd743e4\" (UID: \"236ebe5f-a95d-42df-8840-c8ac6fd743e4\") " Jul 16 12:21:17.660242 kubelet[2009]: I0716 12:21:17.660215 2009 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/236ebe5f-a95d-42df-8840-c8ac6fd743e4-calico-apiserver-certs\") pod \"236ebe5f-a95d-42df-8840-c8ac6fd743e4\" (UID: \"236ebe5f-a95d-42df-8840-c8ac6fd743e4\") " Jul 16 12:21:17.717626 systemd[1]: var-lib-kubelet-pods-236ebe5f\x2da95d\x2d42df\x2d8840\x2dc8ac6fd743e4-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dtwncg.mount: Deactivated successfully. Jul 16 12:21:17.717745 systemd[1]: var-lib-kubelet-pods-236ebe5f\x2da95d\x2d42df\x2d8840\x2dc8ac6fd743e4-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Jul 16 12:21:17.729517 kubelet[2009]: I0716 12:21:17.722557 2009 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/236ebe5f-a95d-42df-8840-c8ac6fd743e4-kube-api-access-twncg" (OuterVolumeSpecName: "kube-api-access-twncg") pod "236ebe5f-a95d-42df-8840-c8ac6fd743e4" (UID: "236ebe5f-a95d-42df-8840-c8ac6fd743e4"). InnerVolumeSpecName "kube-api-access-twncg". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 16 12:21:17.732347 kubelet[2009]: I0716 12:21:17.722559 2009 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/236ebe5f-a95d-42df-8840-c8ac6fd743e4-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "236ebe5f-a95d-42df-8840-c8ac6fd743e4" (UID: "236ebe5f-a95d-42df-8840-c8ac6fd743e4"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 16 12:21:17.762074 kubelet[2009]: I0716 12:21:17.762037 2009 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-twncg\" (UniqueName: \"kubernetes.io/projected/236ebe5f-a95d-42df-8840-c8ac6fd743e4-kube-api-access-twncg\") on node \"srv-frvg8.gb1.brightbox.com\" DevicePath \"\"" Jul 16 12:21:17.762301 kubelet[2009]: I0716 12:21:17.762288 2009 reconciler_common.go:299] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/236ebe5f-a95d-42df-8840-c8ac6fd743e4-calico-apiserver-certs\") on node \"srv-frvg8.gb1.brightbox.com\" DevicePath \"\"" Jul 16 12:21:17.812091 systemd[1]: Removed slice kubepods-besteffort-pod236ebe5f_a95d_42df_8840_c8ac6fd743e4.slice. Jul 16 12:21:17.812186 systemd[1]: kubepods-besteffort-pod236ebe5f_a95d_42df_8840_c8ac6fd743e4.slice: Consumed 1.415s CPU time. Jul 16 12:21:17.827276 kubelet[2009]: I0716 12:21:17.827205 2009 scope.go:117] "RemoveContainer" containerID="eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18" Jul 16 12:21:17.881007 env[1205]: time="2025-07-16T12:21:17.880887923Z" level=info msg="RemoveContainer for \"eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18\"" Jul 16 12:21:17.890497 env[1205]: time="2025-07-16T12:21:17.890452134Z" level=info msg="RemoveContainer for \"eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18\" returns successfully" Jul 16 12:21:17.892438 kubelet[2009]: I0716 12:21:17.892411 2009 scope.go:117] "RemoveContainer" containerID="eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18" Jul 16 12:21:17.892997 env[1205]: time="2025-07-16T12:21:17.892846361Z" level=error msg="ContainerStatus for \"eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18\": not found" Jul 16 12:21:17.893294 kubelet[2009]: E0716 12:21:17.893265 2009 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18\": not found" containerID="eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18" Jul 16 12:21:17.894284 kubelet[2009]: I0716 12:21:17.894249 2009 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18"} err="failed to get container status \"eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18\": rpc error: code = NotFound desc = an error occurred when try to find container \"eb90de4d4d4cc50a43a702558ee0b5d8453b4bed1f3210948d27111d783e9c18\": not found" Jul 16 12:21:18.028344 kubelet[2009]: I0716 12:21:18.028215 2009 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="236ebe5f-a95d-42df-8840-c8ac6fd743e4" path="/var/lib/kubelet/pods/236ebe5f-a95d-42df-8840-c8ac6fd743e4/volumes" Jul 16 12:21:18.042000 audit[5611]: NETFILTER_CFG table=filter:146 family=2 entries=8 op=nft_register_rule pid=5611 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:18.042000 audit[5611]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd8d17eb60 a2=0 a3=7ffd8d17eb4c items=0 ppid=2161 pid=5611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:18.042000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:18.049000 audit[5611]: NETFILTER_CFG table=nat:147 family=2 entries=40 op=nft_register_rule pid=5611 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:21:18.049000 audit[5611]: SYSCALL arch=c000003e syscall=46 success=yes exit=12772 a0=3 a1=7ffd8d17eb60 a2=0 a3=7ffd8d17eb4c items=0 ppid=2161 pid=5611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:18.049000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:21:21.309422 systemd[1]: run-containerd-runc-k8s.io-36af0aef6420d8c3c1c693ca3c4dec62c8501ca59a35caedb76ac04c87b90989-runc.9vIlJe.mount: Deactivated successfully. Jul 16 12:21:24.633856 systemd[1]: run-containerd-runc-k8s.io-b7b4cee5afa2c5ccb34395f3c076eb4cfc1a3bfd4c189318fdcd70631378f1f9-runc.l5EHvI.mount: Deactivated successfully. Jul 16 12:21:29.394681 systemd[1]: Started sshd@10-10.244.102.2:22-147.75.109.163:47666.service. Jul 16 12:21:29.406598 kernel: kauditd_printk_skb: 21 callbacks suppressed Jul 16 12:21:29.408705 kernel: audit: type=1130 audit(1752668489.396:1572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.244.102.2:22-147.75.109.163:47666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:21:29.396000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.244.102.2:22-147.75.109.163:47666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:21:30.368000 audit[5662]: USER_ACCT pid=5662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:30.378915 sshd[5662]: Accepted publickey for core from 147.75.109.163 port 47666 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:21:30.381764 kernel: audit: type=1101 audit(1752668490.368:1573): pid=5662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:30.382260 kernel: audit: type=1103 audit(1752668490.379:1574): pid=5662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:30.379000 audit[5662]: CRED_ACQ pid=5662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:30.387825 sshd[5662]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:21:30.389053 kernel: audit: type=1006 audit(1752668490.379:1575): pid=5662 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 16 12:21:30.389111 kernel: audit: type=1300 audit(1752668490.379:1575): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd65f59f0 a2=3 a3=0 items=0 ppid=1 pid=5662 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:30.379000 audit[5662]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd65f59f0 a2=3 a3=0 items=0 ppid=1 pid=5662 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:30.393539 kernel: audit: type=1327 audit(1752668490.379:1575): proctitle=737368643A20636F7265205B707269765D Jul 16 12:21:30.379000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 16 12:21:30.423010 systemd-logind[1191]: New session 10 of user core. Jul 16 12:21:30.423843 systemd[1]: Started session-10.scope. Jul 16 12:21:30.437000 audit[5662]: USER_START pid=5662 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:30.440000 audit[5664]: CRED_ACQ pid=5664 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:30.446356 kernel: audit: type=1105 audit(1752668490.437:1576): pid=5662 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:30.446484 kernel: audit: type=1103 audit(1752668490.440:1577): pid=5664 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:31.506411 update_engine[1192]: I0716 12:21:31.505816 1192 prefs.cc:52] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Jul 16 12:21:31.506411 update_engine[1192]: I0716 12:21:31.506323 1192 prefs.cc:52] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Jul 16 12:21:31.510651 update_engine[1192]: I0716 12:21:31.509445 1192 prefs.cc:52] aleph-version not present in /var/lib/update_engine/prefs Jul 16 12:21:31.510651 update_engine[1192]: I0716 12:21:31.509944 1192 omaha_request_params.cc:62] Current group set to lts Jul 16 12:21:31.512703 update_engine[1192]: I0716 12:21:31.512605 1192 update_attempter.cc:499] Already updated boot flags. Skipping. Jul 16 12:21:31.512703 update_engine[1192]: I0716 12:21:31.512639 1192 update_attempter.cc:643] Scheduling an action processor start. Jul 16 12:21:31.512703 update_engine[1192]: I0716 12:21:31.512662 1192 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Jul 16 12:21:31.515000 update_engine[1192]: I0716 12:21:31.514683 1192 prefs.cc:52] previous-version not present in /var/lib/update_engine/prefs Jul 16 12:21:31.515000 update_engine[1192]: I0716 12:21:31.514772 1192 omaha_request_action.cc:270] Posting an Omaha request to disabled Jul 16 12:21:31.515000 update_engine[1192]: I0716 12:21:31.514778 1192 omaha_request_action.cc:271] Request: Jul 16 12:21:31.515000 update_engine[1192]: Jul 16 12:21:31.515000 update_engine[1192]: Jul 16 12:21:31.515000 update_engine[1192]: Jul 16 12:21:31.515000 update_engine[1192]: Jul 16 12:21:31.515000 update_engine[1192]: Jul 16 12:21:31.515000 update_engine[1192]: Jul 16 12:21:31.515000 update_engine[1192]: Jul 16 12:21:31.515000 update_engine[1192]: Jul 16 12:21:31.515000 update_engine[1192]: I0716 12:21:31.514783 1192 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 16 12:21:31.528547 update_engine[1192]: I0716 12:21:31.528419 1192 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 16 12:21:31.529250 update_engine[1192]: I0716 12:21:31.529203 1192 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Jul 16 12:21:31.535795 update_engine[1192]: E0716 12:21:31.535663 1192 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 16 12:21:31.535795 update_engine[1192]: I0716 12:21:31.535770 1192 libcurl_http_fetcher.cc:283] No HTTP response, retry 1 Jul 16 12:21:31.541150 locksmithd[1236]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Jul 16 12:21:31.693469 sshd[5662]: pam_unix(sshd:session): session closed for user core Jul 16 12:21:31.697000 audit[5662]: USER_END pid=5662 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:31.708514 kernel: audit: type=1106 audit(1752668491.697:1578): pid=5662 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:31.709057 kernel: audit: type=1104 audit(1752668491.697:1579): pid=5662 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:31.697000 audit[5662]: CRED_DISP pid=5662 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:31.719102 systemd[1]: sshd@10-10.244.102.2:22-147.75.109.163:47666.service: Deactivated successfully. Jul 16 12:21:31.719000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.244.102.2:22-147.75.109.163:47666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:21:31.721826 systemd[1]: session-10.scope: Deactivated successfully. Jul 16 12:21:31.723686 systemd-logind[1191]: Session 10 logged out. Waiting for processes to exit. Jul 16 12:21:31.726131 systemd-logind[1191]: Removed session 10. Jul 16 12:21:36.855776 systemd[1]: Started sshd@11-10.244.102.2:22-147.75.109.163:47668.service. Jul 16 12:21:36.880331 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 16 12:21:36.883390 kernel: audit: type=1130 audit(1752668496.854:1581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.244.102.2:22-147.75.109.163:47668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:21:36.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.244.102.2:22-147.75.109.163:47668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:21:37.814000 audit[5699]: USER_ACCT pid=5699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:37.822600 kernel: audit: type=1101 audit(1752668497.814:1582): pid=5699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:37.822993 sshd[5699]: Accepted publickey for core from 147.75.109.163 port 47668 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:21:37.825000 audit[5699]: CRED_ACQ pid=5699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:37.831390 kernel: audit: type=1103 audit(1752668497.825:1583): pid=5699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:37.835395 kernel: audit: type=1006 audit(1752668497.825:1584): pid=5699 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Jul 16 12:21:37.837037 sshd[5699]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:21:37.825000 audit[5699]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2175f5e0 a2=3 a3=0 items=0 ppid=1 pid=5699 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:37.825000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 16 12:21:37.847428 kernel: audit: type=1300 audit(1752668497.825:1584): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2175f5e0 a2=3 a3=0 items=0 ppid=1 pid=5699 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:37.847501 kernel: audit: type=1327 audit(1752668497.825:1584): proctitle=737368643A20636F7265205B707269765D Jul 16 12:21:37.869539 systemd[1]: Started session-11.scope. Jul 16 12:21:37.869949 systemd-logind[1191]: New session 11 of user core. Jul 16 12:21:37.876000 audit[5699]: USER_START pid=5699 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:37.883426 kernel: audit: type=1105 audit(1752668497.876:1585): pid=5699 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:37.883000 audit[5703]: CRED_ACQ pid=5703 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:37.889457 kernel: audit: type=1103 audit(1752668497.883:1586): pid=5703 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:39.495161 sshd[5699]: pam_unix(sshd:session): session closed for user core Jul 16 12:21:39.506000 audit[5699]: USER_END pid=5699 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:39.515650 kernel: audit: type=1106 audit(1752668499.506:1587): pid=5699 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:39.513000 audit[5699]: CRED_DISP pid=5699 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:39.523396 kernel: audit: type=1104 audit(1752668499.513:1588): pid=5699 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:39.525256 systemd[1]: sshd@11-10.244.102.2:22-147.75.109.163:47668.service: Deactivated successfully. Jul 16 12:21:39.525000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.244.102.2:22-147.75.109.163:47668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:21:39.529779 systemd[1]: session-11.scope: Deactivated successfully. Jul 16 12:21:39.530980 systemd-logind[1191]: Session 11 logged out. Waiting for processes to exit. Jul 16 12:21:39.535842 systemd-logind[1191]: Removed session 11. Jul 16 12:21:41.296000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:21:41.296000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0032d6660 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:21:41.296000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:21:41.296000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525832 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:21:41.296000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002d0ecf0 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:21:41.296000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:21:41.509265 update_engine[1192]: I0716 12:21:41.508026 1192 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 16 12:21:41.519067 update_engine[1192]: I0716 12:21:41.519009 1192 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 16 12:21:41.519458 update_engine[1192]: I0716 12:21:41.519435 1192 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Jul 16 12:21:41.520312 update_engine[1192]: E0716 12:21:41.520253 1192 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 16 12:21:41.522774 update_engine[1192]: I0716 12:21:41.522720 1192 libcurl_http_fetcher.cc:283] No HTTP response, retry 2 Jul 16 12:21:41.663000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525834 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:21:41.663000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525828 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:21:41.663000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7d a1=c00516c4b0 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:21:41.663000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c0153b4300 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:21:41.663000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:21:41.663000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525832 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:21:41.663000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c0153b4330 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:21:41.663000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:21:41.663000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:21:41.695000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:21:41.695000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c010443260 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:21:41.695000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:21:41.713000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:21:41.713000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525832 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:21:41.713000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c0104435c0 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:21:41.713000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:21:41.713000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7d a1=c00a29bb30 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:21:41.713000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:21:44.658202 kernel: kauditd_printk_skb: 25 callbacks suppressed Jul 16 12:21:44.659444 kernel: audit: type=1130 audit(1752668504.648:1598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.244.102.2:22-147.75.109.163:35140 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:21:44.648000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.244.102.2:22-147.75.109.163:35140 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:21:44.649659 systemd[1]: Started sshd@12-10.244.102.2:22-147.75.109.163:35140.service. Jul 16 12:21:45.592000 audit[5735]: USER_ACCT pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:45.598358 sshd[5735]: Accepted publickey for core from 147.75.109.163 port 35140 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:21:45.601786 kernel: audit: type=1101 audit(1752668505.592:1599): pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:45.601000 audit[5735]: CRED_ACQ pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:45.608742 kernel: audit: type=1103 audit(1752668505.601:1600): pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:45.609015 sshd[5735]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:21:45.612781 kernel: audit: type=1006 audit(1752668505.601:1601): pid=5735 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Jul 16 12:21:45.601000 audit[5735]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2dd4ad80 a2=3 a3=0 items=0 ppid=1 pid=5735 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:45.628277 kernel: audit: type=1300 audit(1752668505.601:1601): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2dd4ad80 a2=3 a3=0 items=0 ppid=1 pid=5735 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:45.628350 kernel: audit: type=1327 audit(1752668505.601:1601): proctitle=737368643A20636F7265205B707269765D Jul 16 12:21:45.601000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 16 12:21:45.638036 systemd-logind[1191]: New session 12 of user core. Jul 16 12:21:45.639682 systemd[1]: Started session-12.scope. Jul 16 12:21:45.646000 audit[5735]: USER_START pid=5735 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:45.653454 kernel: audit: type=1105 audit(1752668505.646:1602): pid=5735 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:45.648000 audit[5737]: CRED_ACQ pid=5737 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:45.659449 kernel: audit: type=1103 audit(1752668505.648:1603): pid=5737 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:47.104968 sshd[5735]: pam_unix(sshd:session): session closed for user core Jul 16 12:21:47.115000 audit[5735]: USER_END pid=5735 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:47.125400 kernel: audit: type=1106 audit(1752668507.115:1604): pid=5735 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:47.124000 audit[5735]: CRED_DISP pid=5735 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:47.132483 kernel: audit: type=1104 audit(1752668507.124:1605): pid=5735 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:47.145056 systemd[1]: sshd@12-10.244.102.2:22-147.75.109.163:35140.service: Deactivated successfully. Jul 16 12:21:47.145000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.244.102.2:22-147.75.109.163:35140 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:21:47.152767 systemd[1]: session-12.scope: Deactivated successfully. Jul 16 12:21:47.153812 systemd-logind[1191]: Session 12 logged out. Waiting for processes to exit. Jul 16 12:21:47.155731 systemd-logind[1191]: Removed session 12. Jul 16 12:21:49.037000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:21:49.037000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00342fb20 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:21:49.037000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:21:49.037000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:21:49.037000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0030243e0 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:21:49.037000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:21:49.046000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:21:49.046000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00342fb40 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:21:49.046000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:21:49.057000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:21:49.057000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c003024580 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:21:49.057000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:21:50.350000 audit[4461]: AVC avc: denied { watch } for pid=4461 comm="apiserver" path="/calico-apiserver-certs/..2025_07_16_12_20_22.3586990452/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c509,c728 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c509,c728 tclass=file permissive=0 Jul 16 12:21:50.361480 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 16 12:21:50.362594 kernel: audit: type=1400 audit(1752668510.350:1611): avc: denied { watch } for pid=4461 comm="apiserver" path="/calico-apiserver-certs/..2025_07_16_12_20_22.3586990452/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c509,c728 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c509,c728 tclass=file permissive=0 Jul 16 12:21:50.350000 audit[4461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000ecef00 a2=fc6 a3=0 items=0 ppid=3617 pid=4461 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c509,c728 key=(null) Jul 16 12:21:50.384424 kernel: audit: type=1300 audit(1752668510.350:1611): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000ecef00 a2=fc6 a3=0 items=0 ppid=3617 pid=4461 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c509,c728 key=(null) Jul 16 12:21:50.384598 kernel: audit: type=1327 audit(1752668510.350:1611): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 16 12:21:50.350000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 16 12:21:51.513845 update_engine[1192]: I0716 12:21:51.511304 1192 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 16 12:21:51.524094 update_engine[1192]: I0716 12:21:51.524048 1192 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 16 12:21:51.525270 update_engine[1192]: I0716 12:21:51.525241 1192 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Jul 16 12:21:51.525583 update_engine[1192]: E0716 12:21:51.525557 1192 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 16 12:21:51.525720 update_engine[1192]: I0716 12:21:51.525700 1192 libcurl_http_fetcher.cc:283] No HTTP response, retry 3 Jul 16 12:21:52.271308 systemd[1]: Started sshd@13-10.244.102.2:22-147.75.109.163:53588.service. Jul 16 12:21:52.271000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.244.102.2:22-147.75.109.163:53588 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:21:52.280445 kernel: audit: type=1130 audit(1752668512.271:1612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.244.102.2:22-147.75.109.163:53588 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:21:53.223000 audit[5750]: USER_ACCT pid=5750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:53.242240 kernel: audit: type=1101 audit(1752668513.223:1613): pid=5750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:53.242323 kernel: audit: type=1103 audit(1752668513.236:1614): pid=5750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:53.236000 audit[5750]: CRED_ACQ pid=5750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:53.245385 kernel: audit: type=1006 audit(1752668513.236:1615): pid=5750 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 16 12:21:53.245469 sshd[5750]: Accepted publickey for core from 147.75.109.163 port 53588 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:21:53.236000 audit[5750]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce39e6530 a2=3 a3=0 items=0 ppid=1 pid=5750 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:53.253143 kernel: audit: type=1300 audit(1752668513.236:1615): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce39e6530 a2=3 a3=0 items=0 ppid=1 pid=5750 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:53.253213 kernel: audit: type=1327 audit(1752668513.236:1615): proctitle=737368643A20636F7265205B707269765D Jul 16 12:21:53.236000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 16 12:21:53.237763 sshd[5750]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:21:53.265552 systemd-logind[1191]: New session 13 of user core. Jul 16 12:21:53.267158 systemd[1]: Started session-13.scope. Jul 16 12:21:53.271000 audit[5750]: USER_START pid=5750 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:53.271000 audit[5754]: CRED_ACQ pid=5754 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:53.276409 kernel: audit: type=1105 audit(1752668513.271:1616): pid=5750 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:54.377702 kubelet[2009]: I0716 12:21:54.377617 2009 scope.go:117] "RemoveContainer" containerID="5672481c3db9ac166b5e04ff756591f01548742c761267a896f758b301ecc2d3" Jul 16 12:21:54.443331 env[1205]: time="2025-07-16T12:21:54.443162925Z" level=info msg="RemoveContainer for \"5672481c3db9ac166b5e04ff756591f01548742c761267a896f758b301ecc2d3\"" Jul 16 12:21:54.454914 env[1205]: time="2025-07-16T12:21:54.454087667Z" level=info msg="RemoveContainer for \"5672481c3db9ac166b5e04ff756591f01548742c761267a896f758b301ecc2d3\" returns successfully" Jul 16 12:21:54.478938 env[1205]: time="2025-07-16T12:21:54.478893579Z" level=info msg="StopPodSandbox for \"ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812\"" Jul 16 12:21:55.003299 env[1205]: 2025-07-16 12:21:54.719 [WARNING][5772] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:21:55.003299 env[1205]: 2025-07-16 12:21:54.721 [INFO][5772] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Jul 16 12:21:55.003299 env[1205]: 2025-07-16 12:21:54.721 [INFO][5772] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" iface="eth0" netns="" Jul 16 12:21:55.003299 env[1205]: 2025-07-16 12:21:54.721 [INFO][5772] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Jul 16 12:21:55.003299 env[1205]: 2025-07-16 12:21:54.721 [INFO][5772] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Jul 16 12:21:55.003299 env[1205]: 2025-07-16 12:21:54.955 [INFO][5779] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" HandleID="k8s-pod-network.ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:21:55.003299 env[1205]: 2025-07-16 12:21:54.958 [INFO][5779] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:21:55.003299 env[1205]: 2025-07-16 12:21:54.959 [INFO][5779] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:21:55.003299 env[1205]: 2025-07-16 12:21:54.980 [WARNING][5779] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" HandleID="k8s-pod-network.ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:21:55.003299 env[1205]: 2025-07-16 12:21:54.980 [INFO][5779] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" HandleID="k8s-pod-network.ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:21:55.003299 env[1205]: 2025-07-16 12:21:54.983 [INFO][5779] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:21:55.003299 env[1205]: 2025-07-16 12:21:54.989 [INFO][5772] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Jul 16 12:21:55.014078 env[1205]: time="2025-07-16T12:21:55.003533139Z" level=info msg="TearDown network for sandbox \"ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812\" successfully" Jul 16 12:21:55.014078 env[1205]: time="2025-07-16T12:21:55.003577494Z" level=info msg="StopPodSandbox for \"ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812\" returns successfully" Jul 16 12:21:55.133418 env[1205]: time="2025-07-16T12:21:55.129741709Z" level=info msg="RemovePodSandbox for \"ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812\"" Jul 16 12:21:55.133418 env[1205]: time="2025-07-16T12:21:55.129835659Z" level=info msg="Forcibly stopping sandbox \"ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812\"" Jul 16 12:21:55.454544 env[1205]: 2025-07-16 12:21:55.310 [WARNING][5805] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:21:55.454544 env[1205]: 2025-07-16 12:21:55.313 [INFO][5805] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Jul 16 12:21:55.454544 env[1205]: 2025-07-16 12:21:55.313 [INFO][5805] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" iface="eth0" netns="" Jul 16 12:21:55.454544 env[1205]: 2025-07-16 12:21:55.313 [INFO][5805] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Jul 16 12:21:55.454544 env[1205]: 2025-07-16 12:21:55.313 [INFO][5805] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Jul 16 12:21:55.454544 env[1205]: 2025-07-16 12:21:55.432 [INFO][5822] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" HandleID="k8s-pod-network.ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:21:55.454544 env[1205]: 2025-07-16 12:21:55.433 [INFO][5822] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:21:55.454544 env[1205]: 2025-07-16 12:21:55.433 [INFO][5822] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:21:55.454544 env[1205]: 2025-07-16 12:21:55.442 [WARNING][5822] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" HandleID="k8s-pod-network.ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:21:55.454544 env[1205]: 2025-07-16 12:21:55.442 [INFO][5822] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" HandleID="k8s-pod-network.ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--8tj42-eth0" Jul 16 12:21:55.454544 env[1205]: 2025-07-16 12:21:55.444 [INFO][5822] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:21:55.454544 env[1205]: 2025-07-16 12:21:55.449 [INFO][5805] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812" Jul 16 12:21:55.459545 env[1205]: time="2025-07-16T12:21:55.455554523Z" level=info msg="TearDown network for sandbox \"ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812\" successfully" Jul 16 12:21:55.465281 env[1205]: time="2025-07-16T12:21:55.464719706Z" level=info msg="RemovePodSandbox \"ccae83f60ae76e238215d5245068046b9cfb9f86b3f61027dfee98b6e70ff812\" returns successfully" Jul 16 12:21:55.467595 env[1205]: time="2025-07-16T12:21:55.466425452Z" level=info msg="StopPodSandbox for \"87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9\"" Jul 16 12:21:55.627446 env[1205]: 2025-07-16 12:21:55.555 [WARNING][5837] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:21:55.627446 env[1205]: 2025-07-16 12:21:55.555 [INFO][5837] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Jul 16 12:21:55.627446 env[1205]: 2025-07-16 12:21:55.555 [INFO][5837] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" iface="eth0" netns="" Jul 16 12:21:55.627446 env[1205]: 2025-07-16 12:21:55.555 [INFO][5837] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Jul 16 12:21:55.627446 env[1205]: 2025-07-16 12:21:55.555 [INFO][5837] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Jul 16 12:21:55.627446 env[1205]: 2025-07-16 12:21:55.596 [INFO][5844] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" HandleID="k8s-pod-network.87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:21:55.627446 env[1205]: 2025-07-16 12:21:55.596 [INFO][5844] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:21:55.627446 env[1205]: 2025-07-16 12:21:55.596 [INFO][5844] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:21:55.627446 env[1205]: 2025-07-16 12:21:55.611 [WARNING][5844] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" HandleID="k8s-pod-network.87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:21:55.627446 env[1205]: 2025-07-16 12:21:55.611 [INFO][5844] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" HandleID="k8s-pod-network.87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:21:55.627446 env[1205]: 2025-07-16 12:21:55.620 [INFO][5844] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:21:55.627446 env[1205]: 2025-07-16 12:21:55.623 [INFO][5837] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Jul 16 12:21:55.629337 env[1205]: time="2025-07-16T12:21:55.627905748Z" level=info msg="TearDown network for sandbox \"87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9\" successfully" Jul 16 12:21:55.629337 env[1205]: time="2025-07-16T12:21:55.628240547Z" level=info msg="StopPodSandbox for \"87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9\" returns successfully" Jul 16 12:21:55.629337 env[1205]: time="2025-07-16T12:21:55.629253658Z" level=info msg="RemovePodSandbox for \"87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9\"" Jul 16 12:21:55.629337 env[1205]: time="2025-07-16T12:21:55.629288364Z" level=info msg="Forcibly stopping sandbox \"87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9\"" Jul 16 12:21:55.767498 env[1205]: 2025-07-16 12:21:55.707 [WARNING][5861] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" WorkloadEndpoint="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:21:55.767498 env[1205]: 2025-07-16 12:21:55.708 [INFO][5861] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Jul 16 12:21:55.767498 env[1205]: 2025-07-16 12:21:55.708 [INFO][5861] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" iface="eth0" netns="" Jul 16 12:21:55.767498 env[1205]: 2025-07-16 12:21:55.708 [INFO][5861] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Jul 16 12:21:55.767498 env[1205]: 2025-07-16 12:21:55.708 [INFO][5861] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Jul 16 12:21:55.767498 env[1205]: 2025-07-16 12:21:55.741 [INFO][5868] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" HandleID="k8s-pod-network.87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:21:55.767498 env[1205]: 2025-07-16 12:21:55.741 [INFO][5868] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 16 12:21:55.767498 env[1205]: 2025-07-16 12:21:55.741 [INFO][5868] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 16 12:21:55.767498 env[1205]: 2025-07-16 12:21:55.758 [WARNING][5868] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" HandleID="k8s-pod-network.87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:21:55.767498 env[1205]: 2025-07-16 12:21:55.758 [INFO][5868] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" HandleID="k8s-pod-network.87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Workload="srv--frvg8.gb1.brightbox.com-k8s-calico--apiserver--5944847977--rlssh-eth0" Jul 16 12:21:55.767498 env[1205]: 2025-07-16 12:21:55.760 [INFO][5868] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 16 12:21:55.767498 env[1205]: 2025-07-16 12:21:55.763 [INFO][5861] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9" Jul 16 12:21:55.767498 env[1205]: time="2025-07-16T12:21:55.766263954Z" level=info msg="TearDown network for sandbox \"87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9\" successfully" Jul 16 12:21:55.770481 env[1205]: time="2025-07-16T12:21:55.770452662Z" level=info msg="RemovePodSandbox \"87eb82cc7b1a4ccfa0d4a7cd3a749f23e5566aad022160529653a444e6ff56a9\" returns successfully" Jul 16 12:21:55.876552 sshd[5750]: pam_unix(sshd:session): session closed for user core Jul 16 12:21:55.896000 audit[5750]: USER_END pid=5750 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:55.902865 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 16 12:21:55.903570 kernel: audit: type=1106 audit(1752668515.896:1618): pid=5750 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:55.908433 systemd[1]: sshd@13-10.244.102.2:22-147.75.109.163:53588.service: Deactivated successfully. Jul 16 12:21:55.911120 kernel: audit: type=1104 audit(1752668515.896:1619): pid=5750 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:55.896000 audit[5750]: CRED_DISP pid=5750 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:55.916130 systemd[1]: session-13.scope: Deactivated successfully. Jul 16 12:21:55.917545 systemd-logind[1191]: Session 13 logged out. Waiting for processes to exit. Jul 16 12:21:55.907000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.244.102.2:22-147.75.109.163:53588 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:21:55.922640 kernel: audit: type=1131 audit(1752668515.907:1620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.244.102.2:22-147.75.109.163:53588 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:21:55.927980 systemd-logind[1191]: Removed session 13. Jul 16 12:21:56.019000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.244.102.2:22-147.75.109.163:53594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:21:56.019861 systemd[1]: Started sshd@14-10.244.102.2:22-147.75.109.163:53594.service. Jul 16 12:21:56.025444 kernel: audit: type=1130 audit(1752668516.019:1621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.244.102.2:22-147.75.109.163:53594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:21:56.978000 audit[5876]: USER_ACCT pid=5876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:56.986547 kernel: audit: type=1101 audit(1752668516.978:1622): pid=5876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:56.986766 sshd[5876]: Accepted publickey for core from 147.75.109.163 port 53594 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:21:56.987000 audit[5876]: CRED_ACQ pid=5876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:56.990394 sshd[5876]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:21:56.995201 kernel: audit: type=1103 audit(1752668516.987:1623): pid=5876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:56.995478 kernel: audit: type=1006 audit(1752668516.988:1624): pid=5876 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 16 12:21:56.995532 kernel: audit: type=1300 audit(1752668516.988:1624): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc182a8fb0 a2=3 a3=0 items=0 ppid=1 pid=5876 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:56.988000 audit[5876]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc182a8fb0 a2=3 a3=0 items=0 ppid=1 pid=5876 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:57.011852 kernel: audit: type=1327 audit(1752668516.988:1624): proctitle=737368643A20636F7265205B707269765D Jul 16 12:21:56.988000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 16 12:21:57.019448 systemd-logind[1191]: New session 14 of user core. Jul 16 12:21:57.019959 systemd[1]: Started session-14.scope. Jul 16 12:21:57.026000 audit[5876]: USER_START pid=5876 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:57.026000 audit[5878]: CRED_ACQ pid=5878 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:57.031407 kernel: audit: type=1105 audit(1752668517.026:1625): pid=5876 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:58.309481 sshd[5876]: pam_unix(sshd:session): session closed for user core Jul 16 12:21:58.323000 audit[5876]: USER_END pid=5876 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:58.323000 audit[5876]: CRED_DISP pid=5876 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:58.329000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.244.102.2:22-147.75.109.163:53594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:21:58.329884 systemd[1]: sshd@14-10.244.102.2:22-147.75.109.163:53594.service: Deactivated successfully. Jul 16 12:21:58.331755 systemd[1]: session-14.scope: Deactivated successfully. Jul 16 12:21:58.332498 systemd-logind[1191]: Session 14 logged out. Waiting for processes to exit. Jul 16 12:21:58.339557 systemd-logind[1191]: Removed session 14. Jul 16 12:21:58.444000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.244.102.2:22-147.75.109.163:33646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:21:58.444570 systemd[1]: Started sshd@15-10.244.102.2:22-147.75.109.163:33646.service. Jul 16 12:21:59.380000 audit[5894]: USER_ACCT pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:59.383871 sshd[5894]: Accepted publickey for core from 147.75.109.163 port 33646 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:21:59.383000 audit[5894]: CRED_ACQ pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:59.383000 audit[5894]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc10740250 a2=3 a3=0 items=0 ppid=1 pid=5894 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:21:59.383000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 16 12:21:59.385689 sshd[5894]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:21:59.400067 systemd[1]: Started session-15.scope. Jul 16 12:21:59.400715 systemd-logind[1191]: New session 15 of user core. Jul 16 12:21:59.405000 audit[5894]: USER_START pid=5894 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:21:59.406000 audit[5896]: CRED_ACQ pid=5896 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:01.275601 sshd[5894]: pam_unix(sshd:session): session closed for user core Jul 16 12:22:01.306000 audit[5894]: USER_END pid=5894 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:01.320277 kernel: kauditd_printk_skb: 12 callbacks suppressed Jul 16 12:22:01.323646 kernel: audit: type=1106 audit(1752668521.306:1636): pid=5894 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:01.324639 kernel: audit: type=1104 audit(1752668521.307:1637): pid=5894 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:01.307000 audit[5894]: CRED_DISP pid=5894 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:01.327862 systemd[1]: sshd@15-10.244.102.2:22-147.75.109.163:33646.service: Deactivated successfully. Jul 16 12:22:01.335932 kernel: audit: type=1131 audit(1752668521.329:1638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.244.102.2:22-147.75.109.163:33646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:01.329000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.244.102.2:22-147.75.109.163:33646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:01.331453 systemd[1]: session-15.scope: Deactivated successfully. Jul 16 12:22:01.333463 systemd-logind[1191]: Session 15 logged out. Waiting for processes to exit. Jul 16 12:22:01.337830 systemd-logind[1191]: Removed session 15. Jul 16 12:22:01.503001 update_engine[1192]: I0716 12:22:01.501538 1192 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 16 12:22:01.509052 update_engine[1192]: I0716 12:22:01.508939 1192 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 16 12:22:01.509457 update_engine[1192]: I0716 12:22:01.509403 1192 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Jul 16 12:22:01.510361 update_engine[1192]: E0716 12:22:01.510303 1192 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 16 12:22:01.510849 update_engine[1192]: I0716 12:22:01.510764 1192 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Jul 16 12:22:01.510849 update_engine[1192]: I0716 12:22:01.510780 1192 omaha_request_action.cc:621] Omaha request response: Jul 16 12:22:01.511335 update_engine[1192]: E0716 12:22:01.511251 1192 omaha_request_action.cc:640] Omaha request network transfer failed. Jul 16 12:22:01.511335 update_engine[1192]: I0716 12:22:01.511303 1192 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaRequestAction action failed. Aborting processing. Jul 16 12:22:01.511335 update_engine[1192]: I0716 12:22:01.511308 1192 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Jul 16 12:22:01.511335 update_engine[1192]: I0716 12:22:01.511312 1192 update_attempter.cc:306] Processing Done. Jul 16 12:22:01.511923 update_engine[1192]: E0716 12:22:01.511790 1192 update_attempter.cc:619] Update failed. Jul 16 12:22:01.511923 update_engine[1192]: I0716 12:22:01.511801 1192 utils.cc:600] Converting error code 2000 to kActionCodeOmahaErrorInHTTPResponse Jul 16 12:22:01.511923 update_engine[1192]: I0716 12:22:01.511806 1192 payload_state.cc:97] Updating payload state for error code: 37 (kActionCodeOmahaErrorInHTTPResponse) Jul 16 12:22:01.511923 update_engine[1192]: I0716 12:22:01.511809 1192 payload_state.cc:103] Ignoring failures until we get a valid Omaha response. Jul 16 12:22:01.512454 update_engine[1192]: I0716 12:22:01.512392 1192 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Jul 16 12:22:01.514180 update_engine[1192]: I0716 12:22:01.513834 1192 omaha_request_action.cc:270] Posting an Omaha request to disabled Jul 16 12:22:01.514180 update_engine[1192]: I0716 12:22:01.513849 1192 omaha_request_action.cc:271] Request: Jul 16 12:22:01.514180 update_engine[1192]: Jul 16 12:22:01.514180 update_engine[1192]: Jul 16 12:22:01.514180 update_engine[1192]: Jul 16 12:22:01.514180 update_engine[1192]: Jul 16 12:22:01.514180 update_engine[1192]: Jul 16 12:22:01.514180 update_engine[1192]: Jul 16 12:22:01.514180 update_engine[1192]: I0716 12:22:01.513854 1192 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 16 12:22:01.514180 update_engine[1192]: I0716 12:22:01.514010 1192 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 16 12:22:01.514180 update_engine[1192]: I0716 12:22:01.514151 1192 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Jul 16 12:22:01.515055 update_engine[1192]: E0716 12:22:01.514878 1192 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 16 12:22:01.515055 update_engine[1192]: I0716 12:22:01.514954 1192 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Jul 16 12:22:01.515055 update_engine[1192]: I0716 12:22:01.514961 1192 omaha_request_action.cc:621] Omaha request response: Jul 16 12:22:01.515055 update_engine[1192]: I0716 12:22:01.514966 1192 action_processor.cc:65] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Jul 16 12:22:01.515055 update_engine[1192]: I0716 12:22:01.514969 1192 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Jul 16 12:22:01.515055 update_engine[1192]: I0716 12:22:01.514972 1192 update_attempter.cc:306] Processing Done. Jul 16 12:22:01.515055 update_engine[1192]: I0716 12:22:01.514976 1192 update_attempter.cc:310] Error event sent. Jul 16 12:22:01.515055 update_engine[1192]: I0716 12:22:01.514984 1192 update_check_scheduler.cc:74] Next update check in 42m13s Jul 16 12:22:01.532355 locksmithd[1236]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_REPORTING_ERROR_EVENT" NewVersion=0.0.0 NewSize=0 Jul 16 12:22:01.532355 locksmithd[1236]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Jul 16 12:22:06.439832 systemd[1]: Started sshd@16-10.244.102.2:22-147.75.109.163:33656.service. Jul 16 12:22:06.483396 kernel: audit: type=1130 audit(1752668526.443:1639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.244.102.2:22-147.75.109.163:33656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:06.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.244.102.2:22-147.75.109.163:33656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:07.400000 audit[5948]: USER_ACCT pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:07.410854 kernel: audit: type=1101 audit(1752668527.400:1640): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:07.412950 sshd[5948]: Accepted publickey for core from 147.75.109.163 port 33656 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:22:07.412000 audit[5948]: CRED_ACQ pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:07.430870 kernel: audit: type=1103 audit(1752668527.412:1641): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:07.430945 kernel: audit: type=1006 audit(1752668527.412:1642): pid=5948 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 16 12:22:07.430999 kernel: audit: type=1300 audit(1752668527.412:1642): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb8f5bd10 a2=3 a3=0 items=0 ppid=1 pid=5948 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:22:07.412000 audit[5948]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb8f5bd10 a2=3 a3=0 items=0 ppid=1 pid=5948 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:22:07.439815 kernel: audit: type=1327 audit(1752668527.412:1642): proctitle=737368643A20636F7265205B707269765D Jul 16 12:22:07.412000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 16 12:22:07.416353 sshd[5948]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:22:07.459856 systemd-logind[1191]: New session 16 of user core. Jul 16 12:22:07.462522 systemd[1]: Started session-16.scope. Jul 16 12:22:07.467000 audit[5948]: USER_START pid=5948 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:07.474388 kernel: audit: type=1105 audit(1752668527.467:1643): pid=5948 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:07.473000 audit[5950]: CRED_ACQ pid=5950 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:07.478461 kernel: audit: type=1103 audit(1752668527.473:1644): pid=5950 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:08.057418 systemd[1]: run-containerd-runc-k8s.io-1faa39897f9455b2e07e74b0e2616aacb515b2dec24d703169cafbe30583400b-runc.7ZQSZY.mount: Deactivated successfully. Jul 16 12:22:09.752035 sshd[5948]: pam_unix(sshd:session): session closed for user core Jul 16 12:22:09.790000 audit[5948]: USER_END pid=5948 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:09.804982 kernel: audit: type=1106 audit(1752668529.790:1645): pid=5948 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:09.809377 kernel: audit: type=1104 audit(1752668529.790:1646): pid=5948 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:09.790000 audit[5948]: CRED_DISP pid=5948 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:09.810347 systemd[1]: sshd@16-10.244.102.2:22-147.75.109.163:33656.service: Deactivated successfully. Jul 16 12:22:09.812000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.244.102.2:22-147.75.109.163:33656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:09.815682 systemd[1]: session-16.scope: Deactivated successfully. Jul 16 12:22:09.816970 systemd-logind[1191]: Session 16 logged out. Waiting for processes to exit. Jul 16 12:22:09.823645 systemd-logind[1191]: Removed session 16. Jul 16 12:22:14.923645 systemd[1]: Started sshd@17-10.244.102.2:22-147.75.109.163:37478.service. Jul 16 12:22:14.959257 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 16 12:22:14.965779 kernel: audit: type=1130 audit(1752668534.923:1648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.244.102.2:22-147.75.109.163:37478 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:14.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.244.102.2:22-147.75.109.163:37478 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:15.314000 audit[5484]: AVC avc: denied { watch } for pid=5484 comm="apiserver" path="/calico-apiserver-certs/..2025_07_16_12_21_10.552943873/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c592,c601 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c592,c601 tclass=file permissive=0 Jul 16 12:22:15.331432 kernel: audit: type=1400 audit(1752668535.314:1649): avc: denied { watch } for pid=5484 comm="apiserver" path="/calico-apiserver-certs/..2025_07_16_12_21_10.552943873/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c592,c601 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c592,c601 tclass=file permissive=0 Jul 16 12:22:15.331532 kernel: audit: type=1300 audit(1752668535.314:1649): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00275aca0 a2=fc6 a3=0 items=0 ppid=5426 pid=5484 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c592,c601 key=(null) Jul 16 12:22:15.331561 kernel: audit: type=1327 audit(1752668535.314:1649): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 16 12:22:15.314000 audit[5484]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00275aca0 a2=fc6 a3=0 items=0 ppid=5426 pid=5484 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c592,c601 key=(null) Jul 16 12:22:15.314000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 16 12:22:15.881000 audit[6002]: USER_ACCT pid=6002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:15.889200 sshd[6002]: Accepted publickey for core from 147.75.109.163 port 37478 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:22:15.894987 kernel: audit: type=1101 audit(1752668535.881:1650): pid=6002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:15.895065 kernel: audit: type=1103 audit(1752668535.887:1651): pid=6002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:15.887000 audit[6002]: CRED_ACQ pid=6002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:15.891216 sshd[6002]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:22:15.900543 kernel: audit: type=1006 audit(1752668535.887:1652): pid=6002 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 16 12:22:15.887000 audit[6002]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdc0c7ffa0 a2=3 a3=0 items=0 ppid=1 pid=6002 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:22:15.907541 kernel: audit: type=1300 audit(1752668535.887:1652): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdc0c7ffa0 a2=3 a3=0 items=0 ppid=1 pid=6002 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:22:15.887000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 16 12:22:15.912384 kernel: audit: type=1327 audit(1752668535.887:1652): proctitle=737368643A20636F7265205B707269765D Jul 16 12:22:15.930932 systemd-logind[1191]: New session 17 of user core. Jul 16 12:22:15.933599 systemd[1]: Started session-17.scope. Jul 16 12:22:15.956491 kernel: audit: type=1105 audit(1752668535.949:1653): pid=6002 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:15.949000 audit[6002]: USER_START pid=6002 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:15.955000 audit[6004]: CRED_ACQ pid=6004 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:17.890159 sshd[6002]: pam_unix(sshd:session): session closed for user core Jul 16 12:22:17.895000 audit[6002]: USER_END pid=6002 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:17.897000 audit[6002]: CRED_DISP pid=6002 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:17.907691 systemd[1]: sshd@17-10.244.102.2:22-147.75.109.163:37478.service: Deactivated successfully. Jul 16 12:22:17.907000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.244.102.2:22-147.75.109.163:37478 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:17.909691 systemd[1]: session-17.scope: Deactivated successfully. Jul 16 12:22:17.910973 systemd-logind[1191]: Session 17 logged out. Waiting for processes to exit. Jul 16 12:22:17.912689 systemd-logind[1191]: Removed session 17. Jul 16 12:22:23.065254 kernel: kauditd_printk_skb: 4 callbacks suppressed Jul 16 12:22:23.071770 kernel: audit: type=1130 audit(1752668543.057:1658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.244.102.2:22-147.75.109.163:60350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:23.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.244.102.2:22-147.75.109.163:60350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:23.058170 systemd[1]: Started sshd@18-10.244.102.2:22-147.75.109.163:60350.service. Jul 16 12:22:24.027000 audit[6035]: USER_ACCT pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:24.031200 sshd[6035]: Accepted publickey for core from 147.75.109.163 port 60350 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:22:24.036413 kernel: audit: type=1101 audit(1752668544.027:1659): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:24.035000 audit[6035]: CRED_ACQ pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:24.042865 kernel: audit: type=1103 audit(1752668544.035:1660): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:24.042985 kernel: audit: type=1006 audit(1752668544.035:1661): pid=6035 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Jul 16 12:22:24.043604 sshd[6035]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:22:24.035000 audit[6035]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe4b0b53c0 a2=3 a3=0 items=0 ppid=1 pid=6035 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:22:24.057059 kernel: audit: type=1300 audit(1752668544.035:1661): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe4b0b53c0 a2=3 a3=0 items=0 ppid=1 pid=6035 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:22:24.060839 kernel: audit: type=1327 audit(1752668544.035:1661): proctitle=737368643A20636F7265205B707269765D Jul 16 12:22:24.035000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 16 12:22:24.064041 systemd[1]: Started session-18.scope. Jul 16 12:22:24.065466 systemd-logind[1191]: New session 18 of user core. Jul 16 12:22:24.069000 audit[6035]: USER_START pid=6035 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:24.084110 kernel: audit: type=1105 audit(1752668544.069:1662): pid=6035 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:24.084235 kernel: audit: type=1103 audit(1752668544.082:1663): pid=6037 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:24.082000 audit[6037]: CRED_ACQ pid=6037 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:25.325403 sshd[6035]: pam_unix(sshd:session): session closed for user core Jul 16 12:22:25.326000 audit[6035]: USER_END pid=6035 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:25.327000 audit[6035]: CRED_DISP pid=6035 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:25.340090 systemd-logind[1191]: Session 18 logged out. Waiting for processes to exit. Jul 16 12:22:25.345695 kernel: audit: type=1106 audit(1752668545.326:1664): pid=6035 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:25.346511 kernel: audit: type=1104 audit(1752668545.327:1665): pid=6035 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:25.344000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.244.102.2:22-147.75.109.163:60350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:25.345994 systemd[1]: sshd@18-10.244.102.2:22-147.75.109.163:60350.service: Deactivated successfully. Jul 16 12:22:25.347207 systemd[1]: session-18.scope: Deactivated successfully. Jul 16 12:22:25.349383 systemd-logind[1191]: Removed session 18. Jul 16 12:22:25.473785 systemd[1]: Started sshd@19-10.244.102.2:22-147.75.109.163:60352.service. Jul 16 12:22:25.472000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.244.102.2:22-147.75.109.163:60352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:26.380000 audit[6064]: USER_ACCT pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:26.384831 sshd[6064]: Accepted publickey for core from 147.75.109.163 port 60352 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:22:26.384000 audit[6064]: CRED_ACQ pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:26.385000 audit[6064]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe70f546c0 a2=3 a3=0 items=0 ppid=1 pid=6064 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:22:26.385000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 16 12:22:26.388448 sshd[6064]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:22:26.397667 systemd[1]: Started session-19.scope. Jul 16 12:22:26.398072 systemd-logind[1191]: New session 19 of user core. Jul 16 12:22:26.401000 audit[6064]: USER_START pid=6064 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:26.403000 audit[6066]: CRED_ACQ pid=6066 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:27.427395 sshd[6064]: pam_unix(sshd:session): session closed for user core Jul 16 12:22:27.431000 audit[6064]: USER_END pid=6064 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:27.432000 audit[6064]: CRED_DISP pid=6064 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:27.439817 systemd[1]: sshd@19-10.244.102.2:22-147.75.109.163:60352.service: Deactivated successfully. Jul 16 12:22:27.438000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.244.102.2:22-147.75.109.163:60352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:27.440956 systemd[1]: session-19.scope: Deactivated successfully. Jul 16 12:22:27.441454 systemd-logind[1191]: Session 19 logged out. Waiting for processes to exit. Jul 16 12:22:27.442997 systemd-logind[1191]: Removed session 19. Jul 16 12:22:27.572000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.244.102.2:22-147.75.109.163:60366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:27.573064 systemd[1]: Started sshd@20-10.244.102.2:22-147.75.109.163:60366.service. Jul 16 12:22:28.495549 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 16 12:22:28.508039 kernel: audit: type=1101 audit(1752668548.480:1677): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:28.508131 kernel: audit: type=1103 audit(1752668548.494:1678): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:28.480000 audit[6074]: USER_ACCT pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:28.494000 audit[6074]: CRED_ACQ pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:28.511011 sshd[6074]: Accepted publickey for core from 147.75.109.163 port 60366 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:22:28.512733 kernel: audit: type=1006 audit(1752668548.494:1679): pid=6074 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Jul 16 12:22:28.498312 sshd[6074]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:22:28.510298 systemd[1]: Started session-20.scope. Jul 16 12:22:28.511379 systemd-logind[1191]: New session 20 of user core. Jul 16 12:22:28.494000 audit[6074]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc552c9e50 a2=3 a3=0 items=0 ppid=1 pid=6074 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:22:28.519661 kernel: audit: type=1300 audit(1752668548.494:1679): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc552c9e50 a2=3 a3=0 items=0 ppid=1 pid=6074 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:22:28.494000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 16 12:22:28.523381 kernel: audit: type=1327 audit(1752668548.494:1679): proctitle=737368643A20636F7265205B707269765D Jul 16 12:22:28.515000 audit[6074]: USER_START pid=6074 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:28.528458 kernel: audit: type=1105 audit(1752668548.515:1680): pid=6074 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:28.519000 audit[6076]: CRED_ACQ pid=6076 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:28.532464 kernel: audit: type=1103 audit(1752668548.519:1681): pid=6076 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:30.116000 audit[6087]: NETFILTER_CFG table=filter:148 family=2 entries=20 op=nft_register_rule pid=6087 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:22:30.159373 kernel: audit: type=1325 audit(1752668550.116:1682): table=filter:148 family=2 entries=20 op=nft_register_rule pid=6087 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:22:30.165969 kernel: audit: type=1300 audit(1752668550.116:1682): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffeee1d00a0 a2=0 a3=7ffeee1d008c items=0 ppid=2161 pid=6087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:22:30.166423 kernel: audit: type=1327 audit(1752668550.116:1682): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:22:30.116000 audit[6087]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffeee1d00a0 a2=0 a3=7ffeee1d008c items=0 ppid=2161 pid=6087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:22:30.116000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:22:30.129000 audit[6087]: NETFILTER_CFG table=nat:149 family=2 entries=26 op=nft_register_rule pid=6087 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:22:30.129000 audit[6087]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffeee1d00a0 a2=0 a3=0 items=0 ppid=2161 pid=6087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:22:30.129000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:22:30.149000 audit[6089]: NETFILTER_CFG table=filter:150 family=2 entries=32 op=nft_register_rule pid=6089 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:22:30.149000 audit[6089]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffffa69e5d0 a2=0 a3=7ffffa69e5bc items=0 ppid=2161 pid=6089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:22:30.149000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:22:30.154000 audit[6089]: NETFILTER_CFG table=nat:151 family=2 entries=26 op=nft_register_rule pid=6089 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:22:30.154000 audit[6089]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffffa69e5d0 a2=0 a3=0 items=0 ppid=2161 pid=6089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:22:30.154000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:22:30.316039 sshd[6074]: pam_unix(sshd:session): session closed for user core Jul 16 12:22:30.343000 audit[6074]: USER_END pid=6074 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:30.343000 audit[6074]: CRED_DISP pid=6074 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:30.353093 systemd[1]: sshd@20-10.244.102.2:22-147.75.109.163:60366.service: Deactivated successfully. Jul 16 12:22:30.355000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.244.102.2:22-147.75.109.163:60366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:30.359194 systemd[1]: session-20.scope: Deactivated successfully. Jul 16 12:22:30.361983 systemd-logind[1191]: Session 20 logged out. Waiting for processes to exit. Jul 16 12:22:30.373006 systemd-logind[1191]: Removed session 20. Jul 16 12:22:30.452675 systemd[1]: Started sshd@21-10.244.102.2:22-147.75.109.163:60874.service. Jul 16 12:22:30.451000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.244.102.2:22-147.75.109.163:60874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:31.403649 sshd[6092]: Accepted publickey for core from 147.75.109.163 port 60874 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:22:31.403000 audit[6092]: USER_ACCT pid=6092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:31.406000 audit[6092]: CRED_ACQ pid=6092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:31.406000 audit[6092]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe71bba9c0 a2=3 a3=0 items=0 ppid=1 pid=6092 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:22:31.406000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 16 12:22:31.409859 sshd[6092]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:22:31.438479 systemd[1]: Started session-21.scope. Jul 16 12:22:31.438922 systemd-logind[1191]: New session 21 of user core. Jul 16 12:22:31.449000 audit[6092]: USER_START pid=6092 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:31.451000 audit[6094]: CRED_ACQ pid=6094 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:33.256028 sshd[6092]: pam_unix(sshd:session): session closed for user core Jul 16 12:22:33.270000 audit[6092]: USER_END pid=6092 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:33.271000 audit[6092]: CRED_DISP pid=6092 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:33.284893 systemd[1]: sshd@21-10.244.102.2:22-147.75.109.163:60874.service: Deactivated successfully. Jul 16 12:22:33.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.244.102.2:22-147.75.109.163:60874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:33.288151 systemd[1]: session-21.scope: Deactivated successfully. Jul 16 12:22:33.289340 systemd-logind[1191]: Session 21 logged out. Waiting for processes to exit. Jul 16 12:22:33.292101 systemd-logind[1191]: Removed session 21. Jul 16 12:22:33.398000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.244.102.2:22-147.75.109.163:60886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:33.399225 systemd[1]: Started sshd@22-10.244.102.2:22-147.75.109.163:60886.service. Jul 16 12:22:34.311290 sshd[6103]: Accepted publickey for core from 147.75.109.163 port 60886 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:22:34.309000 audit[6103]: USER_ACCT pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:34.317112 kernel: kauditd_printk_skb: 24 callbacks suppressed Jul 16 12:22:34.321203 kernel: audit: type=1101 audit(1752668554.309:1699): pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:34.322980 kernel: audit: type=1103 audit(1752668554.311:1700): pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:34.323480 kernel: audit: type=1006 audit(1752668554.311:1701): pid=6103 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 16 12:22:34.311000 audit[6103]: CRED_ACQ pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:34.311000 audit[6103]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffebc3ee8d0 a2=3 a3=0 items=0 ppid=1 pid=6103 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:22:34.332978 kernel: audit: type=1300 audit(1752668554.311:1701): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffebc3ee8d0 a2=3 a3=0 items=0 ppid=1 pid=6103 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:22:34.333056 kernel: audit: type=1327 audit(1752668554.311:1701): proctitle=737368643A20636F7265205B707269765D Jul 16 12:22:34.311000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 16 12:22:34.321672 sshd[6103]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:22:34.346746 systemd[1]: Started session-22.scope. Jul 16 12:22:34.348092 systemd-logind[1191]: New session 22 of user core. Jul 16 12:22:34.356000 audit[6103]: USER_START pid=6103 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:34.362390 kernel: audit: type=1105 audit(1752668554.356:1702): pid=6103 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:34.359000 audit[6125]: CRED_ACQ pid=6125 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:34.366462 kernel: audit: type=1103 audit(1752668554.359:1703): pid=6125 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:36.254703 sshd[6103]: pam_unix(sshd:session): session closed for user core Jul 16 12:22:36.269000 audit[6103]: USER_END pid=6103 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:36.277279 kernel: audit: type=1106 audit(1752668556.269:1704): pid=6103 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:36.280195 kernel: audit: type=1104 audit(1752668556.269:1705): pid=6103 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:36.269000 audit[6103]: CRED_DISP pid=6103 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:36.284084 systemd[1]: sshd@22-10.244.102.2:22-147.75.109.163:60886.service: Deactivated successfully. Jul 16 12:22:36.284000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.244.102.2:22-147.75.109.163:60886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:36.288183 systemd[1]: session-22.scope: Deactivated successfully. Jul 16 12:22:36.291033 systemd-logind[1191]: Session 22 logged out. Waiting for processes to exit. Jul 16 12:22:36.294975 kernel: audit: type=1131 audit(1752668556.284:1706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.244.102.2:22-147.75.109.163:60886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:36.295552 systemd-logind[1191]: Removed session 22. Jul 16 12:22:40.525000 audit[6157]: NETFILTER_CFG table=filter:152 family=2 entries=20 op=nft_register_rule pid=6157 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:22:40.564339 kernel: audit: type=1325 audit(1752668560.525:1707): table=filter:152 family=2 entries=20 op=nft_register_rule pid=6157 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:22:40.567485 kernel: audit: type=1300 audit(1752668560.525:1707): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff252ccbc0 a2=0 a3=7fff252ccbac items=0 ppid=2161 pid=6157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:22:40.567559 kernel: audit: type=1327 audit(1752668560.525:1707): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:22:40.568037 kernel: audit: type=1325 audit(1752668560.543:1708): table=nat:153 family=2 entries=110 op=nft_register_chain pid=6157 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:22:40.570272 kernel: audit: type=1300 audit(1752668560.543:1708): arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7fff252ccbc0 a2=0 a3=7fff252ccbac items=0 ppid=2161 pid=6157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:22:40.570321 kernel: audit: type=1327 audit(1752668560.543:1708): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:22:40.525000 audit[6157]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff252ccbc0 a2=0 a3=7fff252ccbac items=0 ppid=2161 pid=6157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:22:40.525000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:22:40.543000 audit[6157]: NETFILTER_CFG table=nat:153 family=2 entries=110 op=nft_register_chain pid=6157 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 16 12:22:40.543000 audit[6157]: SYSCALL arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7fff252ccbc0 a2=0 a3=7fff252ccbac items=0 ppid=2161 pid=6157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:22:40.543000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 16 12:22:41.302000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525832 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:22:41.313411 kernel: audit: type=1400 audit(1752668561.302:1709): avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525832 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:22:41.302000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0009aca80 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:22:41.302000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:22:41.322806 kernel: audit: type=1300 audit(1752668561.302:1709): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0009aca80 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:22:41.322890 kernel: audit: type=1327 audit(1752668561.302:1709): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:22:41.322925 kernel: audit: type=1400 audit(1752668561.303:1710): avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:22:41.303000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:22:41.303000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00222e720 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:22:41.303000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:22:41.415000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.244.102.2:22-147.75.109.163:41398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:41.415882 systemd[1]: Started sshd@23-10.244.102.2:22-147.75.109.163:41398.service. Jul 16 12:22:41.666000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525832 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:22:41.666000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c00a106930 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:22:41.666000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:22:41.666000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525834 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:22:41.666000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c0073a5710 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:22:41.666000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:22:41.667000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525828 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:22:41.667000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c00a106960 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:22:41.667000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:22:41.696000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:22:41.696000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c00f1c81e0 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:22:41.696000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:22:41.716000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:22:41.716000 audit[1826]: AVC avc: denied { watch } for pid=1826 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525832 scontext=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:22:41.716000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c013ea4db0 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:22:41.716000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:22:41.716000 audit[1826]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c00f1c8220 a2=fc6 a3=0 items=0 ppid=1706 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c416,c712 key=(null) Jul 16 12:22:41.716000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3234342E3130322E32002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 16 12:22:42.371320 sshd[6159]: Accepted publickey for core from 147.75.109.163 port 41398 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:22:42.369000 audit[6159]: USER_ACCT pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:42.373000 audit[6159]: CRED_ACQ pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:42.373000 audit[6159]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff056d7b60 a2=3 a3=0 items=0 ppid=1 pid=6159 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:22:42.373000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 16 12:22:42.376825 sshd[6159]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:22:42.413915 systemd-logind[1191]: New session 23 of user core. Jul 16 12:22:42.420228 systemd[1]: Started session-23.scope. Jul 16 12:22:42.427000 audit[6159]: USER_START pid=6159 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:42.428000 audit[6162]: CRED_ACQ pid=6162 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:43.687902 sshd[6159]: pam_unix(sshd:session): session closed for user core Jul 16 12:22:43.690000 audit[6159]: USER_END pid=6159 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:43.690000 audit[6159]: CRED_DISP pid=6159 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:43.696763 systemd[1]: sshd@23-10.244.102.2:22-147.75.109.163:41398.service: Deactivated successfully. Jul 16 12:22:43.696000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.244.102.2:22-147.75.109.163:41398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:43.699602 systemd[1]: session-23.scope: Deactivated successfully. Jul 16 12:22:43.700266 systemd-logind[1191]: Session 23 logged out. Waiting for processes to exit. Jul 16 12:22:43.702051 systemd-logind[1191]: Removed session 23. Jul 16 12:22:48.852354 systemd[1]: Started sshd@24-10.244.102.2:22-147.75.109.163:37726.service. Jul 16 12:22:48.874922 kernel: kauditd_printk_skb: 31 callbacks suppressed Jul 16 12:22:48.876382 kernel: audit: type=1130 audit(1752668568.854:1726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.244.102.2:22-147.75.109.163:37726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:48.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.244.102.2:22-147.75.109.163:37726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:49.051000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:22:49.051000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00222f5a0 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:22:49.060828 kernel: audit: type=1400 audit(1752668569.051:1727): avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:22:49.061203 kernel: audit: type=1300 audit(1752668569.051:1727): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00222f5a0 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:22:49.051000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:22:49.066457 kernel: audit: type=1327 audit(1752668569.051:1727): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:22:49.055000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:22:49.055000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00222f5c0 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:22:49.075974 kernel: audit: type=1400 audit(1752668569.055:1728): avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:22:49.076419 kernel: audit: type=1300 audit(1752668569.055:1728): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00222f5c0 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:22:49.077060 kernel: audit: type=1327 audit(1752668569.055:1728): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:22:49.055000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:22:49.079818 kernel: audit: type=1400 audit(1752668569.055:1729): avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:22:49.055000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:22:49.055000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002d6d140 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:22:49.096007 kernel: audit: type=1300 audit(1752668569.055:1729): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002d6d140 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:22:49.096086 kernel: audit: type=1327 audit(1752668569.055:1729): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:22:49.055000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:22:49.055000 audit[1880]: AVC avc: denied { watch } for pid=1880 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525826 scontext=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 16 12:22:49.055000 audit[1880]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002d6d160 a2=fc6 a3=0 items=0 ppid=1733 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c691,c844 key=(null) Jul 16 12:22:49.055000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 16 12:22:49.812000 audit[6175]: USER_ACCT pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:49.815889 sshd[6175]: Accepted publickey for core from 147.75.109.163 port 37726 ssh2: RSA SHA256:Ivm2+8c70H684DujjfFb+2an2jxY3RhHoDsFm0/t2Rg Jul 16 12:22:49.815000 audit[6175]: CRED_ACQ pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:49.815000 audit[6175]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff566cfb50 a2=3 a3=0 items=0 ppid=1 pid=6175 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 16 12:22:49.815000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 16 12:22:49.818099 sshd[6175]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 16 12:22:49.851504 systemd-logind[1191]: New session 24 of user core. Jul 16 12:22:49.853592 systemd[1]: Started session-24.scope. Jul 16 12:22:49.863000 audit[6175]: USER_START pid=6175 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:49.865000 audit[6177]: CRED_ACQ pid=6177 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:50.428000 audit[4461]: AVC avc: denied { watch } for pid=4461 comm="apiserver" path="/calico-apiserver-certs/..2025_07_16_12_20_22.3586990452/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c509,c728 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c509,c728 tclass=file permissive=0 Jul 16 12:22:50.428000 audit[4461]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000ecf500 a2=fc6 a3=0 items=0 ppid=3617 pid=4461 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c509,c728 key=(null) Jul 16 12:22:50.428000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 16 12:22:51.185743 sshd[6175]: pam_unix(sshd:session): session closed for user core Jul 16 12:22:51.192000 audit[6175]: USER_END pid=6175 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:51.192000 audit[6175]: CRED_DISP pid=6175 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 16 12:22:51.202545 systemd[1]: sshd@24-10.244.102.2:22-147.75.109.163:37726.service: Deactivated successfully. Jul 16 12:22:51.202000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.244.102.2:22-147.75.109.163:37726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 16 12:22:51.205654 systemd[1]: session-24.scope: Deactivated successfully. Jul 16 12:22:51.206790 systemd-logind[1191]: Session 24 logged out. Waiting for processes to exit. Jul 16 12:22:51.207920 systemd-logind[1191]: Removed session 24.