Jul 15 11:37:03.857330 kernel: Linux version 5.15.188-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Tue Jul 15 10:04:37 -00 2025 Jul 15 11:37:03.857348 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:37:03.857356 kernel: BIOS-provided physical RAM map: Jul 15 11:37:03.857362 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Jul 15 11:37:03.857367 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Jul 15 11:37:03.857373 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Jul 15 11:37:03.857379 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000009cfdbfff] usable Jul 15 11:37:03.857385 kernel: BIOS-e820: [mem 0x000000009cfdc000-0x000000009cffffff] reserved Jul 15 11:37:03.857392 kernel: BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Jul 15 11:37:03.857397 kernel: BIOS-e820: [mem 0x00000000fed1c000-0x00000000fed1ffff] reserved Jul 15 11:37:03.857403 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Jul 15 11:37:03.857408 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Jul 15 11:37:03.857414 kernel: BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved Jul 15 11:37:03.857419 kernel: NX (Execute Disable) protection: active Jul 15 11:37:03.857428 kernel: SMBIOS 2.8 present. Jul 15 11:37:03.857434 kernel: DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Jul 15 11:37:03.857440 kernel: Hypervisor detected: KVM Jul 15 11:37:03.857446 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Jul 15 11:37:03.857452 kernel: kvm-clock: cpu 0, msr 1219b001, primary cpu clock Jul 15 11:37:03.857457 kernel: kvm-clock: using sched offset of 2415328581 cycles Jul 15 11:37:03.857464 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Jul 15 11:37:03.857470 kernel: tsc: Detected 2794.750 MHz processor Jul 15 11:37:03.857476 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 15 11:37:03.857484 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 15 11:37:03.857490 kernel: last_pfn = 0x9cfdc max_arch_pfn = 0x400000000 Jul 15 11:37:03.857496 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 15 11:37:03.857502 kernel: Using GB pages for direct mapping Jul 15 11:37:03.857509 kernel: ACPI: Early table checksum verification disabled Jul 15 11:37:03.857515 kernel: ACPI: RSDP 0x00000000000F59D0 000014 (v00 BOCHS ) Jul 15 11:37:03.857521 kernel: ACPI: RSDT 0x000000009CFE241A 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:37:03.857527 kernel: ACPI: FACP 0x000000009CFE21FA 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:37:03.857533 kernel: ACPI: DSDT 0x000000009CFE0040 0021BA (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:37:03.857540 kernel: ACPI: FACS 0x000000009CFE0000 000040 Jul 15 11:37:03.857546 kernel: ACPI: APIC 0x000000009CFE22EE 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:37:03.857552 kernel: ACPI: HPET 0x000000009CFE237E 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:37:03.857558 kernel: ACPI: MCFG 0x000000009CFE23B6 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:37:03.857564 kernel: ACPI: WAET 0x000000009CFE23F2 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:37:03.857570 kernel: ACPI: Reserving FACP table memory at [mem 0x9cfe21fa-0x9cfe22ed] Jul 15 11:37:03.857576 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cfe0040-0x9cfe21f9] Jul 15 11:37:03.857583 kernel: ACPI: Reserving FACS table memory at [mem 0x9cfe0000-0x9cfe003f] Jul 15 11:37:03.857592 kernel: ACPI: Reserving APIC table memory at [mem 0x9cfe22ee-0x9cfe237d] Jul 15 11:37:03.857599 kernel: ACPI: Reserving HPET table memory at [mem 0x9cfe237e-0x9cfe23b5] Jul 15 11:37:03.857606 kernel: ACPI: Reserving MCFG table memory at [mem 0x9cfe23b6-0x9cfe23f1] Jul 15 11:37:03.857613 kernel: ACPI: Reserving WAET table memory at [mem 0x9cfe23f2-0x9cfe2419] Jul 15 11:37:03.857619 kernel: No NUMA configuration found Jul 15 11:37:03.857625 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cfdbfff] Jul 15 11:37:03.857633 kernel: NODE_DATA(0) allocated [mem 0x9cfd6000-0x9cfdbfff] Jul 15 11:37:03.857640 kernel: Zone ranges: Jul 15 11:37:03.857646 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 15 11:37:03.857653 kernel: DMA32 [mem 0x0000000001000000-0x000000009cfdbfff] Jul 15 11:37:03.857659 kernel: Normal empty Jul 15 11:37:03.857666 kernel: Movable zone start for each node Jul 15 11:37:03.857672 kernel: Early memory node ranges Jul 15 11:37:03.857679 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Jul 15 11:37:03.857685 kernel: node 0: [mem 0x0000000000100000-0x000000009cfdbfff] Jul 15 11:37:03.857691 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cfdbfff] Jul 15 11:37:03.857699 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 15 11:37:03.857705 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Jul 15 11:37:03.857713 kernel: On node 0, zone DMA32: 12324 pages in unavailable ranges Jul 15 11:37:03.857719 kernel: ACPI: PM-Timer IO Port: 0x608 Jul 15 11:37:03.857726 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Jul 15 11:37:03.857732 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Jul 15 11:37:03.857739 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Jul 15 11:37:03.857745 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Jul 15 11:37:03.857751 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Jul 15 11:37:03.857759 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Jul 15 11:37:03.857766 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Jul 15 11:37:03.857772 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 15 11:37:03.857779 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Jul 15 11:37:03.857785 kernel: TSC deadline timer available Jul 15 11:37:03.857791 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Jul 15 11:37:03.857798 kernel: kvm-guest: KVM setup pv remote TLB flush Jul 15 11:37:03.857804 kernel: kvm-guest: setup PV sched yield Jul 15 11:37:03.857811 kernel: [mem 0xc0000000-0xfed1bfff] available for PCI devices Jul 15 11:37:03.857819 kernel: Booting paravirtualized kernel on KVM Jul 15 11:37:03.857826 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 15 11:37:03.857832 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Jul 15 11:37:03.857839 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u524288 Jul 15 11:37:03.857845 kernel: pcpu-alloc: s188696 r8192 d32488 u524288 alloc=1*2097152 Jul 15 11:37:03.857851 kernel: pcpu-alloc: [0] 0 1 2 3 Jul 15 11:37:03.857858 kernel: kvm-guest: setup async PF for cpu 0 Jul 15 11:37:03.857864 kernel: kvm-guest: stealtime: cpu 0, msr 9a41c0c0 Jul 15 11:37:03.857870 kernel: kvm-guest: PV spinlocks enabled Jul 15 11:37:03.857878 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Jul 15 11:37:03.857884 kernel: Built 1 zonelists, mobility grouping on. Total pages: 632732 Jul 15 11:37:03.857891 kernel: Policy zone: DMA32 Jul 15 11:37:03.857898 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:37:03.857905 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 15 11:37:03.857912 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 15 11:37:03.857918 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 15 11:37:03.857933 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 15 11:37:03.857941 kernel: Memory: 2436696K/2571752K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47476K init, 4104K bss, 134796K reserved, 0K cma-reserved) Jul 15 11:37:03.857948 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 15 11:37:03.857954 kernel: ftrace: allocating 34607 entries in 136 pages Jul 15 11:37:03.857962 kernel: ftrace: allocated 136 pages with 2 groups Jul 15 11:37:03.857968 kernel: rcu: Hierarchical RCU implementation. Jul 15 11:37:03.857975 kernel: rcu: RCU event tracing is enabled. Jul 15 11:37:03.857982 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 15 11:37:03.857988 kernel: Rude variant of Tasks RCU enabled. Jul 15 11:37:03.857995 kernel: Tracing variant of Tasks RCU enabled. Jul 15 11:37:03.858003 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 15 11:37:03.858010 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 15 11:37:03.858018 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Jul 15 11:37:03.858024 kernel: random: crng init done Jul 15 11:37:03.858032 kernel: Console: colour VGA+ 80x25 Jul 15 11:37:03.858040 kernel: printk: console [ttyS0] enabled Jul 15 11:37:03.858046 kernel: ACPI: Core revision 20210730 Jul 15 11:37:03.858053 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Jul 15 11:37:03.858059 kernel: APIC: Switch to symmetric I/O mode setup Jul 15 11:37:03.858067 kernel: x2apic enabled Jul 15 11:37:03.858073 kernel: Switched APIC routing to physical x2apic. Jul 15 11:37:03.858080 kernel: kvm-guest: setup PV IPIs Jul 15 11:37:03.858086 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jul 15 11:37:03.858093 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Jul 15 11:37:03.858099 kernel: Calibrating delay loop (skipped) preset value.. 5589.50 BogoMIPS (lpj=2794750) Jul 15 11:37:03.858106 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Jul 15 11:37:03.858112 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Jul 15 11:37:03.858119 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Jul 15 11:37:03.858131 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 15 11:37:03.858137 kernel: Spectre V2 : Mitigation: Retpolines Jul 15 11:37:03.858144 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Jul 15 11:37:03.858152 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Jul 15 11:37:03.858159 kernel: RETBleed: Mitigation: untrained return thunk Jul 15 11:37:03.858166 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jul 15 11:37:03.858173 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Jul 15 11:37:03.858180 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 15 11:37:03.858199 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 15 11:37:03.858207 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 15 11:37:03.858214 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 15 11:37:03.858220 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Jul 15 11:37:03.858227 kernel: Freeing SMP alternatives memory: 32K Jul 15 11:37:03.858234 kernel: pid_max: default: 32768 minimum: 301 Jul 15 11:37:03.858241 kernel: LSM: Security Framework initializing Jul 15 11:37:03.858248 kernel: SELinux: Initializing. Jul 15 11:37:03.858255 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 15 11:37:03.858263 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 15 11:37:03.858270 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Jul 15 11:37:03.858277 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Jul 15 11:37:03.858284 kernel: ... version: 0 Jul 15 11:37:03.858291 kernel: ... bit width: 48 Jul 15 11:37:03.858298 kernel: ... generic registers: 6 Jul 15 11:37:03.858304 kernel: ... value mask: 0000ffffffffffff Jul 15 11:37:03.858311 kernel: ... max period: 00007fffffffffff Jul 15 11:37:03.858318 kernel: ... fixed-purpose events: 0 Jul 15 11:37:03.858326 kernel: ... event mask: 000000000000003f Jul 15 11:37:03.858333 kernel: signal: max sigframe size: 1776 Jul 15 11:37:03.858340 kernel: rcu: Hierarchical SRCU implementation. Jul 15 11:37:03.858347 kernel: smp: Bringing up secondary CPUs ... Jul 15 11:37:03.858353 kernel: x86: Booting SMP configuration: Jul 15 11:37:03.858360 kernel: .... node #0, CPUs: #1 Jul 15 11:37:03.858367 kernel: kvm-clock: cpu 1, msr 1219b041, secondary cpu clock Jul 15 11:37:03.858374 kernel: kvm-guest: setup async PF for cpu 1 Jul 15 11:37:03.858380 kernel: kvm-guest: stealtime: cpu 1, msr 9a49c0c0 Jul 15 11:37:03.858388 kernel: #2 Jul 15 11:37:03.858396 kernel: kvm-clock: cpu 2, msr 1219b081, secondary cpu clock Jul 15 11:37:03.858402 kernel: kvm-guest: setup async PF for cpu 2 Jul 15 11:37:03.858409 kernel: kvm-guest: stealtime: cpu 2, msr 9a51c0c0 Jul 15 11:37:03.858416 kernel: #3 Jul 15 11:37:03.858423 kernel: kvm-clock: cpu 3, msr 1219b0c1, secondary cpu clock Jul 15 11:37:03.858429 kernel: kvm-guest: setup async PF for cpu 3 Jul 15 11:37:03.858436 kernel: kvm-guest: stealtime: cpu 3, msr 9a59c0c0 Jul 15 11:37:03.858443 kernel: smp: Brought up 1 node, 4 CPUs Jul 15 11:37:03.858451 kernel: smpboot: Max logical packages: 1 Jul 15 11:37:03.858458 kernel: smpboot: Total of 4 processors activated (22358.00 BogoMIPS) Jul 15 11:37:03.858465 kernel: devtmpfs: initialized Jul 15 11:37:03.858471 kernel: x86/mm: Memory block size: 128MB Jul 15 11:37:03.858478 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 15 11:37:03.858485 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 15 11:37:03.858492 kernel: pinctrl core: initialized pinctrl subsystem Jul 15 11:37:03.858499 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 15 11:37:03.858506 kernel: audit: initializing netlink subsys (disabled) Jul 15 11:37:03.858513 kernel: audit: type=2000 audit(1752579423.784:1): state=initialized audit_enabled=0 res=1 Jul 15 11:37:03.858521 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 15 11:37:03.858528 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 15 11:37:03.858534 kernel: cpuidle: using governor menu Jul 15 11:37:03.858541 kernel: ACPI: bus type PCI registered Jul 15 11:37:03.858548 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 15 11:37:03.858555 kernel: dca service started, version 1.12.1 Jul 15 11:37:03.858562 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xb0000000-0xbfffffff] (base 0xb0000000) Jul 15 11:37:03.858569 kernel: PCI: MMCONFIG at [mem 0xb0000000-0xbfffffff] reserved in E820 Jul 15 11:37:03.858576 kernel: PCI: Using configuration type 1 for base access Jul 15 11:37:03.858584 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 15 11:37:03.858591 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 15 11:37:03.858598 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 15 11:37:03.858605 kernel: ACPI: Added _OSI(Module Device) Jul 15 11:37:03.858611 kernel: ACPI: Added _OSI(Processor Device) Jul 15 11:37:03.858618 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 15 11:37:03.858625 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 15 11:37:03.858640 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 15 11:37:03.858652 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 15 11:37:03.858661 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 15 11:37:03.858668 kernel: ACPI: Interpreter enabled Jul 15 11:37:03.858675 kernel: ACPI: PM: (supports S0 S3 S5) Jul 15 11:37:03.858681 kernel: ACPI: Using IOAPIC for interrupt routing Jul 15 11:37:03.858688 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 15 11:37:03.858695 kernel: ACPI: Enabled 2 GPEs in block 00 to 3F Jul 15 11:37:03.858702 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 15 11:37:03.858810 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 15 11:37:03.858885 kernel: acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR] Jul 15 11:37:03.858964 kernel: acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] Jul 15 11:37:03.858974 kernel: PCI host bridge to bus 0000:00 Jul 15 11:37:03.859047 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 15 11:37:03.859108 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Jul 15 11:37:03.859168 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 15 11:37:03.859242 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xafffffff window] Jul 15 11:37:03.859306 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Jul 15 11:37:03.859366 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x8ffffffff window] Jul 15 11:37:03.859427 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 15 11:37:03.859510 kernel: pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 Jul 15 11:37:03.859587 kernel: pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 Jul 15 11:37:03.859656 kernel: pci 0000:00:01.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] Jul 15 11:37:03.859727 kernel: pci 0000:00:01.0: reg 0x18: [mem 0xfebd0000-0xfebd0fff] Jul 15 11:37:03.859793 kernel: pci 0000:00:01.0: reg 0x30: [mem 0xfebc0000-0xfebcffff pref] Jul 15 11:37:03.859860 kernel: pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 15 11:37:03.859946 kernel: pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00 Jul 15 11:37:03.860017 kernel: pci 0000:00:02.0: reg 0x10: [io 0xc0c0-0xc0df] Jul 15 11:37:03.860088 kernel: pci 0000:00:02.0: reg 0x14: [mem 0xfebd1000-0xfebd1fff] Jul 15 11:37:03.860156 kernel: pci 0000:00:02.0: reg 0x20: [mem 0xfe000000-0xfe003fff 64bit pref] Jul 15 11:37:03.860249 kernel: pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000 Jul 15 11:37:03.860319 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc000-0xc07f] Jul 15 11:37:03.860386 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfebd2000-0xfebd2fff] Jul 15 11:37:03.860453 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe004000-0xfe007fff 64bit pref] Jul 15 11:37:03.860528 kernel: pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 Jul 15 11:37:03.860597 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc0e0-0xc0ff] Jul 15 11:37:03.860663 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfebd3000-0xfebd3fff] Jul 15 11:37:03.860734 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe008000-0xfe00bfff 64bit pref] Jul 15 11:37:03.860801 kernel: pci 0000:00:04.0: reg 0x30: [mem 0xfeb80000-0xfebbffff pref] Jul 15 11:37:03.860874 kernel: pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 Jul 15 11:37:03.860952 kernel: pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO Jul 15 11:37:03.861024 kernel: pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 Jul 15 11:37:03.861092 kernel: pci 0000:00:1f.2: reg 0x20: [io 0xc100-0xc11f] Jul 15 11:37:03.861162 kernel: pci 0000:00:1f.2: reg 0x24: [mem 0xfebd4000-0xfebd4fff] Jul 15 11:37:03.861248 kernel: pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 Jul 15 11:37:03.861316 kernel: pci 0000:00:1f.3: reg 0x20: [io 0x0700-0x073f] Jul 15 11:37:03.861326 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Jul 15 11:37:03.861333 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Jul 15 11:37:03.861340 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 15 11:37:03.861347 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Jul 15 11:37:03.861354 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 10 Jul 15 11:37:03.861363 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 10 Jul 15 11:37:03.861370 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 11 Jul 15 11:37:03.861377 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 11 Jul 15 11:37:03.861384 kernel: ACPI: PCI: Interrupt link GSIA configured for IRQ 16 Jul 15 11:37:03.861391 kernel: ACPI: PCI: Interrupt link GSIB configured for IRQ 17 Jul 15 11:37:03.861398 kernel: ACPI: PCI: Interrupt link GSIC configured for IRQ 18 Jul 15 11:37:03.861405 kernel: ACPI: PCI: Interrupt link GSID configured for IRQ 19 Jul 15 11:37:03.861412 kernel: ACPI: PCI: Interrupt link GSIE configured for IRQ 20 Jul 15 11:37:03.861418 kernel: ACPI: PCI: Interrupt link GSIF configured for IRQ 21 Jul 15 11:37:03.861427 kernel: ACPI: PCI: Interrupt link GSIG configured for IRQ 22 Jul 15 11:37:03.861434 kernel: ACPI: PCI: Interrupt link GSIH configured for IRQ 23 Jul 15 11:37:03.861441 kernel: iommu: Default domain type: Translated Jul 15 11:37:03.861448 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 15 11:37:03.861515 kernel: pci 0000:00:01.0: vgaarb: setting as boot VGA device Jul 15 11:37:03.861582 kernel: pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 15 11:37:03.861648 kernel: pci 0000:00:01.0: vgaarb: bridge control possible Jul 15 11:37:03.861658 kernel: vgaarb: loaded Jul 15 11:37:03.861665 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 15 11:37:03.861674 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 15 11:37:03.861681 kernel: PTP clock support registered Jul 15 11:37:03.861688 kernel: PCI: Using ACPI for IRQ routing Jul 15 11:37:03.861695 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 15 11:37:03.861702 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Jul 15 11:37:03.861709 kernel: e820: reserve RAM buffer [mem 0x9cfdc000-0x9fffffff] Jul 15 11:37:03.861715 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Jul 15 11:37:03.861722 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Jul 15 11:37:03.861729 kernel: clocksource: Switched to clocksource kvm-clock Jul 15 11:37:03.861737 kernel: VFS: Disk quotas dquot_6.6.0 Jul 15 11:37:03.861744 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 15 11:37:03.861751 kernel: pnp: PnP ACPI init Jul 15 11:37:03.861831 kernel: system 00:05: [mem 0xb0000000-0xbfffffff window] has been reserved Jul 15 11:37:03.861842 kernel: pnp: PnP ACPI: found 6 devices Jul 15 11:37:03.861849 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 15 11:37:03.861856 kernel: NET: Registered PF_INET protocol family Jul 15 11:37:03.861863 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 15 11:37:03.861872 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 15 11:37:03.861879 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 15 11:37:03.861886 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 15 11:37:03.861893 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 15 11:37:03.861900 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 15 11:37:03.861907 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 15 11:37:03.861914 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 15 11:37:03.861929 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 15 11:37:03.861936 kernel: NET: Registered PF_XDP protocol family Jul 15 11:37:03.862001 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Jul 15 11:37:03.862062 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Jul 15 11:37:03.862122 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Jul 15 11:37:03.862181 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xafffffff window] Jul 15 11:37:03.862255 kernel: pci_bus 0000:00: resource 8 [mem 0xc0000000-0xfebfffff window] Jul 15 11:37:03.862315 kernel: pci_bus 0000:00: resource 9 [mem 0x100000000-0x8ffffffff window] Jul 15 11:37:03.862324 kernel: PCI: CLS 0 bytes, default 64 Jul 15 11:37:03.862331 kernel: Initialise system trusted keyrings Jul 15 11:37:03.862340 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 15 11:37:03.862347 kernel: Key type asymmetric registered Jul 15 11:37:03.862354 kernel: Asymmetric key parser 'x509' registered Jul 15 11:37:03.862361 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 15 11:37:03.862368 kernel: io scheduler mq-deadline registered Jul 15 11:37:03.862374 kernel: io scheduler kyber registered Jul 15 11:37:03.862381 kernel: io scheduler bfq registered Jul 15 11:37:03.862388 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 15 11:37:03.862395 kernel: ACPI: \_SB_.GSIG: Enabled at IRQ 22 Jul 15 11:37:03.862404 kernel: ACPI: \_SB_.GSIH: Enabled at IRQ 23 Jul 15 11:37:03.862411 kernel: ACPI: \_SB_.GSIE: Enabled at IRQ 20 Jul 15 11:37:03.862418 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 15 11:37:03.862425 kernel: 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 15 11:37:03.862432 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Jul 15 11:37:03.862439 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 15 11:37:03.862446 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 15 11:37:03.862515 kernel: rtc_cmos 00:04: RTC can wake from S4 Jul 15 11:37:03.862525 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 15 11:37:03.862587 kernel: rtc_cmos 00:04: registered as rtc0 Jul 15 11:37:03.862649 kernel: rtc_cmos 00:04: setting system clock to 2025-07-15T11:37:03 UTC (1752579423) Jul 15 11:37:03.862712 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Jul 15 11:37:03.862721 kernel: NET: Registered PF_INET6 protocol family Jul 15 11:37:03.862727 kernel: Segment Routing with IPv6 Jul 15 11:37:03.862734 kernel: In-situ OAM (IOAM) with IPv6 Jul 15 11:37:03.862741 kernel: NET: Registered PF_PACKET protocol family Jul 15 11:37:03.862748 kernel: Key type dns_resolver registered Jul 15 11:37:03.862757 kernel: IPI shorthand broadcast: enabled Jul 15 11:37:03.862764 kernel: sched_clock: Marking stable (386319840, 97407890)->(529762094, -46034364) Jul 15 11:37:03.862771 kernel: registered taskstats version 1 Jul 15 11:37:03.862778 kernel: Loading compiled-in X.509 certificates Jul 15 11:37:03.862785 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.188-flatcar: c4b3a19d3bd6de5654dc12075428550cf6251289' Jul 15 11:37:03.862792 kernel: Key type .fscrypt registered Jul 15 11:37:03.862799 kernel: Key type fscrypt-provisioning registered Jul 15 11:37:03.862806 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 15 11:37:03.862813 kernel: ima: Allocated hash algorithm: sha1 Jul 15 11:37:03.862821 kernel: ima: No architecture policies found Jul 15 11:37:03.862828 kernel: clk: Disabling unused clocks Jul 15 11:37:03.862835 kernel: Freeing unused kernel image (initmem) memory: 47476K Jul 15 11:37:03.862841 kernel: Write protecting the kernel read-only data: 28672k Jul 15 11:37:03.862848 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 15 11:37:03.862855 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Jul 15 11:37:03.862862 kernel: Run /init as init process Jul 15 11:37:03.862869 kernel: with arguments: Jul 15 11:37:03.862876 kernel: /init Jul 15 11:37:03.862884 kernel: with environment: Jul 15 11:37:03.862891 kernel: HOME=/ Jul 15 11:37:03.862897 kernel: TERM=linux Jul 15 11:37:03.862904 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 15 11:37:03.862913 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 15 11:37:03.862931 systemd[1]: Detected virtualization kvm. Jul 15 11:37:03.862940 systemd[1]: Detected architecture x86-64. Jul 15 11:37:03.862947 systemd[1]: Running in initrd. Jul 15 11:37:03.862957 systemd[1]: No hostname configured, using default hostname. Jul 15 11:37:03.862965 systemd[1]: Hostname set to . Jul 15 11:37:03.862972 systemd[1]: Initializing machine ID from VM UUID. Jul 15 11:37:03.862980 systemd[1]: Queued start job for default target initrd.target. Jul 15 11:37:03.862987 systemd[1]: Started systemd-ask-password-console.path. Jul 15 11:37:03.862994 systemd[1]: Reached target cryptsetup.target. Jul 15 11:37:03.863001 systemd[1]: Reached target paths.target. Jul 15 11:37:03.863008 systemd[1]: Reached target slices.target. Jul 15 11:37:03.863017 systemd[1]: Reached target swap.target. Jul 15 11:37:03.863029 systemd[1]: Reached target timers.target. Jul 15 11:37:03.863039 systemd[1]: Listening on iscsid.socket. Jul 15 11:37:03.863046 systemd[1]: Listening on iscsiuio.socket. Jul 15 11:37:03.863054 systemd[1]: Listening on systemd-journald-audit.socket. Jul 15 11:37:03.863062 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 15 11:37:03.863070 systemd[1]: Listening on systemd-journald.socket. Jul 15 11:37:03.863078 systemd[1]: Listening on systemd-networkd.socket. Jul 15 11:37:03.863086 systemd[1]: Listening on systemd-udevd-control.socket. Jul 15 11:37:03.863093 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 15 11:37:03.863101 systemd[1]: Reached target sockets.target. Jul 15 11:37:03.863108 systemd[1]: Starting kmod-static-nodes.service... Jul 15 11:37:03.863116 systemd[1]: Finished network-cleanup.service. Jul 15 11:37:03.863124 systemd[1]: Starting systemd-fsck-usr.service... Jul 15 11:37:03.863132 systemd[1]: Starting systemd-journald.service... Jul 15 11:37:03.863140 systemd[1]: Starting systemd-modules-load.service... Jul 15 11:37:03.863148 systemd[1]: Starting systemd-resolved.service... Jul 15 11:37:03.863155 systemd[1]: Starting systemd-vconsole-setup.service... Jul 15 11:37:03.863163 systemd[1]: Finished kmod-static-nodes.service. Jul 15 11:37:03.863170 systemd[1]: Finished systemd-fsck-usr.service. Jul 15 11:37:03.863178 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 15 11:37:03.863197 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 15 11:37:03.863207 systemd-journald[197]: Journal started Jul 15 11:37:03.863245 systemd-journald[197]: Runtime Journal (/run/log/journal/483faebaf769458a84f70c24cbdee42f) is 6.0M, max 48.5M, 42.5M free. Jul 15 11:37:03.850392 systemd-modules-load[198]: Inserted module 'overlay' Jul 15 11:37:03.887449 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 15 11:37:03.862612 systemd-resolved[199]: Positive Trust Anchors: Jul 15 11:37:03.862619 systemd-resolved[199]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 15 11:37:03.862646 systemd-resolved[199]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 15 11:37:03.864804 systemd-resolved[199]: Defaulting to hostname 'linux'. Jul 15 11:37:03.889430 kernel: Bridge firewalling registered Jul 15 11:37:03.896229 systemd-modules-load[198]: Inserted module 'br_netfilter' Jul 15 11:37:03.897000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:03.901217 kernel: audit: type=1130 audit(1752579423.897:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:03.901248 systemd[1]: Started systemd-journald.service. Jul 15 11:37:03.902000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:03.902565 systemd[1]: Started systemd-resolved.service. Jul 15 11:37:03.906937 kernel: audit: type=1130 audit(1752579423.902:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:03.906953 kernel: audit: type=1130 audit(1752579423.906:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:03.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:03.907139 systemd[1]: Finished systemd-vconsole-setup.service. Jul 15 11:37:03.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:03.911829 systemd[1]: Reached target nss-lookup.target. Jul 15 11:37:03.916452 kernel: audit: type=1130 audit(1752579423.911:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:03.917016 systemd[1]: Starting dracut-cmdline-ask.service... Jul 15 11:37:03.920208 kernel: SCSI subsystem initialized Jul 15 11:37:03.931498 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 15 11:37:03.931550 kernel: device-mapper: uevent: version 1.0.3 Jul 15 11:37:03.932748 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 15 11:37:03.932985 systemd[1]: Finished dracut-cmdline-ask.service. Jul 15 11:37:03.934642 kernel: audit: type=1130 audit(1752579423.934:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:03.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:03.935246 systemd[1]: Starting dracut-cmdline.service... Jul 15 11:37:03.939099 systemd-modules-load[198]: Inserted module 'dm_multipath' Jul 15 11:37:03.939775 systemd[1]: Finished systemd-modules-load.service. Jul 15 11:37:03.945307 kernel: audit: type=1130 audit(1752579423.940:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:03.940000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:03.941493 systemd[1]: Starting systemd-sysctl.service... Jul 15 11:37:03.946747 dracut-cmdline[215]: dracut-dracut-053 Jul 15 11:37:03.949826 dracut-cmdline[215]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:37:03.954478 systemd[1]: Finished systemd-sysctl.service. Jul 15 11:37:03.955000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:03.959225 kernel: audit: type=1130 audit(1752579423.955:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:04.004215 kernel: Loading iSCSI transport class v2.0-870. Jul 15 11:37:04.020220 kernel: iscsi: registered transport (tcp) Jul 15 11:37:04.042446 kernel: iscsi: registered transport (qla4xxx) Jul 15 11:37:04.042467 kernel: QLogic iSCSI HBA Driver Jul 15 11:37:04.073541 systemd[1]: Finished dracut-cmdline.service. Jul 15 11:37:04.074000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:04.075761 systemd[1]: Starting dracut-pre-udev.service... Jul 15 11:37:04.079354 kernel: audit: type=1130 audit(1752579424.074:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:04.123229 kernel: raid6: avx2x4 gen() 30846 MB/s Jul 15 11:37:04.140233 kernel: raid6: avx2x4 xor() 8159 MB/s Jul 15 11:37:04.157221 kernel: raid6: avx2x2 gen() 32570 MB/s Jul 15 11:37:04.174215 kernel: raid6: avx2x2 xor() 19250 MB/s Jul 15 11:37:04.191206 kernel: raid6: avx2x1 gen() 26397 MB/s Jul 15 11:37:04.208208 kernel: raid6: avx2x1 xor() 15363 MB/s Jul 15 11:37:04.225206 kernel: raid6: sse2x4 gen() 14789 MB/s Jul 15 11:37:04.242211 kernel: raid6: sse2x4 xor() 7614 MB/s Jul 15 11:37:04.259209 kernel: raid6: sse2x2 gen() 16470 MB/s Jul 15 11:37:04.276210 kernel: raid6: sse2x2 xor() 9849 MB/s Jul 15 11:37:04.293205 kernel: raid6: sse2x1 gen() 12511 MB/s Jul 15 11:37:04.310528 kernel: raid6: sse2x1 xor() 7825 MB/s Jul 15 11:37:04.310542 kernel: raid6: using algorithm avx2x2 gen() 32570 MB/s Jul 15 11:37:04.310551 kernel: raid6: .... xor() 19250 MB/s, rmw enabled Jul 15 11:37:04.311221 kernel: raid6: using avx2x2 recovery algorithm Jul 15 11:37:04.323210 kernel: xor: automatically using best checksumming function avx Jul 15 11:37:04.414225 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 15 11:37:04.424408 systemd[1]: Finished dracut-pre-udev.service. Jul 15 11:37:04.426000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:04.429000 audit: BPF prog-id=7 op=LOAD Jul 15 11:37:04.429000 audit: BPF prog-id=8 op=LOAD Jul 15 11:37:04.429987 systemd[1]: Starting systemd-udevd.service... Jul 15 11:37:04.431724 kernel: audit: type=1130 audit(1752579424.426:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:04.442159 systemd-udevd[398]: Using default interface naming scheme 'v252'. Jul 15 11:37:04.445893 systemd[1]: Started systemd-udevd.service. Jul 15 11:37:04.449000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:04.450111 systemd[1]: Starting dracut-pre-trigger.service... Jul 15 11:37:04.462636 dracut-pre-trigger[413]: rd.md=0: removing MD RAID activation Jul 15 11:37:04.490453 systemd[1]: Finished dracut-pre-trigger.service. Jul 15 11:37:04.492000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:04.493370 systemd[1]: Starting systemd-udev-trigger.service... Jul 15 11:37:04.525803 systemd[1]: Finished systemd-udev-trigger.service. Jul 15 11:37:04.525000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:04.560219 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 15 11:37:04.567384 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 15 11:37:04.567397 kernel: GPT:9289727 != 19775487 Jul 15 11:37:04.567406 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 15 11:37:04.567420 kernel: GPT:9289727 != 19775487 Jul 15 11:37:04.567428 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 15 11:37:04.567436 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:37:04.567446 kernel: cryptd: max_cpu_qlen set to 1000 Jul 15 11:37:04.577807 kernel: libata version 3.00 loaded. Jul 15 11:37:04.577858 kernel: AVX2 version of gcm_enc/dec engaged. Jul 15 11:37:04.577868 kernel: AES CTR mode by8 optimization enabled Jul 15 11:37:04.587922 kernel: ahci 0000:00:1f.2: version 3.0 Jul 15 11:37:04.596955 kernel: ACPI: \_SB_.GSIA: Enabled at IRQ 16 Jul 15 11:37:04.596970 kernel: ahci 0000:00:1f.2: AHCI 0001.0000 32 slots 6 ports 1.5 Gbps 0x3f impl SATA mode Jul 15 11:37:04.597060 kernel: ahci 0000:00:1f.2: flags: 64bit ncq only Jul 15 11:37:04.597132 kernel: scsi host0: ahci Jul 15 11:37:04.597260 kernel: scsi host1: ahci Jul 15 11:37:04.597363 kernel: scsi host2: ahci Jul 15 11:37:04.597450 kernel: scsi host3: ahci Jul 15 11:37:04.597552 kernel: scsi host4: ahci Jul 15 11:37:04.597645 kernel: scsi host5: ahci Jul 15 11:37:04.597733 kernel: ata1: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4100 irq 34 Jul 15 11:37:04.597744 kernel: ata2: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4180 irq 34 Jul 15 11:37:04.597753 kernel: ata3: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4200 irq 34 Jul 15 11:37:04.597761 kernel: ata4: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4280 irq 34 Jul 15 11:37:04.597770 kernel: ata5: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4300 irq 34 Jul 15 11:37:04.597778 kernel: ata6: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4380 irq 34 Jul 15 11:37:04.605035 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 15 11:37:04.642478 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (456) Jul 15 11:37:04.643936 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 15 11:37:04.647392 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 15 11:37:04.650609 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 15 11:37:04.658587 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 15 11:37:04.659486 systemd[1]: Starting disk-uuid.service... Jul 15 11:37:04.667580 disk-uuid[529]: Primary Header is updated. Jul 15 11:37:04.667580 disk-uuid[529]: Secondary Entries is updated. Jul 15 11:37:04.667580 disk-uuid[529]: Secondary Header is updated. Jul 15 11:37:04.671207 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:37:04.675209 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:37:04.906219 kernel: ata4: SATA link down (SStatus 0 SControl 300) Jul 15 11:37:04.906304 kernel: ata2: SATA link down (SStatus 0 SControl 300) Jul 15 11:37:04.907216 kernel: ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300) Jul 15 11:37:04.908702 kernel: ata1: SATA link down (SStatus 0 SControl 300) Jul 15 11:37:04.908772 kernel: ata3.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Jul 15 11:37:04.910416 kernel: ata3.00: applying bridge limits Jul 15 11:37:04.911231 kernel: ata3.00: configured for UDMA/100 Jul 15 11:37:04.912220 kernel: scsi 2:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Jul 15 11:37:04.915223 kernel: ata6: SATA link down (SStatus 0 SControl 300) Jul 15 11:37:04.915243 kernel: ata5: SATA link down (SStatus 0 SControl 300) Jul 15 11:37:04.948206 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Jul 15 11:37:04.965947 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jul 15 11:37:04.965965 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Jul 15 11:37:05.676214 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:37:05.676268 disk-uuid[530]: The operation has completed successfully. Jul 15 11:37:05.697755 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 15 11:37:05.697000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:05.698000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:05.697838 systemd[1]: Finished disk-uuid.service. Jul 15 11:37:05.705231 systemd[1]: Starting verity-setup.service... Jul 15 11:37:05.718214 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Jul 15 11:37:05.737937 systemd[1]: Found device dev-mapper-usr.device. Jul 15 11:37:05.739724 systemd[1]: Mounting sysusr-usr.mount... Jul 15 11:37:05.742028 systemd[1]: Finished verity-setup.service. Jul 15 11:37:05.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:05.798879 systemd[1]: Mounted sysusr-usr.mount. Jul 15 11:37:05.800290 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 15 11:37:05.799300 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 15 11:37:05.800040 systemd[1]: Starting ignition-setup.service... Jul 15 11:37:05.803631 systemd[1]: Starting parse-ip-for-networkd.service... Jul 15 11:37:05.810226 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 15 11:37:05.810262 kernel: BTRFS info (device vda6): using free space tree Jul 15 11:37:05.810274 kernel: BTRFS info (device vda6): has skinny extents Jul 15 11:37:05.818032 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 15 11:37:05.825121 systemd[1]: Finished ignition-setup.service. Jul 15 11:37:05.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:05.826355 systemd[1]: Starting ignition-fetch-offline.service... Jul 15 11:37:05.862220 ignition[637]: Ignition 2.14.0 Jul 15 11:37:05.862230 ignition[637]: Stage: fetch-offline Jul 15 11:37:05.862295 ignition[637]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:37:05.862302 ignition[637]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:37:05.862387 ignition[637]: parsed url from cmdline: "" Jul 15 11:37:05.862390 ignition[637]: no config URL provided Jul 15 11:37:05.862394 ignition[637]: reading system config file "/usr/lib/ignition/user.ign" Jul 15 11:37:05.862400 ignition[637]: no config at "/usr/lib/ignition/user.ign" Jul 15 11:37:05.862414 ignition[637]: op(1): [started] loading QEMU firmware config module Jul 15 11:37:05.862419 ignition[637]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 15 11:37:05.866680 ignition[637]: op(1): [finished] loading QEMU firmware config module Jul 15 11:37:05.872334 systemd[1]: Finished parse-ip-for-networkd.service. Jul 15 11:37:05.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:05.874000 audit: BPF prog-id=9 op=LOAD Jul 15 11:37:05.875311 systemd[1]: Starting systemd-networkd.service... Jul 15 11:37:05.909707 ignition[637]: parsing config with SHA512: 8203148fc0655d3c4bd89db3464517af6d8abd7e62f969f395e5ebb618a3752305a9cdad35b776fb43c3ea83d0b548aa657ecb58ecb3e2bd4a7c6d5676eda61d Jul 15 11:37:05.917745 unknown[637]: fetched base config from "system" Jul 15 11:37:05.918664 unknown[637]: fetched user config from "qemu" Jul 15 11:37:05.919264 ignition[637]: fetch-offline: fetch-offline passed Jul 15 11:37:05.919321 ignition[637]: Ignition finished successfully Jul 15 11:37:05.921000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:05.920225 systemd[1]: Finished ignition-fetch-offline.service. Jul 15 11:37:05.933645 systemd-networkd[721]: lo: Link UP Jul 15 11:37:05.933656 systemd-networkd[721]: lo: Gained carrier Jul 15 11:37:05.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:05.934060 systemd-networkd[721]: Enumeration completed Jul 15 11:37:05.934132 systemd[1]: Started systemd-networkd.service. Jul 15 11:37:05.934288 systemd-networkd[721]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 15 11:37:05.935622 systemd[1]: Reached target network.target. Jul 15 11:37:05.936328 systemd-networkd[721]: eth0: Link UP Jul 15 11:37:05.936331 systemd-networkd[721]: eth0: Gained carrier Jul 15 11:37:05.937134 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 15 11:37:05.944000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:05.937830 systemd[1]: Starting ignition-kargs.service... Jul 15 11:37:05.946753 ignition[724]: Ignition 2.14.0 Jul 15 11:37:05.939069 systemd[1]: Starting iscsiuio.service... Jul 15 11:37:05.946758 ignition[724]: Stage: kargs Jul 15 11:37:05.950573 iscsid[734]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 15 11:37:05.950573 iscsid[734]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 15 11:37:05.950573 iscsid[734]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 15 11:37:05.950573 iscsid[734]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 15 11:37:05.950573 iscsid[734]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 15 11:37:05.950573 iscsid[734]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 15 11:37:05.950000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:05.958000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:05.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:05.943642 systemd[1]: Started iscsiuio.service. Jul 15 11:37:05.946834 ignition[724]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:37:05.946165 systemd[1]: Starting iscsid.service... Jul 15 11:37:05.946842 ignition[724]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:37:05.970000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:05.949700 systemd[1]: Started iscsid.service. Jul 15 11:37:05.947706 ignition[724]: kargs: kargs passed Jul 15 11:37:05.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:05.950258 systemd-networkd[721]: eth0: DHCPv4 address 10.0.0.140/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 15 11:37:05.947736 ignition[724]: Ignition finished successfully Jul 15 11:37:05.951366 systemd[1]: Starting dracut-initqueue.service... Jul 15 11:37:05.964980 ignition[742]: Ignition 2.14.0 Jul 15 11:37:05.952814 systemd[1]: Finished ignition-kargs.service. Jul 15 11:37:05.964985 ignition[742]: Stage: disks Jul 15 11:37:05.958954 systemd[1]: Starting ignition-disks.service... Jul 15 11:37:05.965056 ignition[742]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:37:05.960693 systemd[1]: Finished dracut-initqueue.service. Jul 15 11:37:05.965063 ignition[742]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:37:05.961889 systemd[1]: Reached target remote-fs-pre.target. Jul 15 11:37:05.965935 ignition[742]: disks: disks passed Jul 15 11:37:05.963851 systemd[1]: Reached target remote-cryptsetup.target. Jul 15 11:37:05.989638 systemd-fsck[756]: ROOT: clean, 619/553520 files, 56023/553472 blocks Jul 15 11:37:05.965963 ignition[742]: Ignition finished successfully Jul 15 11:37:05.965769 systemd[1]: Reached target remote-fs.target. Jul 15 11:37:05.967287 systemd[1]: Starting dracut-pre-mount.service... Jul 15 11:37:05.968943 systemd[1]: Finished ignition-disks.service. Jul 15 11:37:05.970346 systemd[1]: Reached target initrd-root-device.target. Jul 15 11:37:05.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:05.972122 systemd[1]: Reached target local-fs-pre.target. Jul 15 11:37:05.972942 systemd[1]: Reached target local-fs.target. Jul 15 11:37:05.973692 systemd[1]: Reached target sysinit.target. Jul 15 11:37:05.975072 systemd[1]: Reached target basic.target. Jul 15 11:37:06.001556 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 15 11:37:05.975698 systemd[1]: Finished dracut-pre-mount.service. Jul 15 11:37:05.976724 systemd[1]: Starting systemd-fsck-root.service... Jul 15 11:37:05.993914 systemd[1]: Finished systemd-fsck-root.service. Jul 15 11:37:05.995687 systemd[1]: Mounting sysroot.mount... Jul 15 11:37:06.001601 systemd[1]: Mounted sysroot.mount. Jul 15 11:37:06.002971 systemd[1]: Reached target initrd-root-fs.target. Jul 15 11:37:06.005461 systemd[1]: Mounting sysroot-usr.mount... Jul 15 11:37:06.006826 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 15 11:37:06.006853 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 15 11:37:06.006881 systemd[1]: Reached target ignition-diskful.target. Jul 15 11:37:06.015207 initrd-setup-root[766]: cut: /sysroot/etc/passwd: No such file or directory Jul 15 11:37:06.008609 systemd[1]: Mounted sysroot-usr.mount. Jul 15 11:37:06.010130 systemd[1]: Starting initrd-setup-root.service... Jul 15 11:37:06.018035 initrd-setup-root[774]: cut: /sysroot/etc/group: No such file or directory Jul 15 11:37:06.020487 initrd-setup-root[782]: cut: /sysroot/etc/shadow: No such file or directory Jul 15 11:37:06.023654 initrd-setup-root[790]: cut: /sysroot/etc/gshadow: No such file or directory Jul 15 11:37:06.047469 systemd[1]: Finished initrd-setup-root.service. Jul 15 11:37:06.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:06.048994 systemd[1]: Starting ignition-mount.service... Jul 15 11:37:06.050212 systemd[1]: Starting sysroot-boot.service... Jul 15 11:37:06.053464 bash[807]: umount: /sysroot/usr/share/oem: not mounted. Jul 15 11:37:06.060826 ignition[808]: INFO : Ignition 2.14.0 Jul 15 11:37:06.061783 ignition[808]: INFO : Stage: mount Jul 15 11:37:06.061783 ignition[808]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:37:06.061783 ignition[808]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:37:06.064710 ignition[808]: INFO : mount: mount passed Jul 15 11:37:06.065484 ignition[808]: INFO : Ignition finished successfully Jul 15 11:37:06.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:06.065711 systemd[1]: Finished ignition-mount.service. Jul 15 11:37:06.071471 systemd[1]: Finished sysroot-boot.service. Jul 15 11:37:06.072000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:06.748992 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 15 11:37:06.755688 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (817) Jul 15 11:37:06.755710 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 15 11:37:06.755720 kernel: BTRFS info (device vda6): using free space tree Jul 15 11:37:06.756471 kernel: BTRFS info (device vda6): has skinny extents Jul 15 11:37:06.760070 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 15 11:37:06.761489 systemd[1]: Starting ignition-files.service... Jul 15 11:37:06.773718 ignition[837]: INFO : Ignition 2.14.0 Jul 15 11:37:06.773718 ignition[837]: INFO : Stage: files Jul 15 11:37:06.775365 ignition[837]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:37:06.775365 ignition[837]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:37:06.775365 ignition[837]: DEBUG : files: compiled without relabeling support, skipping Jul 15 11:37:06.778902 ignition[837]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 15 11:37:06.778902 ignition[837]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 15 11:37:06.778902 ignition[837]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 15 11:37:06.778902 ignition[837]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 15 11:37:06.778902 ignition[837]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 15 11:37:06.778902 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 15 11:37:06.778902 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Jul 15 11:37:06.777984 unknown[837]: wrote ssh authorized keys file for user: core Jul 15 11:37:06.829786 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 15 11:37:06.944358 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 15 11:37:06.944358 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 15 11:37:06.948206 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 15 11:37:06.948206 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 15 11:37:06.948206 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 15 11:37:06.948206 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 15 11:37:06.948206 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 15 11:37:06.948206 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 15 11:37:06.948206 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 15 11:37:06.948206 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 15 11:37:06.948206 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 15 11:37:06.948206 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 15 11:37:06.948206 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 15 11:37:06.948206 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 15 11:37:06.948206 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.31.8-x86-64.raw: attempt #1 Jul 15 11:37:07.091341 systemd-networkd[721]: eth0: Gained IPv6LL Jul 15 11:37:07.482604 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 15 11:37:08.048688 ignition[837]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 15 11:37:08.048688 ignition[837]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 15 11:37:08.053239 ignition[837]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 15 11:37:08.053239 ignition[837]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 15 11:37:08.053239 ignition[837]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 15 11:37:08.053239 ignition[837]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 15 11:37:08.053239 ignition[837]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 15 11:37:08.053239 ignition[837]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 15 11:37:08.053239 ignition[837]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 15 11:37:08.053239 ignition[837]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 15 11:37:08.053239 ignition[837]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 15 11:37:08.053239 ignition[837]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 15 11:37:08.053239 ignition[837]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 15 11:37:08.073732 ignition[837]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 15 11:37:08.073732 ignition[837]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 15 11:37:08.073732 ignition[837]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 15 11:37:08.073732 ignition[837]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 15 11:37:08.073732 ignition[837]: INFO : files: files passed Jul 15 11:37:08.073732 ignition[837]: INFO : Ignition finished successfully Jul 15 11:37:08.073000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.080000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.080000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.072383 systemd[1]: Finished ignition-files.service. Jul 15 11:37:08.074504 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 15 11:37:08.076225 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 15 11:37:08.090324 initrd-setup-root-after-ignition[862]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 15 11:37:08.076887 systemd[1]: Starting ignition-quench.service... Jul 15 11:37:08.092790 initrd-setup-root-after-ignition[864]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 15 11:37:08.079247 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 15 11:37:08.079316 systemd[1]: Finished ignition-quench.service. Jul 15 11:37:08.080899 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 15 11:37:08.097000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.097000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.083423 systemd[1]: Reached target ignition-complete.target. Jul 15 11:37:08.085436 systemd[1]: Starting initrd-parse-etc.service... Jul 15 11:37:08.096119 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 15 11:37:08.096199 systemd[1]: Finished initrd-parse-etc.service. Jul 15 11:37:08.097881 systemd[1]: Reached target initrd-fs.target. Jul 15 11:37:08.098476 systemd[1]: Reached target initrd.target. Jul 15 11:37:08.098643 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 15 11:37:08.099241 systemd[1]: Starting dracut-pre-pivot.service... Jul 15 11:37:08.108587 systemd[1]: Finished dracut-pre-pivot.service. Jul 15 11:37:08.109000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.110005 systemd[1]: Starting initrd-cleanup.service... Jul 15 11:37:08.117202 systemd[1]: Stopped target nss-lookup.target. Jul 15 11:37:08.118107 systemd[1]: Stopped target remote-cryptsetup.target. Jul 15 11:37:08.119673 systemd[1]: Stopped target timers.target. Jul 15 11:37:08.121205 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 15 11:37:08.122000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.121295 systemd[1]: Stopped dracut-pre-pivot.service. Jul 15 11:37:08.122732 systemd[1]: Stopped target initrd.target. Jul 15 11:37:08.124333 systemd[1]: Stopped target basic.target. Jul 15 11:37:08.125772 systemd[1]: Stopped target ignition-complete.target. Jul 15 11:37:08.127313 systemd[1]: Stopped target ignition-diskful.target. Jul 15 11:37:08.128817 systemd[1]: Stopped target initrd-root-device.target. Jul 15 11:37:08.130474 systemd[1]: Stopped target remote-fs.target. Jul 15 11:37:08.132038 systemd[1]: Stopped target remote-fs-pre.target. Jul 15 11:37:08.133685 systemd[1]: Stopped target sysinit.target. Jul 15 11:37:08.135170 systemd[1]: Stopped target local-fs.target. Jul 15 11:37:08.136676 systemd[1]: Stopped target local-fs-pre.target. Jul 15 11:37:08.138197 systemd[1]: Stopped target swap.target. Jul 15 11:37:08.141000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.139581 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 15 11:37:08.139667 systemd[1]: Stopped dracut-pre-mount.service. Jul 15 11:37:08.144000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.141314 systemd[1]: Stopped target cryptsetup.target. Jul 15 11:37:08.145000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.142687 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 15 11:37:08.142769 systemd[1]: Stopped dracut-initqueue.service. Jul 15 11:37:08.144476 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 15 11:37:08.144558 systemd[1]: Stopped ignition-fetch-offline.service. Jul 15 11:37:08.146041 systemd[1]: Stopped target paths.target. Jul 15 11:37:08.147424 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 15 11:37:08.152236 systemd[1]: Stopped systemd-ask-password-console.path. Jul 15 11:37:08.153681 systemd[1]: Stopped target slices.target. Jul 15 11:37:08.155259 systemd[1]: Stopped target sockets.target. Jul 15 11:37:08.156674 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 15 11:37:08.158000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.156760 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 15 11:37:08.159000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.158336 systemd[1]: ignition-files.service: Deactivated successfully. Jul 15 11:37:08.163219 iscsid[734]: iscsid shutting down. Jul 15 11:37:08.163000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.158415 systemd[1]: Stopped ignition-files.service. Jul 15 11:37:08.160764 systemd[1]: Stopping ignition-mount.service... Jul 15 11:37:08.161818 systemd[1]: Stopping iscsid.service... Jul 15 11:37:08.168000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.170139 ignition[877]: INFO : Ignition 2.14.0 Jul 15 11:37:08.170139 ignition[877]: INFO : Stage: umount Jul 15 11:37:08.170139 ignition[877]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:37:08.170139 ignition[877]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:37:08.170139 ignition[877]: INFO : umount: umount passed Jul 15 11:37:08.170139 ignition[877]: INFO : Ignition finished successfully Jul 15 11:37:08.169000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.163179 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 15 11:37:08.163340 systemd[1]: Stopped kmod-static-nodes.service. Jul 15 11:37:08.166048 systemd[1]: Stopping sysroot-boot.service... Jul 15 11:37:08.167290 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 15 11:37:08.167457 systemd[1]: Stopped systemd-udev-trigger.service. Jul 15 11:37:08.168440 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 15 11:37:08.168518 systemd[1]: Stopped dracut-pre-trigger.service. Jul 15 11:37:08.183446 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 15 11:37:08.184789 systemd[1]: iscsid.service: Deactivated successfully. Jul 15 11:37:08.185667 systemd[1]: Stopped iscsid.service. Jul 15 11:37:08.186000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.187312 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 15 11:37:08.188232 systemd[1]: Stopped ignition-mount.service. Jul 15 11:37:08.190012 systemd[1]: iscsid.socket: Deactivated successfully. Jul 15 11:37:08.189000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.191009 systemd[1]: Closed iscsid.socket. Jul 15 11:37:08.192520 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 15 11:37:08.192568 systemd[1]: Stopped ignition-disks.service. Jul 15 11:37:08.195000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.195266 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 15 11:37:08.195301 systemd[1]: Stopped ignition-kargs.service. Jul 15 11:37:08.196000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.196937 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 15 11:37:08.197612 systemd[1]: Stopped ignition-setup.service. Jul 15 11:37:08.199000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.200025 systemd[1]: Stopping iscsiuio.service... Jul 15 11:37:08.201466 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 15 11:37:08.202413 systemd[1]: Finished initrd-cleanup.service. Jul 15 11:37:08.203000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.203000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.204082 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 15 11:37:08.204971 systemd[1]: Stopped iscsiuio.service. Jul 15 11:37:08.206000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.207439 systemd[1]: Stopped target network.target. Jul 15 11:37:08.209147 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 15 11:37:08.209200 systemd[1]: Closed iscsiuio.socket. Jul 15 11:37:08.211629 systemd[1]: Stopping systemd-networkd.service... Jul 15 11:37:08.213292 systemd[1]: Stopping systemd-resolved.service... Jul 15 11:37:08.217230 systemd-networkd[721]: eth0: DHCPv6 lease lost Jul 15 11:37:08.218408 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 15 11:37:08.224425 kernel: kauditd_printk_skb: 47 callbacks suppressed Jul 15 11:37:08.224445 kernel: audit: type=1131 audit(1752579428.219:58): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.219000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.218484 systemd[1]: Stopped systemd-networkd.service. Jul 15 11:37:08.224253 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 15 11:37:08.224278 systemd[1]: Closed systemd-networkd.socket. Jul 15 11:37:08.228000 audit: BPF prog-id=9 op=UNLOAD Jul 15 11:37:08.228289 systemd[1]: Stopping network-cleanup.service... Jul 15 11:37:08.238862 kernel: audit: type=1334 audit(1752579428.228:59): prog-id=9 op=UNLOAD Jul 15 11:37:08.238897 kernel: audit: type=1131 audit(1752579428.229:60): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.238909 kernel: audit: type=1131 audit(1752579428.229:61): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.238920 kernel: audit: type=1131 audit(1752579428.238:62): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.229000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.229000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.238000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.229752 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 15 11:37:08.229824 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 15 11:37:08.248809 kernel: audit: type=1131 audit(1752579428.243:63): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.243000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.229999 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 15 11:37:08.252974 kernel: audit: type=1131 audit(1752579428.248:64): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.248000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.230028 systemd[1]: Stopped systemd-sysctl.service. Jul 15 11:37:08.252000 audit: BPF prog-id=6 op=UNLOAD Jul 15 11:37:08.237890 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 15 11:37:08.259043 kernel: audit: type=1334 audit(1752579428.252:65): prog-id=6 op=UNLOAD Jul 15 11:37:08.259056 kernel: audit: type=1131 audit(1752579428.254:66): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.237925 systemd[1]: Stopped systemd-modules-load.service. Jul 15 11:37:08.259000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.263206 kernel: audit: type=1131 audit(1752579428.259:67): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.238952 systemd[1]: Stopping systemd-udevd.service... Jul 15 11:37:08.243094 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 15 11:37:08.243503 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 15 11:37:08.243581 systemd[1]: Stopped systemd-resolved.service. Jul 15 11:37:08.247717 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 15 11:37:08.247793 systemd[1]: Stopped sysroot-boot.service. Jul 15 11:37:08.249604 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 15 11:37:08.249641 systemd[1]: Stopped initrd-setup-root.service. Jul 15 11:37:08.255079 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 15 11:37:08.255152 systemd[1]: Stopped network-cleanup.service. Jul 15 11:37:08.272148 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 15 11:37:08.272265 systemd[1]: Stopped systemd-udevd.service. Jul 15 11:37:08.272000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.274567 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 15 11:37:08.274600 systemd[1]: Closed systemd-udevd-control.socket. Jul 15 11:37:08.276287 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 15 11:37:08.276311 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 15 11:37:08.278000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.276778 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 15 11:37:08.280000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.276816 systemd[1]: Stopped dracut-pre-udev.service. Jul 15 11:37:08.280000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.278971 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 15 11:37:08.279001 systemd[1]: Stopped dracut-cmdline.service. Jul 15 11:37:08.280431 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 15 11:37:08.283000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.280465 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 15 11:37:08.283078 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 15 11:37:08.283517 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 15 11:37:08.283562 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 15 11:37:08.292706 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 15 11:37:08.292775 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 15 11:37:08.294000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.294000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:08.294641 systemd[1]: Reached target initrd-switch-root.target. Jul 15 11:37:08.296684 systemd[1]: Starting initrd-switch-root.service... Jul 15 11:37:08.312045 systemd[1]: Switching root. Jul 15 11:37:08.328730 systemd-journald[197]: Journal stopped Jul 15 11:37:10.868905 systemd-journald[197]: Received SIGTERM from PID 1 (systemd). Jul 15 11:37:10.868950 kernel: SELinux: Class mctp_socket not defined in policy. Jul 15 11:37:10.868963 kernel: SELinux: Class anon_inode not defined in policy. Jul 15 11:37:10.868976 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 15 11:37:10.868985 kernel: SELinux: policy capability network_peer_controls=1 Jul 15 11:37:10.868994 kernel: SELinux: policy capability open_perms=1 Jul 15 11:37:10.869003 kernel: SELinux: policy capability extended_socket_class=1 Jul 15 11:37:10.869012 kernel: SELinux: policy capability always_check_network=0 Jul 15 11:37:10.869024 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 15 11:37:10.869037 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 15 11:37:10.869046 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 15 11:37:10.869057 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 15 11:37:10.869066 systemd[1]: Successfully loaded SELinux policy in 37.813ms. Jul 15 11:37:10.869081 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.747ms. Jul 15 11:37:10.869092 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 15 11:37:10.869103 systemd[1]: Detected virtualization kvm. Jul 15 11:37:10.869112 systemd[1]: Detected architecture x86-64. Jul 15 11:37:10.869123 systemd[1]: Detected first boot. Jul 15 11:37:10.869133 systemd[1]: Initializing machine ID from VM UUID. Jul 15 11:37:10.869143 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 15 11:37:10.869153 systemd[1]: Populated /etc with preset unit settings. Jul 15 11:37:10.869165 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:37:10.869176 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:37:10.869199 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:37:10.869212 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 15 11:37:10.869223 systemd[1]: Stopped initrd-switch-root.service. Jul 15 11:37:10.869233 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 15 11:37:10.869243 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 15 11:37:10.869253 systemd[1]: Created slice system-addon\x2drun.slice. Jul 15 11:37:10.869264 systemd[1]: Created slice system-getty.slice. Jul 15 11:37:10.869274 systemd[1]: Created slice system-modprobe.slice. Jul 15 11:37:10.869284 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 15 11:37:10.869294 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 15 11:37:10.869305 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 15 11:37:10.869315 systemd[1]: Created slice user.slice. Jul 15 11:37:10.869325 systemd[1]: Started systemd-ask-password-console.path. Jul 15 11:37:10.869335 systemd[1]: Started systemd-ask-password-wall.path. Jul 15 11:37:10.869345 systemd[1]: Set up automount boot.automount. Jul 15 11:37:10.869357 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 15 11:37:10.869366 systemd[1]: Stopped target initrd-switch-root.target. Jul 15 11:37:10.869377 systemd[1]: Stopped target initrd-fs.target. Jul 15 11:37:10.869387 systemd[1]: Stopped target initrd-root-fs.target. Jul 15 11:37:10.869397 systemd[1]: Reached target integritysetup.target. Jul 15 11:37:10.869407 systemd[1]: Reached target remote-cryptsetup.target. Jul 15 11:37:10.869417 systemd[1]: Reached target remote-fs.target. Jul 15 11:37:10.869427 systemd[1]: Reached target slices.target. Jul 15 11:37:10.869438 systemd[1]: Reached target swap.target. Jul 15 11:37:10.869449 systemd[1]: Reached target torcx.target. Jul 15 11:37:10.869458 systemd[1]: Reached target veritysetup.target. Jul 15 11:37:10.869468 systemd[1]: Listening on systemd-coredump.socket. Jul 15 11:37:10.869478 systemd[1]: Listening on systemd-initctl.socket. Jul 15 11:37:10.869488 systemd[1]: Listening on systemd-networkd.socket. Jul 15 11:37:10.869498 systemd[1]: Listening on systemd-udevd-control.socket. Jul 15 11:37:10.869508 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 15 11:37:10.869518 systemd[1]: Listening on systemd-userdbd.socket. Jul 15 11:37:10.869530 systemd[1]: Mounting dev-hugepages.mount... Jul 15 11:37:10.869541 systemd[1]: Mounting dev-mqueue.mount... Jul 15 11:37:10.869551 systemd[1]: Mounting media.mount... Jul 15 11:37:10.869561 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:37:10.869572 systemd[1]: Mounting sys-kernel-debug.mount... Jul 15 11:37:10.869582 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 15 11:37:10.869592 systemd[1]: Mounting tmp.mount... Jul 15 11:37:10.869602 systemd[1]: Starting flatcar-tmpfiles.service... Jul 15 11:37:10.869612 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:37:10.869622 systemd[1]: Starting kmod-static-nodes.service... Jul 15 11:37:10.869633 systemd[1]: Starting modprobe@configfs.service... Jul 15 11:37:10.869644 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:37:10.869654 systemd[1]: Starting modprobe@drm.service... Jul 15 11:37:10.869664 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:37:10.869674 systemd[1]: Starting modprobe@fuse.service... Jul 15 11:37:10.869684 systemd[1]: Starting modprobe@loop.service... Jul 15 11:37:10.869695 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 15 11:37:10.869705 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 15 11:37:10.869716 systemd[1]: Stopped systemd-fsck-root.service. Jul 15 11:37:10.869734 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 15 11:37:10.869745 systemd[1]: Stopped systemd-fsck-usr.service. Jul 15 11:37:10.869755 kernel: loop: module loaded Jul 15 11:37:10.869765 systemd[1]: Stopped systemd-journald.service. Jul 15 11:37:10.869774 kernel: fuse: init (API version 7.34) Jul 15 11:37:10.869785 systemd[1]: Starting systemd-journald.service... Jul 15 11:37:10.869794 systemd[1]: Starting systemd-modules-load.service... Jul 15 11:37:10.869804 systemd[1]: Starting systemd-network-generator.service... Jul 15 11:37:10.869814 systemd[1]: Starting systemd-remount-fs.service... Jul 15 11:37:10.869826 systemd[1]: Starting systemd-udev-trigger.service... Jul 15 11:37:10.869836 systemd[1]: verity-setup.service: Deactivated successfully. Jul 15 11:37:10.869846 systemd[1]: Stopped verity-setup.service. Jul 15 11:37:10.869856 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:37:10.869868 systemd-journald[991]: Journal started Jul 15 11:37:10.869902 systemd-journald[991]: Runtime Journal (/run/log/journal/483faebaf769458a84f70c24cbdee42f) is 6.0M, max 48.5M, 42.5M free. Jul 15 11:37:08.385000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 15 11:37:08.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:37:08.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:37:08.689000 audit: BPF prog-id=10 op=LOAD Jul 15 11:37:08.689000 audit: BPF prog-id=10 op=UNLOAD Jul 15 11:37:08.689000 audit: BPF prog-id=11 op=LOAD Jul 15 11:37:08.689000 audit: BPF prog-id=11 op=UNLOAD Jul 15 11:37:08.719000 audit[910]: AVC avc: denied { associate } for pid=910 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 15 11:37:08.719000 audit[910]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c00018f8e4 a1=c00002ae40 a2=c000029080 a3=32 items=0 ppid=893 pid=910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:08.719000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 15 11:37:08.720000 audit[910]: AVC avc: denied { associate } for pid=910 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 15 11:37:08.720000 audit[910]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c00018f9b9 a2=1ed a3=0 items=2 ppid=893 pid=910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:08.720000 audit: CWD cwd="/" Jul 15 11:37:08.720000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:08.720000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:08.720000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 15 11:37:10.749000 audit: BPF prog-id=12 op=LOAD Jul 15 11:37:10.749000 audit: BPF prog-id=3 op=UNLOAD Jul 15 11:37:10.749000 audit: BPF prog-id=13 op=LOAD Jul 15 11:37:10.749000 audit: BPF prog-id=14 op=LOAD Jul 15 11:37:10.749000 audit: BPF prog-id=4 op=UNLOAD Jul 15 11:37:10.749000 audit: BPF prog-id=5 op=UNLOAD Jul 15 11:37:10.750000 audit: BPF prog-id=15 op=LOAD Jul 15 11:37:10.750000 audit: BPF prog-id=12 op=UNLOAD Jul 15 11:37:10.750000 audit: BPF prog-id=16 op=LOAD Jul 15 11:37:10.751000 audit: BPF prog-id=17 op=LOAD Jul 15 11:37:10.751000 audit: BPF prog-id=13 op=UNLOAD Jul 15 11:37:10.751000 audit: BPF prog-id=14 op=UNLOAD Jul 15 11:37:10.751000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.754000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.760000 audit: BPF prog-id=15 op=UNLOAD Jul 15 11:37:10.846000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.849000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.851000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.851000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.851000 audit: BPF prog-id=18 op=LOAD Jul 15 11:37:10.852000 audit: BPF prog-id=19 op=LOAD Jul 15 11:37:10.852000 audit: BPF prog-id=20 op=LOAD Jul 15 11:37:10.852000 audit: BPF prog-id=16 op=UNLOAD Jul 15 11:37:10.852000 audit: BPF prog-id=17 op=UNLOAD Jul 15 11:37:10.867000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.867000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 15 11:37:10.867000 audit[991]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7ffc7b047590 a2=4000 a3=7ffc7b04762c items=0 ppid=1 pid=991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:10.867000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 15 11:37:10.748504 systemd[1]: Queued start job for default target multi-user.target. Jul 15 11:37:08.717949 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-07-15T11:37:08Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:37:10.748517 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 15 11:37:08.718160 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-07-15T11:37:08Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 15 11:37:10.751484 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 15 11:37:08.718175 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-07-15T11:37:08Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 15 11:37:08.718216 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-07-15T11:37:08Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 15 11:37:08.718226 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-07-15T11:37:08Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 15 11:37:08.718253 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-07-15T11:37:08Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 15 11:37:08.718265 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-07-15T11:37:08Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 15 11:37:08.718444 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-07-15T11:37:08Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 15 11:37:08.718475 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-07-15T11:37:08Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 15 11:37:08.718486 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-07-15T11:37:08Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 15 11:37:08.719031 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-07-15T11:37:08Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 15 11:37:08.719060 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-07-15T11:37:08Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 15 11:37:08.719075 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-07-15T11:37:08Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.100: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.100 Jul 15 11:37:08.719087 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-07-15T11:37:08Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 15 11:37:08.719102 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-07-15T11:37:08Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.100: no such file or directory" path=/var/lib/torcx/store/3510.3.100 Jul 15 11:37:08.719114 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-07-15T11:37:08Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 15 11:37:10.495546 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-07-15T11:37:10Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:37:10.495795 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-07-15T11:37:10Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:37:10.495880 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-07-15T11:37:10Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:37:10.496015 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-07-15T11:37:10Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:37:10.496060 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-07-15T11:37:10Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 15 11:37:10.496113 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-07-15T11:37:10Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 15 11:37:10.872602 systemd[1]: Started systemd-journald.service. Jul 15 11:37:10.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.873101 systemd[1]: Mounted dev-hugepages.mount. Jul 15 11:37:10.873944 systemd[1]: Mounted dev-mqueue.mount. Jul 15 11:37:10.874735 systemd[1]: Mounted media.mount. Jul 15 11:37:10.875475 systemd[1]: Mounted sys-kernel-debug.mount. Jul 15 11:37:10.876334 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 15 11:37:10.877248 systemd[1]: Mounted tmp.mount. Jul 15 11:37:10.878155 systemd[1]: Finished flatcar-tmpfiles.service. Jul 15 11:37:10.878000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.879562 systemd[1]: Finished kmod-static-nodes.service. Jul 15 11:37:10.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.880621 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 15 11:37:10.880766 systemd[1]: Finished modprobe@configfs.service. Jul 15 11:37:10.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.881000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.881801 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:37:10.881947 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:37:10.882000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.882000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.883013 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 15 11:37:10.883161 systemd[1]: Finished modprobe@drm.service. Jul 15 11:37:10.883000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.883000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.884124 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:37:10.884306 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:37:10.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.884000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.885354 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 15 11:37:10.885520 systemd[1]: Finished modprobe@fuse.service. Jul 15 11:37:10.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.886000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.886569 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:37:10.886717 systemd[1]: Finished modprobe@loop.service. Jul 15 11:37:10.887000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.887000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.887802 systemd[1]: Finished systemd-modules-load.service. Jul 15 11:37:10.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.888901 systemd[1]: Finished systemd-network-generator.service. Jul 15 11:37:10.889000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.890061 systemd[1]: Finished systemd-remount-fs.service. Jul 15 11:37:10.890000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.891243 systemd[1]: Reached target network-pre.target. Jul 15 11:37:10.893137 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 15 11:37:10.894822 systemd[1]: Mounting sys-kernel-config.mount... Jul 15 11:37:10.895683 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 15 11:37:10.896674 systemd[1]: Starting systemd-hwdb-update.service... Jul 15 11:37:10.898595 systemd[1]: Starting systemd-journal-flush.service... Jul 15 11:37:10.899675 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:37:10.900434 systemd[1]: Starting systemd-random-seed.service... Jul 15 11:37:10.901490 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:37:10.902448 systemd[1]: Starting systemd-sysctl.service... Jul 15 11:37:10.903438 systemd-journald[991]: Time spent on flushing to /var/log/journal/483faebaf769458a84f70c24cbdee42f is 16.624ms for 1094 entries. Jul 15 11:37:10.903438 systemd-journald[991]: System Journal (/var/log/journal/483faebaf769458a84f70c24cbdee42f) is 8.0M, max 195.6M, 187.6M free. Jul 15 11:37:10.935049 systemd-journald[991]: Received client request to flush runtime journal. Jul 15 11:37:10.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.914000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.920000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.927000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.904693 systemd[1]: Starting systemd-sysusers.service... Jul 15 11:37:10.907855 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 15 11:37:10.936671 udevadm[1015]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Jul 15 11:37:10.936000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:10.908979 systemd[1]: Mounted sys-kernel-config.mount. Jul 15 11:37:10.910179 systemd[1]: Finished systemd-random-seed.service. Jul 15 11:37:10.911395 systemd[1]: Reached target first-boot-complete.target. Jul 15 11:37:10.913658 systemd[1]: Finished systemd-udev-trigger.service. Jul 15 11:37:10.915403 systemd[1]: Starting systemd-udev-settle.service... Jul 15 11:37:10.919966 systemd[1]: Finished systemd-sysctl.service. Jul 15 11:37:10.926933 systemd[1]: Finished systemd-sysusers.service. Jul 15 11:37:10.935871 systemd[1]: Finished systemd-journal-flush.service. Jul 15 11:37:11.339366 systemd[1]: Finished systemd-hwdb-update.service. Jul 15 11:37:11.340000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:11.340000 audit: BPF prog-id=21 op=LOAD Jul 15 11:37:11.340000 audit: BPF prog-id=22 op=LOAD Jul 15 11:37:11.340000 audit: BPF prog-id=7 op=UNLOAD Jul 15 11:37:11.340000 audit: BPF prog-id=8 op=UNLOAD Jul 15 11:37:11.341504 systemd[1]: Starting systemd-udevd.service... Jul 15 11:37:11.356696 systemd-udevd[1017]: Using default interface naming scheme 'v252'. Jul 15 11:37:11.368695 systemd[1]: Started systemd-udevd.service. Jul 15 11:37:11.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:11.370000 audit: BPF prog-id=23 op=LOAD Jul 15 11:37:11.371549 systemd[1]: Starting systemd-networkd.service... Jul 15 11:37:11.374000 audit: BPF prog-id=24 op=LOAD Jul 15 11:37:11.374000 audit: BPF prog-id=25 op=LOAD Jul 15 11:37:11.375000 audit: BPF prog-id=26 op=LOAD Jul 15 11:37:11.375734 systemd[1]: Starting systemd-userdbd.service... Jul 15 11:37:11.392578 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 15 11:37:11.403174 systemd[1]: Started systemd-userdbd.service. Jul 15 11:37:11.403000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:11.412360 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 15 11:37:11.443219 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Jul 15 11:37:11.453207 kernel: ACPI: button: Power Button [PWRF] Jul 15 11:37:11.458000 audit[1020]: AVC avc: denied { confidentiality } for pid=1020 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 15 11:37:11.462977 systemd-networkd[1026]: lo: Link UP Jul 15 11:37:11.462986 systemd-networkd[1026]: lo: Gained carrier Jul 15 11:37:11.463387 systemd-networkd[1026]: Enumeration completed Jul 15 11:37:11.463476 systemd[1]: Started systemd-networkd.service. Jul 15 11:37:11.463502 systemd-networkd[1026]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 15 11:37:11.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:11.465335 systemd-networkd[1026]: eth0: Link UP Jul 15 11:37:11.465341 systemd-networkd[1026]: eth0: Gained carrier Jul 15 11:37:11.458000 audit[1020]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55f1f9e3f030 a1=338ac a2=7f6a51cf3bc5 a3=5 items=110 ppid=1017 pid=1020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:11.458000 audit: CWD cwd="/" Jul 15 11:37:11.458000 audit: PATH item=0 name=(null) inode=44 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=1 name=(null) inode=12980 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=2 name=(null) inode=12980 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=3 name=(null) inode=12981 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=4 name=(null) inode=12980 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=5 name=(null) inode=12982 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=6 name=(null) inode=12980 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=7 name=(null) inode=12983 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=8 name=(null) inode=12983 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=9 name=(null) inode=12984 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=10 name=(null) inode=12983 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=11 name=(null) inode=12985 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=12 name=(null) inode=12983 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=13 name=(null) inode=12986 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=14 name=(null) inode=12983 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=15 name=(null) inode=12987 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=16 name=(null) inode=12983 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=17 name=(null) inode=12988 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=18 name=(null) inode=12980 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=19 name=(null) inode=12989 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=20 name=(null) inode=12989 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=21 name=(null) inode=12990 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=22 name=(null) inode=12989 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=23 name=(null) inode=12991 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=24 name=(null) inode=12989 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=25 name=(null) inode=12992 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=26 name=(null) inode=12989 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=27 name=(null) inode=12993 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=28 name=(null) inode=12989 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=29 name=(null) inode=12994 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=30 name=(null) inode=12980 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=31 name=(null) inode=12995 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=32 name=(null) inode=12995 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=33 name=(null) inode=12996 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=34 name=(null) inode=12995 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=35 name=(null) inode=12997 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=36 name=(null) inode=12995 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=37 name=(null) inode=12998 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=38 name=(null) inode=12995 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=39 name=(null) inode=12999 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=40 name=(null) inode=12995 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=41 name=(null) inode=13000 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=42 name=(null) inode=12980 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=43 name=(null) inode=13001 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=44 name=(null) inode=13001 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=45 name=(null) inode=13002 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=46 name=(null) inode=13001 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=47 name=(null) inode=13003 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=48 name=(null) inode=13001 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=49 name=(null) inode=13004 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=50 name=(null) inode=13001 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=51 name=(null) inode=13005 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=52 name=(null) inode=13001 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=53 name=(null) inode=13006 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=54 name=(null) inode=44 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=55 name=(null) inode=13007 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=56 name=(null) inode=13007 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=57 name=(null) inode=13008 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=58 name=(null) inode=13007 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=59 name=(null) inode=13009 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=60 name=(null) inode=13007 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=61 name=(null) inode=13010 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=62 name=(null) inode=13010 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=63 name=(null) inode=13011 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=64 name=(null) inode=13010 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=65 name=(null) inode=13012 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=66 name=(null) inode=13010 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=67 name=(null) inode=13013 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=68 name=(null) inode=13010 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=69 name=(null) inode=13014 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=70 name=(null) inode=13010 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=71 name=(null) inode=13015 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=72 name=(null) inode=13007 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=73 name=(null) inode=13016 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=74 name=(null) inode=13016 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=75 name=(null) inode=13017 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=76 name=(null) inode=13016 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=77 name=(null) inode=13018 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=78 name=(null) inode=13016 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=79 name=(null) inode=13019 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=80 name=(null) inode=13016 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=81 name=(null) inode=13020 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=82 name=(null) inode=13016 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=83 name=(null) inode=13021 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=84 name=(null) inode=13007 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=85 name=(null) inode=13022 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=86 name=(null) inode=13022 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=87 name=(null) inode=13023 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=88 name=(null) inode=13022 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=89 name=(null) inode=13024 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=90 name=(null) inode=13022 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=91 name=(null) inode=13025 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=92 name=(null) inode=13022 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=93 name=(null) inode=13026 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=94 name=(null) inode=13022 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=95 name=(null) inode=13027 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=96 name=(null) inode=13007 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=97 name=(null) inode=13028 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=98 name=(null) inode=13028 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=99 name=(null) inode=13029 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=100 name=(null) inode=13028 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=101 name=(null) inode=13030 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=102 name=(null) inode=13028 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=103 name=(null) inode=13031 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=104 name=(null) inode=13028 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=105 name=(null) inode=13032 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=106 name=(null) inode=13028 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=107 name=(null) inode=13033 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PATH item=109 name=(null) inode=13781 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:37:11.458000 audit: PROCTITLE proctitle="(udev-worker)" Jul 15 11:37:11.478199 kernel: i801_smbus 0000:00:1f.3: SMBus using PCI interrupt Jul 15 11:37:11.493556 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Jul 15 11:37:11.493576 kernel: i2c i2c-0: 1/1 memory slots populated (from DMI) Jul 15 11:37:11.493720 kernel: i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD Jul 15 11:37:11.481322 systemd-networkd[1026]: eth0: DHCPv4 address 10.0.0.140/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 15 11:37:11.499221 kernel: mousedev: PS/2 mouse device common for all mice Jul 15 11:37:11.550232 kernel: kvm: Nested Virtualization enabled Jul 15 11:37:11.550440 kernel: SVM: kvm: Nested Paging enabled Jul 15 11:37:11.550508 kernel: SVM: Virtual VMLOAD VMSAVE supported Jul 15 11:37:11.550541 kernel: SVM: Virtual GIF supported Jul 15 11:37:11.566224 kernel: EDAC MC: Ver: 3.0.0 Jul 15 11:37:11.590529 systemd[1]: Finished systemd-udev-settle.service. Jul 15 11:37:11.591000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:11.592503 systemd[1]: Starting lvm2-activation-early.service... Jul 15 11:37:11.600136 lvm[1052]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 15 11:37:11.635074 systemd[1]: Finished lvm2-activation-early.service. Jul 15 11:37:11.635000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:11.636052 systemd[1]: Reached target cryptsetup.target. Jul 15 11:37:11.637668 systemd[1]: Starting lvm2-activation.service... Jul 15 11:37:11.641847 lvm[1053]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 15 11:37:11.666390 systemd[1]: Finished lvm2-activation.service. Jul 15 11:37:11.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:11.667421 systemd[1]: Reached target local-fs-pre.target. Jul 15 11:37:11.668297 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 15 11:37:11.668319 systemd[1]: Reached target local-fs.target. Jul 15 11:37:11.669104 systemd[1]: Reached target machines.target. Jul 15 11:37:11.670995 systemd[1]: Starting ldconfig.service... Jul 15 11:37:11.672002 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:37:11.672034 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:37:11.672858 systemd[1]: Starting systemd-boot-update.service... Jul 15 11:37:11.674583 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 15 11:37:11.676833 systemd[1]: Starting systemd-machine-id-commit.service... Jul 15 11:37:11.678923 systemd[1]: Starting systemd-sysext.service... Jul 15 11:37:11.680086 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1055 (bootctl) Jul 15 11:37:11.681536 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 15 11:37:11.687620 systemd[1]: Unmounting usr-share-oem.mount... Jul 15 11:37:11.689000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:11.690079 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 15 11:37:11.691547 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 15 11:37:11.691675 systemd[1]: Unmounted usr-share-oem.mount. Jul 15 11:37:11.699200 kernel: loop0: detected capacity change from 0 to 221472 Jul 15 11:37:11.726213 systemd-fsck[1063]: fsck.fat 4.2 (2021-01-31) Jul 15 11:37:11.726213 systemd-fsck[1063]: /dev/vda1: 790 files, 120725/258078 clusters Jul 15 11:37:11.729000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:11.727986 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 15 11:37:11.730936 systemd[1]: Mounting boot.mount... Jul 15 11:37:11.969787 systemd[1]: Mounted boot.mount. Jul 15 11:37:11.976236 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 15 11:37:11.982971 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 15 11:37:11.983589 systemd[1]: Finished systemd-boot-update.service. Jul 15 11:37:11.984897 systemd[1]: Finished systemd-machine-id-commit.service. Jul 15 11:37:11.984000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:11.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:11.995204 kernel: loop1: detected capacity change from 0 to 221472 Jul 15 11:37:11.998429 (sd-sysext)[1068]: Using extensions 'kubernetes'. Jul 15 11:37:11.998739 (sd-sysext)[1068]: Merged extensions into '/usr'. Jul 15 11:37:12.013353 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:37:12.014625 systemd[1]: Mounting usr-share-oem.mount... Jul 15 11:37:12.015479 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:37:12.016489 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:37:12.018254 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:37:12.020436 systemd[1]: Starting modprobe@loop.service... Jul 15 11:37:12.021333 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:37:12.021443 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:37:12.021544 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:37:12.023847 systemd[1]: Mounted usr-share-oem.mount. Jul 15 11:37:12.024896 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:37:12.025013 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:37:12.025000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.025000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.026207 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:37:12.026313 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:37:12.027000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.027000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.027546 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:37:12.027639 systemd[1]: Finished modprobe@loop.service. Jul 15 11:37:12.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.028000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.028814 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:37:12.028905 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:37:12.029877 systemd[1]: Finished systemd-sysext.service. Jul 15 11:37:12.030000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.031714 systemd[1]: Starting ensure-sysext.service... Jul 15 11:37:12.033470 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 15 11:37:12.037216 ldconfig[1054]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 15 11:37:12.037359 systemd[1]: Reloading. Jul 15 11:37:12.044797 systemd-tmpfiles[1076]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 15 11:37:12.046665 systemd-tmpfiles[1076]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 15 11:37:12.049160 systemd-tmpfiles[1076]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 15 11:37:12.097779 /usr/lib/systemd/system-generators/torcx-generator[1096]: time="2025-07-15T11:37:12Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:37:12.098305 /usr/lib/systemd/system-generators/torcx-generator[1096]: time="2025-07-15T11:37:12Z" level=info msg="torcx already run" Jul 15 11:37:12.154945 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:37:12.154961 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:37:12.172528 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:37:12.223000 audit: BPF prog-id=27 op=LOAD Jul 15 11:37:12.223000 audit: BPF prog-id=18 op=UNLOAD Jul 15 11:37:12.223000 audit: BPF prog-id=28 op=LOAD Jul 15 11:37:12.223000 audit: BPF prog-id=29 op=LOAD Jul 15 11:37:12.223000 audit: BPF prog-id=19 op=UNLOAD Jul 15 11:37:12.223000 audit: BPF prog-id=20 op=UNLOAD Jul 15 11:37:12.224000 audit: BPF prog-id=30 op=LOAD Jul 15 11:37:12.224000 audit: BPF prog-id=23 op=UNLOAD Jul 15 11:37:12.225000 audit: BPF prog-id=31 op=LOAD Jul 15 11:37:12.225000 audit: BPF prog-id=32 op=LOAD Jul 15 11:37:12.225000 audit: BPF prog-id=21 op=UNLOAD Jul 15 11:37:12.225000 audit: BPF prog-id=22 op=UNLOAD Jul 15 11:37:12.226000 audit: BPF prog-id=33 op=LOAD Jul 15 11:37:12.226000 audit: BPF prog-id=24 op=UNLOAD Jul 15 11:37:12.226000 audit: BPF prog-id=34 op=LOAD Jul 15 11:37:12.226000 audit: BPF prog-id=35 op=LOAD Jul 15 11:37:12.226000 audit: BPF prog-id=25 op=UNLOAD Jul 15 11:37:12.226000 audit: BPF prog-id=26 op=UNLOAD Jul 15 11:37:12.228833 systemd[1]: Finished ldconfig.service. Jul 15 11:37:12.229000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.230658 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 15 11:37:12.231000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.233957 systemd[1]: Starting audit-rules.service... Jul 15 11:37:12.236006 systemd[1]: Starting clean-ca-certificates.service... Jul 15 11:37:12.237929 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 15 11:37:12.239000 audit: BPF prog-id=36 op=LOAD Jul 15 11:37:12.240538 systemd[1]: Starting systemd-resolved.service... Jul 15 11:37:12.241000 audit: BPF prog-id=37 op=LOAD Jul 15 11:37:12.242594 systemd[1]: Starting systemd-timesyncd.service... Jul 15 11:37:12.248000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.246284 systemd[1]: Starting systemd-update-utmp.service... Jul 15 11:37:12.247700 systemd[1]: Finished clean-ca-certificates.service. Jul 15 11:37:12.250000 audit[1148]: SYSTEM_BOOT pid=1148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.254042 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:37:12.254509 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:37:12.255791 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:37:12.257852 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:37:12.259799 systemd[1]: Starting modprobe@loop.service... Jul 15 11:37:12.260687 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:37:12.260858 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:37:12.261025 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:37:12.261140 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:37:12.262671 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 15 11:37:12.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.264375 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:37:12.264473 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:37:12.265000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.265000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.265829 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:37:12.265937 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:37:12.266000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.266000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.267384 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:37:12.267479 systemd[1]: Finished modprobe@loop.service. Jul 15 11:37:12.268000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.268000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.268824 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:37:12.268953 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:37:12.270355 systemd[1]: Starting systemd-update-done.service... Jul 15 11:37:12.271677 systemd[1]: Finished systemd-update-utmp.service. Jul 15 11:37:12.272000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.274831 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:37:12.275021 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:37:12.276422 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:37:12.278414 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:37:12.280320 systemd[1]: Starting modprobe@loop.service... Jul 15 11:37:12.281174 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:37:12.281362 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:37:12.281493 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:37:12.281604 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:37:12.282762 systemd[1]: Finished systemd-update-done.service. Jul 15 11:37:12.283000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.284475 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:37:12.284606 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:37:12.285000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.286088 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:37:12.286207 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:37:12.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.286000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.287447 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:37:12.287567 systemd[1]: Finished modprobe@loop.service. Jul 15 11:37:12.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.288000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.288704 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:37:12.288791 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:37:12.291114 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:37:12.291313 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:37:12.292754 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:37:12.294533 systemd[1]: Starting modprobe@drm.service... Jul 15 11:37:12.295632 systemd-resolved[1144]: Positive Trust Anchors: Jul 15 11:37:12.295641 systemd-resolved[1144]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 15 11:37:12.295667 systemd-resolved[1144]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 15 11:37:12.296341 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:37:12.296000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 15 11:37:12.296000 audit[1164]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffb931ae10 a2=420 a3=0 items=0 ppid=1137 pid=1164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:12.296000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 15 11:37:12.297227 augenrules[1164]: No rules Jul 15 11:37:12.298079 systemd[1]: Starting modprobe@loop.service... Jul 15 11:37:12.298943 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:37:12.299038 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:37:12.300251 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 15 11:37:12.301310 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:37:12.301404 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:37:13.019586 systemd-timesyncd[1145]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 15 11:37:13.019626 systemd-timesyncd[1145]: Initial clock synchronization to Tue 2025-07-15 11:37:13.019529 UTC. Jul 15 11:37:13.020029 systemd[1]: Started systemd-timesyncd.service. Jul 15 11:37:13.021442 systemd[1]: Finished audit-rules.service. Jul 15 11:37:13.022479 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:37:13.022573 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:37:13.023856 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 15 11:37:13.024027 systemd[1]: Finished modprobe@drm.service. Jul 15 11:37:13.025171 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:37:13.025269 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:37:13.026056 systemd-resolved[1144]: Defaulting to hostname 'linux'. Jul 15 11:37:13.026537 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:37:13.026632 systemd[1]: Finished modprobe@loop.service. Jul 15 11:37:13.027594 systemd[1]: Started systemd-resolved.service. Jul 15 11:37:13.028873 systemd[1]: Reached target network.target. Jul 15 11:37:13.029743 systemd[1]: Reached target nss-lookup.target. Jul 15 11:37:13.030560 systemd[1]: Reached target time-set.target. Jul 15 11:37:13.031384 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:37:13.031405 systemd[1]: Reached target sysinit.target. Jul 15 11:37:13.032259 systemd[1]: Started motdgen.path. Jul 15 11:37:13.033023 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 15 11:37:13.034314 systemd[1]: Started logrotate.timer. Jul 15 11:37:13.035115 systemd[1]: Started mdadm.timer. Jul 15 11:37:13.035791 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 15 11:37:13.036646 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 15 11:37:13.036668 systemd[1]: Reached target paths.target. Jul 15 11:37:13.037413 systemd[1]: Reached target timers.target. Jul 15 11:37:13.038419 systemd[1]: Listening on dbus.socket. Jul 15 11:37:13.039937 systemd[1]: Starting docker.socket... Jul 15 11:37:13.042533 systemd[1]: Listening on sshd.socket. Jul 15 11:37:13.043363 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:37:13.043399 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:37:13.043881 systemd[1]: Finished ensure-sysext.service. Jul 15 11:37:13.044821 systemd[1]: Listening on docker.socket. Jul 15 11:37:13.046274 systemd[1]: Reached target sockets.target. Jul 15 11:37:13.047105 systemd[1]: Reached target basic.target. Jul 15 11:37:13.047880 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 15 11:37:13.047900 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 15 11:37:13.048656 systemd[1]: Starting containerd.service... Jul 15 11:37:13.050167 systemd[1]: Starting dbus.service... Jul 15 11:37:13.051606 systemd[1]: Starting enable-oem-cloudinit.service... Jul 15 11:37:13.053346 systemd[1]: Starting extend-filesystems.service... Jul 15 11:37:13.056696 jq[1179]: false Jul 15 11:37:13.054276 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 15 11:37:13.055185 systemd[1]: Starting motdgen.service... Jul 15 11:37:13.056849 systemd[1]: Starting prepare-helm.service... Jul 15 11:37:13.058633 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 15 11:37:13.060378 systemd[1]: Starting sshd-keygen.service... Jul 15 11:37:13.063811 systemd[1]: Starting systemd-logind.service... Jul 15 11:37:13.064641 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:37:13.064689 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 15 11:37:13.064996 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 15 11:37:13.065564 systemd[1]: Starting update-engine.service... Jul 15 11:37:13.067613 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 15 11:37:13.067801 dbus-daemon[1178]: [system] SELinux support is enabled Jul 15 11:37:13.069059 systemd[1]: Started dbus.service. Jul 15 11:37:13.071583 jq[1195]: true Jul 15 11:37:13.072631 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 15 11:37:13.072767 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 15 11:37:13.073537 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 15 11:37:13.073670 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 15 11:37:13.074352 extend-filesystems[1180]: Found loop1 Jul 15 11:37:13.076302 extend-filesystems[1180]: Found sr0 Jul 15 11:37:13.076302 extend-filesystems[1180]: Found vda Jul 15 11:37:13.076302 extend-filesystems[1180]: Found vda1 Jul 15 11:37:13.076302 extend-filesystems[1180]: Found vda2 Jul 15 11:37:13.076302 extend-filesystems[1180]: Found vda3 Jul 15 11:37:13.076302 extend-filesystems[1180]: Found usr Jul 15 11:37:13.076302 extend-filesystems[1180]: Found vda4 Jul 15 11:37:13.076302 extend-filesystems[1180]: Found vda6 Jul 15 11:37:13.076302 extend-filesystems[1180]: Found vda7 Jul 15 11:37:13.084813 extend-filesystems[1180]: Found vda9 Jul 15 11:37:13.084813 extend-filesystems[1180]: Checking size of /dev/vda9 Jul 15 11:37:13.080583 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 15 11:37:13.092172 tar[1200]: linux-amd64/helm Jul 15 11:37:13.080603 systemd[1]: Reached target system-config.target. Jul 15 11:37:13.083193 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 15 11:37:13.083217 systemd[1]: Reached target user-config.target. Jul 15 11:37:13.086003 systemd[1]: motdgen.service: Deactivated successfully. Jul 15 11:37:13.092999 jq[1203]: true Jul 15 11:37:13.086131 systemd[1]: Finished motdgen.service. Jul 15 11:37:13.101538 update_engine[1192]: I0715 11:37:13.101397 1192 main.cc:92] Flatcar Update Engine starting Jul 15 11:37:13.102834 systemd[1]: Started update-engine.service. Jul 15 11:37:13.105138 systemd[1]: Started locksmithd.service. Jul 15 11:37:13.105953 extend-filesystems[1180]: Resized partition /dev/vda9 Jul 15 11:37:13.110396 extend-filesystems[1222]: resize2fs 1.46.5 (30-Dec-2021) Jul 15 11:37:13.111661 update_engine[1192]: I0715 11:37:13.107707 1192 update_check_scheduler.cc:74] Next update check in 9m32s Jul 15 11:37:13.117939 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 15 11:37:13.122800 env[1204]: time="2025-07-15T11:37:13.122762782Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 15 11:37:13.133520 systemd-logind[1189]: Watching system buttons on /dev/input/event1 (Power Button) Jul 15 11:37:13.133545 systemd-logind[1189]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 15 11:37:13.133844 systemd-logind[1189]: New seat seat0. Jul 15 11:37:13.135684 systemd[1]: Started systemd-logind.service. Jul 15 11:37:13.143991 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 15 11:37:13.149192 env[1204]: time="2025-07-15T11:37:13.149126063Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 15 11:37:13.166889 extend-filesystems[1222]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 15 11:37:13.166889 extend-filesystems[1222]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 15 11:37:13.166889 extend-filesystems[1222]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 15 11:37:13.171096 env[1204]: time="2025-07-15T11:37:13.166830589Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:37:13.167405 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 15 11:37:13.171172 extend-filesystems[1180]: Resized filesystem in /dev/vda9 Jul 15 11:37:13.167557 systemd[1]: Finished extend-filesystems.service. Jul 15 11:37:13.172402 env[1204]: time="2025-07-15T11:37:13.172361500Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.188-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:37:13.172442 env[1204]: time="2025-07-15T11:37:13.172400603Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:37:13.172669 env[1204]: time="2025-07-15T11:37:13.172648818Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:37:13.172701 env[1204]: time="2025-07-15T11:37:13.172667594Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 15 11:37:13.172701 env[1204]: time="2025-07-15T11:37:13.172693783Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 15 11:37:13.172742 env[1204]: time="2025-07-15T11:37:13.172702980Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 15 11:37:13.172792 env[1204]: time="2025-07-15T11:37:13.172776638Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:37:13.173087 env[1204]: time="2025-07-15T11:37:13.173055982Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:37:13.173211 env[1204]: time="2025-07-15T11:37:13.173193830Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:37:13.173235 env[1204]: time="2025-07-15T11:37:13.173212074Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 15 11:37:13.173286 env[1204]: time="2025-07-15T11:37:13.173270995Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 15 11:37:13.173316 env[1204]: time="2025-07-15T11:37:13.173285863Z" level=info msg="metadata content store policy set" policy=shared Jul 15 11:37:13.177066 bash[1230]: Updated "/home/core/.ssh/authorized_keys" Jul 15 11:37:13.177601 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 15 11:37:13.179627 locksmithd[1218]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 15 11:37:13.181682 env[1204]: time="2025-07-15T11:37:13.179826827Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 15 11:37:13.181682 env[1204]: time="2025-07-15T11:37:13.179852074Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 15 11:37:13.181682 env[1204]: time="2025-07-15T11:37:13.179864237Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 15 11:37:13.181682 env[1204]: time="2025-07-15T11:37:13.179897089Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 15 11:37:13.181682 env[1204]: time="2025-07-15T11:37:13.179910604Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 15 11:37:13.181682 env[1204]: time="2025-07-15T11:37:13.179965948Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 15 11:37:13.181682 env[1204]: time="2025-07-15T11:37:13.179980535Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 15 11:37:13.181682 env[1204]: time="2025-07-15T11:37:13.179996225Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 15 11:37:13.181682 env[1204]: time="2025-07-15T11:37:13.180009740Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 15 11:37:13.181682 env[1204]: time="2025-07-15T11:37:13.180023095Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 15 11:37:13.181682 env[1204]: time="2025-07-15T11:37:13.180035478Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 15 11:37:13.181682 env[1204]: time="2025-07-15T11:37:13.180047862Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 15 11:37:13.181682 env[1204]: time="2025-07-15T11:37:13.180121359Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 15 11:37:13.181682 env[1204]: time="2025-07-15T11:37:13.180181592Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 15 11:37:13.181989 env[1204]: time="2025-07-15T11:37:13.180475022Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 15 11:37:13.181989 env[1204]: time="2025-07-15T11:37:13.180508966Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 15 11:37:13.181989 env[1204]: time="2025-07-15T11:37:13.180523584Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 15 11:37:13.181989 env[1204]: time="2025-07-15T11:37:13.180572696Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 15 11:37:13.181989 env[1204]: time="2025-07-15T11:37:13.180584137Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 15 11:37:13.181989 env[1204]: time="2025-07-15T11:37:13.180595869Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 15 11:37:13.181989 env[1204]: time="2025-07-15T11:37:13.180661332Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 15 11:37:13.181989 env[1204]: time="2025-07-15T11:37:13.180675068Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 15 11:37:13.181989 env[1204]: time="2025-07-15T11:37:13.180688272Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 15 11:37:13.181989 env[1204]: time="2025-07-15T11:37:13.180700095Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 15 11:37:13.181989 env[1204]: time="2025-07-15T11:37:13.180711776Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 15 11:37:13.181989 env[1204]: time="2025-07-15T11:37:13.180724520Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 15 11:37:13.181989 env[1204]: time="2025-07-15T11:37:13.180818106Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 15 11:37:13.181989 env[1204]: time="2025-07-15T11:37:13.180830709Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 15 11:37:13.181989 env[1204]: time="2025-07-15T11:37:13.180841069Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 15 11:37:13.182699 env[1204]: time="2025-07-15T11:37:13.180851869Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 15 11:37:13.182699 env[1204]: time="2025-07-15T11:37:13.180863681Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 15 11:37:13.182699 env[1204]: time="2025-07-15T11:37:13.180873620Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 15 11:37:13.182699 env[1204]: time="2025-07-15T11:37:13.180889640Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 15 11:37:13.182699 env[1204]: time="2025-07-15T11:37:13.180920418Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 15 11:37:13.182794 env[1204]: time="2025-07-15T11:37:13.181103060Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 15 11:37:13.182794 env[1204]: time="2025-07-15T11:37:13.181148996Z" level=info msg="Connect containerd service" Jul 15 11:37:13.182794 env[1204]: time="2025-07-15T11:37:13.181175446Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 15 11:37:13.182794 env[1204]: time="2025-07-15T11:37:13.181654364Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 15 11:37:13.182794 env[1204]: time="2025-07-15T11:37:13.182176292Z" level=info msg="Start subscribing containerd event" Jul 15 11:37:13.182794 env[1204]: time="2025-07-15T11:37:13.182215235Z" level=info msg="Start recovering state" Jul 15 11:37:13.182794 env[1204]: time="2025-07-15T11:37:13.182258406Z" level=info msg="Start event monitor" Jul 15 11:37:13.182794 env[1204]: time="2025-07-15T11:37:13.182267002Z" level=info msg="Start snapshots syncer" Jul 15 11:37:13.182794 env[1204]: time="2025-07-15T11:37:13.182275569Z" level=info msg="Start cni network conf syncer for default" Jul 15 11:37:13.182794 env[1204]: time="2025-07-15T11:37:13.182282391Z" level=info msg="Start streaming server" Jul 15 11:37:13.183488 env[1204]: time="2025-07-15T11:37:13.183168463Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 15 11:37:13.183575 env[1204]: time="2025-07-15T11:37:13.183544217Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 15 11:37:13.183690 env[1204]: time="2025-07-15T11:37:13.183675353Z" level=info msg="containerd successfully booted in 0.065799s" Jul 15 11:37:13.183722 systemd[1]: Started containerd.service. Jul 15 11:37:13.249073 systemd-networkd[1026]: eth0: Gained IPv6LL Jul 15 11:37:13.250776 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 15 11:37:13.252023 systemd[1]: Reached target network-online.target. Jul 15 11:37:13.254245 systemd[1]: Starting kubelet.service... Jul 15 11:37:13.491063 tar[1200]: linux-amd64/LICENSE Jul 15 11:37:13.491283 tar[1200]: linux-amd64/README.md Jul 15 11:37:13.495198 sshd_keygen[1194]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 15 11:37:13.495380 systemd[1]: Finished prepare-helm.service. Jul 15 11:37:13.512465 systemd[1]: Finished sshd-keygen.service. Jul 15 11:37:13.514468 systemd[1]: Starting issuegen.service... Jul 15 11:37:13.519034 systemd[1]: issuegen.service: Deactivated successfully. Jul 15 11:37:13.519150 systemd[1]: Finished issuegen.service. Jul 15 11:37:13.521031 systemd[1]: Starting systemd-user-sessions.service... Jul 15 11:37:13.525896 systemd[1]: Finished systemd-user-sessions.service. Jul 15 11:37:13.527951 systemd[1]: Started getty@tty1.service. Jul 15 11:37:13.529679 systemd[1]: Started serial-getty@ttyS0.service. Jul 15 11:37:13.530726 systemd[1]: Reached target getty.target. Jul 15 11:37:13.884917 systemd[1]: Started kubelet.service. Jul 15 11:37:13.886083 systemd[1]: Reached target multi-user.target. Jul 15 11:37:13.887885 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 15 11:37:13.894348 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 15 11:37:13.894474 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 15 11:37:13.895574 systemd[1]: Startup finished in 591ms (kernel) + 4.634s (initrd) + 4.831s (userspace) = 10.057s. Jul 15 11:37:14.281622 kubelet[1261]: E0715 11:37:14.281507 1261 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:37:14.283483 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:37:14.283598 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:37:17.403790 systemd[1]: Created slice system-sshd.slice. Jul 15 11:37:17.404589 systemd[1]: Started sshd@0-10.0.0.140:22-10.0.0.1:59326.service. Jul 15 11:37:17.440959 sshd[1270]: Accepted publickey for core from 10.0.0.1 port 59326 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:37:17.442194 sshd[1270]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:37:17.450013 systemd-logind[1189]: New session 1 of user core. Jul 15 11:37:17.450758 systemd[1]: Created slice user-500.slice. Jul 15 11:37:17.451611 systemd[1]: Starting user-runtime-dir@500.service... Jul 15 11:37:17.458248 systemd[1]: Finished user-runtime-dir@500.service. Jul 15 11:37:17.459252 systemd[1]: Starting user@500.service... Jul 15 11:37:17.461788 (systemd)[1273]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:37:17.526906 systemd[1273]: Queued start job for default target default.target. Jul 15 11:37:17.527311 systemd[1273]: Reached target paths.target. Jul 15 11:37:17.527331 systemd[1273]: Reached target sockets.target. Jul 15 11:37:17.527343 systemd[1273]: Reached target timers.target. Jul 15 11:37:17.527354 systemd[1273]: Reached target basic.target. Jul 15 11:37:17.527392 systemd[1273]: Reached target default.target. Jul 15 11:37:17.527414 systemd[1273]: Startup finished in 60ms. Jul 15 11:37:17.527445 systemd[1]: Started user@500.service. Jul 15 11:37:17.528194 systemd[1]: Started session-1.scope. Jul 15 11:37:17.577702 systemd[1]: Started sshd@1-10.0.0.140:22-10.0.0.1:59330.service. Jul 15 11:37:17.612203 sshd[1282]: Accepted publickey for core from 10.0.0.1 port 59330 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:37:17.613554 sshd[1282]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:37:17.617239 systemd-logind[1189]: New session 2 of user core. Jul 15 11:37:17.618182 systemd[1]: Started session-2.scope. Jul 15 11:37:17.671419 sshd[1282]: pam_unix(sshd:session): session closed for user core Jul 15 11:37:17.674063 systemd[1]: sshd@1-10.0.0.140:22-10.0.0.1:59330.service: Deactivated successfully. Jul 15 11:37:17.674562 systemd[1]: session-2.scope: Deactivated successfully. Jul 15 11:37:17.675012 systemd-logind[1189]: Session 2 logged out. Waiting for processes to exit. Jul 15 11:37:17.675964 systemd[1]: Started sshd@2-10.0.0.140:22-10.0.0.1:59338.service. Jul 15 11:37:17.676461 systemd-logind[1189]: Removed session 2. Jul 15 11:37:17.710084 sshd[1288]: Accepted publickey for core from 10.0.0.1 port 59338 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:37:17.711234 sshd[1288]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:37:17.714433 systemd-logind[1189]: New session 3 of user core. Jul 15 11:37:17.715184 systemd[1]: Started session-3.scope. Jul 15 11:37:17.763561 sshd[1288]: pam_unix(sshd:session): session closed for user core Jul 15 11:37:17.766273 systemd[1]: sshd@2-10.0.0.140:22-10.0.0.1:59338.service: Deactivated successfully. Jul 15 11:37:17.766764 systemd[1]: session-3.scope: Deactivated successfully. Jul 15 11:37:17.767249 systemd-logind[1189]: Session 3 logged out. Waiting for processes to exit. Jul 15 11:37:17.768213 systemd[1]: Started sshd@3-10.0.0.140:22-10.0.0.1:59340.service. Jul 15 11:37:17.768947 systemd-logind[1189]: Removed session 3. Jul 15 11:37:17.801946 sshd[1294]: Accepted publickey for core from 10.0.0.1 port 59340 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:37:17.803002 sshd[1294]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:37:17.806258 systemd-logind[1189]: New session 4 of user core. Jul 15 11:37:17.807108 systemd[1]: Started session-4.scope. Jul 15 11:37:17.859108 sshd[1294]: pam_unix(sshd:session): session closed for user core Jul 15 11:37:17.861626 systemd[1]: sshd@3-10.0.0.140:22-10.0.0.1:59340.service: Deactivated successfully. Jul 15 11:37:17.862093 systemd[1]: session-4.scope: Deactivated successfully. Jul 15 11:37:17.862556 systemd-logind[1189]: Session 4 logged out. Waiting for processes to exit. Jul 15 11:37:17.863467 systemd[1]: Started sshd@4-10.0.0.140:22-10.0.0.1:59354.service. Jul 15 11:37:17.864048 systemd-logind[1189]: Removed session 4. Jul 15 11:37:17.897246 sshd[1300]: Accepted publickey for core from 10.0.0.1 port 59354 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:37:17.898127 sshd[1300]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:37:17.900860 systemd-logind[1189]: New session 5 of user core. Jul 15 11:37:17.901549 systemd[1]: Started session-5.scope. Jul 15 11:37:17.954772 sudo[1303]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 15 11:37:17.954968 sudo[1303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:37:17.964132 dbus-daemon[1178]: \xd0M\x8d\x96|U: received setenforce notice (enforcing=1090583872) Jul 15 11:37:17.966372 sudo[1303]: pam_unix(sudo:session): session closed for user root Jul 15 11:37:17.967917 sshd[1300]: pam_unix(sshd:session): session closed for user core Jul 15 11:37:17.970717 systemd[1]: sshd@4-10.0.0.140:22-10.0.0.1:59354.service: Deactivated successfully. Jul 15 11:37:17.971215 systemd[1]: session-5.scope: Deactivated successfully. Jul 15 11:37:17.971786 systemd-logind[1189]: Session 5 logged out. Waiting for processes to exit. Jul 15 11:37:17.972782 systemd[1]: Started sshd@5-10.0.0.140:22-10.0.0.1:59358.service. Jul 15 11:37:17.973562 systemd-logind[1189]: Removed session 5. Jul 15 11:37:18.006402 sshd[1307]: Accepted publickey for core from 10.0.0.1 port 59358 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:37:18.007534 sshd[1307]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:37:18.010798 systemd-logind[1189]: New session 6 of user core. Jul 15 11:37:18.011713 systemd[1]: Started session-6.scope. Jul 15 11:37:18.063696 sudo[1311]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 15 11:37:18.063889 sudo[1311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:37:18.066272 sudo[1311]: pam_unix(sudo:session): session closed for user root Jul 15 11:37:18.070606 sudo[1310]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 15 11:37:18.070795 sudo[1310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:37:18.078579 systemd[1]: Stopping audit-rules.service... Jul 15 11:37:18.078000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 15 11:37:18.079909 auditctl[1314]: No rules Jul 15 11:37:18.080188 systemd[1]: audit-rules.service: Deactivated successfully. Jul 15 11:37:18.080321 systemd[1]: Stopped audit-rules.service. Jul 15 11:37:18.080611 kernel: kauditd_printk_skb: 257 callbacks suppressed Jul 15 11:37:18.080657 kernel: audit: type=1305 audit(1752579438.078:201): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 15 11:37:18.081499 systemd[1]: Starting audit-rules.service... Jul 15 11:37:18.078000 audit[1314]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc6e289920 a2=420 a3=0 items=0 ppid=1 pid=1314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:18.087016 kernel: audit: type=1300 audit(1752579438.078:201): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc6e289920 a2=420 a3=0 items=0 ppid=1 pid=1314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:18.087057 kernel: audit: type=1327 audit(1752579438.078:201): proctitle=2F7362696E2F617564697463746C002D44 Jul 15 11:37:18.078000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 15 11:37:18.087823 kernel: audit: type=1131 audit(1752579438.079:202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:18.079000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:18.096149 augenrules[1331]: No rules Jul 15 11:37:18.096711 systemd[1]: Finished audit-rules.service. Jul 15 11:37:18.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:18.097792 sudo[1310]: pam_unix(sudo:session): session closed for user root Jul 15 11:37:18.096000 audit[1310]: USER_END pid=1310 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:37:18.099151 sshd[1307]: pam_unix(sshd:session): session closed for user core Jul 15 11:37:18.101788 systemd[1]: sshd@5-10.0.0.140:22-10.0.0.1:59358.service: Deactivated successfully. Jul 15 11:37:18.102385 systemd[1]: session-6.scope: Deactivated successfully. Jul 15 11:37:18.102944 systemd-logind[1189]: Session 6 logged out. Waiting for processes to exit. Jul 15 11:37:18.103390 kernel: audit: type=1130 audit(1752579438.095:203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:18.103424 kernel: audit: type=1106 audit(1752579438.096:204): pid=1310 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:37:18.103439 kernel: audit: type=1104 audit(1752579438.096:205): pid=1310 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:37:18.096000 audit[1310]: CRED_DISP pid=1310 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:37:18.103949 systemd[1]: Started sshd@6-10.0.0.140:22-10.0.0.1:59362.service. Jul 15 11:37:18.105161 systemd-logind[1189]: Removed session 6. Jul 15 11:37:18.106411 kernel: audit: type=1106 audit(1752579438.099:206): pid=1307 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:37:18.099000 audit[1307]: USER_END pid=1307 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:37:18.110390 kernel: audit: type=1104 audit(1752579438.099:207): pid=1307 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:37:18.099000 audit[1307]: CRED_DISP pid=1307 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:37:18.113672 kernel: audit: type=1131 audit(1752579438.101:208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.140:22-10.0.0.1:59358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:18.101000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.140:22-10.0.0.1:59358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:18.103000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.140:22-10.0.0.1:59362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:18.142000 audit[1337]: USER_ACCT pid=1337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:37:18.143099 sshd[1337]: Accepted publickey for core from 10.0.0.1 port 59362 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:37:18.142000 audit[1337]: CRED_ACQ pid=1337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:37:18.142000 audit[1337]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff768f91c0 a2=3 a3=0 items=0 ppid=1 pid=1337 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:18.142000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:37:18.144097 sshd[1337]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:37:18.147330 systemd-logind[1189]: New session 7 of user core. Jul 15 11:37:18.148020 systemd[1]: Started session-7.scope. Jul 15 11:37:18.151000 audit[1337]: USER_START pid=1337 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:37:18.152000 audit[1339]: CRED_ACQ pid=1339 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:37:18.199000 audit[1340]: USER_ACCT pid=1340 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:37:18.200210 sudo[1340]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 15 11:37:18.199000 audit[1340]: CRED_REFR pid=1340 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:37:18.200464 sudo[1340]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:37:18.201000 audit[1340]: USER_START pid=1340 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:37:18.221650 systemd[1]: Starting docker.service... Jul 15 11:37:18.253360 env[1352]: time="2025-07-15T11:37:18.253304847Z" level=info msg="Starting up" Jul 15 11:37:18.255817 env[1352]: time="2025-07-15T11:37:18.255776151Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 15 11:37:18.255817 env[1352]: time="2025-07-15T11:37:18.255813952Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 15 11:37:18.255881 env[1352]: time="2025-07-15T11:37:18.255840732Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 15 11:37:18.255881 env[1352]: time="2025-07-15T11:37:18.255854618Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 15 11:37:18.257420 env[1352]: time="2025-07-15T11:37:18.257386911Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 15 11:37:18.257420 env[1352]: time="2025-07-15T11:37:18.257408101Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 15 11:37:18.257482 env[1352]: time="2025-07-15T11:37:18.257425022Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 15 11:37:18.257482 env[1352]: time="2025-07-15T11:37:18.257434811Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 15 11:37:18.262081 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport742012132-merged.mount: Deactivated successfully. Jul 15 11:37:18.830221 env[1352]: time="2025-07-15T11:37:18.830169348Z" level=info msg="Loading containers: start." Jul 15 11:37:18.876000 audit[1386]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1386 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:18.876000 audit[1386]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fff3b4170c0 a2=0 a3=7fff3b4170ac items=0 ppid=1352 pid=1386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:18.876000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 15 11:37:18.877000 audit[1388]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1388 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:18.877000 audit[1388]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe497f2e20 a2=0 a3=7ffe497f2e0c items=0 ppid=1352 pid=1388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:18.877000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 15 11:37:18.878000 audit[1390]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1390 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:18.878000 audit[1390]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc2f8f6540 a2=0 a3=7ffc2f8f652c items=0 ppid=1352 pid=1390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:18.878000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 15 11:37:18.880000 audit[1392]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1392 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:18.880000 audit[1392]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd22a668d0 a2=0 a3=7ffd22a668bc items=0 ppid=1352 pid=1392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:18.880000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 15 11:37:18.881000 audit[1394]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1394 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:18.881000 audit[1394]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc152347f0 a2=0 a3=7ffc152347dc items=0 ppid=1352 pid=1394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:18.881000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 15 11:37:18.902000 audit[1399]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1399 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:18.902000 audit[1399]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff53f601d0 a2=0 a3=7fff53f601bc items=0 ppid=1352 pid=1399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:18.902000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 15 11:37:18.942000 audit[1401]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1401 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:18.942000 audit[1401]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe70b46450 a2=0 a3=7ffe70b4643c items=0 ppid=1352 pid=1401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:18.942000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 15 11:37:18.943000 audit[1403]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1403 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:18.943000 audit[1403]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffe61512400 a2=0 a3=7ffe615123ec items=0 ppid=1352 pid=1403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:18.943000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 15 11:37:18.945000 audit[1405]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1405 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:18.945000 audit[1405]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fff320b1b40 a2=0 a3=7fff320b1b2c items=0 ppid=1352 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:18.945000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:37:18.955000 audit[1409]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1409 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:18.955000 audit[1409]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fffaf01dce0 a2=0 a3=7fffaf01dccc items=0 ppid=1352 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:18.955000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:37:18.959000 audit[1410]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1410 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:18.959000 audit[1410]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe89f94490 a2=0 a3=7ffe89f9447c items=0 ppid=1352 pid=1410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:18.959000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:37:18.968952 kernel: Initializing XFRM netlink socket Jul 15 11:37:18.994428 env[1352]: time="2025-07-15T11:37:18.994377608Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 15 11:37:19.007000 audit[1418]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:19.007000 audit[1418]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffcb67a86d0 a2=0 a3=7ffcb67a86bc items=0 ppid=1352 pid=1418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:19.007000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 15 11:37:19.017000 audit[1421]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1421 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:19.017000 audit[1421]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7fff9db14b90 a2=0 a3=7fff9db14b7c items=0 ppid=1352 pid=1421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:19.017000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 15 11:37:19.019000 audit[1424]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1424 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:19.019000 audit[1424]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fffa1ae39a0 a2=0 a3=7fffa1ae398c items=0 ppid=1352 pid=1424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:19.019000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 15 11:37:19.021000 audit[1426]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1426 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:19.021000 audit[1426]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fff933c5d40 a2=0 a3=7fff933c5d2c items=0 ppid=1352 pid=1426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:19.021000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 15 11:37:19.022000 audit[1428]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1428 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:19.022000 audit[1428]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffeb83e2660 a2=0 a3=7ffeb83e264c items=0 ppid=1352 pid=1428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:19.022000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 15 11:37:19.024000 audit[1430]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1430 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:19.024000 audit[1430]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7fffc2acb4c0 a2=0 a3=7fffc2acb4ac items=0 ppid=1352 pid=1430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:19.024000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 15 11:37:19.025000 audit[1432]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1432 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:19.025000 audit[1432]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7fff766fef60 a2=0 a3=7fff766fef4c items=0 ppid=1352 pid=1432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:19.025000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 15 11:37:19.031000 audit[1435]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1435 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:19.031000 audit[1435]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffff9122c30 a2=0 a3=7ffff9122c1c items=0 ppid=1352 pid=1435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:19.031000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 15 11:37:19.033000 audit[1437]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1437 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:19.033000 audit[1437]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffc46678150 a2=0 a3=7ffc4667813c items=0 ppid=1352 pid=1437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:19.033000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 15 11:37:19.034000 audit[1439]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1439 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:19.034000 audit[1439]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffc57794530 a2=0 a3=7ffc5779451c items=0 ppid=1352 pid=1439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:19.034000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 15 11:37:19.036000 audit[1441]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:19.036000 audit[1441]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc9101c940 a2=0 a3=7ffc9101c92c items=0 ppid=1352 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:19.036000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 15 11:37:19.037420 systemd-networkd[1026]: docker0: Link UP Jul 15 11:37:19.044000 audit[1445]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:19.044000 audit[1445]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe1c70f280 a2=0 a3=7ffe1c70f26c items=0 ppid=1352 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:19.044000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:37:19.052000 audit[1446]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1446 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:19.052000 audit[1446]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffcb0927430 a2=0 a3=7ffcb092741c items=0 ppid=1352 pid=1446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:19.052000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:37:19.054037 env[1352]: time="2025-07-15T11:37:19.053999329Z" level=info msg="Loading containers: done." Jul 15 11:37:19.066587 env[1352]: time="2025-07-15T11:37:19.066539111Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 15 11:37:19.066727 env[1352]: time="2025-07-15T11:37:19.066697819Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 15 11:37:19.066815 env[1352]: time="2025-07-15T11:37:19.066795271Z" level=info msg="Daemon has completed initialization" Jul 15 11:37:19.081826 systemd[1]: Started docker.service. Jul 15 11:37:19.081000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:19.087538 env[1352]: time="2025-07-15T11:37:19.087491737Z" level=info msg="API listen on /run/docker.sock" Jul 15 11:37:19.722183 env[1204]: time="2025-07-15T11:37:19.722142618Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.10\"" Jul 15 11:37:20.260869 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3709239863.mount: Deactivated successfully. Jul 15 11:37:21.603443 env[1204]: time="2025-07-15T11:37:21.603392991Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:21.605681 env[1204]: time="2025-07-15T11:37:21.605655654Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:74c5154ea84d9a53c406e6c00e53cf66145cce821fd80e3c74e2e1bf312f3977,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:21.607792 env[1204]: time="2025-07-15T11:37:21.607742637Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:21.609525 env[1204]: time="2025-07-15T11:37:21.609499020Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:083d7d64af31cd090f870eb49fb815e6bb42c175fc602ee9dae2f28f082bd4dc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:21.610347 env[1204]: time="2025-07-15T11:37:21.610299471Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.10\" returns image reference \"sha256:74c5154ea84d9a53c406e6c00e53cf66145cce821fd80e3c74e2e1bf312f3977\"" Jul 15 11:37:21.610922 env[1204]: time="2025-07-15T11:37:21.610899005Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.10\"" Jul 15 11:37:23.258532 env[1204]: time="2025-07-15T11:37:23.258478857Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:23.260103 env[1204]: time="2025-07-15T11:37:23.260065201Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c285c4e62c91c434e9928bee7063b361509f43f43faa31641b626d6eff97616d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:23.261755 env[1204]: time="2025-07-15T11:37:23.261733940Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:23.263267 env[1204]: time="2025-07-15T11:37:23.263222471Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:3c67387d023c6114879f1e817669fd641797d30f117230682faf3930ecaaf0fe,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:23.263816 env[1204]: time="2025-07-15T11:37:23.263790847Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.10\" returns image reference \"sha256:c285c4e62c91c434e9928bee7063b361509f43f43faa31641b626d6eff97616d\"" Jul 15 11:37:23.264300 env[1204]: time="2025-07-15T11:37:23.264276838Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.10\"" Jul 15 11:37:24.534348 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 15 11:37:24.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:24.534547 systemd[1]: Stopped kubelet.service. Jul 15 11:37:24.535361 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 15 11:37:24.535413 kernel: audit: type=1130 audit(1752579444.533:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:24.535981 systemd[1]: Starting kubelet.service... Jul 15 11:37:24.533000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:24.541252 kernel: audit: type=1131 audit(1752579444.533:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:24.619672 systemd[1]: Started kubelet.service. Jul 15 11:37:24.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:24.622955 kernel: audit: type=1130 audit(1752579444.618:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:24.858775 kubelet[1487]: E0715 11:37:24.858662 1487 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:37:24.861566 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:37:24.861676 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:37:24.860000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:37:24.864950 kernel: audit: type=1131 audit(1752579444.860:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:37:25.500972 env[1204]: time="2025-07-15T11:37:25.500909684Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:25.502736 env[1204]: time="2025-07-15T11:37:25.502682108Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:61daeb7d112d9547792027cb16242b1d131f357f511545477381457fff5a69e2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:25.504306 env[1204]: time="2025-07-15T11:37:25.504272960Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:25.505842 env[1204]: time="2025-07-15T11:37:25.505812337Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:284dc2a5cf6afc9b76e39ad4b79c680c23d289488517643b28784a06d0141272,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:25.506456 env[1204]: time="2025-07-15T11:37:25.506429424Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.10\" returns image reference \"sha256:61daeb7d112d9547792027cb16242b1d131f357f511545477381457fff5a69e2\"" Jul 15 11:37:25.506889 env[1204]: time="2025-07-15T11:37:25.506864229Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.10\"" Jul 15 11:37:26.442142 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3943988172.mount: Deactivated successfully. Jul 15 11:37:27.026620 env[1204]: time="2025-07-15T11:37:27.026552755Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:27.028500 env[1204]: time="2025-07-15T11:37:27.028453979Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3ed600862d3e69931e0f9f4dbf5c2b46343af40aa079772434f13de771bdc30c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:27.029764 env[1204]: time="2025-07-15T11:37:27.029734009Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:27.031027 env[1204]: time="2025-07-15T11:37:27.030999723Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:bcbb293812bdf587b28ea98369a8c347ca84884160046296761acdf12b27029d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:27.031425 env[1204]: time="2025-07-15T11:37:27.031396477Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.10\" returns image reference \"sha256:3ed600862d3e69931e0f9f4dbf5c2b46343af40aa079772434f13de771bdc30c\"" Jul 15 11:37:27.031964 env[1204]: time="2025-07-15T11:37:27.031908847Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jul 15 11:37:27.511577 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount80790671.mount: Deactivated successfully. Jul 15 11:37:29.546381 env[1204]: time="2025-07-15T11:37:29.546321059Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:29.548160 env[1204]: time="2025-07-15T11:37:29.548107188Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:29.549760 env[1204]: time="2025-07-15T11:37:29.549731664Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:29.551465 env[1204]: time="2025-07-15T11:37:29.551404791Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:29.552044 env[1204]: time="2025-07-15T11:37:29.552013152Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\"" Jul 15 11:37:29.552499 env[1204]: time="2025-07-15T11:37:29.552469348Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 15 11:37:30.054917 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3289190671.mount: Deactivated successfully. Jul 15 11:37:30.060202 env[1204]: time="2025-07-15T11:37:30.060154457Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:30.062132 env[1204]: time="2025-07-15T11:37:30.062095436Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:30.063684 env[1204]: time="2025-07-15T11:37:30.063643609Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:30.064887 env[1204]: time="2025-07-15T11:37:30.064861893Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:30.065321 env[1204]: time="2025-07-15T11:37:30.065281660Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Jul 15 11:37:30.065856 env[1204]: time="2025-07-15T11:37:30.065812356Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\"" Jul 15 11:37:30.534226 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount152247728.mount: Deactivated successfully. Jul 15 11:37:33.059005 env[1204]: time="2025-07-15T11:37:33.058946892Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:33.060685 env[1204]: time="2025-07-15T11:37:33.060634857Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:33.062435 env[1204]: time="2025-07-15T11:37:33.062405196Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:33.063821 env[1204]: time="2025-07-15T11:37:33.063799451Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:a6dc63e6e8cfa0307d7851762fa6b629afb18f28d8aa3fab5a6e91b4af60026a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:33.064573 env[1204]: time="2025-07-15T11:37:33.064536242Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\" returns image reference \"sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4\"" Jul 15 11:37:35.112420 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 15 11:37:35.112621 systemd[1]: Stopped kubelet.service. Jul 15 11:37:35.111000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:35.113842 systemd[1]: Starting kubelet.service... Jul 15 11:37:35.111000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:35.118454 kernel: audit: type=1130 audit(1752579455.111:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:35.118513 kernel: audit: type=1131 audit(1752579455.111:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:35.120710 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Jul 15 11:37:35.120764 systemd[1]: kubelet.service: Failed with result 'signal'. Jul 15 11:37:35.120917 systemd[1]: Stopped kubelet.service. Jul 15 11:37:35.120000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:37:35.122562 systemd[1]: Starting kubelet.service... Jul 15 11:37:35.124981 kernel: audit: type=1130 audit(1752579455.120:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:37:35.140756 systemd[1]: Reloading. Jul 15 11:37:35.216142 /usr/lib/systemd/system-generators/torcx-generator[1544]: time="2025-07-15T11:37:35Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:37:35.216176 /usr/lib/systemd/system-generators/torcx-generator[1544]: time="2025-07-15T11:37:35Z" level=info msg="torcx already run" Jul 15 11:37:35.646358 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:37:35.646374 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:37:35.663039 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:37:35.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.726621 kernel: audit: type=1400 audit(1752579455.720:250): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.726655 kernel: audit: type=1400 audit(1752579455.720:251): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.726683 kernel: audit: type=1400 audit(1752579455.720:252): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.732126 kernel: audit: type=1400 audit(1752579455.720:253): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.732155 kernel: audit: type=1400 audit(1752579455.720:254): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.734876 kernel: audit: type=1400 audit(1752579455.720:255): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.737626 kernel: audit: type=1400 audit(1752579455.720:256): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.725000 audit: BPF prog-id=43 op=LOAD Jul 15 11:37:35.725000 audit: BPF prog-id=27 op=UNLOAD Jul 15 11:37:35.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.728000 audit: BPF prog-id=44 op=LOAD Jul 15 11:37:35.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.733000 audit: BPF prog-id=45 op=LOAD Jul 15 11:37:35.733000 audit: BPF prog-id=28 op=UNLOAD Jul 15 11:37:35.733000 audit: BPF prog-id=29 op=UNLOAD Jul 15 11:37:35.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.739000 audit: BPF prog-id=46 op=LOAD Jul 15 11:37:35.739000 audit: BPF prog-id=38 op=UNLOAD Jul 15 11:37:35.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.739000 audit: BPF prog-id=47 op=LOAD Jul 15 11:37:35.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.739000 audit: BPF prog-id=48 op=LOAD Jul 15 11:37:35.739000 audit: BPF prog-id=39 op=UNLOAD Jul 15 11:37:35.739000 audit: BPF prog-id=40 op=UNLOAD Jul 15 11:37:35.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.740000 audit: BPF prog-id=49 op=LOAD Jul 15 11:37:35.740000 audit: BPF prog-id=41 op=UNLOAD Jul 15 11:37:35.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.741000 audit: BPF prog-id=50 op=LOAD Jul 15 11:37:35.741000 audit: BPF prog-id=36 op=UNLOAD Jul 15 11:37:35.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.742000 audit: BPF prog-id=51 op=LOAD Jul 15 11:37:35.742000 audit: BPF prog-id=30 op=UNLOAD Jul 15 11:37:35.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.743000 audit: BPF prog-id=52 op=LOAD Jul 15 11:37:35.743000 audit: BPF prog-id=37 op=UNLOAD Jul 15 11:37:35.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.743000 audit: BPF prog-id=53 op=LOAD Jul 15 11:37:35.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.743000 audit: BPF prog-id=54 op=LOAD Jul 15 11:37:35.743000 audit: BPF prog-id=31 op=UNLOAD Jul 15 11:37:35.743000 audit: BPF prog-id=32 op=UNLOAD Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit: BPF prog-id=55 op=LOAD Jul 15 11:37:35.745000 audit: BPF prog-id=33 op=UNLOAD Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit: BPF prog-id=56 op=LOAD Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:35.745000 audit: BPF prog-id=57 op=LOAD Jul 15 11:37:35.745000 audit: BPF prog-id=34 op=UNLOAD Jul 15 11:37:35.745000 audit: BPF prog-id=35 op=UNLOAD Jul 15 11:37:35.755389 systemd[1]: Started kubelet.service. Jul 15 11:37:35.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:35.756422 systemd[1]: Stopping kubelet.service... Jul 15 11:37:35.756634 systemd[1]: kubelet.service: Deactivated successfully. Jul 15 11:37:35.756773 systemd[1]: Stopped kubelet.service. Jul 15 11:37:35.755000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:35.757997 systemd[1]: Starting kubelet.service... Jul 15 11:37:35.839260 systemd[1]: Started kubelet.service. Jul 15 11:37:35.838000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:35.871499 kubelet[1592]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:37:35.871499 kubelet[1592]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 15 11:37:35.871499 kubelet[1592]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:37:35.871809 kubelet[1592]: I0715 11:37:35.871536 1592 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 15 11:37:36.331337 kubelet[1592]: I0715 11:37:36.331293 1592 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 15 11:37:36.331337 kubelet[1592]: I0715 11:37:36.331324 1592 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 15 11:37:36.331579 kubelet[1592]: I0715 11:37:36.331559 1592 server.go:934] "Client rotation is on, will bootstrap in background" Jul 15 11:37:36.350163 kubelet[1592]: E0715 11:37:36.350132 1592 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.140:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.140:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:37:36.351034 kubelet[1592]: I0715 11:37:36.351019 1592 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 15 11:37:36.356115 kubelet[1592]: E0715 11:37:36.356089 1592 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 15 11:37:36.356115 kubelet[1592]: I0715 11:37:36.356116 1592 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 15 11:37:36.360396 kubelet[1592]: I0715 11:37:36.360369 1592 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 15 11:37:36.360983 kubelet[1592]: I0715 11:37:36.360968 1592 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 15 11:37:36.361114 kubelet[1592]: I0715 11:37:36.361082 1592 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 15 11:37:36.361265 kubelet[1592]: I0715 11:37:36.361108 1592 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 15 11:37:36.361346 kubelet[1592]: I0715 11:37:36.361268 1592 topology_manager.go:138] "Creating topology manager with none policy" Jul 15 11:37:36.361346 kubelet[1592]: I0715 11:37:36.361276 1592 container_manager_linux.go:300] "Creating device plugin manager" Jul 15 11:37:36.361398 kubelet[1592]: I0715 11:37:36.361351 1592 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:37:36.368830 kubelet[1592]: I0715 11:37:36.368808 1592 kubelet.go:408] "Attempting to sync node with API server" Jul 15 11:37:36.368882 kubelet[1592]: I0715 11:37:36.368838 1592 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 15 11:37:36.368882 kubelet[1592]: I0715 11:37:36.368872 1592 kubelet.go:314] "Adding apiserver pod source" Jul 15 11:37:36.368946 kubelet[1592]: I0715 11:37:36.368885 1592 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 15 11:37:36.372760 kubelet[1592]: W0715 11:37:36.372716 1592 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.140:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.140:6443: connect: connection refused Jul 15 11:37:36.372857 kubelet[1592]: E0715 11:37:36.372771 1592 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.140:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.140:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:37:36.373759 kubelet[1592]: W0715 11:37:36.373113 1592 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.140:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.140:6443: connect: connection refused Jul 15 11:37:36.373759 kubelet[1592]: E0715 11:37:36.373165 1592 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.140:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.140:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:37:36.375791 kubelet[1592]: I0715 11:37:36.375751 1592 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 15 11:37:36.376269 kubelet[1592]: I0715 11:37:36.376253 1592 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 15 11:37:36.379538 kubelet[1592]: W0715 11:37:36.379511 1592 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 15 11:37:36.381354 kubelet[1592]: I0715 11:37:36.381319 1592 server.go:1274] "Started kubelet" Jul 15 11:37:36.381767 kubelet[1592]: I0715 11:37:36.381619 1592 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 15 11:37:36.382317 kubelet[1592]: I0715 11:37:36.382293 1592 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 15 11:37:36.382361 kubelet[1592]: I0715 11:37:36.382351 1592 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 15 11:37:36.381000 audit[1592]: AVC avc: denied { mac_admin } for pid=1592 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:36.381000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:37:36.381000 audit[1592]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a64f60 a1=c00069e1e0 a2=c000a64f30 a3=25 items=0 ppid=1 pid=1592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:36.381000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:37:36.381000 audit[1592]: AVC avc: denied { mac_admin } for pid=1592 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:36.381000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:37:36.381000 audit[1592]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00084e6e0 a1=c00069e1f8 a2=c000a64ff0 a3=25 items=0 ppid=1 pid=1592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:36.381000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:37:36.382866 kubelet[1592]: I0715 11:37:36.382534 1592 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 15 11:37:36.382866 kubelet[1592]: I0715 11:37:36.382570 1592 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 15 11:37:36.382866 kubelet[1592]: I0715 11:37:36.382646 1592 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 15 11:37:36.383203 kubelet[1592]: I0715 11:37:36.383177 1592 server.go:449] "Adding debug handlers to kubelet server" Jul 15 11:37:36.383000 audit[1605]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1605 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:36.383000 audit[1605]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffcb3a544a0 a2=0 a3=7ffcb3a5448c items=0 ppid=1592 pid=1605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:36.383000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 15 11:37:36.385123 kubelet[1592]: I0715 11:37:36.385102 1592 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 15 11:37:36.385000 audit[1606]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1606 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:36.385000 audit[1606]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffc00efa30 a2=0 a3=7fffc00efa1c items=0 ppid=1592 pid=1606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:36.385000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 15 11:37:36.386886 kubelet[1592]: I0715 11:37:36.386585 1592 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 15 11:37:36.386886 kubelet[1592]: I0715 11:37:36.386672 1592 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 15 11:37:36.386886 kubelet[1592]: I0715 11:37:36.386719 1592 reconciler.go:26] "Reconciler: start to sync state" Jul 15 11:37:36.387055 kubelet[1592]: W0715 11:37:36.387018 1592 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.140:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.140:6443: connect: connection refused Jul 15 11:37:36.387098 kubelet[1592]: E0715 11:37:36.387056 1592 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.140:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.140:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:37:36.387250 kubelet[1592]: I0715 11:37:36.387226 1592 factory.go:221] Registration of the systemd container factory successfully Jul 15 11:37:36.387320 kubelet[1592]: I0715 11:37:36.387279 1592 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 15 11:37:36.387650 kubelet[1592]: E0715 11:37:36.387617 1592 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:37:36.387880 kubelet[1592]: E0715 11:37:36.387860 1592 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 15 11:37:36.387983 kubelet[1592]: E0715 11:37:36.387954 1592 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.140:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.140:6443: connect: connection refused" interval="200ms" Jul 15 11:37:36.388233 kubelet[1592]: I0715 11:37:36.388216 1592 factory.go:221] Registration of the containerd container factory successfully Jul 15 11:37:36.387000 audit[1608]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1608 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:36.387000 audit[1608]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd2a94fa30 a2=0 a3=7ffd2a94fa1c items=0 ppid=1592 pid=1608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:36.387000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:37:36.390000 audit[1610]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1610 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:36.390000 audit[1610]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffdac99e2d0 a2=0 a3=7ffdac99e2bc items=0 ppid=1592 pid=1610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:36.390000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:37:36.392308 kubelet[1592]: E0715 11:37:36.391438 1592 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.140:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.140:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.185269bae241226a default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-15 11:37:36.381297258 +0000 UTC m=+0.538140404,LastTimestamp:2025-07-15 11:37:36.381297258 +0000 UTC m=+0.538140404,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 15 11:37:36.396000 audit[1615]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1615 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:36.396000 audit[1615]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffec91d0970 a2=0 a3=7ffec91d095c items=0 ppid=1592 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:36.396000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 15 11:37:36.397277 kubelet[1592]: I0715 11:37:36.397261 1592 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 15 11:37:36.396000 audit[1617]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1617 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:36.396000 audit[1617]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc56666310 a2=0 a3=7ffc566662fc items=0 ppid=1592 pid=1617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:36.396000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 15 11:37:36.397000 audit[1618]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1618 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:36.397000 audit[1618]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcdc0130b0 a2=0 a3=7ffcdc01309c items=0 ppid=1592 pid=1618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:36.397000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 15 11:37:36.398203 kubelet[1592]: I0715 11:37:36.398054 1592 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 15 11:37:36.398203 kubelet[1592]: I0715 11:37:36.398072 1592 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 15 11:37:36.398203 kubelet[1592]: I0715 11:37:36.398090 1592 kubelet.go:2321] "Starting kubelet main sync loop" Jul 15 11:37:36.398203 kubelet[1592]: E0715 11:37:36.398119 1592 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 15 11:37:36.397000 audit[1619]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1619 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:36.397000 audit[1619]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcbb50a910 a2=0 a3=7ffcbb50a8fc items=0 ppid=1592 pid=1619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:36.397000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 15 11:37:36.397000 audit[1620]: NETFILTER_CFG table=mangle:34 family=10 entries=1 op=nft_register_chain pid=1620 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:36.397000 audit[1620]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc3fdda5d0 a2=0 a3=7ffc3fdda5bc items=0 ppid=1592 pid=1620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:36.397000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 15 11:37:36.398000 audit[1621]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=1621 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:36.398000 audit[1621]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd98523ac0 a2=0 a3=7ffd98523aac items=0 ppid=1592 pid=1621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:36.398000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 15 11:37:36.398000 audit[1622]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1622 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:36.398000 audit[1622]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffd6c766420 a2=0 a3=7ffd6c76640c items=0 ppid=1592 pid=1622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:36.398000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 15 11:37:36.400461 kubelet[1592]: W0715 11:37:36.400427 1592 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.140:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.140:6443: connect: connection refused Jul 15 11:37:36.400508 kubelet[1592]: E0715 11:37:36.400462 1592 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.140:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.140:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:37:36.399000 audit[1623]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1623 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:36.399000 audit[1623]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd219688c0 a2=0 a3=7ffd219688ac items=0 ppid=1592 pid=1623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:36.399000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 15 11:37:36.400721 kubelet[1592]: I0715 11:37:36.400707 1592 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 15 11:37:36.400721 kubelet[1592]: I0715 11:37:36.400718 1592 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 15 11:37:36.400771 kubelet[1592]: I0715 11:37:36.400731 1592 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:37:36.488127 kubelet[1592]: E0715 11:37:36.488082 1592 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:37:36.498206 kubelet[1592]: E0715 11:37:36.498170 1592 kubelet.go:2345] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 15 11:37:36.588570 kubelet[1592]: E0715 11:37:36.588459 1592 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:37:36.589223 kubelet[1592]: E0715 11:37:36.589186 1592 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.140:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.140:6443: connect: connection refused" interval="400ms" Jul 15 11:37:36.688648 kubelet[1592]: E0715 11:37:36.688606 1592 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:37:36.698779 kubelet[1592]: E0715 11:37:36.698745 1592 kubelet.go:2345] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 15 11:37:36.789138 kubelet[1592]: E0715 11:37:36.789103 1592 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:37:36.812444 kubelet[1592]: I0715 11:37:36.812412 1592 policy_none.go:49] "None policy: Start" Jul 15 11:37:36.813050 kubelet[1592]: I0715 11:37:36.813038 1592 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 15 11:37:36.813106 kubelet[1592]: I0715 11:37:36.813055 1592 state_mem.go:35] "Initializing new in-memory state store" Jul 15 11:37:36.818707 systemd[1]: Created slice kubepods.slice. Jul 15 11:37:36.822090 systemd[1]: Created slice kubepods-burstable.slice. Jul 15 11:37:36.823991 systemd[1]: Created slice kubepods-besteffort.slice. Jul 15 11:37:36.830440 kubelet[1592]: I0715 11:37:36.830425 1592 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 15 11:37:36.829000 audit[1592]: AVC avc: denied { mac_admin } for pid=1592 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:36.829000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:37:36.829000 audit[1592]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000f9c7b0 a1=c000affed8 a2=c000f9c780 a3=25 items=0 ppid=1 pid=1592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:36.829000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:37:36.830733 kubelet[1592]: I0715 11:37:36.830710 1592 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 15 11:37:36.830819 kubelet[1592]: I0715 11:37:36.830810 1592 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 15 11:37:36.830845 kubelet[1592]: I0715 11:37:36.830819 1592 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 15 11:37:36.831178 kubelet[1592]: I0715 11:37:36.830999 1592 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 15 11:37:36.832748 kubelet[1592]: E0715 11:37:36.832730 1592 eviction_manager.go:285] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 15 11:37:36.932417 kubelet[1592]: I0715 11:37:36.932307 1592 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:37:36.932749 kubelet[1592]: E0715 11:37:36.932558 1592 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.140:6443/api/v1/nodes\": dial tcp 10.0.0.140:6443: connect: connection refused" node="localhost" Jul 15 11:37:36.990343 kubelet[1592]: E0715 11:37:36.990290 1592 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.140:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.140:6443: connect: connection refused" interval="800ms" Jul 15 11:37:37.105778 systemd[1]: Created slice kubepods-burstable-pod457eebbbfcc1bb0544c129c8d76d3ea3.slice. Jul 15 11:37:37.113366 systemd[1]: Created slice kubepods-burstable-pod3f04709fe51ae4ab5abd58e8da771b74.slice. Jul 15 11:37:37.116221 systemd[1]: Created slice kubepods-burstable-podb35b56493416c25588cb530e37ffc065.slice. Jul 15 11:37:37.134133 kubelet[1592]: I0715 11:37:37.134113 1592 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:37:37.134497 kubelet[1592]: E0715 11:37:37.134454 1592 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.140:6443/api/v1/nodes\": dial tcp 10.0.0.140:6443: connect: connection refused" node="localhost" Jul 15 11:37:37.191839 kubelet[1592]: I0715 11:37:37.191767 1592 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:37:37.191839 kubelet[1592]: I0715 11:37:37.191807 1592 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b35b56493416c25588cb530e37ffc065-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b35b56493416c25588cb530e37ffc065\") " pod="kube-system/kube-scheduler-localhost" Jul 15 11:37:37.191839 kubelet[1592]: I0715 11:37:37.191834 1592 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/457eebbbfcc1bb0544c129c8d76d3ea3-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"457eebbbfcc1bb0544c129c8d76d3ea3\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:37:37.191956 kubelet[1592]: I0715 11:37:37.191855 1592 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:37:37.191956 kubelet[1592]: I0715 11:37:37.191876 1592 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:37:37.191956 kubelet[1592]: I0715 11:37:37.191897 1592 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:37:37.191956 kubelet[1592]: I0715 11:37:37.191915 1592 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:37:37.191956 kubelet[1592]: I0715 11:37:37.191950 1592 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/457eebbbfcc1bb0544c129c8d76d3ea3-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"457eebbbfcc1bb0544c129c8d76d3ea3\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:37:37.192079 kubelet[1592]: I0715 11:37:37.191970 1592 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/457eebbbfcc1bb0544c129c8d76d3ea3-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"457eebbbfcc1bb0544c129c8d76d3ea3\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:37:37.412440 kubelet[1592]: E0715 11:37:37.412403 1592 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:37.412985 env[1204]: time="2025-07-15T11:37:37.412949325Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:457eebbbfcc1bb0544c129c8d76d3ea3,Namespace:kube-system,Attempt:0,}" Jul 15 11:37:37.415331 kubelet[1592]: E0715 11:37:37.415271 1592 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:37.415833 env[1204]: time="2025-07-15T11:37:37.415794220Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:3f04709fe51ae4ab5abd58e8da771b74,Namespace:kube-system,Attempt:0,}" Jul 15 11:37:37.418071 kubelet[1592]: E0715 11:37:37.418036 1592 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:37.418442 env[1204]: time="2025-07-15T11:37:37.418390347Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b35b56493416c25588cb530e37ffc065,Namespace:kube-system,Attempt:0,}" Jul 15 11:37:37.506424 kubelet[1592]: W0715 11:37:37.506237 1592 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.140:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.140:6443: connect: connection refused Jul 15 11:37:37.506424 kubelet[1592]: E0715 11:37:37.506315 1592 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.140:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.140:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:37:37.535677 kubelet[1592]: I0715 11:37:37.535642 1592 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:37:37.536144 kubelet[1592]: E0715 11:37:37.536089 1592 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.140:6443/api/v1/nodes\": dial tcp 10.0.0.140:6443: connect: connection refused" node="localhost" Jul 15 11:37:37.560515 kubelet[1592]: W0715 11:37:37.560451 1592 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.140:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.140:6443: connect: connection refused Jul 15 11:37:37.560562 kubelet[1592]: E0715 11:37:37.560524 1592 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.140:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.140:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:37:37.597449 kubelet[1592]: W0715 11:37:37.597406 1592 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.140:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.140:6443: connect: connection refused Jul 15 11:37:37.597536 kubelet[1592]: E0715 11:37:37.597452 1592 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.140:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.140:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:37:37.791909 kubelet[1592]: E0715 11:37:37.791774 1592 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.140:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.140:6443: connect: connection refused" interval="1.6s" Jul 15 11:37:37.875900 kubelet[1592]: W0715 11:37:37.875832 1592 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.140:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.140:6443: connect: connection refused Jul 15 11:37:37.876019 kubelet[1592]: E0715 11:37:37.875905 1592 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.140:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.140:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:37:38.337808 kubelet[1592]: I0715 11:37:38.337786 1592 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:37:38.338139 kubelet[1592]: E0715 11:37:38.338104 1592 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.140:6443/api/v1/nodes\": dial tcp 10.0.0.140:6443: connect: connection refused" node="localhost" Jul 15 11:37:38.471362 kubelet[1592]: E0715 11:37:38.471322 1592 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.140:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.140:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:37:38.675144 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1928776250.mount: Deactivated successfully. Jul 15 11:37:38.679305 env[1204]: time="2025-07-15T11:37:38.679259837Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:38.682458 env[1204]: time="2025-07-15T11:37:38.682411577Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:38.683639 env[1204]: time="2025-07-15T11:37:38.683610625Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:38.684178 env[1204]: time="2025-07-15T11:37:38.684159083Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:38.684994 env[1204]: time="2025-07-15T11:37:38.684966828Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:38.687430 env[1204]: time="2025-07-15T11:37:38.687374272Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:38.688712 env[1204]: time="2025-07-15T11:37:38.688662948Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:38.689882 env[1204]: time="2025-07-15T11:37:38.689856616Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:38.692739 env[1204]: time="2025-07-15T11:37:38.692690901Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:38.693768 env[1204]: time="2025-07-15T11:37:38.693730219Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:38.694749 env[1204]: time="2025-07-15T11:37:38.694724383Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:38.697087 env[1204]: time="2025-07-15T11:37:38.697061355Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:38.708603 env[1204]: time="2025-07-15T11:37:38.708548343Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:37:38.708603 env[1204]: time="2025-07-15T11:37:38.708582277Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:37:38.708603 env[1204]: time="2025-07-15T11:37:38.708591715Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:37:38.708766 env[1204]: time="2025-07-15T11:37:38.708703945Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/148c7b418bf34490dd7641054e330cddf373f08facccbc85bd37e5062a35f49a pid=1633 runtime=io.containerd.runc.v2 Jul 15 11:37:38.721222 systemd[1]: Started cri-containerd-148c7b418bf34490dd7641054e330cddf373f08facccbc85bd37e5062a35f49a.scope. Jul 15 11:37:38.724741 env[1204]: time="2025-07-15T11:37:38.723761318Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:37:38.724741 env[1204]: time="2025-07-15T11:37:38.723808246Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:37:38.724741 env[1204]: time="2025-07-15T11:37:38.723818184Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:37:38.724741 env[1204]: time="2025-07-15T11:37:38.723988594Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2cc03e498a5634ed03149494b30178fb27d37819a7574a22ff46e932b586c73d pid=1662 runtime=io.containerd.runc.v2 Jul 15 11:37:38.727008 env[1204]: time="2025-07-15T11:37:38.726948544Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:37:38.727105 env[1204]: time="2025-07-15T11:37:38.727005941Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:37:38.727105 env[1204]: time="2025-07-15T11:37:38.727020989Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:37:38.730070 env[1204]: time="2025-07-15T11:37:38.727179998Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5c589d04f7db88725eb9cda74283fff711d2dfcadd743e2d8bc3db9b43496c3f pid=1674 runtime=io.containerd.runc.v2 Jul 15 11:37:38.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.731000 audit: BPF prog-id=58 op=LOAD Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=1633 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134386337623431386266333434393064643736343130353465333330 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=1633 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134386337623431386266333434393064643736343130353465333330 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit: BPF prog-id=59 op=LOAD Jul 15 11:37:38.732000 audit[1642]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001e5ae0 items=0 ppid=1633 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134386337623431386266333434393064643736343130353465333330 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit: BPF prog-id=60 op=LOAD Jul 15 11:37:38.732000 audit[1642]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001e5b28 items=0 ppid=1633 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134386337623431386266333434393064643736343130353465333330 Jul 15 11:37:38.732000 audit: BPF prog-id=60 op=UNLOAD Jul 15 11:37:38.732000 audit: BPF prog-id=59 op=UNLOAD Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { perfmon } for pid=1642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit[1642]: AVC avc: denied { bpf } for pid=1642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.732000 audit: BPF prog-id=61 op=LOAD Jul 15 11:37:38.732000 audit[1642]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0001e5f38 items=0 ppid=1633 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134386337623431386266333434393064643736343130353465333330 Jul 15 11:37:38.742860 systemd[1]: Started cri-containerd-2cc03e498a5634ed03149494b30178fb27d37819a7574a22ff46e932b586c73d.scope. Jul 15 11:37:38.748005 systemd[1]: Started cri-containerd-5c589d04f7db88725eb9cda74283fff711d2dfcadd743e2d8bc3db9b43496c3f.scope. Jul 15 11:37:38.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.754000 audit: BPF prog-id=62 op=LOAD Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1662 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.755000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263633033653439386135363334656430333134393439346233303137 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1662 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.755000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263633033653439386135363334656430333134393439346233303137 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit: BPF prog-id=63 op=LOAD Jul 15 11:37:38.755000 audit[1694]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003d49d0 items=0 ppid=1662 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.755000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263633033653439386135363334656430333134393439346233303137 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit: BPF prog-id=64 op=LOAD Jul 15 11:37:38.755000 audit[1694]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003d4a18 items=0 ppid=1662 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.755000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263633033653439386135363334656430333134393439346233303137 Jul 15 11:37:38.755000 audit: BPF prog-id=64 op=UNLOAD Jul 15 11:37:38.755000 audit: BPF prog-id=63 op=UNLOAD Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.755000 audit: BPF prog-id=65 op=LOAD Jul 15 11:37:38.755000 audit[1694]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003d4e28 items=0 ppid=1662 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.755000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263633033653439386135363334656430333134393439346233303137 Jul 15 11:37:38.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.757000 audit: BPF prog-id=66 op=LOAD Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1674 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563353839643034663764623838373235656239636461373432383366 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1674 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563353839643034663764623838373235656239636461373432383366 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit: BPF prog-id=67 op=LOAD Jul 15 11:37:38.758000 audit[1693]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000378900 items=0 ppid=1674 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563353839643034663764623838373235656239636461373432383366 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit: BPF prog-id=68 op=LOAD Jul 15 11:37:38.758000 audit[1693]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000378948 items=0 ppid=1674 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563353839643034663764623838373235656239636461373432383366 Jul 15 11:37:38.758000 audit: BPF prog-id=68 op=UNLOAD Jul 15 11:37:38.758000 audit: BPF prog-id=67 op=UNLOAD Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.758000 audit: BPF prog-id=69 op=LOAD Jul 15 11:37:38.758000 audit[1693]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000378d58 items=0 ppid=1674 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563353839643034663764623838373235656239636461373432383366 Jul 15 11:37:38.761114 env[1204]: time="2025-07-15T11:37:38.761076944Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:457eebbbfcc1bb0544c129c8d76d3ea3,Namespace:kube-system,Attempt:0,} returns sandbox id \"148c7b418bf34490dd7641054e330cddf373f08facccbc85bd37e5062a35f49a\"" Jul 15 11:37:38.762750 kubelet[1592]: E0715 11:37:38.762722 1592 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:38.764114 env[1204]: time="2025-07-15T11:37:38.764073092Z" level=info msg="CreateContainer within sandbox \"148c7b418bf34490dd7641054e330cddf373f08facccbc85bd37e5062a35f49a\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 15 11:37:38.780078 env[1204]: time="2025-07-15T11:37:38.780037876Z" level=info msg="CreateContainer within sandbox \"148c7b418bf34490dd7641054e330cddf373f08facccbc85bd37e5062a35f49a\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"52b26c4bc18111477e3af417e6299333894adf2396bcfefc221fafefbb26a271\"" Jul 15 11:37:38.780414 env[1204]: time="2025-07-15T11:37:38.780384967Z" level=info msg="StartContainer for \"52b26c4bc18111477e3af417e6299333894adf2396bcfefc221fafefbb26a271\"" Jul 15 11:37:38.783723 env[1204]: time="2025-07-15T11:37:38.782345192Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b35b56493416c25588cb530e37ffc065,Namespace:kube-system,Attempt:0,} returns sandbox id \"5c589d04f7db88725eb9cda74283fff711d2dfcadd743e2d8bc3db9b43496c3f\"" Jul 15 11:37:38.783770 kubelet[1592]: E0715 11:37:38.782992 1592 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:38.784237 env[1204]: time="2025-07-15T11:37:38.784213866Z" level=info msg="CreateContainer within sandbox \"5c589d04f7db88725eb9cda74283fff711d2dfcadd743e2d8bc3db9b43496c3f\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 15 11:37:38.784514 env[1204]: time="2025-07-15T11:37:38.784471519Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:3f04709fe51ae4ab5abd58e8da771b74,Namespace:kube-system,Attempt:0,} returns sandbox id \"2cc03e498a5634ed03149494b30178fb27d37819a7574a22ff46e932b586c73d\"" Jul 15 11:37:38.785109 kubelet[1592]: E0715 11:37:38.785081 1592 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:38.788789 env[1204]: time="2025-07-15T11:37:38.788754790Z" level=info msg="CreateContainer within sandbox \"2cc03e498a5634ed03149494b30178fb27d37819a7574a22ff46e932b586c73d\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 15 11:37:38.798060 systemd[1]: Started cri-containerd-52b26c4bc18111477e3af417e6299333894adf2396bcfefc221fafefbb26a271.scope. Jul 15 11:37:38.800531 env[1204]: time="2025-07-15T11:37:38.800477090Z" level=info msg="CreateContainer within sandbox \"5c589d04f7db88725eb9cda74283fff711d2dfcadd743e2d8bc3db9b43496c3f\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"8a7da9c32aff5a4bedf5a5207e4bc136d18d24a4c4bb62c1c321c4545ffbdaf0\"" Jul 15 11:37:38.800993 env[1204]: time="2025-07-15T11:37:38.800960566Z" level=info msg="StartContainer for \"8a7da9c32aff5a4bedf5a5207e4bc136d18d24a4c4bb62c1c321c4545ffbdaf0\"" Jul 15 11:37:38.807478 env[1204]: time="2025-07-15T11:37:38.807447088Z" level=info msg="CreateContainer within sandbox \"2cc03e498a5634ed03149494b30178fb27d37819a7574a22ff46e932b586c73d\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"4af660e4a9d373b3d0ff7920abdb67fbabcde9c8ad6e5392b4b3a4aa062ddacf\"" Jul 15 11:37:38.811022 env[1204]: time="2025-07-15T11:37:38.810994450Z" level=info msg="StartContainer for \"4af660e4a9d373b3d0ff7920abdb67fbabcde9c8ad6e5392b4b3a4aa062ddacf\"" Jul 15 11:37:38.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.812000 audit: BPF prog-id=70 op=LOAD Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1633 pid=1751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.814000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532623236633462633138313131343737653361663431376536323939 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1633 pid=1751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.814000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532623236633462633138313131343737653361663431376536323939 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit: BPF prog-id=71 op=LOAD Jul 15 11:37:38.814000 audit[1751]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00028aa30 items=0 ppid=1633 pid=1751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.814000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532623236633462633138313131343737653361663431376536323939 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit: BPF prog-id=72 op=LOAD Jul 15 11:37:38.814000 audit[1751]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00028aa78 items=0 ppid=1633 pid=1751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.814000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532623236633462633138313131343737653361663431376536323939 Jul 15 11:37:38.814000 audit: BPF prog-id=72 op=UNLOAD Jul 15 11:37:38.814000 audit: BPF prog-id=71 op=UNLOAD Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { perfmon } for pid=1751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit[1751]: AVC avc: denied { bpf } for pid=1751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.814000 audit: BPF prog-id=73 op=LOAD Jul 15 11:37:38.814000 audit[1751]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00028ae88 items=0 ppid=1633 pid=1751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.814000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532623236633462633138313131343737653361663431376536323939 Jul 15 11:37:38.818627 systemd[1]: Started cri-containerd-8a7da9c32aff5a4bedf5a5207e4bc136d18d24a4c4bb62c1c321c4545ffbdaf0.scope. Jul 15 11:37:38.825119 systemd[1]: Started cri-containerd-4af660e4a9d373b3d0ff7920abdb67fbabcde9c8ad6e5392b4b3a4aa062ddacf.scope. Jul 15 11:37:38.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.839000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.839000 audit: BPF prog-id=74 op=LOAD Jul 15 11:37:38.840000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.840000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=1674 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.840000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861376461396333326166663561346265646635613532303765346263 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=1674 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861376461396333326166663561346265646635613532303765346263 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit: BPF prog-id=75 op=LOAD Jul 15 11:37:38.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001d2e60 items=0 ppid=1674 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861376461396333326166663561346265646635613532303765346263 Jul 15 11:37:38.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit: BPF prog-id=76 op=LOAD Jul 15 11:37:38.841000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001d2ea8 items=0 ppid=1674 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861376461396333326166663561346265646635613532303765346263 Jul 15 11:37:38.841000 audit: BPF prog-id=76 op=UNLOAD Jul 15 11:37:38.841000 audit: BPF prog-id=75 op=UNLOAD Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit: BPF prog-id=77 op=LOAD Jul 15 11:37:38.841000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.841000 audit: BPF prog-id=78 op=LOAD Jul 15 11:37:38.841000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0001d32b8 items=0 ppid=1674 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861376461396333326166663561346265646635613532303765346263 Jul 15 11:37:38.844096 env[1204]: time="2025-07-15T11:37:38.843282079Z" level=info msg="StartContainer for \"52b26c4bc18111477e3af417e6299333894adf2396bcfefc221fafefbb26a271\" returns successfully" Jul 15 11:37:38.843000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.843000 audit[1798]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=1662 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.843000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461663636306534613964333733623364306666373932306162646236 Jul 15 11:37:38.843000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.843000 audit[1798]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=1662 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.843000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461663636306534613964333733623364306666373932306162646236 Jul 15 11:37:38.843000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.843000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.843000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.843000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.843000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.843000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.843000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.843000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.843000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.843000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.843000 audit: BPF prog-id=79 op=LOAD Jul 15 11:37:38.843000 audit[1798]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003d48b0 items=0 ppid=1662 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.843000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461663636306534613964333733623364306666373932306162646236 Jul 15 11:37:38.844000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.844000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.844000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.844000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.844000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.844000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.844000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.844000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.844000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.844000 audit: BPF prog-id=80 op=LOAD Jul 15 11:37:38.844000 audit[1798]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003d48f8 items=0 ppid=1662 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.844000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461663636306534613964333733623364306666373932306162646236 Jul 15 11:37:38.844000 audit: BPF prog-id=80 op=UNLOAD Jul 15 11:37:38.845000 audit: BPF prog-id=79 op=UNLOAD Jul 15 11:37:38.845000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.845000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.845000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.845000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.845000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.845000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.845000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.845000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.845000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.845000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:38.845000 audit: BPF prog-id=81 op=LOAD Jul 15 11:37:38.845000 audit[1798]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003d4d08 items=0 ppid=1662 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:38.845000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461663636306534613964333733623364306666373932306162646236 Jul 15 11:37:38.872523 env[1204]: time="2025-07-15T11:37:38.870543735Z" level=info msg="StartContainer for \"8a7da9c32aff5a4bedf5a5207e4bc136d18d24a4c4bb62c1c321c4545ffbdaf0\" returns successfully" Jul 15 11:37:38.872523 env[1204]: time="2025-07-15T11:37:38.871207058Z" level=info msg="StartContainer for \"4af660e4a9d373b3d0ff7920abdb67fbabcde9c8ad6e5392b4b3a4aa062ddacf\" returns successfully" Jul 15 11:37:39.406788 kubelet[1592]: E0715 11:37:39.406748 1592 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:39.421664 kubelet[1592]: E0715 11:37:39.421634 1592 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:39.422884 kubelet[1592]: E0715 11:37:39.422861 1592 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:39.613000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7309 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:39.613000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0007842d0 a2=fc6 a3=0 items=0 ppid=1662 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 key=(null) Jul 15 11:37:39.613000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:37:39.614000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:39.614000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000bb6000 a2=fc6 a3=0 items=0 ppid=1662 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 key=(null) Jul 15 11:37:39.614000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:37:39.671966 systemd[1]: run-containerd-runc-k8s.io-148c7b418bf34490dd7641054e330cddf373f08facccbc85bd37e5062a35f49a-runc.2hbLeZ.mount: Deactivated successfully. Jul 15 11:37:39.794000 audit[1770]: AVC avc: denied { watch } for pid=1770 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:39.794000 audit[1770]: AVC avc: denied { watch } for pid=1770 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7305 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:39.794000 audit[1770]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c00765e060 a2=fc6 a3=0 items=0 ppid=1633 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 key=(null) Jul 15 11:37:39.794000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:37:39.794000 audit[1770]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c004896fc0 a2=fc6 a3=0 items=0 ppid=1633 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 key=(null) Jul 15 11:37:39.794000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:37:39.795000 audit[1770]: AVC avc: denied { watch } for pid=1770 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:39.795000 audit[1770]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c006978120 a2=fc6 a3=0 items=0 ppid=1633 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 key=(null) Jul 15 11:37:39.795000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:37:39.799000 audit[1770]: AVC avc: denied { watch } for pid=1770 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:39.799000 audit[1770]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5e a1=c0048a13a0 a2=fc6 a3=0 items=0 ppid=1633 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 key=(null) Jul 15 11:37:39.799000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:37:39.799000 audit[1770]: AVC avc: denied { watch } for pid=1770 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7309 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:39.799000 audit[1770]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5e a1=c0040c5560 a2=fc6 a3=0 items=0 ppid=1633 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 key=(null) Jul 15 11:37:39.799000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:37:39.805000 audit[1770]: AVC avc: denied { watch } for pid=1770 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7309 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:39.805000 audit[1770]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00752f170 a2=fc6 a3=0 items=0 ppid=1633 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 key=(null) Jul 15 11:37:39.805000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:37:39.819948 kubelet[1592]: E0715 11:37:39.819884 1592 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Jul 15 11:37:39.939997 kubelet[1592]: I0715 11:37:39.939860 1592 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:37:39.946533 kubelet[1592]: I0715 11:37:39.946486 1592 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 15 11:37:39.946533 kubelet[1592]: E0715 11:37:39.946517 1592 kubelet_node_status.go:535] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Jul 15 11:37:39.952938 kubelet[1592]: E0715 11:37:39.952902 1592 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:37:40.053392 kubelet[1592]: E0715 11:37:40.053352 1592 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:37:40.153938 kubelet[1592]: E0715 11:37:40.153894 1592 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:37:40.254568 kubelet[1592]: E0715 11:37:40.254482 1592 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:37:40.354776 kubelet[1592]: E0715 11:37:40.354755 1592 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:37:40.425554 kubelet[1592]: E0715 11:37:40.425512 1592 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:40.455408 kubelet[1592]: E0715 11:37:40.455370 1592 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:37:40.556081 kubelet[1592]: E0715 11:37:40.556000 1592 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:37:40.656500 kubelet[1592]: E0715 11:37:40.656455 1592 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:37:41.377081 kubelet[1592]: I0715 11:37:41.377044 1592 apiserver.go:52] "Watching apiserver" Jul 15 11:37:41.386778 kubelet[1592]: I0715 11:37:41.386756 1592 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Jul 15 11:37:42.274428 systemd[1]: Reloading. Jul 15 11:37:42.346889 /usr/lib/systemd/system-generators/torcx-generator[1884]: time="2025-07-15T11:37:42Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:37:42.346915 /usr/lib/systemd/system-generators/torcx-generator[1884]: time="2025-07-15T11:37:42Z" level=info msg="torcx already run" Jul 15 11:37:42.396770 kubelet[1592]: E0715 11:37:42.396732 1592 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:42.410808 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:37:42.410824 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:37:42.427103 kubelet[1592]: E0715 11:37:42.427078 1592 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:42.427671 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:37:42.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.499877 kernel: kauditd_printk_skb: 582 callbacks suppressed Jul 15 11:37:42.499996 kernel: audit: type=1400 audit(1752579462.495:556): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.500034 kernel: audit: type=1400 audit(1752579462.495:557): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.505889 kernel: audit: type=1400 audit(1752579462.495:558): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.505944 kernel: audit: type=1400 audit(1752579462.495:559): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.512004 kernel: audit: type=1400 audit(1752579462.495:560): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.512037 kernel: audit: type=1400 audit(1752579462.495:561): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.517631 kernel: audit: type=1400 audit(1752579462.495:562): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.517671 kernel: audit: type=1400 audit(1752579462.495:563): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.520437 kernel: audit: type=1400 audit(1752579462.495:564): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.520478 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 15 11:37:42.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.498000 audit: BPF prog-id=82 op=LOAD Jul 15 11:37:42.498000 audit: BPF prog-id=43 op=UNLOAD Jul 15 11:37:42.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.501000 audit: BPF prog-id=83 op=LOAD Jul 15 11:37:42.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.504000 audit: BPF prog-id=84 op=LOAD Jul 15 11:37:42.504000 audit: BPF prog-id=44 op=UNLOAD Jul 15 11:37:42.504000 audit: BPF prog-id=45 op=UNLOAD Jul 15 11:37:42.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.508000 audit: BPF prog-id=85 op=LOAD Jul 15 11:37:42.508000 audit: BPF prog-id=58 op=UNLOAD Jul 15 11:37:42.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.513000 audit: BPF prog-id=86 op=LOAD Jul 15 11:37:42.513000 audit: BPF prog-id=46 op=UNLOAD Jul 15 11:37:42.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.519000 audit: BPF prog-id=87 op=LOAD Jul 15 11:37:42.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.523000 audit: BPF prog-id=88 op=LOAD Jul 15 11:37:42.523000 audit: BPF prog-id=47 op=UNLOAD Jul 15 11:37:42.523000 audit: BPF prog-id=48 op=UNLOAD Jul 15 11:37:42.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.523000 audit: BPF prog-id=89 op=LOAD Jul 15 11:37:42.523000 audit: BPF prog-id=49 op=UNLOAD Jul 15 11:37:42.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.524000 audit: BPF prog-id=90 op=LOAD Jul 15 11:37:42.524000 audit: BPF prog-id=74 op=UNLOAD Jul 15 11:37:42.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.525000 audit: BPF prog-id=91 op=LOAD Jul 15 11:37:42.525000 audit: BPF prog-id=50 op=UNLOAD Jul 15 11:37:42.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.526000 audit: BPF prog-id=92 op=LOAD Jul 15 11:37:42.526000 audit: BPF prog-id=51 op=UNLOAD Jul 15 11:37:42.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.527000 audit: BPF prog-id=93 op=LOAD Jul 15 11:37:42.527000 audit: BPF prog-id=52 op=UNLOAD Jul 15 11:37:42.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.528000 audit: BPF prog-id=94 op=LOAD Jul 15 11:37:42.528000 audit: BPF prog-id=62 op=UNLOAD Jul 15 11:37:42.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.529000 audit: BPF prog-id=95 op=LOAD Jul 15 11:37:42.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.529000 audit: BPF prog-id=96 op=LOAD Jul 15 11:37:42.529000 audit: BPF prog-id=53 op=UNLOAD Jul 15 11:37:42.529000 audit: BPF prog-id=54 op=UNLOAD Jul 15 11:37:42.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.529000 audit: BPF prog-id=97 op=LOAD Jul 15 11:37:42.529000 audit: BPF prog-id=70 op=UNLOAD Jul 15 11:37:42.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.530000 audit: BPF prog-id=98 op=LOAD Jul 15 11:37:42.530000 audit: BPF prog-id=66 op=UNLOAD Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit: BPF prog-id=99 op=LOAD Jul 15 11:37:42.531000 audit: BPF prog-id=55 op=UNLOAD Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit: BPF prog-id=100 op=LOAD Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.531000 audit: BPF prog-id=101 op=LOAD Jul 15 11:37:42.531000 audit: BPF prog-id=56 op=UNLOAD Jul 15 11:37:42.531000 audit: BPF prog-id=57 op=UNLOAD Jul 15 11:37:42.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.532000 audit: BPF prog-id=102 op=LOAD Jul 15 11:37:42.532000 audit: BPF prog-id=77 op=UNLOAD Jul 15 11:37:42.542640 systemd[1]: Stopping kubelet.service... Jul 15 11:37:42.570247 systemd[1]: kubelet.service: Deactivated successfully. Jul 15 11:37:42.570452 systemd[1]: Stopped kubelet.service. Jul 15 11:37:42.569000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:42.571886 systemd[1]: Starting kubelet.service... Jul 15 11:37:42.655579 systemd[1]: Started kubelet.service. Jul 15 11:37:42.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:42.690324 kubelet[1929]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:37:42.690324 kubelet[1929]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 15 11:37:42.690324 kubelet[1929]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:37:42.690705 kubelet[1929]: I0715 11:37:42.690369 1929 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 15 11:37:42.698188 kubelet[1929]: I0715 11:37:42.698152 1929 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 15 11:37:42.698188 kubelet[1929]: I0715 11:37:42.698183 1929 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 15 11:37:42.698499 kubelet[1929]: I0715 11:37:42.698473 1929 server.go:934] "Client rotation is on, will bootstrap in background" Jul 15 11:37:42.699709 kubelet[1929]: I0715 11:37:42.699686 1929 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 15 11:37:42.701501 kubelet[1929]: I0715 11:37:42.701472 1929 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 15 11:37:42.704901 kubelet[1929]: E0715 11:37:42.704868 1929 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 15 11:37:42.704901 kubelet[1929]: I0715 11:37:42.704900 1929 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 15 11:37:42.708406 kubelet[1929]: I0715 11:37:42.708384 1929 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 15 11:37:42.708578 kubelet[1929]: I0715 11:37:42.708565 1929 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 15 11:37:42.708805 kubelet[1929]: I0715 11:37:42.708775 1929 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 15 11:37:42.709144 kubelet[1929]: I0715 11:37:42.708866 1929 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 15 11:37:42.709278 kubelet[1929]: I0715 11:37:42.709262 1929 topology_manager.go:138] "Creating topology manager with none policy" Jul 15 11:37:42.709347 kubelet[1929]: I0715 11:37:42.709334 1929 container_manager_linux.go:300] "Creating device plugin manager" Jul 15 11:37:42.709450 kubelet[1929]: I0715 11:37:42.709438 1929 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:37:42.709615 kubelet[1929]: I0715 11:37:42.709594 1929 kubelet.go:408] "Attempting to sync node with API server" Jul 15 11:37:42.709701 kubelet[1929]: I0715 11:37:42.709687 1929 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 15 11:37:42.709792 kubelet[1929]: I0715 11:37:42.709778 1929 kubelet.go:314] "Adding apiserver pod source" Jul 15 11:37:42.709865 kubelet[1929]: I0715 11:37:42.709852 1929 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 15 11:37:42.711015 kubelet[1929]: I0715 11:37:42.711000 1929 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 15 11:37:42.711555 kubelet[1929]: I0715 11:37:42.711535 1929 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 15 11:37:42.711987 kubelet[1929]: I0715 11:37:42.711949 1929 server.go:1274] "Started kubelet" Jul 15 11:37:42.712114 kubelet[1929]: I0715 11:37:42.712076 1929 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 15 11:37:42.712386 kubelet[1929]: I0715 11:37:42.712330 1929 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 15 11:37:42.712597 kubelet[1929]: I0715 11:37:42.712572 1929 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 15 11:37:42.713400 kubelet[1929]: I0715 11:37:42.713380 1929 server.go:449] "Adding debug handlers to kubelet server" Jul 15 11:37:42.716000 audit[1929]: AVC avc: denied { mac_admin } for pid=1929 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.716000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:37:42.716000 audit[1929]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00035b4a0 a1=c000159c08 a2=c00035b440 a3=25 items=0 ppid=1 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:42.716000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:37:42.716000 audit[1929]: AVC avc: denied { mac_admin } for pid=1929 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.716000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:37:42.716000 audit[1929]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000358780 a1=c000159c20 a2=c00035b5c0 a3=25 items=0 ppid=1 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:42.716000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:37:42.717837 kubelet[1929]: I0715 11:37:42.717506 1929 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 15 11:37:42.717837 kubelet[1929]: I0715 11:37:42.717543 1929 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 15 11:37:42.717837 kubelet[1929]: I0715 11:37:42.717574 1929 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 15 11:37:42.718257 kubelet[1929]: I0715 11:37:42.718240 1929 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 15 11:37:42.720840 kubelet[1929]: E0715 11:37:42.720826 1929 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 15 11:37:42.721349 kubelet[1929]: I0715 11:37:42.721337 1929 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 15 11:37:42.721553 kubelet[1929]: I0715 11:37:42.721541 1929 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 15 11:37:42.721756 kubelet[1929]: I0715 11:37:42.721746 1929 reconciler.go:26] "Reconciler: start to sync state" Jul 15 11:37:42.723202 kubelet[1929]: I0715 11:37:42.723176 1929 factory.go:221] Registration of the systemd container factory successfully Jul 15 11:37:42.723280 kubelet[1929]: I0715 11:37:42.723255 1929 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 15 11:37:42.725969 kubelet[1929]: I0715 11:37:42.725912 1929 factory.go:221] Registration of the containerd container factory successfully Jul 15 11:37:42.729046 kubelet[1929]: I0715 11:37:42.729005 1929 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 15 11:37:42.729734 kubelet[1929]: I0715 11:37:42.729709 1929 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 15 11:37:42.729734 kubelet[1929]: I0715 11:37:42.729726 1929 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 15 11:37:42.729784 kubelet[1929]: I0715 11:37:42.729741 1929 kubelet.go:2321] "Starting kubelet main sync loop" Jul 15 11:37:42.729784 kubelet[1929]: E0715 11:37:42.729773 1929 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 15 11:37:42.757405 kubelet[1929]: I0715 11:37:42.757375 1929 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 15 11:37:42.757405 kubelet[1929]: I0715 11:37:42.757392 1929 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 15 11:37:42.757405 kubelet[1929]: I0715 11:37:42.757410 1929 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:37:42.757550 kubelet[1929]: I0715 11:37:42.757534 1929 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 15 11:37:42.757575 kubelet[1929]: I0715 11:37:42.757548 1929 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 15 11:37:42.757575 kubelet[1929]: I0715 11:37:42.757566 1929 policy_none.go:49] "None policy: Start" Jul 15 11:37:42.758097 kubelet[1929]: I0715 11:37:42.758081 1929 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 15 11:37:42.758097 kubelet[1929]: I0715 11:37:42.758098 1929 state_mem.go:35] "Initializing new in-memory state store" Jul 15 11:37:42.758215 kubelet[1929]: I0715 11:37:42.758200 1929 state_mem.go:75] "Updated machine memory state" Jul 15 11:37:42.761780 kubelet[1929]: I0715 11:37:42.761752 1929 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 15 11:37:42.760000 audit[1929]: AVC avc: denied { mac_admin } for pid=1929 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:42.760000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:37:42.760000 audit[1929]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c001289b00 a1=c000bbf3e0 a2=c001289ad0 a3=25 items=0 ppid=1 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:42.760000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:37:42.762039 kubelet[1929]: I0715 11:37:42.761956 1929 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 15 11:37:42.762107 kubelet[1929]: I0715 11:37:42.762096 1929 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 15 11:37:42.762132 kubelet[1929]: I0715 11:37:42.762107 1929 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 15 11:37:42.762352 kubelet[1929]: I0715 11:37:42.762324 1929 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 15 11:37:42.837513 kubelet[1929]: E0715 11:37:42.837398 1929 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:37:42.868751 kubelet[1929]: I0715 11:37:42.868704 1929 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:37:42.874546 kubelet[1929]: I0715 11:37:42.874516 1929 kubelet_node_status.go:111] "Node was previously registered" node="localhost" Jul 15 11:37:42.874636 kubelet[1929]: I0715 11:37:42.874628 1929 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 15 11:37:42.923114 kubelet[1929]: I0715 11:37:42.923037 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:37:42.923114 kubelet[1929]: I0715 11:37:42.923075 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:37:42.923114 kubelet[1929]: I0715 11:37:42.923098 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:37:42.923114 kubelet[1929]: I0715 11:37:42.923118 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b35b56493416c25588cb530e37ffc065-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b35b56493416c25588cb530e37ffc065\") " pod="kube-system/kube-scheduler-localhost" Jul 15 11:37:42.923114 kubelet[1929]: I0715 11:37:42.923135 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:37:42.923376 kubelet[1929]: I0715 11:37:42.923152 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:37:42.923376 kubelet[1929]: I0715 11:37:42.923174 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/457eebbbfcc1bb0544c129c8d76d3ea3-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"457eebbbfcc1bb0544c129c8d76d3ea3\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:37:42.923376 kubelet[1929]: I0715 11:37:42.923189 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/457eebbbfcc1bb0544c129c8d76d3ea3-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"457eebbbfcc1bb0544c129c8d76d3ea3\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:37:42.923376 kubelet[1929]: I0715 11:37:42.923204 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/457eebbbfcc1bb0544c129c8d76d3ea3-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"457eebbbfcc1bb0544c129c8d76d3ea3\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:37:43.138617 kubelet[1929]: E0715 11:37:43.138501 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:43.138617 kubelet[1929]: E0715 11:37:43.138510 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:43.138617 kubelet[1929]: E0715 11:37:43.138518 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:43.424000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=7341 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 15 11:37:43.424000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0009fb1c0 a2=fc6 a3=0 items=0 ppid=1662 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 key=(null) Jul 15 11:37:43.424000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:37:43.711742 kubelet[1929]: I0715 11:37:43.711653 1929 apiserver.go:52] "Watching apiserver" Jul 15 11:37:43.721814 kubelet[1929]: I0715 11:37:43.721786 1929 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Jul 15 11:37:43.744787 kubelet[1929]: E0715 11:37:43.744756 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:43.745045 kubelet[1929]: E0715 11:37:43.745025 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:43.750957 kubelet[1929]: E0715 11:37:43.750911 1929 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 15 11:37:43.751054 kubelet[1929]: E0715 11:37:43.751032 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:43.765111 kubelet[1929]: I0715 11:37:43.765000 1929 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.764959763 podStartE2EDuration="1.764959763s" podCreationTimestamp="2025-07-15 11:37:42 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:37:43.76468088 +0000 UTC m=+1.105663008" watchObservedRunningTime="2025-07-15 11:37:43.764959763 +0000 UTC m=+1.105941881" Jul 15 11:37:43.772126 kubelet[1929]: I0715 11:37:43.771974 1929 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.771959037 podStartE2EDuration="1.771959037s" podCreationTimestamp="2025-07-15 11:37:42 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:37:43.770708873 +0000 UTC m=+1.111691001" watchObservedRunningTime="2025-07-15 11:37:43.771959037 +0000 UTC m=+1.112941165" Jul 15 11:37:44.746314 kubelet[1929]: E0715 11:37:44.746288 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:44.873000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:44.873000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00038d200 a2=fc6 a3=0 items=0 ppid=1662 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 key=(null) Jul 15 11:37:44.873000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:37:44.874000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:44.874000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c197a0 a2=fc6 a3=0 items=0 ppid=1662 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 key=(null) Jul 15 11:37:44.874000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:37:44.874000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:44.874000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000724040 a2=fc6 a3=0 items=0 ppid=1662 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 key=(null) Jul 15 11:37:44.874000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:37:44.874000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:44.874000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000a60280 a2=fc6 a3=0 items=0 ppid=1662 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 key=(null) Jul 15 11:37:44.874000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:37:46.846635 kubelet[1929]: I0715 11:37:46.846597 1929 kuberuntime_manager.go:1635] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 15 11:37:46.847117 env[1204]: time="2025-07-15T11:37:46.846990317Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 15 11:37:46.847281 kubelet[1929]: I0715 11:37:46.847204 1929 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 15 11:37:47.086171 kubelet[1929]: I0715 11:37:47.086110 1929 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=5.086091031 podStartE2EDuration="5.086091031s" podCreationTimestamp="2025-07-15 11:37:42 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:37:43.781679232 +0000 UTC m=+1.122661360" watchObservedRunningTime="2025-07-15 11:37:47.086091031 +0000 UTC m=+4.427073149" Jul 15 11:37:47.091582 systemd[1]: Created slice kubepods-besteffort-podb8157464_210a_4841_9d9c_4783c2a44378.slice. Jul 15 11:37:47.149116 kubelet[1929]: I0715 11:37:47.148995 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/b8157464-210a-4841-9d9c-4783c2a44378-kube-proxy\") pod \"kube-proxy-npqlb\" (UID: \"b8157464-210a-4841-9d9c-4783c2a44378\") " pod="kube-system/kube-proxy-npqlb" Jul 15 11:37:47.149116 kubelet[1929]: I0715 11:37:47.149024 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b8157464-210a-4841-9d9c-4783c2a44378-xtables-lock\") pod \"kube-proxy-npqlb\" (UID: \"b8157464-210a-4841-9d9c-4783c2a44378\") " pod="kube-system/kube-proxy-npqlb" Jul 15 11:37:47.149116 kubelet[1929]: I0715 11:37:47.149042 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b8157464-210a-4841-9d9c-4783c2a44378-lib-modules\") pod \"kube-proxy-npqlb\" (UID: \"b8157464-210a-4841-9d9c-4783c2a44378\") " pod="kube-system/kube-proxy-npqlb" Jul 15 11:37:47.149116 kubelet[1929]: I0715 11:37:47.149055 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sv496\" (UniqueName: \"kubernetes.io/projected/b8157464-210a-4841-9d9c-4783c2a44378-kube-api-access-sv496\") pod \"kube-proxy-npqlb\" (UID: \"b8157464-210a-4841-9d9c-4783c2a44378\") " pod="kube-system/kube-proxy-npqlb" Jul 15 11:37:47.254093 kubelet[1929]: E0715 11:37:47.254047 1929 projected.go:288] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Jul 15 11:37:47.254093 kubelet[1929]: E0715 11:37:47.254087 1929 projected.go:194] Error preparing data for projected volume kube-api-access-sv496 for pod kube-system/kube-proxy-npqlb: configmap "kube-root-ca.crt" not found Jul 15 11:37:47.254291 kubelet[1929]: E0715 11:37:47.254150 1929 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/b8157464-210a-4841-9d9c-4783c2a44378-kube-api-access-sv496 podName:b8157464-210a-4841-9d9c-4783c2a44378 nodeName:}" failed. No retries permitted until 2025-07-15 11:37:47.754127815 +0000 UTC m=+5.095109943 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-sv496" (UniqueName: "kubernetes.io/projected/b8157464-210a-4841-9d9c-4783c2a44378-kube-api-access-sv496") pod "kube-proxy-npqlb" (UID: "b8157464-210a-4841-9d9c-4783c2a44378") : configmap "kube-root-ca.crt" not found Jul 15 11:37:47.797688 kubelet[1929]: E0715 11:37:47.797640 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:47.804463 systemd[1]: Created slice kubepods-besteffort-podf070f6f7_1410_49fa_9cc1_cff2ee5cd1de.slice. Jul 15 11:37:47.853920 kubelet[1929]: I0715 11:37:47.853880 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/f070f6f7-1410-49fa-9cc1-cff2ee5cd1de-var-lib-calico\") pod \"tigera-operator-5bf8dfcb4-8ls8s\" (UID: \"f070f6f7-1410-49fa-9cc1-cff2ee5cd1de\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-8ls8s" Jul 15 11:37:47.853920 kubelet[1929]: I0715 11:37:47.853916 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nq7fv\" (UniqueName: \"kubernetes.io/projected/f070f6f7-1410-49fa-9cc1-cff2ee5cd1de-kube-api-access-nq7fv\") pod \"tigera-operator-5bf8dfcb4-8ls8s\" (UID: \"f070f6f7-1410-49fa-9cc1-cff2ee5cd1de\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-8ls8s" Jul 15 11:37:47.854284 kubelet[1929]: I0715 11:37:47.854262 1929 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 15 11:37:47.997058 kubelet[1929]: E0715 11:37:47.997021 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:47.997704 env[1204]: time="2025-07-15T11:37:47.997374139Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-npqlb,Uid:b8157464-210a-4841-9d9c-4783c2a44378,Namespace:kube-system,Attempt:0,}" Jul 15 11:37:48.019214 env[1204]: time="2025-07-15T11:37:48.019148006Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:37:48.019214 env[1204]: time="2025-07-15T11:37:48.019183826Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:37:48.019214 env[1204]: time="2025-07-15T11:37:48.019194026Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:37:48.019345 env[1204]: time="2025-07-15T11:37:48.019307824Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0ef3433f3d1a6cdfe9a8e1e46e3e10bbc2179ce87f76a6724321f833183b7e41 pid=1987 runtime=io.containerd.runc.v2 Jul 15 11:37:48.028422 systemd[1]: Started cri-containerd-0ef3433f3d1a6cdfe9a8e1e46e3e10bbc2179ce87f76a6724321f833183b7e41.scope. Jul 15 11:37:48.039975 kernel: kauditd_printk_skb: 265 callbacks suppressed Jul 15 11:37:48.040108 kernel: audit: type=1400 audit(1752579468.035:809): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.043214 kernel: audit: type=1400 audit(1752579468.035:810): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.043279 kernel: audit: type=1400 audit(1752579468.035:811): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.045958 kernel: audit: type=1400 audit(1752579468.035:812): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.048711 kernel: audit: type=1400 audit(1752579468.035:813): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.054553 kernel: audit: type=1400 audit(1752579468.035:814): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.054598 kernel: audit: type=1400 audit(1752579468.035:815): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.057326 kernel: audit: type=1400 audit(1752579468.035:816): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.062798 kernel: audit: type=1400 audit(1752579468.035:817): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.062840 kernel: audit: type=1400 audit(1752579468.035:818): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.035000 audit: BPF prog-id=103 op=LOAD Jul 15 11:37:48.039000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.039000 audit[1996]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1987 pid=1996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065663334333366336431613663646665396138653165343665336531 Jul 15 11:37:48.039000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.039000 audit[1996]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1987 pid=1996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065663334333366336431613663646665396138653165343665336531 Jul 15 11:37:48.039000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.039000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.039000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.039000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.039000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.039000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.039000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.039000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.039000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.039000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.039000 audit: BPF prog-id=104 op=LOAD Jul 15 11:37:48.039000 audit[1996]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00015d720 items=0 ppid=1987 pid=1996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065663334333366336431613663646665396138653165343665336531 Jul 15 11:37:48.042000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.042000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.042000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.042000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.042000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.042000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.042000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.042000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.042000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.042000 audit: BPF prog-id=105 op=LOAD Jul 15 11:37:48.042000 audit[1996]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00015d768 items=0 ppid=1987 pid=1996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065663334333366336431613663646665396138653165343665336531 Jul 15 11:37:48.048000 audit: BPF prog-id=105 op=UNLOAD Jul 15 11:37:48.048000 audit: BPF prog-id=104 op=UNLOAD Jul 15 11:37:48.048000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.048000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.048000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.048000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.048000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.048000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.048000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.048000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.048000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.048000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.048000 audit: BPF prog-id=106 op=LOAD Jul 15 11:37:48.048000 audit[1996]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00015db78 items=0 ppid=1987 pid=1996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.048000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065663334333366336431613663646665396138653165343665336531 Jul 15 11:37:48.072173 env[1204]: time="2025-07-15T11:37:48.072112993Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-npqlb,Uid:b8157464-210a-4841-9d9c-4783c2a44378,Namespace:kube-system,Attempt:0,} returns sandbox id \"0ef3433f3d1a6cdfe9a8e1e46e3e10bbc2179ce87f76a6724321f833183b7e41\"" Jul 15 11:37:48.072659 kubelet[1929]: E0715 11:37:48.072628 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:48.074268 env[1204]: time="2025-07-15T11:37:48.074233939Z" level=info msg="CreateContainer within sandbox \"0ef3433f3d1a6cdfe9a8e1e46e3e10bbc2179ce87f76a6724321f833183b7e41\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 15 11:37:48.090237 env[1204]: time="2025-07-15T11:37:48.090184115Z" level=info msg="CreateContainer within sandbox \"0ef3433f3d1a6cdfe9a8e1e46e3e10bbc2179ce87f76a6724321f833183b7e41\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"a7d74c17b5a05aac0ddabfdee3d7ed00067e99e56094bdc967ecfdacb2dc47a8\"" Jul 15 11:37:48.090711 env[1204]: time="2025-07-15T11:37:48.090669278Z" level=info msg="StartContainer for \"a7d74c17b5a05aac0ddabfdee3d7ed00067e99e56094bdc967ecfdacb2dc47a8\"" Jul 15 11:37:48.103918 systemd[1]: Started cri-containerd-a7d74c17b5a05aac0ddabfdee3d7ed00067e99e56094bdc967ecfdacb2dc47a8.scope. Jul 15 11:37:48.107365 env[1204]: time="2025-07-15T11:37:48.107324809Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-8ls8s,Uid:f070f6f7-1410-49fa-9cc1-cff2ee5cd1de,Namespace:tigera-operator,Attempt:0,}" Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { perfmon } for pid=2029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7fa9737222f8 items=0 ppid=1987 pid=2029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137643734633137623561303561616330646461626664656533643765 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { bpf } for pid=2029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { bpf } for pid=2029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { bpf } for pid=2029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { perfmon } for pid=2029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { perfmon } for pid=2029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { perfmon } for pid=2029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { perfmon } for pid=2029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { perfmon } for pid=2029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { bpf } for pid=2029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { bpf } for pid=2029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit: BPF prog-id=107 op=LOAD Jul 15 11:37:48.116000 audit[2029]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c0000251f8 items=0 ppid=1987 pid=2029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137643734633137623561303561616330646461626664656533643765 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { bpf } for pid=2029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { bpf } for pid=2029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { perfmon } for pid=2029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { perfmon } for pid=2029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { perfmon } for pid=2029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { perfmon } for pid=2029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { perfmon } for pid=2029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { bpf } for pid=2029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { bpf } for pid=2029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit: BPF prog-id=108 op=LOAD Jul 15 11:37:48.116000 audit[2029]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c000025248 items=0 ppid=1987 pid=2029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137643734633137623561303561616330646461626664656533643765 Jul 15 11:37:48.116000 audit: BPF prog-id=108 op=UNLOAD Jul 15 11:37:48.116000 audit: BPF prog-id=107 op=UNLOAD Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { bpf } for pid=2029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { bpf } for pid=2029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { bpf } for pid=2029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { perfmon } for pid=2029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { perfmon } for pid=2029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { perfmon } for pid=2029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { perfmon } for pid=2029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { perfmon } for pid=2029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { bpf } for pid=2029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit[2029]: AVC avc: denied { bpf } for pid=2029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.116000 audit: BPF prog-id=109 op=LOAD Jul 15 11:37:48.116000 audit[2029]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c0000252d8 items=0 ppid=1987 pid=2029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137643734633137623561303561616330646461626664656533643765 Jul 15 11:37:48.121525 env[1204]: time="2025-07-15T11:37:48.121381307Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:37:48.121525 env[1204]: time="2025-07-15T11:37:48.121414441Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:37:48.121525 env[1204]: time="2025-07-15T11:37:48.121423568Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:37:48.121639 env[1204]: time="2025-07-15T11:37:48.121546675Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e6c5e13f826bd17dd29221a5b0dd5ba4ce59093a0a74fa2d8dc3d76d71f9141e pid=2052 runtime=io.containerd.runc.v2 Jul 15 11:37:48.131371 env[1204]: time="2025-07-15T11:37:48.128894893Z" level=info msg="StartContainer for \"a7d74c17b5a05aac0ddabfdee3d7ed00067e99e56094bdc967ecfdacb2dc47a8\" returns successfully" Jul 15 11:37:48.133532 systemd[1]: Started cri-containerd-e6c5e13f826bd17dd29221a5b0dd5ba4ce59093a0a74fa2d8dc3d76d71f9141e.scope. Jul 15 11:37:48.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit: BPF prog-id=110 op=LOAD Jul 15 11:37:48.143000 audit[2069]: AVC avc: denied { bpf } for pid=2069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[2069]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2052 pid=2069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.143000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536633565313366383236626431376464323932323161356230646435 Jul 15 11:37:48.143000 audit[2069]: AVC avc: denied { perfmon } for pid=2069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[2069]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2052 pid=2069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.143000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536633565313366383236626431376464323932323161356230646435 Jul 15 11:37:48.143000 audit[2069]: AVC avc: denied { bpf } for pid=2069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[2069]: AVC avc: denied { bpf } for pid=2069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[2069]: AVC avc: denied { bpf } for pid=2069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[2069]: AVC avc: denied { perfmon } for pid=2069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[2069]: AVC avc: denied { perfmon } for pid=2069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[2069]: AVC avc: denied { perfmon } for pid=2069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[2069]: AVC avc: denied { perfmon } for pid=2069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[2069]: AVC avc: denied { perfmon } for pid=2069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[2069]: AVC avc: denied { bpf } for pid=2069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[2069]: AVC avc: denied { bpf } for pid=2069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit: BPF prog-id=111 op=LOAD Jul 15 11:37:48.143000 audit[2069]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00040cd90 items=0 ppid=2052 pid=2069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.143000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536633565313366383236626431376464323932323161356230646435 Jul 15 11:37:48.143000 audit[2069]: AVC avc: denied { bpf } for pid=2069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[2069]: AVC avc: denied { bpf } for pid=2069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[2069]: AVC avc: denied { perfmon } for pid=2069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[2069]: AVC avc: denied { perfmon } for pid=2069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[2069]: AVC avc: denied { perfmon } for pid=2069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[2069]: AVC avc: denied { perfmon } for pid=2069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[2069]: AVC avc: denied { perfmon } for pid=2069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[2069]: AVC avc: denied { bpf } for pid=2069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit[2069]: AVC avc: denied { bpf } for pid=2069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.143000 audit: BPF prog-id=112 op=LOAD Jul 15 11:37:48.143000 audit[2069]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00040cdd8 items=0 ppid=2052 pid=2069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.143000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536633565313366383236626431376464323932323161356230646435 Jul 15 11:37:48.143000 audit: BPF prog-id=112 op=UNLOAD Jul 15 11:37:48.144000 audit: BPF prog-id=111 op=UNLOAD Jul 15 11:37:48.144000 audit[2069]: AVC avc: denied { bpf } for pid=2069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.144000 audit[2069]: AVC avc: denied { bpf } for pid=2069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.144000 audit[2069]: AVC avc: denied { bpf } for pid=2069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.144000 audit[2069]: AVC avc: denied { perfmon } for pid=2069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.144000 audit[2069]: AVC avc: denied { perfmon } for pid=2069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.144000 audit[2069]: AVC avc: denied { perfmon } for pid=2069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.144000 audit[2069]: AVC avc: denied { perfmon } for pid=2069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.144000 audit[2069]: AVC avc: denied { perfmon } for pid=2069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.144000 audit[2069]: AVC avc: denied { bpf } for pid=2069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.144000 audit[2069]: AVC avc: denied { bpf } for pid=2069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:48.144000 audit: BPF prog-id=113 op=LOAD Jul 15 11:37:48.144000 audit[2069]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00040d1e8 items=0 ppid=2052 pid=2069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536633565313366383236626431376464323932323161356230646435 Jul 15 11:37:48.163758 env[1204]: time="2025-07-15T11:37:48.163718874Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-8ls8s,Uid:f070f6f7-1410-49fa-9cc1-cff2ee5cd1de,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"e6c5e13f826bd17dd29221a5b0dd5ba4ce59093a0a74fa2d8dc3d76d71f9141e\"" Jul 15 11:37:48.166789 env[1204]: time="2025-07-15T11:37:48.166014535Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 15 11:37:48.231000 audit[2134]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2134 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:48.231000 audit[2134]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd1ced40e0 a2=0 a3=7ffd1ced40cc items=0 ppid=2039 pid=2134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.231000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 15 11:37:48.231000 audit[2133]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2133 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.231000 audit[2133]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe2e252290 a2=0 a3=a196ba8b1383224c items=0 ppid=2039 pid=2133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.231000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 15 11:37:48.232000 audit[2135]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2135 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:48.232000 audit[2135]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffffb596eb0 a2=0 a3=7ffffb596e9c items=0 ppid=2039 pid=2135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.232000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 15 11:37:48.233000 audit[2136]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2136 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.233000 audit[2136]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffec40bf5f0 a2=0 a3=7ffec40bf5dc items=0 ppid=2039 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.233000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 15 11:37:48.233000 audit[2137]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2137 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:48.233000 audit[2137]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffee01a0240 a2=0 a3=7ffee01a022c items=0 ppid=2039 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.233000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 15 11:37:48.235000 audit[2138]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2138 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.235000 audit[2138]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe04ee9750 a2=0 a3=7ffe04ee973c items=0 ppid=2039 pid=2138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.235000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 15 11:37:48.334000 audit[2139]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2139 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:48.334000 audit[2139]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fff752035d0 a2=0 a3=7fff752035bc items=0 ppid=2039 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.334000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 15 11:37:48.336000 audit[2141]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2141 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:48.336000 audit[2141]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffdacd004e0 a2=0 a3=7ffdacd004cc items=0 ppid=2039 pid=2141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.336000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 15 11:37:48.339000 audit[2144]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2144 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:48.339000 audit[2144]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff6a5fd4b0 a2=0 a3=7fff6a5fd49c items=0 ppid=2039 pid=2144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.339000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 15 11:37:48.340000 audit[2145]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2145 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:48.340000 audit[2145]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffcda072d0 a2=0 a3=7fffcda072bc items=0 ppid=2039 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.340000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 15 11:37:48.342000 audit[2147]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2147 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:48.342000 audit[2147]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd7bfa03c0 a2=0 a3=7ffd7bfa03ac items=0 ppid=2039 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.342000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 15 11:37:48.343000 audit[2148]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2148 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:48.343000 audit[2148]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc3ccb16b0 a2=0 a3=7ffc3ccb169c items=0 ppid=2039 pid=2148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.343000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 15 11:37:48.345000 audit[2150]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2150 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:48.345000 audit[2150]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fffeeeb2540 a2=0 a3=7fffeeeb252c items=0 ppid=2039 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.345000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 15 11:37:48.348000 audit[2153]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2153 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:48.348000 audit[2153]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe22991120 a2=0 a3=7ffe2299110c items=0 ppid=2039 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.348000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 15 11:37:48.349000 audit[2154]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2154 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:48.349000 audit[2154]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeec4ba420 a2=0 a3=7ffeec4ba40c items=0 ppid=2039 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.349000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 15 11:37:48.351000 audit[2156]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2156 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:48.351000 audit[2156]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff11de6e10 a2=0 a3=7fff11de6dfc items=0 ppid=2039 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.351000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 15 11:37:48.352000 audit[2157]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2157 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:48.352000 audit[2157]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff05843590 a2=0 a3=7fff0584357c items=0 ppid=2039 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.352000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 15 11:37:48.353000 audit[2159]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2159 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:48.353000 audit[2159]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff6f1488a0 a2=0 a3=7fff6f14888c items=0 ppid=2039 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.353000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:37:48.356000 audit[2162]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2162 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:48.356000 audit[2162]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd6d2de2d0 a2=0 a3=7ffd6d2de2bc items=0 ppid=2039 pid=2162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.356000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:37:48.359000 audit[2165]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2165 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:48.359000 audit[2165]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffd62aebb0 a2=0 a3=7fffd62aeb9c items=0 ppid=2039 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.359000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 15 11:37:48.360000 audit[2166]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2166 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:48.360000 audit[2166]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd7e01f010 a2=0 a3=7ffd7e01effc items=0 ppid=2039 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.360000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 15 11:37:48.362000 audit[2168]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2168 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:48.362000 audit[2168]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fff5fa708c0 a2=0 a3=7fff5fa708ac items=0 ppid=2039 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.362000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:37:48.364000 audit[2171]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:48.364000 audit[2171]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffecb54b780 a2=0 a3=7ffecb54b76c items=0 ppid=2039 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.364000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:37:48.365000 audit[2172]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2172 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:48.365000 audit[2172]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff91ffc2b0 a2=0 a3=7fff91ffc29c items=0 ppid=2039 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.365000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 15 11:37:48.367000 audit[2174]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2174 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:37:48.367000 audit[2174]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffcbf86da00 a2=0 a3=7ffcbf86d9ec items=0 ppid=2039 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.367000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 15 11:37:48.387000 audit[2180]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2180 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:37:48.387000 audit[2180]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff6e00c5c0 a2=0 a3=7fff6e00c5ac items=0 ppid=2039 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.387000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:37:48.395000 audit[2180]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2180 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:37:48.395000 audit[2180]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7fff6e00c5c0 a2=0 a3=7fff6e00c5ac items=0 ppid=2039 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.395000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:37:48.396000 audit[2185]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2185 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.396000 audit[2185]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffea8940850 a2=0 a3=7ffea894083c items=0 ppid=2039 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.396000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 15 11:37:48.398000 audit[2187]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2187 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.398000 audit[2187]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffcf8e925f0 a2=0 a3=7ffcf8e925dc items=0 ppid=2039 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.398000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 15 11:37:48.401000 audit[2190]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2190 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.401000 audit[2190]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd9ad10720 a2=0 a3=7ffd9ad1070c items=0 ppid=2039 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.401000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 15 11:37:48.402000 audit[2191]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2191 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.402000 audit[2191]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc5d3e5e00 a2=0 a3=7ffc5d3e5dec items=0 ppid=2039 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.402000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 15 11:37:48.404000 audit[2193]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2193 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.404000 audit[2193]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffed13fe4e0 a2=0 a3=7ffed13fe4cc items=0 ppid=2039 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.404000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 15 11:37:48.405000 audit[2194]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2194 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.405000 audit[2194]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffebb31c690 a2=0 a3=7ffebb31c67c items=0 ppid=2039 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.405000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 15 11:37:48.406000 audit[2196]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2196 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.406000 audit[2196]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffcebcbbc70 a2=0 a3=7ffcebcbbc5c items=0 ppid=2039 pid=2196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.406000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 15 11:37:48.409000 audit[2199]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2199 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.409000 audit[2199]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffda8bbd0d0 a2=0 a3=7ffda8bbd0bc items=0 ppid=2039 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.409000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 15 11:37:48.410000 audit[2200]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2200 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.410000 audit[2200]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffee353d800 a2=0 a3=7ffee353d7ec items=0 ppid=2039 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.410000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 15 11:37:48.411000 audit[2202]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2202 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.411000 audit[2202]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffeb8ca9a50 a2=0 a3=7ffeb8ca9a3c items=0 ppid=2039 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.411000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 15 11:37:48.412000 audit[2203]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2203 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.412000 audit[2203]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe44f749e0 a2=0 a3=7ffe44f749cc items=0 ppid=2039 pid=2203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.412000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 15 11:37:48.414000 audit[2205]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2205 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.414000 audit[2205]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcdefdc380 a2=0 a3=7ffcdefdc36c items=0 ppid=2039 pid=2205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.414000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:37:48.417000 audit[2208]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2208 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.417000 audit[2208]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffed63917b0 a2=0 a3=7ffed639179c items=0 ppid=2039 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.417000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 15 11:37:48.420000 audit[2211]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2211 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.420000 audit[2211]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffc273ac10 a2=0 a3=7fffc273abfc items=0 ppid=2039 pid=2211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.420000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 15 11:37:48.421000 audit[2212]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2212 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.421000 audit[2212]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe8128b5a0 a2=0 a3=7ffe8128b58c items=0 ppid=2039 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.421000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 15 11:37:48.422000 audit[2214]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2214 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.422000 audit[2214]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7fffbd5637d0 a2=0 a3=7fffbd5637bc items=0 ppid=2039 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.422000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:37:48.425000 audit[2217]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.425000 audit[2217]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffc0d966190 a2=0 a3=7ffc0d96617c items=0 ppid=2039 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.425000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:37:48.425000 audit[2218]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2218 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.425000 audit[2218]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc901732e0 a2=0 a3=7ffc901732cc items=0 ppid=2039 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.425000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 15 11:37:48.427000 audit[2220]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2220 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.427000 audit[2220]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7fff7d8250e0 a2=0 a3=7fff7d8250cc items=0 ppid=2039 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.427000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 15 11:37:48.428000 audit[2221]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.428000 audit[2221]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc179fbfa0 a2=0 a3=7ffc179fbf8c items=0 ppid=2039 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.428000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 15 11:37:48.430000 audit[2223]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2223 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.430000 audit[2223]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe4ab6c2b0 a2=0 a3=7ffe4ab6c29c items=0 ppid=2039 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.430000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:37:48.432000 audit[2226]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:37:48.432000 audit[2226]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe6768b620 a2=0 a3=7ffe6768b60c items=0 ppid=2039 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.432000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:37:48.435000 audit[2228]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 15 11:37:48.435000 audit[2228]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7fffd301e010 a2=0 a3=7fffd301dffc items=0 ppid=2039 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.435000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:37:48.435000 audit[2228]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 15 11:37:48.435000 audit[2228]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7fffd301e010 a2=0 a3=7fffd301dffc items=0 ppid=2039 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:48.435000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:37:48.753611 kubelet[1929]: E0715 11:37:48.753585 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:48.761513 kubelet[1929]: I0715 11:37:48.761457 1929 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-npqlb" podStartSLOduration=1.76143994 podStartE2EDuration="1.76143994s" podCreationTimestamp="2025-07-15 11:37:47 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:37:48.761319508 +0000 UTC m=+6.102301636" watchObservedRunningTime="2025-07-15 11:37:48.76143994 +0000 UTC m=+6.102422068" Jul 15 11:37:49.416956 kubelet[1929]: E0715 11:37:49.416470 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:49.488614 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2109897907.mount: Deactivated successfully. Jul 15 11:37:49.755077 kubelet[1929]: E0715 11:37:49.754969 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:50.265461 env[1204]: time="2025-07-15T11:37:50.265406011Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:50.267154 env[1204]: time="2025-07-15T11:37:50.267101751Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:50.268646 env[1204]: time="2025-07-15T11:37:50.268589661Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:50.269964 env[1204]: time="2025-07-15T11:37:50.269940048Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:37:50.270405 env[1204]: time="2025-07-15T11:37:50.270384980Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93\"" Jul 15 11:37:50.273199 env[1204]: time="2025-07-15T11:37:50.273166288Z" level=info msg="CreateContainer within sandbox \"e6c5e13f826bd17dd29221a5b0dd5ba4ce59093a0a74fa2d8dc3d76d71f9141e\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 15 11:37:50.285290 env[1204]: time="2025-07-15T11:37:50.285243696Z" level=info msg="CreateContainer within sandbox \"e6c5e13f826bd17dd29221a5b0dd5ba4ce59093a0a74fa2d8dc3d76d71f9141e\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"98ed7082bf591034edfbc55680629dad364206a57d95c3f462c1d2d3d362f1f5\"" Jul 15 11:37:50.285953 env[1204]: time="2025-07-15T11:37:50.285765706Z" level=info msg="StartContainer for \"98ed7082bf591034edfbc55680629dad364206a57d95c3f462c1d2d3d362f1f5\"" Jul 15 11:37:50.301390 systemd[1]: Started cri-containerd-98ed7082bf591034edfbc55680629dad364206a57d95c3f462c1d2d3d362f1f5.scope. Jul 15 11:37:50.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.310000 audit: BPF prog-id=114 op=LOAD Jul 15 11:37:50.311000 audit[2236]: AVC avc: denied { bpf } for pid=2236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.311000 audit[2236]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000217c48 a2=10 a3=1c items=0 ppid=2052 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:50.311000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938656437303832626635393130333465646662633535363830363239 Jul 15 11:37:50.311000 audit[2236]: AVC avc: denied { perfmon } for pid=2236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.311000 audit[2236]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0002176b0 a2=3c a3=8 items=0 ppid=2052 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:50.311000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938656437303832626635393130333465646662633535363830363239 Jul 15 11:37:50.311000 audit[2236]: AVC avc: denied { bpf } for pid=2236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.311000 audit[2236]: AVC avc: denied { bpf } for pid=2236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.311000 audit[2236]: AVC avc: denied { bpf } for pid=2236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.311000 audit[2236]: AVC avc: denied { perfmon } for pid=2236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.311000 audit[2236]: AVC avc: denied { perfmon } for pid=2236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.311000 audit[2236]: AVC avc: denied { perfmon } for pid=2236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.311000 audit[2236]: AVC avc: denied { perfmon } for pid=2236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.311000 audit[2236]: AVC avc: denied { perfmon } for pid=2236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.311000 audit[2236]: AVC avc: denied { bpf } for pid=2236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.311000 audit[2236]: AVC avc: denied { bpf } for pid=2236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.311000 audit: BPF prog-id=115 op=LOAD Jul 15 11:37:50.311000 audit[2236]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0002179d8 a2=78 a3=c00009f760 items=0 ppid=2052 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:50.311000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938656437303832626635393130333465646662633535363830363239 Jul 15 11:37:50.311000 audit[2236]: AVC avc: denied { bpf } for pid=2236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.311000 audit[2236]: AVC avc: denied { bpf } for pid=2236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.311000 audit[2236]: AVC avc: denied { perfmon } for pid=2236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.311000 audit[2236]: AVC avc: denied { perfmon } for pid=2236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.311000 audit[2236]: AVC avc: denied { perfmon } for pid=2236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.311000 audit[2236]: AVC avc: denied { perfmon } for pid=2236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.311000 audit[2236]: AVC avc: denied { perfmon } for pid=2236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.311000 audit[2236]: AVC avc: denied { bpf } for pid=2236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.311000 audit[2236]: AVC avc: denied { bpf } for pid=2236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.311000 audit: BPF prog-id=116 op=LOAD Jul 15 11:37:50.311000 audit[2236]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000217770 a2=78 a3=c00009f7a8 items=0 ppid=2052 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:50.311000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938656437303832626635393130333465646662633535363830363239 Jul 15 11:37:50.311000 audit: BPF prog-id=116 op=UNLOAD Jul 15 11:37:50.312000 audit: BPF prog-id=115 op=UNLOAD Jul 15 11:37:50.312000 audit[2236]: AVC avc: denied { bpf } for pid=2236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.312000 audit[2236]: AVC avc: denied { bpf } for pid=2236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.312000 audit[2236]: AVC avc: denied { bpf } for pid=2236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.312000 audit[2236]: AVC avc: denied { perfmon } for pid=2236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.312000 audit[2236]: AVC avc: denied { perfmon } for pid=2236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.312000 audit[2236]: AVC avc: denied { perfmon } for pid=2236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.312000 audit[2236]: AVC avc: denied { perfmon } for pid=2236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.312000 audit[2236]: AVC avc: denied { perfmon } for pid=2236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.312000 audit[2236]: AVC avc: denied { bpf } for pid=2236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.312000 audit[2236]: AVC avc: denied { bpf } for pid=2236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:50.312000 audit: BPF prog-id=117 op=LOAD Jul 15 11:37:50.312000 audit[2236]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000217c30 a2=78 a3=c00009fbb8 items=0 ppid=2052 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:50.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938656437303832626635393130333465646662633535363830363239 Jul 15 11:37:50.478275 env[1204]: time="2025-07-15T11:37:50.478209534Z" level=info msg="StartContainer for \"98ed7082bf591034edfbc55680629dad364206a57d95c3f462c1d2d3d362f1f5\" returns successfully" Jul 15 11:37:51.354673 kubelet[1929]: E0715 11:37:51.354633 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:51.366237 kubelet[1929]: I0715 11:37:51.366168 1929 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-5bf8dfcb4-8ls8s" podStartSLOduration=2.2602878 podStartE2EDuration="4.366145719s" podCreationTimestamp="2025-07-15 11:37:47 +0000 UTC" firstStartedPulling="2025-07-15 11:37:48.165264324 +0000 UTC m=+5.506246452" lastFinishedPulling="2025-07-15 11:37:50.271122243 +0000 UTC m=+7.612104371" observedRunningTime="2025-07-15 11:37:50.766667365 +0000 UTC m=+8.107649493" watchObservedRunningTime="2025-07-15 11:37:51.366145719 +0000 UTC m=+8.707127847" Jul 15 11:37:51.760677 kubelet[1929]: E0715 11:37:51.760453 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:55.333317 sudo[1340]: pam_unix(sudo:session): session closed for user root Jul 15 11:37:55.332000 audit[1340]: USER_END pid=1340 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:37:55.334498 kernel: kauditd_printk_skb: 357 callbacks suppressed Jul 15 11:37:55.334550 kernel: audit: type=1106 audit(1752579475.332:920): pid=1340 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:37:55.332000 audit[1340]: CRED_DISP pid=1340 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:37:55.340880 kernel: audit: type=1104 audit(1752579475.332:921): pid=1340 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:37:55.342867 sshd[1337]: pam_unix(sshd:session): session closed for user core Jul 15 11:37:55.345421 systemd[1]: sshd@6-10.0.0.140:22-10.0.0.1:59362.service: Deactivated successfully. Jul 15 11:37:55.346471 systemd[1]: session-7.scope: Deactivated successfully. Jul 15 11:37:55.346594 systemd[1]: session-7.scope: Consumed 3.667s CPU time. Jul 15 11:37:55.343000 audit[1337]: USER_END pid=1337 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:37:55.347101 systemd-logind[1189]: Session 7 logged out. Waiting for processes to exit. Jul 15 11:37:55.351491 systemd-logind[1189]: Removed session 7. Jul 15 11:37:55.351952 kernel: audit: type=1106 audit(1752579475.343:922): pid=1337 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:37:55.343000 audit[1337]: CRED_DISP pid=1337 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:37:55.357945 kernel: audit: type=1104 audit(1752579475.343:923): pid=1337 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:37:55.344000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.140:22-10.0.0.1:59362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:55.364942 kernel: audit: type=1131 audit(1752579475.344:924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.140:22-10.0.0.1:59362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:55.766000 audit[2319]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2319 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:37:55.766000 audit[2319]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffe2de92440 a2=0 a3=7ffe2de9242c items=0 ppid=2039 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:55.775595 kernel: audit: type=1325 audit(1752579475.766:925): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2319 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:37:55.775656 kernel: audit: type=1300 audit(1752579475.766:925): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffe2de92440 a2=0 a3=7ffe2de9242c items=0 ppid=2039 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:55.775681 kernel: audit: type=1327 audit(1752579475.766:925): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:37:55.766000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:37:55.780000 audit[2319]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2319 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:37:55.790949 kernel: audit: type=1325 audit(1752579475.780:926): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2319 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:37:55.790991 kernel: audit: type=1300 audit(1752579475.780:926): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe2de92440 a2=0 a3=0 items=0 ppid=2039 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:55.780000 audit[2319]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe2de92440 a2=0 a3=0 items=0 ppid=2039 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:55.780000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:37:55.798000 audit[2321]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2321 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:37:55.798000 audit[2321]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff4d4ff930 a2=0 a3=7fff4d4ff91c items=0 ppid=2039 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:55.798000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:37:55.806000 audit[2321]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2321 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:37:55.806000 audit[2321]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff4d4ff930 a2=0 a3=0 items=0 ppid=2039 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:55.806000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:37:57.529000 audit[2323]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2323 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:37:57.529000 audit[2323]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffe5824e3c0 a2=0 a3=7ffe5824e3ac items=0 ppid=2039 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:57.529000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:37:57.533000 audit[2323]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2323 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:37:57.533000 audit[2323]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe5824e3c0 a2=0 a3=0 items=0 ppid=2039 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:57.533000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:37:57.657271 systemd[1]: Created slice kubepods-besteffort-pod8f3f0f3e_1106_432a_83c3_4eaf26af7cbc.slice. Jul 15 11:37:57.717027 kubelet[1929]: I0715 11:37:57.716973 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/8f3f0f3e-1106-432a-83c3-4eaf26af7cbc-tigera-ca-bundle\") pod \"calico-typha-c7878fccb-vxv4s\" (UID: \"8f3f0f3e-1106-432a-83c3-4eaf26af7cbc\") " pod="calico-system/calico-typha-c7878fccb-vxv4s" Jul 15 11:37:57.717027 kubelet[1929]: I0715 11:37:57.717017 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/8f3f0f3e-1106-432a-83c3-4eaf26af7cbc-typha-certs\") pod \"calico-typha-c7878fccb-vxv4s\" (UID: \"8f3f0f3e-1106-432a-83c3-4eaf26af7cbc\") " pod="calico-system/calico-typha-c7878fccb-vxv4s" Jul 15 11:37:57.717027 kubelet[1929]: I0715 11:37:57.717034 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8fxmz\" (UniqueName: \"kubernetes.io/projected/8f3f0f3e-1106-432a-83c3-4eaf26af7cbc-kube-api-access-8fxmz\") pod \"calico-typha-c7878fccb-vxv4s\" (UID: \"8f3f0f3e-1106-432a-83c3-4eaf26af7cbc\") " pod="calico-system/calico-typha-c7878fccb-vxv4s" Jul 15 11:37:57.802646 kubelet[1929]: E0715 11:37:57.802531 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:57.960810 kubelet[1929]: E0715 11:37:57.960773 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:57.961297 env[1204]: time="2025-07-15T11:37:57.961246355Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-c7878fccb-vxv4s,Uid:8f3f0f3e-1106-432a-83c3-4eaf26af7cbc,Namespace:calico-system,Attempt:0,}" Jul 15 11:37:58.014295 env[1204]: time="2025-07-15T11:37:58.014219364Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:37:58.014295 env[1204]: time="2025-07-15T11:37:58.014260622Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:37:58.014295 env[1204]: time="2025-07-15T11:37:58.014271183Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:37:58.014473 env[1204]: time="2025-07-15T11:37:58.014425926Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/25f74ed2654fe9df17f57acba34b4fa7959a8a4bb333a53416e7750d8cfb50fc pid=2332 runtime=io.containerd.runc.v2 Jul 15 11:37:58.028105 systemd[1]: Started cri-containerd-25f74ed2654fe9df17f57acba34b4fa7959a8a4bb333a53416e7750d8cfb50fc.scope. Jul 15 11:37:58.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.037000 audit: BPF prog-id=118 op=LOAD Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2332 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:58.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235663734656432363534666539646631376635376163626133346234 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2332 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:58.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235663734656432363534666539646631376635376163626133346234 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit: BPF prog-id=119 op=LOAD Jul 15 11:37:58.038000 audit[2342]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002aba10 items=0 ppid=2332 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:58.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235663734656432363534666539646631376635376163626133346234 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit: BPF prog-id=120 op=LOAD Jul 15 11:37:58.038000 audit[2342]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002aba58 items=0 ppid=2332 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:58.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235663734656432363534666539646631376635376163626133346234 Jul 15 11:37:58.038000 audit: BPF prog-id=120 op=UNLOAD Jul 15 11:37:58.038000 audit: BPF prog-id=119 op=UNLOAD Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:58.038000 audit: BPF prog-id=121 op=LOAD Jul 15 11:37:58.038000 audit[2342]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002abe68 items=0 ppid=2332 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:58.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235663734656432363534666539646631376635376163626133346234 Jul 15 11:37:58.065898 kubelet[1929]: W0715 11:37:58.064800 1929 reflector.go:561] object-"calico-system"/"node-certs": failed to list *v1.Secret: secrets "node-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'localhost' and this object Jul 15 11:37:58.065898 kubelet[1929]: E0715 11:37:58.064839 1929 reflector.go:158] "Unhandled Error" err="object-\"calico-system\"/\"node-certs\": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets \"node-certs\" is forbidden: User \"system:node:localhost\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Jul 15 11:37:58.065898 kubelet[1929]: W0715 11:37:58.064893 1929 reflector.go:561] object-"calico-system"/"cni-config": failed to list *v1.ConfigMap: configmaps "cni-config" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'localhost' and this object Jul 15 11:37:58.065898 kubelet[1929]: E0715 11:37:58.064904 1929 reflector.go:158] "Unhandled Error" err="object-\"calico-system\"/\"cni-config\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"cni-config\" is forbidden: User \"system:node:localhost\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Jul 15 11:37:58.066358 systemd[1]: Created slice kubepods-besteffort-podb9f8afc2_549e_4cf0_8034_67d3d60ae111.slice. Jul 15 11:37:58.070294 env[1204]: time="2025-07-15T11:37:58.070248251Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-c7878fccb-vxv4s,Uid:8f3f0f3e-1106-432a-83c3-4eaf26af7cbc,Namespace:calico-system,Attempt:0,} returns sandbox id \"25f74ed2654fe9df17f57acba34b4fa7959a8a4bb333a53416e7750d8cfb50fc\"" Jul 15 11:37:58.071227 kubelet[1929]: E0715 11:37:58.071205 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:37:58.071860 env[1204]: time="2025-07-15T11:37:58.071800740Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 15 11:37:58.120387 kubelet[1929]: I0715 11:37:58.120329 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/b9f8afc2-549e-4cf0-8034-67d3d60ae111-node-certs\") pod \"calico-node-5bt7l\" (UID: \"b9f8afc2-549e-4cf0-8034-67d3d60ae111\") " pod="calico-system/calico-node-5bt7l" Jul 15 11:37:58.120466 kubelet[1929]: I0715 11:37:58.120392 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/b9f8afc2-549e-4cf0-8034-67d3d60ae111-cni-net-dir\") pod \"calico-node-5bt7l\" (UID: \"b9f8afc2-549e-4cf0-8034-67d3d60ae111\") " pod="calico-system/calico-node-5bt7l" Jul 15 11:37:58.120466 kubelet[1929]: I0715 11:37:58.120417 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b9f8afc2-549e-4cf0-8034-67d3d60ae111-tigera-ca-bundle\") pod \"calico-node-5bt7l\" (UID: \"b9f8afc2-549e-4cf0-8034-67d3d60ae111\") " pod="calico-system/calico-node-5bt7l" Jul 15 11:37:58.120466 kubelet[1929]: I0715 11:37:58.120435 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/b9f8afc2-549e-4cf0-8034-67d3d60ae111-var-lib-calico\") pod \"calico-node-5bt7l\" (UID: \"b9f8afc2-549e-4cf0-8034-67d3d60ae111\") " pod="calico-system/calico-node-5bt7l" Jul 15 11:37:58.120466 kubelet[1929]: I0715 11:37:58.120455 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pv688\" (UniqueName: \"kubernetes.io/projected/b9f8afc2-549e-4cf0-8034-67d3d60ae111-kube-api-access-pv688\") pod \"calico-node-5bt7l\" (UID: \"b9f8afc2-549e-4cf0-8034-67d3d60ae111\") " pod="calico-system/calico-node-5bt7l" Jul 15 11:37:58.120556 kubelet[1929]: I0715 11:37:58.120474 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/b9f8afc2-549e-4cf0-8034-67d3d60ae111-cni-bin-dir\") pod \"calico-node-5bt7l\" (UID: \"b9f8afc2-549e-4cf0-8034-67d3d60ae111\") " pod="calico-system/calico-node-5bt7l" Jul 15 11:37:58.120556 kubelet[1929]: I0715 11:37:58.120496 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/b9f8afc2-549e-4cf0-8034-67d3d60ae111-cni-log-dir\") pod \"calico-node-5bt7l\" (UID: \"b9f8afc2-549e-4cf0-8034-67d3d60ae111\") " pod="calico-system/calico-node-5bt7l" Jul 15 11:37:58.120654 kubelet[1929]: I0715 11:37:58.120614 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b9f8afc2-549e-4cf0-8034-67d3d60ae111-lib-modules\") pod \"calico-node-5bt7l\" (UID: \"b9f8afc2-549e-4cf0-8034-67d3d60ae111\") " pod="calico-system/calico-node-5bt7l" Jul 15 11:37:58.120699 kubelet[1929]: I0715 11:37:58.120676 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/b9f8afc2-549e-4cf0-8034-67d3d60ae111-policysync\") pod \"calico-node-5bt7l\" (UID: \"b9f8afc2-549e-4cf0-8034-67d3d60ae111\") " pod="calico-system/calico-node-5bt7l" Jul 15 11:37:58.120767 kubelet[1929]: I0715 11:37:58.120738 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/b9f8afc2-549e-4cf0-8034-67d3d60ae111-var-run-calico\") pod \"calico-node-5bt7l\" (UID: \"b9f8afc2-549e-4cf0-8034-67d3d60ae111\") " pod="calico-system/calico-node-5bt7l" Jul 15 11:37:58.120795 kubelet[1929]: I0715 11:37:58.120778 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/b9f8afc2-549e-4cf0-8034-67d3d60ae111-flexvol-driver-host\") pod \"calico-node-5bt7l\" (UID: \"b9f8afc2-549e-4cf0-8034-67d3d60ae111\") " pod="calico-system/calico-node-5bt7l" Jul 15 11:37:58.120821 kubelet[1929]: I0715 11:37:58.120793 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b9f8afc2-549e-4cf0-8034-67d3d60ae111-xtables-lock\") pod \"calico-node-5bt7l\" (UID: \"b9f8afc2-549e-4cf0-8034-67d3d60ae111\") " pod="calico-system/calico-node-5bt7l" Jul 15 11:37:58.223032 kubelet[1929]: E0715 11:37:58.222997 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.223032 kubelet[1929]: W0715 11:37:58.223018 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.223032 kubelet[1929]: E0715 11:37:58.223043 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.228515 kubelet[1929]: E0715 11:37:58.228472 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.228515 kubelet[1929]: W0715 11:37:58.228493 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.228515 kubelet[1929]: E0715 11:37:58.228512 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.300140 kubelet[1929]: E0715 11:37:58.300093 1929 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-gc5v5" podUID="ff487f86-aaa8-4b99-8f59-bc40829e41d4" Jul 15 11:37:58.317170 kubelet[1929]: E0715 11:37:58.317058 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.317170 kubelet[1929]: W0715 11:37:58.317078 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.317170 kubelet[1929]: E0715 11:37:58.317096 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.317365 kubelet[1929]: E0715 11:37:58.317281 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.317365 kubelet[1929]: W0715 11:37:58.317288 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.317365 kubelet[1929]: E0715 11:37:58.317295 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.317466 kubelet[1929]: E0715 11:37:58.317452 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.317466 kubelet[1929]: W0715 11:37:58.317464 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.317524 kubelet[1929]: E0715 11:37:58.317471 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.317682 kubelet[1929]: E0715 11:37:58.317666 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.317682 kubelet[1929]: W0715 11:37:58.317676 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.317682 kubelet[1929]: E0715 11:37:58.317697 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.317953 kubelet[1929]: E0715 11:37:58.317906 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.317953 kubelet[1929]: W0715 11:37:58.317937 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.317953 kubelet[1929]: E0715 11:37:58.317945 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.318191 kubelet[1929]: E0715 11:37:58.318144 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.318191 kubelet[1929]: W0715 11:37:58.318151 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.318191 kubelet[1929]: E0715 11:37:58.318157 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.318309 kubelet[1929]: E0715 11:37:58.318294 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.318309 kubelet[1929]: W0715 11:37:58.318303 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.318309 kubelet[1929]: E0715 11:37:58.318310 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.318526 kubelet[1929]: E0715 11:37:58.318510 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.318526 kubelet[1929]: W0715 11:37:58.318520 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.318526 kubelet[1929]: E0715 11:37:58.318527 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.318722 kubelet[1929]: E0715 11:37:58.318708 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.318722 kubelet[1929]: W0715 11:37:58.318718 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.318773 kubelet[1929]: E0715 11:37:58.318724 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.318873 kubelet[1929]: E0715 11:37:58.318862 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.318873 kubelet[1929]: W0715 11:37:58.318871 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.318920 kubelet[1929]: E0715 11:37:58.318878 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.319034 kubelet[1929]: E0715 11:37:58.319023 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.319034 kubelet[1929]: W0715 11:37:58.319032 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.319083 kubelet[1929]: E0715 11:37:58.319040 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.319177 kubelet[1929]: E0715 11:37:58.319166 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.319177 kubelet[1929]: W0715 11:37:58.319174 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.319224 kubelet[1929]: E0715 11:37:58.319181 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.319331 kubelet[1929]: E0715 11:37:58.319319 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.319331 kubelet[1929]: W0715 11:37:58.319329 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.319379 kubelet[1929]: E0715 11:37:58.319336 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.319491 kubelet[1929]: E0715 11:37:58.319477 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.319491 kubelet[1929]: W0715 11:37:58.319485 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.319491 kubelet[1929]: E0715 11:37:58.319494 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.319670 kubelet[1929]: E0715 11:37:58.319653 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.319670 kubelet[1929]: W0715 11:37:58.319665 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.319739 kubelet[1929]: E0715 11:37:58.319674 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.319829 kubelet[1929]: E0715 11:37:58.319815 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.319829 kubelet[1929]: W0715 11:37:58.319824 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.319829 kubelet[1929]: E0715 11:37:58.319831 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.319993 kubelet[1929]: E0715 11:37:58.319978 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.319993 kubelet[1929]: W0715 11:37:58.319987 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.319993 kubelet[1929]: E0715 11:37:58.319994 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.320139 kubelet[1929]: E0715 11:37:58.320125 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.320139 kubelet[1929]: W0715 11:37:58.320133 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.320139 kubelet[1929]: E0715 11:37:58.320140 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.320281 kubelet[1929]: E0715 11:37:58.320267 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.320281 kubelet[1929]: W0715 11:37:58.320275 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.320281 kubelet[1929]: E0715 11:37:58.320282 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.320419 kubelet[1929]: E0715 11:37:58.320406 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.320419 kubelet[1929]: W0715 11:37:58.320415 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.320464 kubelet[1929]: E0715 11:37:58.320421 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.322786 kubelet[1929]: E0715 11:37:58.322760 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.322786 kubelet[1929]: W0715 11:37:58.322779 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.322852 kubelet[1929]: E0715 11:37:58.322794 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.322973 kubelet[1929]: E0715 11:37:58.322957 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.322973 kubelet[1929]: W0715 11:37:58.322966 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.322973 kubelet[1929]: E0715 11:37:58.322973 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.323070 kubelet[1929]: I0715 11:37:58.322998 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/ff487f86-aaa8-4b99-8f59-bc40829e41d4-registration-dir\") pod \"csi-node-driver-gc5v5\" (UID: \"ff487f86-aaa8-4b99-8f59-bc40829e41d4\") " pod="calico-system/csi-node-driver-gc5v5" Jul 15 11:37:58.323185 kubelet[1929]: E0715 11:37:58.323160 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.323185 kubelet[1929]: W0715 11:37:58.323172 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.323185 kubelet[1929]: E0715 11:37:58.323184 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.323256 kubelet[1929]: I0715 11:37:58.323196 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/ff487f86-aaa8-4b99-8f59-bc40829e41d4-socket-dir\") pod \"csi-node-driver-gc5v5\" (UID: \"ff487f86-aaa8-4b99-8f59-bc40829e41d4\") " pod="calico-system/csi-node-driver-gc5v5" Jul 15 11:37:58.323427 kubelet[1929]: E0715 11:37:58.323398 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.323427 kubelet[1929]: W0715 11:37:58.323421 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.323480 kubelet[1929]: E0715 11:37:58.323448 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.323618 kubelet[1929]: E0715 11:37:58.323605 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.323618 kubelet[1929]: W0715 11:37:58.323615 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.323704 kubelet[1929]: E0715 11:37:58.323627 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.323812 kubelet[1929]: E0715 11:37:58.323796 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.323812 kubelet[1929]: W0715 11:37:58.323809 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.323865 kubelet[1929]: E0715 11:37:58.323823 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.323865 kubelet[1929]: I0715 11:37:58.323847 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/ff487f86-aaa8-4b99-8f59-bc40829e41d4-kubelet-dir\") pod \"csi-node-driver-gc5v5\" (UID: \"ff487f86-aaa8-4b99-8f59-bc40829e41d4\") " pod="calico-system/csi-node-driver-gc5v5" Jul 15 11:37:58.324034 kubelet[1929]: E0715 11:37:58.324019 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.324034 kubelet[1929]: W0715 11:37:58.324029 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.324106 kubelet[1929]: E0715 11:37:58.324040 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.324106 kubelet[1929]: I0715 11:37:58.324054 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8hhb8\" (UniqueName: \"kubernetes.io/projected/ff487f86-aaa8-4b99-8f59-bc40829e41d4-kube-api-access-8hhb8\") pod \"csi-node-driver-gc5v5\" (UID: \"ff487f86-aaa8-4b99-8f59-bc40829e41d4\") " pod="calico-system/csi-node-driver-gc5v5" Jul 15 11:37:58.324282 kubelet[1929]: E0715 11:37:58.324255 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.324340 kubelet[1929]: W0715 11:37:58.324282 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.324340 kubelet[1929]: E0715 11:37:58.324313 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.324400 kubelet[1929]: I0715 11:37:58.324343 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/ff487f86-aaa8-4b99-8f59-bc40829e41d4-varrun\") pod \"csi-node-driver-gc5v5\" (UID: \"ff487f86-aaa8-4b99-8f59-bc40829e41d4\") " pod="calico-system/csi-node-driver-gc5v5" Jul 15 11:37:58.324562 kubelet[1929]: E0715 11:37:58.324547 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.324562 kubelet[1929]: W0715 11:37:58.324558 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.324715 kubelet[1929]: E0715 11:37:58.324594 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.324715 kubelet[1929]: E0715 11:37:58.324701 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.324715 kubelet[1929]: W0715 11:37:58.324708 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.324789 kubelet[1929]: E0715 11:37:58.324729 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.324849 kubelet[1929]: E0715 11:37:58.324837 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.324849 kubelet[1929]: W0715 11:37:58.324845 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.324894 kubelet[1929]: E0715 11:37:58.324859 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.325067 kubelet[1929]: E0715 11:37:58.325052 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.325067 kubelet[1929]: W0715 11:37:58.325065 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.325129 kubelet[1929]: E0715 11:37:58.325078 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.325264 kubelet[1929]: E0715 11:37:58.325251 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.325264 kubelet[1929]: W0715 11:37:58.325263 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.325330 kubelet[1929]: E0715 11:37:58.325272 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.325444 kubelet[1929]: E0715 11:37:58.325430 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.325444 kubelet[1929]: W0715 11:37:58.325443 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.325498 kubelet[1929]: E0715 11:37:58.325453 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.325618 kubelet[1929]: E0715 11:37:58.325606 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.325618 kubelet[1929]: W0715 11:37:58.325615 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.325676 kubelet[1929]: E0715 11:37:58.325622 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.325806 kubelet[1929]: E0715 11:37:58.325786 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.325806 kubelet[1929]: W0715 11:37:58.325799 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.325895 kubelet[1929]: E0715 11:37:58.325811 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.425772 kubelet[1929]: E0715 11:37:58.425738 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.425772 kubelet[1929]: W0715 11:37:58.425761 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.425772 kubelet[1929]: E0715 11:37:58.425779 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.426034 kubelet[1929]: E0715 11:37:58.426018 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.426034 kubelet[1929]: W0715 11:37:58.426029 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.426111 kubelet[1929]: E0715 11:37:58.426039 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.426188 kubelet[1929]: E0715 11:37:58.426174 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.426188 kubelet[1929]: W0715 11:37:58.426185 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.426236 kubelet[1929]: E0715 11:37:58.426192 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.428162 kubelet[1929]: E0715 11:37:58.428115 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.428162 kubelet[1929]: W0715 11:37:58.428151 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.428162 kubelet[1929]: E0715 11:37:58.428163 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.428503 kubelet[1929]: E0715 11:37:58.428398 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.428503 kubelet[1929]: W0715 11:37:58.428407 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.428503 kubelet[1929]: E0715 11:37:58.428454 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.428596 kubelet[1929]: E0715 11:37:58.428581 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.428621 kubelet[1929]: W0715 11:37:58.428608 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.428783 kubelet[1929]: E0715 11:37:58.428694 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.428842 kubelet[1929]: E0715 11:37:58.428823 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.428842 kubelet[1929]: W0715 11:37:58.428836 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.428892 kubelet[1929]: E0715 11:37:58.428871 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.429103 kubelet[1929]: E0715 11:37:58.429072 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.429103 kubelet[1929]: W0715 11:37:58.429086 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.429176 kubelet[1929]: E0715 11:37:58.429123 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.429298 kubelet[1929]: E0715 11:37:58.429283 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.429298 kubelet[1929]: W0715 11:37:58.429294 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.429372 kubelet[1929]: E0715 11:37:58.429304 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.429478 kubelet[1929]: E0715 11:37:58.429463 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.429478 kubelet[1929]: W0715 11:37:58.429474 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.429527 kubelet[1929]: E0715 11:37:58.429506 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.429697 kubelet[1929]: E0715 11:37:58.429676 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.429697 kubelet[1929]: W0715 11:37:58.429688 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.429745 kubelet[1929]: E0715 11:37:58.429719 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.429884 kubelet[1929]: E0715 11:37:58.429869 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.429884 kubelet[1929]: W0715 11:37:58.429880 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.429977 kubelet[1929]: E0715 11:37:58.429946 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.430075 kubelet[1929]: E0715 11:37:58.430058 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.430075 kubelet[1929]: W0715 11:37:58.430069 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.430151 kubelet[1929]: E0715 11:37:58.430100 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.430241 kubelet[1929]: E0715 11:37:58.430225 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.430296 kubelet[1929]: W0715 11:37:58.430252 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.430326 kubelet[1929]: E0715 11:37:58.430304 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.430435 kubelet[1929]: E0715 11:37:58.430413 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.430435 kubelet[1929]: W0715 11:37:58.430426 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.430509 kubelet[1929]: E0715 11:37:58.430485 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.430610 kubelet[1929]: E0715 11:37:58.430584 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.430610 kubelet[1929]: W0715 11:37:58.430596 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.430710 kubelet[1929]: E0715 11:37:58.430646 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.430827 kubelet[1929]: E0715 11:37:58.430809 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.430827 kubelet[1929]: W0715 11:37:58.430820 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.430898 kubelet[1929]: E0715 11:37:58.430830 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.431167 kubelet[1929]: E0715 11:37:58.431152 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.431167 kubelet[1929]: W0715 11:37:58.431163 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.431279 kubelet[1929]: E0715 11:37:58.431174 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.431461 kubelet[1929]: E0715 11:37:58.431440 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.431505 kubelet[1929]: W0715 11:37:58.431469 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.431505 kubelet[1929]: E0715 11:37:58.431481 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.434780 kubelet[1929]: E0715 11:37:58.434734 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.434780 kubelet[1929]: W0715 11:37:58.434763 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.434860 kubelet[1929]: E0715 11:37:58.434811 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.435151 kubelet[1929]: E0715 11:37:58.435106 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.435151 kubelet[1929]: W0715 11:37:58.435137 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.435292 kubelet[1929]: E0715 11:37:58.435264 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.435583 kubelet[1929]: E0715 11:37:58.435573 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.435675 kubelet[1929]: W0715 11:37:58.435660 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.435810 kubelet[1929]: E0715 11:37:58.435797 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.436011 kubelet[1929]: E0715 11:37:58.436001 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.436101 kubelet[1929]: W0715 11:37:58.436087 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.436266 kubelet[1929]: E0715 11:37:58.436255 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.436431 kubelet[1929]: E0715 11:37:58.436421 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.436502 kubelet[1929]: W0715 11:37:58.436487 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.436582 kubelet[1929]: E0715 11:37:58.436568 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.444496 kubelet[1929]: E0715 11:37:58.444476 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.445507 kubelet[1929]: W0715 11:37:58.445488 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.445600 kubelet[1929]: E0715 11:37:58.445574 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.445823 kubelet[1929]: E0715 11:37:58.445809 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.445823 kubelet[1929]: W0715 11:37:58.445819 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.445906 kubelet[1929]: E0715 11:37:58.445831 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.446092 kubelet[1929]: E0715 11:37:58.446066 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.446092 kubelet[1929]: W0715 11:37:58.446089 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.446171 kubelet[1929]: E0715 11:37:58.446115 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.531202 kubelet[1929]: E0715 11:37:58.531162 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.531202 kubelet[1929]: W0715 11:37:58.531181 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.531202 kubelet[1929]: E0715 11:37:58.531197 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.542000 audit[2436]: NETFILTER_CFG table=filter:95 family=2 entries=20 op=nft_register_rule pid=2436 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:37:58.542000 audit[2436]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fffba6ea930 a2=0 a3=7fffba6ea91c items=0 ppid=2039 pid=2436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:58.542000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:37:58.546000 audit[2436]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2436 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:37:58.546000 audit[2436]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffba6ea930 a2=0 a3=0 items=0 ppid=2039 pid=2436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:58.546000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:37:58.632233 kubelet[1929]: E0715 11:37:58.632125 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.632233 kubelet[1929]: W0715 11:37:58.632145 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.632233 kubelet[1929]: E0715 11:37:58.632163 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.733500 kubelet[1929]: E0715 11:37:58.733460 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.733500 kubelet[1929]: W0715 11:37:58.733479 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.733500 kubelet[1929]: E0715 11:37:58.733496 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.823109 systemd[1]: run-containerd-runc-k8s.io-25f74ed2654fe9df17f57acba34b4fa7959a8a4bb333a53416e7750d8cfb50fc-runc.QfKw1X.mount: Deactivated successfully. Jul 15 11:37:58.834802 kubelet[1929]: E0715 11:37:58.834761 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.834802 kubelet[1929]: W0715 11:37:58.834783 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.834802 kubelet[1929]: E0715 11:37:58.834802 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:58.839493 update_engine[1192]: I0715 11:37:58.839454 1192 update_attempter.cc:509] Updating boot flags... Jul 15 11:37:58.935490 kubelet[1929]: E0715 11:37:58.935461 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:58.935490 kubelet[1929]: W0715 11:37:58.935481 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:58.935714 kubelet[1929]: E0715 11:37:58.935500 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:59.036156 kubelet[1929]: E0715 11:37:59.036116 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:59.036156 kubelet[1929]: W0715 11:37:59.036139 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:59.036156 kubelet[1929]: E0715 11:37:59.036159 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:59.137397 kubelet[1929]: E0715 11:37:59.137365 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:59.137397 kubelet[1929]: W0715 11:37:59.137383 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:59.137397 kubelet[1929]: E0715 11:37:59.137401 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:59.222519 kubelet[1929]: E0715 11:37:59.222410 1929 secret.go:189] Couldn't get secret calico-system/node-certs: failed to sync secret cache: timed out waiting for the condition Jul 15 11:37:59.222519 kubelet[1929]: E0715 11:37:59.222501 1929 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/b9f8afc2-549e-4cf0-8034-67d3d60ae111-node-certs podName:b9f8afc2-549e-4cf0-8034-67d3d60ae111 nodeName:}" failed. No retries permitted until 2025-07-15 11:37:59.722481325 +0000 UTC m=+17.063463453 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "node-certs" (UniqueName: "kubernetes.io/secret/b9f8afc2-549e-4cf0-8034-67d3d60ae111-node-certs") pod "calico-node-5bt7l" (UID: "b9f8afc2-549e-4cf0-8034-67d3d60ae111") : failed to sync secret cache: timed out waiting for the condition Jul 15 11:37:59.238722 kubelet[1929]: E0715 11:37:59.238690 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:59.238722 kubelet[1929]: W0715 11:37:59.238712 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:59.238902 kubelet[1929]: E0715 11:37:59.238739 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:59.332038 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount760681964.mount: Deactivated successfully. Jul 15 11:37:59.339947 kubelet[1929]: E0715 11:37:59.339893 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:59.339947 kubelet[1929]: W0715 11:37:59.339914 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:59.339947 kubelet[1929]: E0715 11:37:59.339942 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:59.441119 kubelet[1929]: E0715 11:37:59.441084 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:59.441119 kubelet[1929]: W0715 11:37:59.441106 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:59.441119 kubelet[1929]: E0715 11:37:59.441126 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:59.542394 kubelet[1929]: E0715 11:37:59.542264 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:59.542394 kubelet[1929]: W0715 11:37:59.542291 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:59.542394 kubelet[1929]: E0715 11:37:59.542314 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:59.643817 kubelet[1929]: E0715 11:37:59.643779 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:59.643817 kubelet[1929]: W0715 11:37:59.643801 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:59.644019 kubelet[1929]: E0715 11:37:59.643833 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:59.744994 kubelet[1929]: E0715 11:37:59.744967 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:59.744994 kubelet[1929]: W0715 11:37:59.744986 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:59.745484 kubelet[1929]: E0715 11:37:59.745005 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:59.745484 kubelet[1929]: E0715 11:37:59.745236 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:59.745484 kubelet[1929]: W0715 11:37:59.745246 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:59.745484 kubelet[1929]: E0715 11:37:59.745255 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:59.745484 kubelet[1929]: E0715 11:37:59.745367 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:59.745484 kubelet[1929]: W0715 11:37:59.745375 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:59.745484 kubelet[1929]: E0715 11:37:59.745382 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:59.745671 kubelet[1929]: E0715 11:37:59.745495 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:59.745671 kubelet[1929]: W0715 11:37:59.745504 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:59.745671 kubelet[1929]: E0715 11:37:59.745512 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:59.745748 kubelet[1929]: E0715 11:37:59.745672 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:59.745748 kubelet[1929]: W0715 11:37:59.745681 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:59.745748 kubelet[1929]: E0715 11:37:59.745692 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:59.750986 kubelet[1929]: E0715 11:37:59.750910 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:37:59.750986 kubelet[1929]: W0715 11:37:59.750958 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:37:59.750986 kubelet[1929]: E0715 11:37:59.750983 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:37:59.869903 env[1204]: time="2025-07-15T11:37:59.869797898Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-5bt7l,Uid:b9f8afc2-549e-4cf0-8034-67d3d60ae111,Namespace:calico-system,Attempt:0,}" Jul 15 11:37:59.888120 env[1204]: time="2025-07-15T11:37:59.887967501Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:37:59.888120 env[1204]: time="2025-07-15T11:37:59.888004782Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:37:59.888120 env[1204]: time="2025-07-15T11:37:59.888015401Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:37:59.888337 env[1204]: time="2025-07-15T11:37:59.888293790Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4fb17f19b1b1e314d718eebd813d06967849ef65ec02a779a474f98ce40b9313 pid=2477 runtime=io.containerd.runc.v2 Jul 15 11:37:59.902004 systemd[1]: Started cri-containerd-4fb17f19b1b1e314d718eebd813d06967849ef65ec02a779a474f98ce40b9313.scope. Jul 15 11:37:59.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit: BPF prog-id=122 op=LOAD Jul 15 11:37:59.911000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[2486]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2477 pid=2486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:59.911000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466623137663139623162316533313464373138656562643831336430 Jul 15 11:37:59.911000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[2486]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2477 pid=2486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:59.911000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466623137663139623162316533313464373138656562643831336430 Jul 15 11:37:59.911000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit: BPF prog-id=123 op=LOAD Jul 15 11:37:59.911000 audit[2486]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00030c350 items=0 ppid=2477 pid=2486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:59.911000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466623137663139623162316533313464373138656562643831336430 Jul 15 11:37:59.911000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.911000 audit: BPF prog-id=124 op=LOAD Jul 15 11:37:59.911000 audit[2486]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00030c398 items=0 ppid=2477 pid=2486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:59.911000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466623137663139623162316533313464373138656562643831336430 Jul 15 11:37:59.912000 audit: BPF prog-id=124 op=UNLOAD Jul 15 11:37:59.912000 audit: BPF prog-id=123 op=UNLOAD Jul 15 11:37:59.912000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.912000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.912000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.912000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.912000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.912000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.912000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.912000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.912000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.912000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:59.912000 audit: BPF prog-id=125 op=LOAD Jul 15 11:37:59.912000 audit[2486]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00030c7a8 items=0 ppid=2477 pid=2486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:59.912000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466623137663139623162316533313464373138656562643831336430 Jul 15 11:37:59.923976 env[1204]: time="2025-07-15T11:37:59.923912929Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-5bt7l,Uid:b9f8afc2-549e-4cf0-8034-67d3d60ae111,Namespace:calico-system,Attempt:0,} returns sandbox id \"4fb17f19b1b1e314d718eebd813d06967849ef65ec02a779a474f98ce40b9313\"" Jul 15 11:38:00.235369 env[1204]: time="2025-07-15T11:38:00.235319985Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:00.237187 env[1204]: time="2025-07-15T11:38:00.237147711Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:00.238800 env[1204]: time="2025-07-15T11:38:00.238749660Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:00.240265 env[1204]: time="2025-07-15T11:38:00.240230517Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:00.240659 env[1204]: time="2025-07-15T11:38:00.240617512Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54\"" Jul 15 11:38:00.241755 env[1204]: time="2025-07-15T11:38:00.241700666Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 15 11:38:00.253557 env[1204]: time="2025-07-15T11:38:00.253517815Z" level=info msg="CreateContainer within sandbox \"25f74ed2654fe9df17f57acba34b4fa7959a8a4bb333a53416e7750d8cfb50fc\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 15 11:38:00.263578 env[1204]: time="2025-07-15T11:38:00.263529702Z" level=info msg="CreateContainer within sandbox \"25f74ed2654fe9df17f57acba34b4fa7959a8a4bb333a53416e7750d8cfb50fc\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"94da4dbda46afcd508ad23d3f52d5b6b1fe1e080de640acb8ccb4cb2bb9a1ab3\"" Jul 15 11:38:00.264664 env[1204]: time="2025-07-15T11:38:00.264623987Z" level=info msg="StartContainer for \"94da4dbda46afcd508ad23d3f52d5b6b1fe1e080de640acb8ccb4cb2bb9a1ab3\"" Jul 15 11:38:00.277536 systemd[1]: Started cri-containerd-94da4dbda46afcd508ad23d3f52d5b6b1fe1e080de640acb8ccb4cb2bb9a1ab3.scope. Jul 15 11:38:00.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit: BPF prog-id=126 op=LOAD Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2332 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:00.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934646134646264613436616663643530386164323364336635326435 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2332 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:00.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934646134646264613436616663643530386164323364336635326435 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit: BPF prog-id=127 op=LOAD Jul 15 11:38:00.288000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000382e90 items=0 ppid=2332 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:00.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934646134646264613436616663643530386164323364336635326435 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit: BPF prog-id=128 op=LOAD Jul 15 11:38:00.288000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000382ed8 items=0 ppid=2332 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:00.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934646134646264613436616663643530386164323364336635326435 Jul 15 11:38:00.288000 audit: BPF prog-id=128 op=UNLOAD Jul 15 11:38:00.288000 audit: BPF prog-id=127 op=UNLOAD Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:00.288000 audit: BPF prog-id=129 op=LOAD Jul 15 11:38:00.288000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003832e8 items=0 ppid=2332 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:00.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934646134646264613436616663643530386164323364336635326435 Jul 15 11:38:00.439421 env[1204]: time="2025-07-15T11:38:00.439368420Z" level=info msg="StartContainer for \"94da4dbda46afcd508ad23d3f52d5b6b1fe1e080de640acb8ccb4cb2bb9a1ab3\" returns successfully" Jul 15 11:38:00.733045 kubelet[1929]: E0715 11:38:00.733006 1929 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-gc5v5" podUID="ff487f86-aaa8-4b99-8f59-bc40829e41d4" Jul 15 11:38:00.776963 kubelet[1929]: E0715 11:38:00.776939 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:38:00.789451 kubelet[1929]: I0715 11:38:00.789396 1929 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-c7878fccb-vxv4s" podStartSLOduration=1.619671582 podStartE2EDuration="3.789379395s" podCreationTimestamp="2025-07-15 11:37:57 +0000 UTC" firstStartedPulling="2025-07-15 11:37:58.071571103 +0000 UTC m=+15.412553221" lastFinishedPulling="2025-07-15 11:38:00.241278896 +0000 UTC m=+17.582261034" observedRunningTime="2025-07-15 11:38:00.788683205 +0000 UTC m=+18.129665333" watchObservedRunningTime="2025-07-15 11:38:00.789379395 +0000 UTC m=+18.130361523" Jul 15 11:38:00.839044 kubelet[1929]: E0715 11:38:00.839008 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.839044 kubelet[1929]: W0715 11:38:00.839031 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.839044 kubelet[1929]: E0715 11:38:00.839047 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.839257 kubelet[1929]: E0715 11:38:00.839233 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.839257 kubelet[1929]: W0715 11:38:00.839238 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.839257 kubelet[1929]: E0715 11:38:00.839245 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.839391 kubelet[1929]: E0715 11:38:00.839380 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.839391 kubelet[1929]: W0715 11:38:00.839388 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.839459 kubelet[1929]: E0715 11:38:00.839394 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.839548 kubelet[1929]: E0715 11:38:00.839537 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.839548 kubelet[1929]: W0715 11:38:00.839545 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.839620 kubelet[1929]: E0715 11:38:00.839552 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.839725 kubelet[1929]: E0715 11:38:00.839713 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.839725 kubelet[1929]: W0715 11:38:00.839723 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.839796 kubelet[1929]: E0715 11:38:00.839739 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.839873 kubelet[1929]: E0715 11:38:00.839863 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.839873 kubelet[1929]: W0715 11:38:00.839870 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.839958 kubelet[1929]: E0715 11:38:00.839876 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.840051 kubelet[1929]: E0715 11:38:00.840033 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.840108 kubelet[1929]: W0715 11:38:00.840049 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.840108 kubelet[1929]: E0715 11:38:00.840065 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.840245 kubelet[1929]: E0715 11:38:00.840228 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.840303 kubelet[1929]: W0715 11:38:00.840256 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.840303 kubelet[1929]: E0715 11:38:00.840271 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.840542 kubelet[1929]: E0715 11:38:00.840525 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.840542 kubelet[1929]: W0715 11:38:00.840536 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.840642 kubelet[1929]: E0715 11:38:00.840551 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.840749 kubelet[1929]: E0715 11:38:00.840732 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.840749 kubelet[1929]: W0715 11:38:00.840744 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.840841 kubelet[1929]: E0715 11:38:00.840759 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.840915 kubelet[1929]: E0715 11:38:00.840902 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.840915 kubelet[1929]: W0715 11:38:00.840912 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.841016 kubelet[1929]: E0715 11:38:00.840934 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.841099 kubelet[1929]: E0715 11:38:00.841086 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.841099 kubelet[1929]: W0715 11:38:00.841096 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.841175 kubelet[1929]: E0715 11:38:00.841106 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.841276 kubelet[1929]: E0715 11:38:00.841263 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.841276 kubelet[1929]: W0715 11:38:00.841273 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.841355 kubelet[1929]: E0715 11:38:00.841282 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.841436 kubelet[1929]: E0715 11:38:00.841424 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.841436 kubelet[1929]: W0715 11:38:00.841434 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.841513 kubelet[1929]: E0715 11:38:00.841443 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.841611 kubelet[1929]: E0715 11:38:00.841598 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.841611 kubelet[1929]: W0715 11:38:00.841608 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.841700 kubelet[1929]: E0715 11:38:00.841617 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.852817 kubelet[1929]: E0715 11:38:00.852786 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.852817 kubelet[1929]: W0715 11:38:00.852796 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.852817 kubelet[1929]: E0715 11:38:00.852804 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.852969 kubelet[1929]: E0715 11:38:00.852955 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.852969 kubelet[1929]: W0715 11:38:00.852965 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.853045 kubelet[1929]: E0715 11:38:00.852986 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.853164 kubelet[1929]: E0715 11:38:00.853141 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.853164 kubelet[1929]: W0715 11:38:00.853152 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.853246 kubelet[1929]: E0715 11:38:00.853167 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.853382 kubelet[1929]: E0715 11:38:00.853358 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.853382 kubelet[1929]: W0715 11:38:00.853369 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.853456 kubelet[1929]: E0715 11:38:00.853383 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.853544 kubelet[1929]: E0715 11:38:00.853523 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.853544 kubelet[1929]: W0715 11:38:00.853534 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.853620 kubelet[1929]: E0715 11:38:00.853550 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.853702 kubelet[1929]: E0715 11:38:00.853690 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.853702 kubelet[1929]: W0715 11:38:00.853700 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.853779 kubelet[1929]: E0715 11:38:00.853713 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.853899 kubelet[1929]: E0715 11:38:00.853877 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.853899 kubelet[1929]: W0715 11:38:00.853887 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.853997 kubelet[1929]: E0715 11:38:00.853902 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.854177 kubelet[1929]: E0715 11:38:00.854149 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.854177 kubelet[1929]: W0715 11:38:00.854173 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.854261 kubelet[1929]: E0715 11:38:00.854198 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.854390 kubelet[1929]: E0715 11:38:00.854372 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.854390 kubelet[1929]: W0715 11:38:00.854382 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.854478 kubelet[1929]: E0715 11:38:00.854405 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.854549 kubelet[1929]: E0715 11:38:00.854542 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.854549 kubelet[1929]: W0715 11:38:00.854548 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.854613 kubelet[1929]: E0715 11:38:00.854570 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.854725 kubelet[1929]: E0715 11:38:00.854710 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.854725 kubelet[1929]: W0715 11:38:00.854720 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.854797 kubelet[1929]: E0715 11:38:00.854736 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.854913 kubelet[1929]: E0715 11:38:00.854898 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.854913 kubelet[1929]: W0715 11:38:00.854907 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.855012 kubelet[1929]: E0715 11:38:00.854919 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.855112 kubelet[1929]: E0715 11:38:00.855098 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.855112 kubelet[1929]: W0715 11:38:00.855107 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.855187 kubelet[1929]: E0715 11:38:00.855118 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.855274 kubelet[1929]: E0715 11:38:00.855262 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.855274 kubelet[1929]: W0715 11:38:00.855272 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.855342 kubelet[1929]: E0715 11:38:00.855279 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.855426 kubelet[1929]: E0715 11:38:00.855408 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.855426 kubelet[1929]: W0715 11:38:00.855425 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.855488 kubelet[1929]: E0715 11:38:00.855436 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.855597 kubelet[1929]: E0715 11:38:00.855574 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.855597 kubelet[1929]: W0715 11:38:00.855594 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.855687 kubelet[1929]: E0715 11:38:00.855611 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.855858 kubelet[1929]: E0715 11:38:00.855840 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.855858 kubelet[1929]: W0715 11:38:00.855851 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.855965 kubelet[1929]: E0715 11:38:00.855863 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:00.856109 kubelet[1929]: E0715 11:38:00.856045 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:00.856109 kubelet[1929]: W0715 11:38:00.856052 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:00.856109 kubelet[1929]: E0715 11:38:00.856059 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.780598 kubelet[1929]: I0715 11:38:01.780560 1929 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:38:01.781045 kubelet[1929]: E0715 11:38:01.781021 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:38:01.814326 env[1204]: time="2025-07-15T11:38:01.814288319Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:01.816068 env[1204]: time="2025-07-15T11:38:01.816036171Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:01.817674 env[1204]: time="2025-07-15T11:38:01.817654728Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:01.818907 env[1204]: time="2025-07-15T11:38:01.818879449Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:01.819363 env[1204]: time="2025-07-15T11:38:01.819322709Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e\"" Jul 15 11:38:01.823878 env[1204]: time="2025-07-15T11:38:01.823853656Z" level=info msg="CreateContainer within sandbox \"4fb17f19b1b1e314d718eebd813d06967849ef65ec02a779a474f98ce40b9313\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 15 11:38:01.835055 env[1204]: time="2025-07-15T11:38:01.834983156Z" level=info msg="CreateContainer within sandbox \"4fb17f19b1b1e314d718eebd813d06967849ef65ec02a779a474f98ce40b9313\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"26ada1d8aeebca7088dd23600ce33ff5e6386553f009d8bd79ea229b595ee27b\"" Jul 15 11:38:01.835426 env[1204]: time="2025-07-15T11:38:01.835407701Z" level=info msg="StartContainer for \"26ada1d8aeebca7088dd23600ce33ff5e6386553f009d8bd79ea229b595ee27b\"" Jul 15 11:38:01.848601 kubelet[1929]: E0715 11:38:01.848577 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.848601 kubelet[1929]: W0715 11:38:01.848596 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.848761 kubelet[1929]: E0715 11:38:01.848653 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.848861 kubelet[1929]: E0715 11:38:01.848846 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.848931 kubelet[1929]: W0715 11:38:01.848857 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.848931 kubelet[1929]: E0715 11:38:01.848876 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.849779 kubelet[1929]: E0715 11:38:01.849756 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.849779 kubelet[1929]: W0715 11:38:01.849767 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.849779 kubelet[1929]: E0715 11:38:01.849777 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.849984 kubelet[1929]: E0715 11:38:01.849945 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.849984 kubelet[1929]: W0715 11:38:01.849952 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.849984 kubelet[1929]: E0715 11:38:01.849960 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.850188 kubelet[1929]: E0715 11:38:01.850173 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.850188 kubelet[1929]: W0715 11:38:01.850183 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.850283 kubelet[1929]: E0715 11:38:01.850191 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.850325 kubelet[1929]: E0715 11:38:01.850309 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.850384 kubelet[1929]: W0715 11:38:01.850320 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.850384 kubelet[1929]: E0715 11:38:01.850338 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.850548 kubelet[1929]: E0715 11:38:01.850521 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.850548 kubelet[1929]: W0715 11:38:01.850543 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.850642 kubelet[1929]: E0715 11:38:01.850564 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.850769 kubelet[1929]: E0715 11:38:01.850753 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.850769 kubelet[1929]: W0715 11:38:01.850766 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.850858 kubelet[1929]: E0715 11:38:01.850776 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.850981 kubelet[1929]: E0715 11:38:01.850965 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.850981 kubelet[1929]: W0715 11:38:01.850977 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.851056 kubelet[1929]: E0715 11:38:01.850987 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.851150 kubelet[1929]: E0715 11:38:01.851136 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.851150 kubelet[1929]: W0715 11:38:01.851146 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.851236 kubelet[1929]: E0715 11:38:01.851154 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.851306 kubelet[1929]: E0715 11:38:01.851292 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.851306 kubelet[1929]: W0715 11:38:01.851300 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.851306 kubelet[1929]: E0715 11:38:01.851307 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.851472 kubelet[1929]: E0715 11:38:01.851458 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.851472 kubelet[1929]: W0715 11:38:01.851467 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.851547 kubelet[1929]: E0715 11:38:01.851475 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.851655 kubelet[1929]: E0715 11:38:01.851635 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.851655 kubelet[1929]: W0715 11:38:01.851648 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.851740 kubelet[1929]: E0715 11:38:01.851659 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.851858 kubelet[1929]: E0715 11:38:01.851844 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.851858 kubelet[1929]: W0715 11:38:01.851852 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.851858 kubelet[1929]: E0715 11:38:01.851860 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.852029 kubelet[1929]: E0715 11:38:01.852006 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.852029 kubelet[1929]: W0715 11:38:01.852018 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.852029 kubelet[1929]: E0715 11:38:01.852026 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.856589 systemd[1]: Started cri-containerd-26ada1d8aeebca7088dd23600ce33ff5e6386553f009d8bd79ea229b595ee27b.scope. Jul 15 11:38:01.860902 kubelet[1929]: E0715 11:38:01.858560 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.860902 kubelet[1929]: W0715 11:38:01.858577 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.860902 kubelet[1929]: E0715 11:38:01.858602 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.860902 kubelet[1929]: E0715 11:38:01.858806 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.860902 kubelet[1929]: W0715 11:38:01.858813 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.860902 kubelet[1929]: E0715 11:38:01.858823 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.860902 kubelet[1929]: E0715 11:38:01.859006 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.860902 kubelet[1929]: W0715 11:38:01.859013 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.860902 kubelet[1929]: E0715 11:38:01.859022 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.860902 kubelet[1929]: E0715 11:38:01.859162 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.861199 kubelet[1929]: W0715 11:38:01.859170 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.861199 kubelet[1929]: E0715 11:38:01.859180 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.861199 kubelet[1929]: E0715 11:38:01.859295 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.861199 kubelet[1929]: W0715 11:38:01.859312 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.861199 kubelet[1929]: E0715 11:38:01.859319 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.861199 kubelet[1929]: E0715 11:38:01.859418 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.861199 kubelet[1929]: W0715 11:38:01.859425 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.861199 kubelet[1929]: E0715 11:38:01.859433 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.861199 kubelet[1929]: E0715 11:38:01.859572 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.861199 kubelet[1929]: W0715 11:38:01.859578 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.861428 kubelet[1929]: E0715 11:38:01.859586 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.861428 kubelet[1929]: E0715 11:38:01.859736 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.861428 kubelet[1929]: W0715 11:38:01.859742 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.861428 kubelet[1929]: E0715 11:38:01.859750 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.861428 kubelet[1929]: E0715 11:38:01.859882 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.861428 kubelet[1929]: W0715 11:38:01.859888 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.861428 kubelet[1929]: E0715 11:38:01.859896 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.861428 kubelet[1929]: E0715 11:38:01.860010 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.861428 kubelet[1929]: W0715 11:38:01.860016 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.861428 kubelet[1929]: E0715 11:38:01.860034 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.861671 kubelet[1929]: E0715 11:38:01.860120 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.861671 kubelet[1929]: W0715 11:38:01.860126 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.861671 kubelet[1929]: E0715 11:38:01.860145 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.861671 kubelet[1929]: E0715 11:38:01.860258 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.861671 kubelet[1929]: W0715 11:38:01.860264 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.861671 kubelet[1929]: E0715 11:38:01.860272 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.861671 kubelet[1929]: E0715 11:38:01.860372 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.861671 kubelet[1929]: W0715 11:38:01.860378 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.861671 kubelet[1929]: E0715 11:38:01.860387 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.861671 kubelet[1929]: E0715 11:38:01.860496 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.861907 kubelet[1929]: W0715 11:38:01.860512 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.861907 kubelet[1929]: E0715 11:38:01.860520 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.861907 kubelet[1929]: E0715 11:38:01.860918 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.861907 kubelet[1929]: W0715 11:38:01.861023 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.861907 kubelet[1929]: E0715 11:38:01.861035 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.861907 kubelet[1929]: E0715 11:38:01.861638 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.861907 kubelet[1929]: W0715 11:38:01.861645 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.861907 kubelet[1929]: E0715 11:38:01.861655 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.862376 kubelet[1929]: E0715 11:38:01.862244 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.862376 kubelet[1929]: W0715 11:38:01.862258 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.862376 kubelet[1929]: E0715 11:38:01.862268 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.862484 kubelet[1929]: E0715 11:38:01.862453 1929 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:38:01.862484 kubelet[1929]: W0715 11:38:01.862461 1929 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:38:01.862484 kubelet[1929]: E0715 11:38:01.862468 1929 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:38:01.867000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.869257 kernel: kauditd_printk_skb: 190 callbacks suppressed Jul 15 11:38:01.869296 kernel: audit: type=1400 audit(1752579481.867:987): avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.871944 kernel: audit: type=1300 audit(1752579481.867:987): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f7f4c25d298 items=0 ppid=2477 pid=2590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:01.867000 audit[2590]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f7f4c25d298 items=0 ppid=2477 pid=2590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:01.867000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236616461316438616565626361373038386464323336303063653333 Jul 15 11:38:01.880126 kernel: audit: type=1327 audit(1752579481.867:987): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236616461316438616565626361373038386464323336303063653333 Jul 15 11:38:01.880174 kernel: audit: type=1400 audit(1752579481.867:988): avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.867000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.867000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.885839 kernel: audit: type=1400 audit(1752579481.867:988): avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.885895 kernel: audit: type=1400 audit(1752579481.867:988): avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.867000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.867000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.891407 kernel: audit: type=1400 audit(1752579481.867:988): avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.891446 kernel: audit: type=1400 audit(1752579481.867:988): avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.867000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.894176 kernel: audit: type=1400 audit(1752579481.867:988): avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.867000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.867000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.899814 kernel: audit: type=1400 audit(1752579481.867:988): avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.867000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.867000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.867000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.867000 audit: BPF prog-id=130 op=LOAD Jul 15 11:38:01.867000 audit[2590]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0003cc078 items=0 ppid=2477 pid=2590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:01.867000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236616461316438616565626361373038386464323336303063653333 Jul 15 11:38:01.871000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.871000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.871000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.871000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.871000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.871000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.871000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.871000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.871000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.871000 audit: BPF prog-id=131 op=LOAD Jul 15 11:38:01.871000 audit[2590]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0003cc0c8 items=0 ppid=2477 pid=2590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:01.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236616461316438616565626361373038386464323336303063653333 Jul 15 11:38:01.879000 audit: BPF prog-id=131 op=UNLOAD Jul 15 11:38:01.879000 audit: BPF prog-id=130 op=UNLOAD Jul 15 11:38:01.879000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.879000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.879000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.879000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.879000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.879000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.879000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.879000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.879000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.879000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:01.879000 audit: BPF prog-id=132 op=LOAD Jul 15 11:38:01.879000 audit[2590]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0003cc158 items=0 ppid=2477 pid=2590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:01.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236616461316438616565626361373038386464323336303063653333 Jul 15 11:38:01.906397 systemd[1]: cri-containerd-26ada1d8aeebca7088dd23600ce33ff5e6386553f009d8bd79ea229b595ee27b.scope: Deactivated successfully. Jul 15 11:38:01.910000 audit: BPF prog-id=132 op=UNLOAD Jul 15 11:38:01.914816 env[1204]: time="2025-07-15T11:38:01.914687710Z" level=info msg="StartContainer for \"26ada1d8aeebca7088dd23600ce33ff5e6386553f009d8bd79ea229b595ee27b\" returns successfully" Jul 15 11:38:01.931845 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-26ada1d8aeebca7088dd23600ce33ff5e6386553f009d8bd79ea229b595ee27b-rootfs.mount: Deactivated successfully. Jul 15 11:38:01.952050 env[1204]: time="2025-07-15T11:38:01.952007924Z" level=info msg="shim disconnected" id=26ada1d8aeebca7088dd23600ce33ff5e6386553f009d8bd79ea229b595ee27b Jul 15 11:38:01.952050 env[1204]: time="2025-07-15T11:38:01.952046497Z" level=warning msg="cleaning up after shim disconnected" id=26ada1d8aeebca7088dd23600ce33ff5e6386553f009d8bd79ea229b595ee27b namespace=k8s.io Jul 15 11:38:01.952231 env[1204]: time="2025-07-15T11:38:01.952056346Z" level=info msg="cleaning up dead shim" Jul 15 11:38:01.957733 env[1204]: time="2025-07-15T11:38:01.957702245Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:38:01Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2661 runtime=io.containerd.runc.v2\n" Jul 15 11:38:02.731947 kubelet[1929]: E0715 11:38:02.731891 1929 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-gc5v5" podUID="ff487f86-aaa8-4b99-8f59-bc40829e41d4" Jul 15 11:38:02.783602 env[1204]: time="2025-07-15T11:38:02.783553612Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 15 11:38:04.730741 kubelet[1929]: E0715 11:38:04.730695 1929 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-gc5v5" podUID="ff487f86-aaa8-4b99-8f59-bc40829e41d4" Jul 15 11:38:06.373292 env[1204]: time="2025-07-15T11:38:06.373237485Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:06.376247 env[1204]: time="2025-07-15T11:38:06.376200002Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:06.378411 env[1204]: time="2025-07-15T11:38:06.378373580Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:06.380381 env[1204]: time="2025-07-15T11:38:06.380348532Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:06.381142 env[1204]: time="2025-07-15T11:38:06.381082438Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630\"" Jul 15 11:38:06.383453 env[1204]: time="2025-07-15T11:38:06.383420526Z" level=info msg="CreateContainer within sandbox \"4fb17f19b1b1e314d718eebd813d06967849ef65ec02a779a474f98ce40b9313\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 15 11:38:06.397341 env[1204]: time="2025-07-15T11:38:06.397288991Z" level=info msg="CreateContainer within sandbox \"4fb17f19b1b1e314d718eebd813d06967849ef65ec02a779a474f98ce40b9313\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"119d4cd4df7c3a41593a2413beb9b5353654a28efad5335bbb89b555b0612d76\"" Jul 15 11:38:06.397876 env[1204]: time="2025-07-15T11:38:06.397841004Z" level=info msg="StartContainer for \"119d4cd4df7c3a41593a2413beb9b5353654a28efad5335bbb89b555b0612d76\"" Jul 15 11:38:06.412980 systemd[1]: Started cri-containerd-119d4cd4df7c3a41593a2413beb9b5353654a28efad5335bbb89b555b0612d76.scope. Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fc6703406d8 items=0 ppid=2477 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:06.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131396434636434646637633361343135393361323431336265623962 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit: BPF prog-id=133 op=LOAD Jul 15 11:38:06.424000 audit[2689]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0003ee2c8 items=0 ppid=2477 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:06.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131396434636434646637633361343135393361323431336265623962 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit: BPF prog-id=134 op=LOAD Jul 15 11:38:06.424000 audit[2689]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0003ee318 items=0 ppid=2477 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:06.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131396434636434646637633361343135393361323431336265623962 Jul 15 11:38:06.424000 audit: BPF prog-id=134 op=UNLOAD Jul 15 11:38:06.424000 audit: BPF prog-id=133 op=UNLOAD Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:06.424000 audit: BPF prog-id=135 op=LOAD Jul 15 11:38:06.424000 audit[2689]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0003ee3a8 items=0 ppid=2477 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:06.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131396434636434646637633361343135393361323431336265623962 Jul 15 11:38:06.436916 env[1204]: time="2025-07-15T11:38:06.436887202Z" level=info msg="StartContainer for \"119d4cd4df7c3a41593a2413beb9b5353654a28efad5335bbb89b555b0612d76\" returns successfully" Jul 15 11:38:06.730457 kubelet[1929]: E0715 11:38:06.730394 1929 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-gc5v5" podUID="ff487f86-aaa8-4b99-8f59-bc40829e41d4" Jul 15 11:38:07.733745 env[1204]: time="2025-07-15T11:38:07.733679240Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 15 11:38:07.735677 systemd[1]: cri-containerd-119d4cd4df7c3a41593a2413beb9b5353654a28efad5335bbb89b555b0612d76.scope: Deactivated successfully. Jul 15 11:38:07.739000 audit: BPF prog-id=135 op=UNLOAD Jul 15 11:38:07.741854 kernel: kauditd_printk_skb: 77 callbacks suppressed Jul 15 11:38:07.741911 kernel: audit: type=1334 audit(1752579487.739:1000): prog-id=135 op=UNLOAD Jul 15 11:38:07.752723 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-119d4cd4df7c3a41593a2413beb9b5353654a28efad5335bbb89b555b0612d76-rootfs.mount: Deactivated successfully. Jul 15 11:38:07.756301 kubelet[1929]: I0715 11:38:07.756263 1929 kubelet_node_status.go:488] "Fast updating node status as it just became ready" Jul 15 11:38:07.757376 env[1204]: time="2025-07-15T11:38:07.757327703Z" level=info msg="shim disconnected" id=119d4cd4df7c3a41593a2413beb9b5353654a28efad5335bbb89b555b0612d76 Jul 15 11:38:07.757458 env[1204]: time="2025-07-15T11:38:07.757380362Z" level=warning msg="cleaning up after shim disconnected" id=119d4cd4df7c3a41593a2413beb9b5353654a28efad5335bbb89b555b0612d76 namespace=k8s.io Jul 15 11:38:07.757458 env[1204]: time="2025-07-15T11:38:07.757392976Z" level=info msg="cleaning up dead shim" Jul 15 11:38:07.772390 env[1204]: time="2025-07-15T11:38:07.772127223Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:38:07Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2731 runtime=io.containerd.runc.v2\n" Jul 15 11:38:07.786023 systemd[1]: Created slice kubepods-burstable-podb64cb176_d65e_4c7f_a8b1_32a16d63b52f.slice. Jul 15 11:38:07.790117 systemd[1]: Created slice kubepods-besteffort-podb1d0b64d_3408_4570_8121_7d091ee4f50c.slice. Jul 15 11:38:07.795040 systemd[1]: Created slice kubepods-burstable-pode041bcfa_663d_4cfb_a0a7_0ab3e7909d02.slice. Jul 15 11:38:07.798157 env[1204]: time="2025-07-15T11:38:07.797908634Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 15 11:38:07.800288 kubelet[1929]: I0715 11:38:07.800143 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/b1d0b64d-3408-4570-8121-7d091ee4f50c-whisker-backend-key-pair\") pod \"whisker-6d74f9b8bd-w6rps\" (UID: \"b1d0b64d-3408-4570-8121-7d091ee4f50c\") " pod="calico-system/whisker-6d74f9b8bd-w6rps" Jul 15 11:38:07.800288 kubelet[1929]: I0715 11:38:07.800228 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/2da410fc-f5e4-4d6a-8712-6df0d9f82617-goldmane-key-pair\") pod \"goldmane-58fd7646b9-5bptq\" (UID: \"2da410fc-f5e4-4d6a-8712-6df0d9f82617\") " pod="calico-system/goldmane-58fd7646b9-5bptq" Jul 15 11:38:07.800378 kubelet[1929]: I0715 11:38:07.800351 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7k5fc\" (UniqueName: \"kubernetes.io/projected/766b4edb-b94c-4b2e-965c-aa06b41ea419-kube-api-access-7k5fc\") pod \"calico-kube-controllers-8684d87554-mv9qj\" (UID: \"766b4edb-b94c-4b2e-965c-aa06b41ea419\") " pod="calico-system/calico-kube-controllers-8684d87554-mv9qj" Jul 15 11:38:07.800378 kubelet[1929]: I0715 11:38:07.800374 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2crdl\" (UniqueName: \"kubernetes.io/projected/b1d0b64d-3408-4570-8121-7d091ee4f50c-kube-api-access-2crdl\") pod \"whisker-6d74f9b8bd-w6rps\" (UID: \"b1d0b64d-3408-4570-8121-7d091ee4f50c\") " pod="calico-system/whisker-6d74f9b8bd-w6rps" Jul 15 11:38:07.800995 kubelet[1929]: I0715 11:38:07.800391 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-g4jk8\" (UniqueName: \"kubernetes.io/projected/22fd715b-454b-448c-8a9b-02017486be43-kube-api-access-g4jk8\") pod \"calico-apiserver-6545649b6d-v7pdw\" (UID: \"22fd715b-454b-448c-8a9b-02017486be43\") " pod="calico-apiserver/calico-apiserver-6545649b6d-v7pdw" Jul 15 11:38:07.800995 kubelet[1929]: I0715 11:38:07.800734 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/2da410fc-f5e4-4d6a-8712-6df0d9f82617-config\") pod \"goldmane-58fd7646b9-5bptq\" (UID: \"2da410fc-f5e4-4d6a-8712-6df0d9f82617\") " pod="calico-system/goldmane-58fd7646b9-5bptq" Jul 15 11:38:07.800995 kubelet[1929]: I0715 11:38:07.800792 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vl6mj\" (UniqueName: \"kubernetes.io/projected/e041bcfa-663d-4cfb-a0a7-0ab3e7909d02-kube-api-access-vl6mj\") pod \"coredns-7c65d6cfc9-m5mx9\" (UID: \"e041bcfa-663d-4cfb-a0a7-0ab3e7909d02\") " pod="kube-system/coredns-7c65d6cfc9-m5mx9" Jul 15 11:38:07.800995 kubelet[1929]: I0715 11:38:07.800807 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b1d0b64d-3408-4570-8121-7d091ee4f50c-whisker-ca-bundle\") pod \"whisker-6d74f9b8bd-w6rps\" (UID: \"b1d0b64d-3408-4570-8121-7d091ee4f50c\") " pod="calico-system/whisker-6d74f9b8bd-w6rps" Jul 15 11:38:07.800995 kubelet[1929]: I0715 11:38:07.800868 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/4554d1d6-2aa2-4df3-ac40-87d7e031da9f-calico-apiserver-certs\") pod \"calico-apiserver-6545649b6d-762v4\" (UID: \"4554d1d6-2aa2-4df3-ac40-87d7e031da9f\") " pod="calico-apiserver/calico-apiserver-6545649b6d-762v4" Jul 15 11:38:07.801159 kubelet[1929]: I0715 11:38:07.800889 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wbbfj\" (UniqueName: \"kubernetes.io/projected/4554d1d6-2aa2-4df3-ac40-87d7e031da9f-kube-api-access-wbbfj\") pod \"calico-apiserver-6545649b6d-762v4\" (UID: \"4554d1d6-2aa2-4df3-ac40-87d7e031da9f\") " pod="calico-apiserver/calico-apiserver-6545649b6d-762v4" Jul 15 11:38:07.801159 kubelet[1929]: I0715 11:38:07.800905 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/b64cb176-d65e-4c7f-a8b1-32a16d63b52f-config-volume\") pod \"coredns-7c65d6cfc9-4jctz\" (UID: \"b64cb176-d65e-4c7f-a8b1-32a16d63b52f\") " pod="kube-system/coredns-7c65d6cfc9-4jctz" Jul 15 11:38:07.801159 kubelet[1929]: I0715 11:38:07.800982 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-khhmm\" (UniqueName: \"kubernetes.io/projected/b64cb176-d65e-4c7f-a8b1-32a16d63b52f-kube-api-access-khhmm\") pod \"coredns-7c65d6cfc9-4jctz\" (UID: \"b64cb176-d65e-4c7f-a8b1-32a16d63b52f\") " pod="kube-system/coredns-7c65d6cfc9-4jctz" Jul 15 11:38:07.801159 kubelet[1929]: I0715 11:38:07.800999 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/e041bcfa-663d-4cfb-a0a7-0ab3e7909d02-config-volume\") pod \"coredns-7c65d6cfc9-m5mx9\" (UID: \"e041bcfa-663d-4cfb-a0a7-0ab3e7909d02\") " pod="kube-system/coredns-7c65d6cfc9-m5mx9" Jul 15 11:38:07.801159 kubelet[1929]: I0715 11:38:07.801056 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/766b4edb-b94c-4b2e-965c-aa06b41ea419-tigera-ca-bundle\") pod \"calico-kube-controllers-8684d87554-mv9qj\" (UID: \"766b4edb-b94c-4b2e-965c-aa06b41ea419\") " pod="calico-system/calico-kube-controllers-8684d87554-mv9qj" Jul 15 11:38:07.801277 kubelet[1929]: I0715 11:38:07.801081 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-28jfb\" (UniqueName: \"kubernetes.io/projected/2da410fc-f5e4-4d6a-8712-6df0d9f82617-kube-api-access-28jfb\") pod \"goldmane-58fd7646b9-5bptq\" (UID: \"2da410fc-f5e4-4d6a-8712-6df0d9f82617\") " pod="calico-system/goldmane-58fd7646b9-5bptq" Jul 15 11:38:07.801277 kubelet[1929]: I0715 11:38:07.801133 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/22fd715b-454b-448c-8a9b-02017486be43-calico-apiserver-certs\") pod \"calico-apiserver-6545649b6d-v7pdw\" (UID: \"22fd715b-454b-448c-8a9b-02017486be43\") " pod="calico-apiserver/calico-apiserver-6545649b6d-v7pdw" Jul 15 11:38:07.801277 kubelet[1929]: I0715 11:38:07.801159 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/2da410fc-f5e4-4d6a-8712-6df0d9f82617-goldmane-ca-bundle\") pod \"goldmane-58fd7646b9-5bptq\" (UID: \"2da410fc-f5e4-4d6a-8712-6df0d9f82617\") " pod="calico-system/goldmane-58fd7646b9-5bptq" Jul 15 11:38:07.801161 systemd[1]: Created slice kubepods-besteffort-pod766b4edb_b94c_4b2e_965c_aa06b41ea419.slice. Jul 15 11:38:07.806310 systemd[1]: Created slice kubepods-besteffort-pod4554d1d6_2aa2_4df3_ac40_87d7e031da9f.slice. Jul 15 11:38:07.811856 systemd[1]: Created slice kubepods-besteffort-pod2da410fc_f5e4_4d6a_8712_6df0d9f82617.slice. Jul 15 11:38:07.815844 systemd[1]: Created slice kubepods-besteffort-pod22fd715b_454b_448c_8a9b_02017486be43.slice. Jul 15 11:38:08.089115 kubelet[1929]: E0715 11:38:08.089008 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:38:08.089903 env[1204]: time="2025-07-15T11:38:08.089611131Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-4jctz,Uid:b64cb176-d65e-4c7f-a8b1-32a16d63b52f,Namespace:kube-system,Attempt:0,}" Jul 15 11:38:08.093251 env[1204]: time="2025-07-15T11:38:08.093214314Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6d74f9b8bd-w6rps,Uid:b1d0b64d-3408-4570-8121-7d091ee4f50c,Namespace:calico-system,Attempt:0,}" Jul 15 11:38:08.098595 kubelet[1929]: E0715 11:38:08.098554 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:38:08.099040 env[1204]: time="2025-07-15T11:38:08.099003573Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-m5mx9,Uid:e041bcfa-663d-4cfb-a0a7-0ab3e7909d02,Namespace:kube-system,Attempt:0,}" Jul 15 11:38:08.104724 env[1204]: time="2025-07-15T11:38:08.104689185Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-8684d87554-mv9qj,Uid:766b4edb-b94c-4b2e-965c-aa06b41ea419,Namespace:calico-system,Attempt:0,}" Jul 15 11:38:08.109321 env[1204]: time="2025-07-15T11:38:08.109284009Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6545649b6d-762v4,Uid:4554d1d6-2aa2-4df3-ac40-87d7e031da9f,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:38:08.115394 env[1204]: time="2025-07-15T11:38:08.115352926Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-5bptq,Uid:2da410fc-f5e4-4d6a-8712-6df0d9f82617,Namespace:calico-system,Attempt:0,}" Jul 15 11:38:08.119767 env[1204]: time="2025-07-15T11:38:08.119742443Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6545649b6d-v7pdw,Uid:22fd715b-454b-448c-8a9b-02017486be43,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:38:08.178158 env[1204]: time="2025-07-15T11:38:08.178069860Z" level=error msg="Failed to destroy network for sandbox \"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.178801 env[1204]: time="2025-07-15T11:38:08.178765624Z" level=error msg="encountered an error cleaning up failed sandbox \"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.178975 env[1204]: time="2025-07-15T11:38:08.178904396Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-4jctz,Uid:b64cb176-d65e-4c7f-a8b1-32a16d63b52f,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.179678 kubelet[1929]: E0715 11:38:08.179270 1929 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.179678 kubelet[1929]: E0715 11:38:08.179347 1929 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-4jctz" Jul 15 11:38:08.179678 kubelet[1929]: E0715 11:38:08.179369 1929 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-4jctz" Jul 15 11:38:08.179842 kubelet[1929]: E0715 11:38:08.179437 1929 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-4jctz_kube-system(b64cb176-d65e-4c7f-a8b1-32a16d63b52f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-4jctz_kube-system(b64cb176-d65e-4c7f-a8b1-32a16d63b52f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-4jctz" podUID="b64cb176-d65e-4c7f-a8b1-32a16d63b52f" Jul 15 11:38:08.214423 env[1204]: time="2025-07-15T11:38:08.214360027Z" level=error msg="Failed to destroy network for sandbox \"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.214717 env[1204]: time="2025-07-15T11:38:08.214689740Z" level=error msg="encountered an error cleaning up failed sandbox \"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.214763 env[1204]: time="2025-07-15T11:38:08.214740055Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-m5mx9,Uid:e041bcfa-663d-4cfb-a0a7-0ab3e7909d02,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.215195 kubelet[1929]: E0715 11:38:08.214953 1929 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.215195 kubelet[1929]: E0715 11:38:08.215018 1929 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-m5mx9" Jul 15 11:38:08.215195 kubelet[1929]: E0715 11:38:08.215036 1929 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-m5mx9" Jul 15 11:38:08.215328 kubelet[1929]: E0715 11:38:08.215077 1929 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-m5mx9_kube-system(e041bcfa-663d-4cfb-a0a7-0ab3e7909d02)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-m5mx9_kube-system(e041bcfa-663d-4cfb-a0a7-0ab3e7909d02)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-m5mx9" podUID="e041bcfa-663d-4cfb-a0a7-0ab3e7909d02" Jul 15 11:38:08.236790 env[1204]: time="2025-07-15T11:38:08.236724536Z" level=error msg="Failed to destroy network for sandbox \"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.237098 env[1204]: time="2025-07-15T11:38:08.237060431Z" level=error msg="encountered an error cleaning up failed sandbox \"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.237186 env[1204]: time="2025-07-15T11:38:08.237108150Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6d74f9b8bd-w6rps,Uid:b1d0b64d-3408-4570-8121-7d091ee4f50c,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.237349 kubelet[1929]: E0715 11:38:08.237311 1929 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.237417 kubelet[1929]: E0715 11:38:08.237367 1929 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-6d74f9b8bd-w6rps" Jul 15 11:38:08.237417 kubelet[1929]: E0715 11:38:08.237385 1929 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-6d74f9b8bd-w6rps" Jul 15 11:38:08.237471 kubelet[1929]: E0715 11:38:08.237425 1929 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-6d74f9b8bd-w6rps_calico-system(b1d0b64d-3408-4570-8121-7d091ee4f50c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-6d74f9b8bd-w6rps_calico-system(b1d0b64d-3408-4570-8121-7d091ee4f50c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-6d74f9b8bd-w6rps" podUID="b1d0b64d-3408-4570-8121-7d091ee4f50c" Jul 15 11:38:08.245046 env[1204]: time="2025-07-15T11:38:08.244976875Z" level=error msg="Failed to destroy network for sandbox \"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.245517 env[1204]: time="2025-07-15T11:38:08.245486296Z" level=error msg="encountered an error cleaning up failed sandbox \"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.245647 env[1204]: time="2025-07-15T11:38:08.245617404Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6545649b6d-762v4,Uid:4554d1d6-2aa2-4df3-ac40-87d7e031da9f,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.245952 kubelet[1929]: E0715 11:38:08.245907 1929 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.246170 kubelet[1929]: E0715 11:38:08.245959 1929 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6545649b6d-762v4" Jul 15 11:38:08.246170 kubelet[1929]: E0715 11:38:08.245975 1929 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6545649b6d-762v4" Jul 15 11:38:08.246170 kubelet[1929]: E0715 11:38:08.246009 1929 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6545649b6d-762v4_calico-apiserver(4554d1d6-2aa2-4df3-ac40-87d7e031da9f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6545649b6d-762v4_calico-apiserver(4554d1d6-2aa2-4df3-ac40-87d7e031da9f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6545649b6d-762v4" podUID="4554d1d6-2aa2-4df3-ac40-87d7e031da9f" Jul 15 11:38:08.254141 env[1204]: time="2025-07-15T11:38:08.254108955Z" level=error msg="Failed to destroy network for sandbox \"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.254450 env[1204]: time="2025-07-15T11:38:08.254425282Z" level=error msg="encountered an error cleaning up failed sandbox \"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.254568 env[1204]: time="2025-07-15T11:38:08.254527895Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-8684d87554-mv9qj,Uid:766b4edb-b94c-4b2e-965c-aa06b41ea419,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.254861 kubelet[1929]: E0715 11:38:08.254816 1929 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.254913 kubelet[1929]: E0715 11:38:08.254877 1929 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-8684d87554-mv9qj" Jul 15 11:38:08.254913 kubelet[1929]: E0715 11:38:08.254901 1929 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-8684d87554-mv9qj" Jul 15 11:38:08.254991 kubelet[1929]: E0715 11:38:08.254951 1929 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-8684d87554-mv9qj_calico-system(766b4edb-b94c-4b2e-965c-aa06b41ea419)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-8684d87554-mv9qj_calico-system(766b4edb-b94c-4b2e-965c-aa06b41ea419)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-8684d87554-mv9qj" podUID="766b4edb-b94c-4b2e-965c-aa06b41ea419" Jul 15 11:38:08.257121 env[1204]: time="2025-07-15T11:38:08.257074292Z" level=error msg="Failed to destroy network for sandbox \"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.257412 env[1204]: time="2025-07-15T11:38:08.257384838Z" level=error msg="encountered an error cleaning up failed sandbox \"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.257503 env[1204]: time="2025-07-15T11:38:08.257431807Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6545649b6d-v7pdw,Uid:22fd715b-454b-448c-8a9b-02017486be43,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.257845 kubelet[1929]: E0715 11:38:08.257815 1929 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.257949 kubelet[1929]: E0715 11:38:08.257855 1929 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6545649b6d-v7pdw" Jul 15 11:38:08.257949 kubelet[1929]: E0715 11:38:08.257872 1929 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6545649b6d-v7pdw" Jul 15 11:38:08.257949 kubelet[1929]: E0715 11:38:08.257900 1929 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6545649b6d-v7pdw_calico-apiserver(22fd715b-454b-448c-8a9b-02017486be43)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6545649b6d-v7pdw_calico-apiserver(22fd715b-454b-448c-8a9b-02017486be43)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6545649b6d-v7pdw" podUID="22fd715b-454b-448c-8a9b-02017486be43" Jul 15 11:38:08.268691 env[1204]: time="2025-07-15T11:38:08.268633012Z" level=error msg="Failed to destroy network for sandbox \"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.268980 env[1204]: time="2025-07-15T11:38:08.268951273Z" level=error msg="encountered an error cleaning up failed sandbox \"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.269034 env[1204]: time="2025-07-15T11:38:08.268996879Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-5bptq,Uid:2da410fc-f5e4-4d6a-8712-6df0d9f82617,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.269218 kubelet[1929]: E0715 11:38:08.269178 1929 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.269277 kubelet[1929]: E0715 11:38:08.269242 1929 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-5bptq" Jul 15 11:38:08.269277 kubelet[1929]: E0715 11:38:08.269262 1929 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-5bptq" Jul 15 11:38:08.269337 kubelet[1929]: E0715 11:38:08.269302 1929 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-58fd7646b9-5bptq_calico-system(2da410fc-f5e4-4d6a-8712-6df0d9f82617)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-58fd7646b9-5bptq_calico-system(2da410fc-f5e4-4d6a-8712-6df0d9f82617)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-5bptq" podUID="2da410fc-f5e4-4d6a-8712-6df0d9f82617" Jul 15 11:38:08.735051 systemd[1]: Created slice kubepods-besteffort-podff487f86_aaa8_4b99_8f59_bc40829e41d4.slice. Jul 15 11:38:08.737018 env[1204]: time="2025-07-15T11:38:08.736986952Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-gc5v5,Uid:ff487f86-aaa8-4b99-8f59-bc40829e41d4,Namespace:calico-system,Attempt:0,}" Jul 15 11:38:08.782885 env[1204]: time="2025-07-15T11:38:08.782823681Z" level=error msg="Failed to destroy network for sandbox \"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.783208 env[1204]: time="2025-07-15T11:38:08.783171067Z" level=error msg="encountered an error cleaning up failed sandbox \"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.783245 env[1204]: time="2025-07-15T11:38:08.783218216Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-gc5v5,Uid:ff487f86-aaa8-4b99-8f59-bc40829e41d4,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.783776 kubelet[1929]: E0715 11:38:08.783432 1929 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.783776 kubelet[1929]: E0715 11:38:08.783490 1929 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-gc5v5" Jul 15 11:38:08.783776 kubelet[1929]: E0715 11:38:08.783510 1929 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-gc5v5" Jul 15 11:38:08.784065 kubelet[1929]: E0715 11:38:08.783556 1929 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-gc5v5_calico-system(ff487f86-aaa8-4b99-8f59-bc40829e41d4)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-gc5v5_calico-system(ff487f86-aaa8-4b99-8f59-bc40829e41d4)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-gc5v5" podUID="ff487f86-aaa8-4b99-8f59-bc40829e41d4" Jul 15 11:38:08.784840 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1-shm.mount: Deactivated successfully. Jul 15 11:38:08.799244 kubelet[1929]: I0715 11:38:08.799221 1929 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" Jul 15 11:38:08.799797 env[1204]: time="2025-07-15T11:38:08.799723133Z" level=info msg="StopPodSandbox for \"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc\"" Jul 15 11:38:08.800298 kubelet[1929]: I0715 11:38:08.800265 1929 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" Jul 15 11:38:08.800893 env[1204]: time="2025-07-15T11:38:08.800853487Z" level=info msg="StopPodSandbox for \"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab\"" Jul 15 11:38:08.802060 kubelet[1929]: I0715 11:38:08.802039 1929 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" Jul 15 11:38:08.802873 env[1204]: time="2025-07-15T11:38:08.802843283Z" level=info msg="StopPodSandbox for \"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8\"" Jul 15 11:38:08.804309 kubelet[1929]: I0715 11:38:08.803848 1929 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" Jul 15 11:38:08.804364 env[1204]: time="2025-07-15T11:38:08.804215133Z" level=info msg="StopPodSandbox for \"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2\"" Jul 15 11:38:08.807395 kubelet[1929]: I0715 11:38:08.805987 1929 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" Jul 15 11:38:08.807735 env[1204]: time="2025-07-15T11:38:08.807702526Z" level=info msg="StopPodSandbox for \"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62\"" Jul 15 11:38:08.809286 kubelet[1929]: I0715 11:38:08.808939 1929 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" Jul 15 11:38:08.809527 env[1204]: time="2025-07-15T11:38:08.809418806Z" level=info msg="StopPodSandbox for \"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1\"" Jul 15 11:38:08.810243 kubelet[1929]: I0715 11:38:08.809951 1929 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" Jul 15 11:38:08.811472 env[1204]: time="2025-07-15T11:38:08.811437186Z" level=info msg="StopPodSandbox for \"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7\"" Jul 15 11:38:08.813850 kubelet[1929]: I0715 11:38:08.813823 1929 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" Jul 15 11:38:08.814361 env[1204]: time="2025-07-15T11:38:08.814324327Z" level=info msg="StopPodSandbox for \"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c\"" Jul 15 11:38:08.844136 env[1204]: time="2025-07-15T11:38:08.844075791Z" level=error msg="StopPodSandbox for \"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8\" failed" error="failed to destroy network for sandbox \"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.844427 kubelet[1929]: E0715 11:38:08.844305 1929 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" Jul 15 11:38:08.844427 kubelet[1929]: E0715 11:38:08.844361 1929 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8"} Jul 15 11:38:08.844427 kubelet[1929]: E0715 11:38:08.844414 1929 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2da410fc-f5e4-4d6a-8712-6df0d9f82617\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:38:08.844591 kubelet[1929]: E0715 11:38:08.844434 1929 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2da410fc-f5e4-4d6a-8712-6df0d9f82617\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-5bptq" podUID="2da410fc-f5e4-4d6a-8712-6df0d9f82617" Jul 15 11:38:08.849129 env[1204]: time="2025-07-15T11:38:08.849074446Z" level=error msg="StopPodSandbox for \"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c\" failed" error="failed to destroy network for sandbox \"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.849543 kubelet[1929]: E0715 11:38:08.849367 1929 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" Jul 15 11:38:08.849543 kubelet[1929]: E0715 11:38:08.849427 1929 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c"} Jul 15 11:38:08.849543 kubelet[1929]: E0715 11:38:08.849477 1929 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e041bcfa-663d-4cfb-a0a7-0ab3e7909d02\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:38:08.849543 kubelet[1929]: E0715 11:38:08.849498 1929 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e041bcfa-663d-4cfb-a0a7-0ab3e7909d02\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-m5mx9" podUID="e041bcfa-663d-4cfb-a0a7-0ab3e7909d02" Jul 15 11:38:08.854255 env[1204]: time="2025-07-15T11:38:08.854210563Z" level=error msg="StopPodSandbox for \"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab\" failed" error="failed to destroy network for sandbox \"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.854526 kubelet[1929]: E0715 11:38:08.854485 1929 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" Jul 15 11:38:08.854589 kubelet[1929]: E0715 11:38:08.854545 1929 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab"} Jul 15 11:38:08.854621 kubelet[1929]: E0715 11:38:08.854586 1929 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b1d0b64d-3408-4570-8121-7d091ee4f50c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:38:08.854621 kubelet[1929]: E0715 11:38:08.854608 1929 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b1d0b64d-3408-4570-8121-7d091ee4f50c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-6d74f9b8bd-w6rps" podUID="b1d0b64d-3408-4570-8121-7d091ee4f50c" Jul 15 11:38:08.855090 env[1204]: time="2025-07-15T11:38:08.855056109Z" level=error msg="StopPodSandbox for \"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1\" failed" error="failed to destroy network for sandbox \"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.855264 kubelet[1929]: E0715 11:38:08.855229 1929 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" Jul 15 11:38:08.855310 kubelet[1929]: E0715 11:38:08.855263 1929 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1"} Jul 15 11:38:08.855310 kubelet[1929]: E0715 11:38:08.855303 1929 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ff487f86-aaa8-4b99-8f59-bc40829e41d4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:38:08.855388 kubelet[1929]: E0715 11:38:08.855322 1929 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ff487f86-aaa8-4b99-8f59-bc40829e41d4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-gc5v5" podUID="ff487f86-aaa8-4b99-8f59-bc40829e41d4" Jul 15 11:38:08.855515 env[1204]: time="2025-07-15T11:38:08.855473687Z" level=error msg="StopPodSandbox for \"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc\" failed" error="failed to destroy network for sandbox \"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.855655 kubelet[1929]: E0715 11:38:08.855633 1929 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" Jul 15 11:38:08.855703 kubelet[1929]: E0715 11:38:08.855663 1929 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc"} Jul 15 11:38:08.855703 kubelet[1929]: E0715 11:38:08.855684 1929 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"766b4edb-b94c-4b2e-965c-aa06b41ea419\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:38:08.855777 kubelet[1929]: E0715 11:38:08.855700 1929 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"766b4edb-b94c-4b2e-965c-aa06b41ea419\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-8684d87554-mv9qj" podUID="766b4edb-b94c-4b2e-965c-aa06b41ea419" Jul 15 11:38:08.872062 env[1204]: time="2025-07-15T11:38:08.872004394Z" level=error msg="StopPodSandbox for \"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2\" failed" error="failed to destroy network for sandbox \"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.872480 kubelet[1929]: E0715 11:38:08.872434 1929 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" Jul 15 11:38:08.872559 kubelet[1929]: E0715 11:38:08.872485 1929 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2"} Jul 15 11:38:08.872559 kubelet[1929]: E0715 11:38:08.872522 1929 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4554d1d6-2aa2-4df3-ac40-87d7e031da9f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:38:08.872649 kubelet[1929]: E0715 11:38:08.872552 1929 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4554d1d6-2aa2-4df3-ac40-87d7e031da9f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6545649b6d-762v4" podUID="4554d1d6-2aa2-4df3-ac40-87d7e031da9f" Jul 15 11:38:08.875800 env[1204]: time="2025-07-15T11:38:08.875751025Z" level=error msg="StopPodSandbox for \"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62\" failed" error="failed to destroy network for sandbox \"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.876037 kubelet[1929]: E0715 11:38:08.875953 1929 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" Jul 15 11:38:08.876037 kubelet[1929]: E0715 11:38:08.875981 1929 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62"} Jul 15 11:38:08.876037 kubelet[1929]: E0715 11:38:08.876000 1929 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"22fd715b-454b-448c-8a9b-02017486be43\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:38:08.876037 kubelet[1929]: E0715 11:38:08.876018 1929 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"22fd715b-454b-448c-8a9b-02017486be43\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6545649b6d-v7pdw" podUID="22fd715b-454b-448c-8a9b-02017486be43" Jul 15 11:38:08.884200 env[1204]: time="2025-07-15T11:38:08.884147056Z" level=error msg="StopPodSandbox for \"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7\" failed" error="failed to destroy network for sandbox \"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:38:08.884375 kubelet[1929]: E0715 11:38:08.884348 1929 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" Jul 15 11:38:08.884430 kubelet[1929]: E0715 11:38:08.884376 1929 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7"} Jul 15 11:38:08.884430 kubelet[1929]: E0715 11:38:08.884397 1929 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b64cb176-d65e-4c7f-a8b1-32a16d63b52f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:38:08.884430 kubelet[1929]: E0715 11:38:08.884417 1929 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b64cb176-d65e-4c7f-a8b1-32a16d63b52f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-4jctz" podUID="b64cb176-d65e-4c7f-a8b1-32a16d63b52f" Jul 15 11:38:09.337707 kubelet[1929]: I0715 11:38:09.337656 1929 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:38:09.338044 kubelet[1929]: E0715 11:38:09.337990 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:38:09.361000 audit[3171]: NETFILTER_CFG table=filter:97 family=2 entries=21 op=nft_register_rule pid=3171 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:09.361000 audit[3171]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffcd517e390 a2=0 a3=7ffcd517e37c items=0 ppid=2039 pid=3171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:09.377662 kernel: audit: type=1325 audit(1752579489.361:1001): table=filter:97 family=2 entries=21 op=nft_register_rule pid=3171 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:09.377717 kernel: audit: type=1300 audit(1752579489.361:1001): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffcd517e390 a2=0 a3=7ffcd517e37c items=0 ppid=2039 pid=3171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:09.361000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:09.383873 kernel: audit: type=1327 audit(1752579489.361:1001): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:09.388000 audit[3171]: NETFILTER_CFG table=nat:98 family=2 entries=19 op=nft_register_chain pid=3171 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:09.388000 audit[3171]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffcd517e390 a2=0 a3=7ffcd517e37c items=0 ppid=2039 pid=3171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:09.403050 kernel: audit: type=1325 audit(1752579489.388:1002): table=nat:98 family=2 entries=19 op=nft_register_chain pid=3171 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:09.403098 kernel: audit: type=1300 audit(1752579489.388:1002): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffcd517e390 a2=0 a3=7ffcd517e37c items=0 ppid=2039 pid=3171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:09.403120 kernel: audit: type=1327 audit(1752579489.388:1002): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:09.388000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:09.816466 kubelet[1929]: E0715 11:38:09.816416 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:38:14.028050 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount945071144.mount: Deactivated successfully. Jul 15 11:38:15.169605 env[1204]: time="2025-07-15T11:38:15.169557094Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:15.172284 env[1204]: time="2025-07-15T11:38:15.172251046Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:15.173616 env[1204]: time="2025-07-15T11:38:15.173573867Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:15.174847 env[1204]: time="2025-07-15T11:38:15.174828209Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:15.175250 env[1204]: time="2025-07-15T11:38:15.175223324Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20\"" Jul 15 11:38:15.183905 env[1204]: time="2025-07-15T11:38:15.183871079Z" level=info msg="CreateContainer within sandbox \"4fb17f19b1b1e314d718eebd813d06967849ef65ec02a779a474f98ce40b9313\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 15 11:38:15.198313 env[1204]: time="2025-07-15T11:38:15.198276566Z" level=info msg="CreateContainer within sandbox \"4fb17f19b1b1e314d718eebd813d06967849ef65ec02a779a474f98ce40b9313\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"658c486cc4d29fdad4d124ee62b1d55fa2364b2e319d11238d81e106d87adba2\"" Jul 15 11:38:15.198710 env[1204]: time="2025-07-15T11:38:15.198690897Z" level=info msg="StartContainer for \"658c486cc4d29fdad4d124ee62b1d55fa2364b2e319d11238d81e106d87adba2\"" Jul 15 11:38:15.216295 systemd[1]: Started cri-containerd-658c486cc4d29fdad4d124ee62b1d55fa2364b2e319d11238d81e106d87adba2.scope. Jul 15 11:38:15.230000 audit[3181]: AVC avc: denied { perfmon } for pid=3181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.230000 audit[3181]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001c56b0 a2=3c a3=7fc3afe00048 items=0 ppid=2477 pid=3181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:15.240668 kernel: audit: type=1400 audit(1752579495.230:1003): avc: denied { perfmon } for pid=3181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.240940 kernel: audit: type=1300 audit(1752579495.230:1003): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001c56b0 a2=3c a3=7fc3afe00048 items=0 ppid=2477 pid=3181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:15.240964 kernel: audit: type=1327 audit(1752579495.230:1003): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635386334383663633464323966646164346431323465653632623164 Jul 15 11:38:15.230000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635386334383663633464323966646164346431323465653632623164 Jul 15 11:38:15.231000 audit[3181]: AVC avc: denied { bpf } for pid=3181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.248840 kernel: audit: type=1400 audit(1752579495.231:1004): avc: denied { bpf } for pid=3181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.248882 kernel: audit: type=1400 audit(1752579495.231:1004): avc: denied { bpf } for pid=3181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.231000 audit[3181]: AVC avc: denied { bpf } for pid=3181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.252565 kernel: audit: type=1400 audit(1752579495.231:1004): avc: denied { bpf } for pid=3181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.231000 audit[3181]: AVC avc: denied { bpf } for pid=3181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.231000 audit[3181]: AVC avc: denied { perfmon } for pid=3181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.231000 audit[3181]: AVC avc: denied { perfmon } for pid=3181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.262311 kernel: audit: type=1400 audit(1752579495.231:1004): avc: denied { perfmon } for pid=3181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.262363 kernel: audit: type=1400 audit(1752579495.231:1004): avc: denied { perfmon } for pid=3181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.231000 audit[3181]: AVC avc: denied { perfmon } for pid=3181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.266067 kernel: audit: type=1400 audit(1752579495.231:1004): avc: denied { perfmon } for pid=3181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.266128 kernel: audit: type=1400 audit(1752579495.231:1004): avc: denied { perfmon } for pid=3181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.231000 audit[3181]: AVC avc: denied { perfmon } for pid=3181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.231000 audit[3181]: AVC avc: denied { perfmon } for pid=3181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.231000 audit[3181]: AVC avc: denied { bpf } for pid=3181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.231000 audit[3181]: AVC avc: denied { bpf } for pid=3181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.231000 audit: BPF prog-id=136 op=LOAD Jul 15 11:38:15.231000 audit[3181]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c59d8 a2=78 a3=c0002e9ba8 items=0 ppid=2477 pid=3181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:15.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635386334383663633464323966646164346431323465653632623164 Jul 15 11:38:15.239000 audit[3181]: AVC avc: denied { bpf } for pid=3181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.239000 audit[3181]: AVC avc: denied { bpf } for pid=3181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.239000 audit[3181]: AVC avc: denied { perfmon } for pid=3181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.239000 audit[3181]: AVC avc: denied { perfmon } for pid=3181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.239000 audit[3181]: AVC avc: denied { perfmon } for pid=3181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.239000 audit[3181]: AVC avc: denied { perfmon } for pid=3181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.239000 audit[3181]: AVC avc: denied { perfmon } for pid=3181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.239000 audit[3181]: AVC avc: denied { bpf } for pid=3181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.239000 audit[3181]: AVC avc: denied { bpf } for pid=3181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.239000 audit: BPF prog-id=137 op=LOAD Jul 15 11:38:15.239000 audit[3181]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001c5770 a2=78 a3=c0002e9bf8 items=0 ppid=2477 pid=3181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:15.239000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635386334383663633464323966646164346431323465653632623164 Jul 15 11:38:15.244000 audit: BPF prog-id=137 op=UNLOAD Jul 15 11:38:15.244000 audit: BPF prog-id=136 op=UNLOAD Jul 15 11:38:15.244000 audit[3181]: AVC avc: denied { bpf } for pid=3181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.244000 audit[3181]: AVC avc: denied { bpf } for pid=3181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.244000 audit[3181]: AVC avc: denied { bpf } for pid=3181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.244000 audit[3181]: AVC avc: denied { perfmon } for pid=3181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.244000 audit[3181]: AVC avc: denied { perfmon } for pid=3181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.244000 audit[3181]: AVC avc: denied { perfmon } for pid=3181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.244000 audit[3181]: AVC avc: denied { perfmon } for pid=3181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.244000 audit[3181]: AVC avc: denied { perfmon } for pid=3181 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.244000 audit[3181]: AVC avc: denied { bpf } for pid=3181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.244000 audit[3181]: AVC avc: denied { bpf } for pid=3181 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:15.244000 audit: BPF prog-id=138 op=LOAD Jul 15 11:38:15.244000 audit[3181]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c5c30 a2=78 a3=c0002e9c88 items=0 ppid=2477 pid=3181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:15.244000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635386334383663633464323966646164346431323465653632623164 Jul 15 11:38:15.489867 env[1204]: time="2025-07-15T11:38:15.489734006Z" level=info msg="StartContainer for \"658c486cc4d29fdad4d124ee62b1d55fa2364b2e319d11238d81e106d87adba2\" returns successfully" Jul 15 11:38:15.529229 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 15 11:38:15.529345 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 15 11:38:15.619986 env[1204]: time="2025-07-15T11:38:15.619949928Z" level=info msg="StopPodSandbox for \"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab\"" Jul 15 11:38:15.714485 systemd[1]: Started sshd@7-10.0.0.140:22-10.0.0.1:49310.service. Jul 15 11:38:15.713000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.140:22-10.0.0.1:49310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:15.744206 env[1204]: 2025-07-15 11:38:15.676 [INFO][3239] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" Jul 15 11:38:15.744206 env[1204]: 2025-07-15 11:38:15.676 [INFO][3239] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" iface="eth0" netns="/var/run/netns/cni-ba91deb5-39a9-837c-a3a5-59650ac83ed2" Jul 15 11:38:15.744206 env[1204]: 2025-07-15 11:38:15.676 [INFO][3239] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" iface="eth0" netns="/var/run/netns/cni-ba91deb5-39a9-837c-a3a5-59650ac83ed2" Jul 15 11:38:15.744206 env[1204]: 2025-07-15 11:38:15.678 [INFO][3239] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" iface="eth0" netns="/var/run/netns/cni-ba91deb5-39a9-837c-a3a5-59650ac83ed2" Jul 15 11:38:15.744206 env[1204]: 2025-07-15 11:38:15.678 [INFO][3239] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" Jul 15 11:38:15.744206 env[1204]: 2025-07-15 11:38:15.678 [INFO][3239] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" Jul 15 11:38:15.744206 env[1204]: 2025-07-15 11:38:15.731 [INFO][3247] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" HandleID="k8s-pod-network.d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" Workload="localhost-k8s-whisker--6d74f9b8bd--w6rps-eth0" Jul 15 11:38:15.744206 env[1204]: 2025-07-15 11:38:15.732 [INFO][3247] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:15.744206 env[1204]: 2025-07-15 11:38:15.732 [INFO][3247] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:15.744206 env[1204]: 2025-07-15 11:38:15.739 [WARNING][3247] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" HandleID="k8s-pod-network.d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" Workload="localhost-k8s-whisker--6d74f9b8bd--w6rps-eth0" Jul 15 11:38:15.744206 env[1204]: 2025-07-15 11:38:15.739 [INFO][3247] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" HandleID="k8s-pod-network.d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" Workload="localhost-k8s-whisker--6d74f9b8bd--w6rps-eth0" Jul 15 11:38:15.744206 env[1204]: 2025-07-15 11:38:15.740 [INFO][3247] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:15.744206 env[1204]: 2025-07-15 11:38:15.742 [INFO][3239] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" Jul 15 11:38:15.744832 env[1204]: time="2025-07-15T11:38:15.744800336Z" level=info msg="TearDown network for sandbox \"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab\" successfully" Jul 15 11:38:15.744911 env[1204]: time="2025-07-15T11:38:15.744890546Z" level=info msg="StopPodSandbox for \"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab\" returns successfully" Jul 15 11:38:15.750000 audit[3254]: USER_ACCT pid=3254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:15.752338 sshd[3254]: Accepted publickey for core from 10.0.0.1 port 49310 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:38:15.751000 audit[3254]: CRED_ACQ pid=3254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:15.751000 audit[3254]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff132d4650 a2=3 a3=0 items=0 ppid=1 pid=3254 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:15.751000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:38:15.752712 sshd[3254]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:38:15.755746 systemd-logind[1189]: New session 8 of user core. Jul 15 11:38:15.756456 systemd[1]: Started session-8.scope. Jul 15 11:38:15.758000 audit[3254]: USER_START pid=3254 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:15.760000 audit[3258]: CRED_ACQ pid=3258 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:15.844999 kubelet[1929]: I0715 11:38:15.844361 1929 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-5bt7l" podStartSLOduration=2.596147933 podStartE2EDuration="17.844341885s" podCreationTimestamp="2025-07-15 11:37:58 +0000 UTC" firstStartedPulling="2025-07-15 11:37:59.927653798 +0000 UTC m=+17.268635926" lastFinishedPulling="2025-07-15 11:38:15.17584776 +0000 UTC m=+32.516829878" observedRunningTime="2025-07-15 11:38:15.843152155 +0000 UTC m=+33.184134283" watchObservedRunningTime="2025-07-15 11:38:15.844341885 +0000 UTC m=+33.185324013" Jul 15 11:38:15.846159 kubelet[1929]: I0715 11:38:15.846131 1929 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b1d0b64d-3408-4570-8121-7d091ee4f50c-whisker-ca-bundle\") pod \"b1d0b64d-3408-4570-8121-7d091ee4f50c\" (UID: \"b1d0b64d-3408-4570-8121-7d091ee4f50c\") " Jul 15 11:38:15.846212 kubelet[1929]: I0715 11:38:15.846166 1929 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/b1d0b64d-3408-4570-8121-7d091ee4f50c-whisker-backend-key-pair\") pod \"b1d0b64d-3408-4570-8121-7d091ee4f50c\" (UID: \"b1d0b64d-3408-4570-8121-7d091ee4f50c\") " Jul 15 11:38:15.846212 kubelet[1929]: I0715 11:38:15.846186 1929 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-2crdl\" (UniqueName: \"kubernetes.io/projected/b1d0b64d-3408-4570-8121-7d091ee4f50c-kube-api-access-2crdl\") pod \"b1d0b64d-3408-4570-8121-7d091ee4f50c\" (UID: \"b1d0b64d-3408-4570-8121-7d091ee4f50c\") " Jul 15 11:38:15.846756 kubelet[1929]: I0715 11:38:15.846725 1929 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/b1d0b64d-3408-4570-8121-7d091ee4f50c-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "b1d0b64d-3408-4570-8121-7d091ee4f50c" (UID: "b1d0b64d-3408-4570-8121-7d091ee4f50c"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Jul 15 11:38:15.849971 kubelet[1929]: I0715 11:38:15.849879 1929 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/b1d0b64d-3408-4570-8121-7d091ee4f50c-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "b1d0b64d-3408-4570-8121-7d091ee4f50c" (UID: "b1d0b64d-3408-4570-8121-7d091ee4f50c"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 15 11:38:15.850138 kubelet[1929]: I0715 11:38:15.850117 1929 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/b1d0b64d-3408-4570-8121-7d091ee4f50c-kube-api-access-2crdl" (OuterVolumeSpecName: "kube-api-access-2crdl") pod "b1d0b64d-3408-4570-8121-7d091ee4f50c" (UID: "b1d0b64d-3408-4570-8121-7d091ee4f50c"). InnerVolumeSpecName "kube-api-access-2crdl". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 15 11:38:15.886037 sshd[3254]: pam_unix(sshd:session): session closed for user core Jul 15 11:38:15.886000 audit[3254]: USER_END pid=3254 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:15.886000 audit[3254]: CRED_DISP pid=3254 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:15.887000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.140:22-10.0.0.1:49310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:15.888488 systemd[1]: sshd@7-10.0.0.140:22-10.0.0.1:49310.service: Deactivated successfully. Jul 15 11:38:15.889136 systemd[1]: session-8.scope: Deactivated successfully. Jul 15 11:38:15.889654 systemd-logind[1189]: Session 8 logged out. Waiting for processes to exit. Jul 15 11:38:15.890311 systemd-logind[1189]: Removed session 8. Jul 15 11:38:15.946938 kubelet[1929]: I0715 11:38:15.946889 1929 reconciler_common.go:293] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b1d0b64d-3408-4570-8121-7d091ee4f50c-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 15 11:38:15.946938 kubelet[1929]: I0715 11:38:15.946917 1929 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-2crdl\" (UniqueName: \"kubernetes.io/projected/b1d0b64d-3408-4570-8121-7d091ee4f50c-kube-api-access-2crdl\") on node \"localhost\" DevicePath \"\"" Jul 15 11:38:15.946938 kubelet[1929]: I0715 11:38:15.946938 1929 reconciler_common.go:293] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/b1d0b64d-3408-4570-8121-7d091ee4f50c-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 15 11:38:16.130419 systemd[1]: Removed slice kubepods-besteffort-podb1d0b64d_3408_4570_8121_7d091ee4f50c.slice. Jul 15 11:38:16.180309 systemd[1]: run-netns-cni\x2dba91deb5\x2d39a9\x2d837c\x2da3a5\x2d59650ac83ed2.mount: Deactivated successfully. Jul 15 11:38:16.180402 systemd[1]: var-lib-kubelet-pods-b1d0b64d\x2d3408\x2d4570\x2d8121\x2d7d091ee4f50c-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d2crdl.mount: Deactivated successfully. Jul 15 11:38:16.180472 systemd[1]: var-lib-kubelet-pods-b1d0b64d\x2d3408\x2d4570\x2d8121\x2d7d091ee4f50c-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 15 11:38:16.343548 systemd[1]: Created slice kubepods-besteffort-pod407390d5_a0b9_4eb9_a535_67036588fb87.slice. Jul 15 11:38:16.348970 kubelet[1929]: I0715 11:38:16.348907 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/407390d5-a0b9-4eb9-a535-67036588fb87-whisker-backend-key-pair\") pod \"whisker-f779d8f9b-mkwc9\" (UID: \"407390d5-a0b9-4eb9-a535-67036588fb87\") " pod="calico-system/whisker-f779d8f9b-mkwc9" Jul 15 11:38:16.349044 kubelet[1929]: I0715 11:38:16.348976 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sltm7\" (UniqueName: \"kubernetes.io/projected/407390d5-a0b9-4eb9-a535-67036588fb87-kube-api-access-sltm7\") pod \"whisker-f779d8f9b-mkwc9\" (UID: \"407390d5-a0b9-4eb9-a535-67036588fb87\") " pod="calico-system/whisker-f779d8f9b-mkwc9" Jul 15 11:38:16.349044 kubelet[1929]: I0715 11:38:16.348998 1929 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/407390d5-a0b9-4eb9-a535-67036588fb87-whisker-ca-bundle\") pod \"whisker-f779d8f9b-mkwc9\" (UID: \"407390d5-a0b9-4eb9-a535-67036588fb87\") " pod="calico-system/whisker-f779d8f9b-mkwc9" Jul 15 11:38:16.646343 env[1204]: time="2025-07-15T11:38:16.646296436Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-f779d8f9b-mkwc9,Uid:407390d5-a0b9-4eb9-a535-67036588fb87,Namespace:calico-system,Attempt:0,}" Jul 15 11:38:16.733551 kubelet[1929]: I0715 11:38:16.733492 1929 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="b1d0b64d-3408-4570-8121-7d091ee4f50c" path="/var/lib/kubelet/pods/b1d0b64d-3408-4570-8121-7d091ee4f50c/volumes" Jul 15 11:38:16.746236 systemd-networkd[1026]: cali1c4e87065c9: Link UP Jul 15 11:38:16.748314 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:38:16.748376 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1c4e87065c9: link becomes ready Jul 15 11:38:16.748822 systemd-networkd[1026]: cali1c4e87065c9: Gained carrier Jul 15 11:38:16.759329 env[1204]: 2025-07-15 11:38:16.676 [INFO][3308] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 15 11:38:16.759329 env[1204]: 2025-07-15 11:38:16.685 [INFO][3308] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--f779d8f9b--mkwc9-eth0 whisker-f779d8f9b- calico-system 407390d5-a0b9-4eb9-a535-67036588fb87 918 0 2025-07-15 11:38:16 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:f779d8f9b projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-f779d8f9b-mkwc9 eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali1c4e87065c9 [] [] }} ContainerID="42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c" Namespace="calico-system" Pod="whisker-f779d8f9b-mkwc9" WorkloadEndpoint="localhost-k8s-whisker--f779d8f9b--mkwc9-" Jul 15 11:38:16.759329 env[1204]: 2025-07-15 11:38:16.685 [INFO][3308] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c" Namespace="calico-system" Pod="whisker-f779d8f9b-mkwc9" WorkloadEndpoint="localhost-k8s-whisker--f779d8f9b--mkwc9-eth0" Jul 15 11:38:16.759329 env[1204]: 2025-07-15 11:38:16.709 [INFO][3322] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c" HandleID="k8s-pod-network.42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c" Workload="localhost-k8s-whisker--f779d8f9b--mkwc9-eth0" Jul 15 11:38:16.759329 env[1204]: 2025-07-15 11:38:16.709 [INFO][3322] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c" HandleID="k8s-pod-network.42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c" Workload="localhost-k8s-whisker--f779d8f9b--mkwc9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00051cb20), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-f779d8f9b-mkwc9", "timestamp":"2025-07-15 11:38:16.709676325 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:38:16.759329 env[1204]: 2025-07-15 11:38:16.709 [INFO][3322] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:16.759329 env[1204]: 2025-07-15 11:38:16.709 [INFO][3322] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:16.759329 env[1204]: 2025-07-15 11:38:16.709 [INFO][3322] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:38:16.759329 env[1204]: 2025-07-15 11:38:16.716 [INFO][3322] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c" host="localhost" Jul 15 11:38:16.759329 env[1204]: 2025-07-15 11:38:16.720 [INFO][3322] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:38:16.759329 env[1204]: 2025-07-15 11:38:16.723 [INFO][3322] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:38:16.759329 env[1204]: 2025-07-15 11:38:16.724 [INFO][3322] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:38:16.759329 env[1204]: 2025-07-15 11:38:16.726 [INFO][3322] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:38:16.759329 env[1204]: 2025-07-15 11:38:16.726 [INFO][3322] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c" host="localhost" Jul 15 11:38:16.759329 env[1204]: 2025-07-15 11:38:16.727 [INFO][3322] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c Jul 15 11:38:16.759329 env[1204]: 2025-07-15 11:38:16.731 [INFO][3322] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c" host="localhost" Jul 15 11:38:16.759329 env[1204]: 2025-07-15 11:38:16.736 [INFO][3322] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c" host="localhost" Jul 15 11:38:16.759329 env[1204]: 2025-07-15 11:38:16.736 [INFO][3322] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c" host="localhost" Jul 15 11:38:16.759329 env[1204]: 2025-07-15 11:38:16.736 [INFO][3322] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:16.759329 env[1204]: 2025-07-15 11:38:16.736 [INFO][3322] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c" HandleID="k8s-pod-network.42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c" Workload="localhost-k8s-whisker--f779d8f9b--mkwc9-eth0" Jul 15 11:38:16.759880 env[1204]: 2025-07-15 11:38:16.739 [INFO][3308] cni-plugin/k8s.go 418: Populated endpoint ContainerID="42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c" Namespace="calico-system" Pod="whisker-f779d8f9b-mkwc9" WorkloadEndpoint="localhost-k8s-whisker--f779d8f9b--mkwc9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--f779d8f9b--mkwc9-eth0", GenerateName:"whisker-f779d8f9b-", Namespace:"calico-system", SelfLink:"", UID:"407390d5-a0b9-4eb9-a535-67036588fb87", ResourceVersion:"918", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 38, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"f779d8f9b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-f779d8f9b-mkwc9", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali1c4e87065c9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:16.759880 env[1204]: 2025-07-15 11:38:16.739 [INFO][3308] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c" Namespace="calico-system" Pod="whisker-f779d8f9b-mkwc9" WorkloadEndpoint="localhost-k8s-whisker--f779d8f9b--mkwc9-eth0" Jul 15 11:38:16.759880 env[1204]: 2025-07-15 11:38:16.739 [INFO][3308] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali1c4e87065c9 ContainerID="42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c" Namespace="calico-system" Pod="whisker-f779d8f9b-mkwc9" WorkloadEndpoint="localhost-k8s-whisker--f779d8f9b--mkwc9-eth0" Jul 15 11:38:16.759880 env[1204]: 2025-07-15 11:38:16.750 [INFO][3308] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c" Namespace="calico-system" Pod="whisker-f779d8f9b-mkwc9" WorkloadEndpoint="localhost-k8s-whisker--f779d8f9b--mkwc9-eth0" Jul 15 11:38:16.759880 env[1204]: 2025-07-15 11:38:16.750 [INFO][3308] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c" Namespace="calico-system" Pod="whisker-f779d8f9b-mkwc9" WorkloadEndpoint="localhost-k8s-whisker--f779d8f9b--mkwc9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--f779d8f9b--mkwc9-eth0", GenerateName:"whisker-f779d8f9b-", Namespace:"calico-system", SelfLink:"", UID:"407390d5-a0b9-4eb9-a535-67036588fb87", ResourceVersion:"918", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 38, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"f779d8f9b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c", Pod:"whisker-f779d8f9b-mkwc9", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali1c4e87065c9", MAC:"16:20:a5:28:dc:c4", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:16.759880 env[1204]: 2025-07-15 11:38:16.757 [INFO][3308] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c" Namespace="calico-system" Pod="whisker-f779d8f9b-mkwc9" WorkloadEndpoint="localhost-k8s-whisker--f779d8f9b--mkwc9-eth0" Jul 15 11:38:16.767571 env[1204]: time="2025-07-15T11:38:16.767505126Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:38:16.767571 env[1204]: time="2025-07-15T11:38:16.767542977Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:38:16.767571 env[1204]: time="2025-07-15T11:38:16.767553546Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:38:16.767741 env[1204]: time="2025-07-15T11:38:16.767701365Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c pid=3346 runtime=io.containerd.runc.v2 Jul 15 11:38:16.777302 systemd[1]: Started cri-containerd-42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c.scope. Jul 15 11:38:16.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.786000 audit: BPF prog-id=139 op=LOAD Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3346 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:16.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432656261386639666165353233613032306632373935616537613762 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3346 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:16.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432656261386639666165353233613032306632373935616537613762 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit: BPF prog-id=140 op=LOAD Jul 15 11:38:16.787000 audit[3356]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00032dd10 items=0 ppid=3346 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:16.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432656261386639666165353233613032306632373935616537613762 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit: BPF prog-id=141 op=LOAD Jul 15 11:38:16.787000 audit[3356]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00032dd58 items=0 ppid=3346 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:16.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432656261386639666165353233613032306632373935616537613762 Jul 15 11:38:16.787000 audit: BPF prog-id=141 op=UNLOAD Jul 15 11:38:16.787000 audit: BPF prog-id=140 op=UNLOAD Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:16.787000 audit: BPF prog-id=142 op=LOAD Jul 15 11:38:16.787000 audit[3356]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003ae168 items=0 ppid=3346 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:16.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432656261386639666165353233613032306632373935616537613762 Jul 15 11:38:16.789091 systemd-resolved[1144]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:38:16.809550 env[1204]: time="2025-07-15T11:38:16.809512869Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-f779d8f9b-mkwc9,Uid:407390d5-a0b9-4eb9-a535-67036588fb87,Namespace:calico-system,Attempt:0,} returns sandbox id \"42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c\"" Jul 15 11:38:16.810952 env[1204]: time="2025-07-15T11:38:16.810910451Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 15 11:38:16.838000 audit[3419]: AVC avc: denied { write } for pid=3419 comm="tee" name="fd" dev="proc" ino=26747 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:38:16.838000 audit[3419]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe559e47ed a2=241 a3=1b6 items=1 ppid=3398 pid=3419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:16.838000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 15 11:38:16.838000 audit: PATH item=0 name="/dev/fd/63" inode=25815 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:38:16.838000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:38:16.839000 audit[3427]: AVC avc: denied { write } for pid=3427 comm="tee" name="fd" dev="proc" ino=25827 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:38:16.841000 audit[3426]: AVC avc: denied { write } for pid=3426 comm="tee" name="fd" dev="proc" ino=25058 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:38:16.841000 audit[3426]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc8dd4e7ee a2=241 a3=1b6 items=1 ppid=3389 pid=3426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:16.841000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 15 11:38:16.841000 audit: PATH item=0 name="/dev/fd/63" inode=25820 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:38:16.841000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:38:16.839000 audit[3427]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc0124d7ed a2=241 a3=1b6 items=1 ppid=3393 pid=3427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:16.839000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 15 11:38:16.839000 audit: PATH item=0 name="/dev/fd/63" inode=23968 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:38:16.839000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:38:16.847000 audit[3443]: AVC avc: denied { write } for pid=3443 comm="tee" name="fd" dev="proc" ino=25065 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:38:16.847000 audit[3443]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe20e547de a2=241 a3=1b6 items=1 ppid=3399 pid=3443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:16.847000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 15 11:38:16.847000 audit: PATH item=0 name="/dev/fd/63" inode=25824 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:38:16.847000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:38:16.874000 audit[3457]: AVC avc: denied { write } for pid=3457 comm="tee" name="fd" dev="proc" ino=26755 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:38:16.874000 audit[3457]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdbf5d77ef a2=241 a3=1b6 items=1 ppid=3403 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:16.874000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 15 11:38:16.874000 audit: PATH item=0 name="/dev/fd/63" inode=25062 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:38:16.874000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:38:16.875000 audit[3466]: AVC avc: denied { write } for pid=3466 comm="tee" name="fd" dev="proc" ino=25075 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:38:16.875000 audit[3466]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcd5cb37dd a2=241 a3=1b6 items=1 ppid=3394 pid=3466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:16.875000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 15 11:38:16.875000 audit: PATH item=0 name="/dev/fd/63" inode=25071 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:38:16.875000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:38:16.884000 audit[3461]: AVC avc: denied { write } for pid=3461 comm="tee" name="fd" dev="proc" ino=23988 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:38:16.884000 audit[3461]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcf258f7ed a2=241 a3=1b6 items=1 ppid=3397 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:16.884000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 15 11:38:16.884000 audit: PATH item=0 name="/dev/fd/63" inode=25835 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:38:16.884000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit: BPF prog-id=143 op=LOAD Jul 15 11:38:17.018000 audit[3529]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffce3a9da20 a2=98 a3=1fffffffffffffff items=0 ppid=3402 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.018000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:38:17.018000 audit: BPF prog-id=143 op=UNLOAD Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit: BPF prog-id=144 op=LOAD Jul 15 11:38:17.018000 audit[3529]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffce3a9d900 a2=94 a3=3 items=0 ppid=3402 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.018000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:38:17.018000 audit: BPF prog-id=144 op=UNLOAD Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { bpf } for pid=3529 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit: BPF prog-id=145 op=LOAD Jul 15 11:38:17.018000 audit[3529]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffce3a9d940 a2=94 a3=7ffce3a9db20 items=0 ppid=3402 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.018000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:38:17.018000 audit: BPF prog-id=145 op=UNLOAD Jul 15 11:38:17.018000 audit[3529]: AVC avc: denied { perfmon } for pid=3529 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.018000 audit[3529]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffce3a9da10 a2=50 a3=a000000085 items=0 ppid=3402 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.018000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit: BPF prog-id=146 op=LOAD Jul 15 11:38:17.019000 audit[3530]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd3b2a42e0 a2=98 a3=3 items=0 ppid=3402 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.019000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:38:17.019000 audit: BPF prog-id=146 op=UNLOAD Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit: BPF prog-id=147 op=LOAD Jul 15 11:38:17.019000 audit[3530]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd3b2a40d0 a2=94 a3=54428f items=0 ppid=3402 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.019000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:38:17.019000 audit: BPF prog-id=147 op=UNLOAD Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.019000 audit: BPF prog-id=148 op=LOAD Jul 15 11:38:17.019000 audit[3530]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd3b2a4100 a2=94 a3=2 items=0 ppid=3402 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.019000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:38:17.019000 audit: BPF prog-id=148 op=UNLOAD Jul 15 11:38:17.122000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.122000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.122000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.122000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.122000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.122000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.122000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.122000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.122000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.122000 audit: BPF prog-id=149 op=LOAD Jul 15 11:38:17.122000 audit[3530]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd3b2a3fc0 a2=94 a3=1 items=0 ppid=3402 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.122000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:38:17.122000 audit: BPF prog-id=149 op=UNLOAD Jul 15 11:38:17.122000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.122000 audit[3530]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffd3b2a4090 a2=50 a3=7ffd3b2a4170 items=0 ppid=3402 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.122000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:38:17.129000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.129000 audit[3530]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd3b2a3fd0 a2=28 a3=0 items=0 ppid=3402 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.129000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:38:17.129000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.129000 audit[3530]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd3b2a4000 a2=28 a3=0 items=0 ppid=3402 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.129000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:38:17.129000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.129000 audit[3530]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd3b2a3f10 a2=28 a3=0 items=0 ppid=3402 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.129000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:38:17.129000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.129000 audit[3530]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd3b2a4020 a2=28 a3=0 items=0 ppid=3402 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.129000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:38:17.129000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.129000 audit[3530]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd3b2a4000 a2=28 a3=0 items=0 ppid=3402 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.129000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:38:17.129000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.129000 audit[3530]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd3b2a3ff0 a2=28 a3=0 items=0 ppid=3402 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.129000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:38:17.129000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.129000 audit[3530]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd3b2a4020 a2=28 a3=0 items=0 ppid=3402 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.129000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd3b2a4000 a2=28 a3=0 items=0 ppid=3402 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.130000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd3b2a4020 a2=28 a3=0 items=0 ppid=3402 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.130000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd3b2a3ff0 a2=28 a3=0 items=0 ppid=3402 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.130000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd3b2a4060 a2=28 a3=0 items=0 ppid=3402 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.130000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffd3b2a3e10 a2=50 a3=1 items=0 ppid=3402 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.130000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit: BPF prog-id=150 op=LOAD Jul 15 11:38:17.130000 audit[3530]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd3b2a3e10 a2=94 a3=5 items=0 ppid=3402 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.130000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:38:17.130000 audit: BPF prog-id=150 op=UNLOAD Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffd3b2a3ec0 a2=50 a3=1 items=0 ppid=3402 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.130000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffd3b2a3fe0 a2=4 a3=38 items=0 ppid=3402 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.130000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { confidentiality } for pid=3530 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:38:17.130000 audit[3530]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd3b2a4030 a2=94 a3=6 items=0 ppid=3402 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.130000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { confidentiality } for pid=3530 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:38:17.130000 audit[3530]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd3b2a37e0 a2=94 a3=88 items=0 ppid=3402 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.130000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.130000 audit[3530]: AVC avc: denied { confidentiality } for pid=3530 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:38:17.130000 audit[3530]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd3b2a37e0 a2=94 a3=88 items=0 ppid=3402 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.130000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:38:17.136000 audit[3533]: AVC avc: denied { bpf } for pid=3533 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.136000 audit[3533]: AVC avc: denied { bpf } for pid=3533 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.136000 audit[3533]: AVC avc: denied { perfmon } for pid=3533 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.136000 audit[3533]: AVC avc: denied { perfmon } for pid=3533 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.136000 audit[3533]: AVC avc: denied { perfmon } for pid=3533 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.136000 audit[3533]: AVC avc: denied { perfmon } for pid=3533 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.136000 audit[3533]: AVC avc: denied { perfmon } for pid=3533 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.136000 audit[3533]: AVC avc: denied { bpf } for pid=3533 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.136000 audit[3533]: AVC avc: denied { bpf } for pid=3533 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.136000 audit: BPF prog-id=151 op=LOAD Jul 15 11:38:17.136000 audit[3533]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcc9dd2c40 a2=98 a3=1999999999999999 items=0 ppid=3402 pid=3533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.136000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:38:17.136000 audit: BPF prog-id=151 op=UNLOAD Jul 15 11:38:17.136000 audit[3533]: AVC avc: denied { bpf } for pid=3533 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.136000 audit[3533]: AVC avc: denied { bpf } for pid=3533 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.136000 audit[3533]: AVC avc: denied { perfmon } for pid=3533 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.136000 audit[3533]: AVC avc: denied { perfmon } for pid=3533 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.136000 audit[3533]: AVC avc: denied { perfmon } for pid=3533 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.136000 audit[3533]: AVC avc: denied { perfmon } for pid=3533 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.136000 audit[3533]: AVC avc: denied { perfmon } for pid=3533 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.136000 audit[3533]: AVC avc: denied { bpf } for pid=3533 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.136000 audit[3533]: AVC avc: denied { bpf } for pid=3533 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.136000 audit: BPF prog-id=152 op=LOAD Jul 15 11:38:17.136000 audit[3533]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcc9dd2b20 a2=94 a3=ffff items=0 ppid=3402 pid=3533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.136000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:38:17.137000 audit: BPF prog-id=152 op=UNLOAD Jul 15 11:38:17.137000 audit[3533]: AVC avc: denied { bpf } for pid=3533 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.137000 audit[3533]: AVC avc: denied { bpf } for pid=3533 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.137000 audit[3533]: AVC avc: denied { perfmon } for pid=3533 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.137000 audit[3533]: AVC avc: denied { perfmon } for pid=3533 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.137000 audit[3533]: AVC avc: denied { perfmon } for pid=3533 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.137000 audit[3533]: AVC avc: denied { perfmon } for pid=3533 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.137000 audit[3533]: AVC avc: denied { perfmon } for pid=3533 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.137000 audit[3533]: AVC avc: denied { bpf } for pid=3533 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.137000 audit[3533]: AVC avc: denied { bpf } for pid=3533 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.137000 audit: BPF prog-id=153 op=LOAD Jul 15 11:38:17.137000 audit[3533]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcc9dd2b60 a2=94 a3=7ffcc9dd2d40 items=0 ppid=3402 pid=3533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.137000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:38:17.137000 audit: BPF prog-id=153 op=UNLOAD Jul 15 11:38:17.183113 systemd-networkd[1026]: vxlan.calico: Link UP Jul 15 11:38:17.183122 systemd-networkd[1026]: vxlan.calico: Gained carrier Jul 15 11:38:17.209000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.209000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.209000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.209000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.209000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.209000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.209000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.209000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.209000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.209000 audit: BPF prog-id=154 op=LOAD Jul 15 11:38:17.209000 audit[3557]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff24a44fa0 a2=98 a3=0 items=0 ppid=3402 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.209000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:38:17.209000 audit: BPF prog-id=154 op=UNLOAD Jul 15 11:38:17.209000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.209000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.209000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.209000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.209000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.209000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.209000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.209000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.209000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.209000 audit: BPF prog-id=155 op=LOAD Jul 15 11:38:17.209000 audit[3557]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff24a44db0 a2=94 a3=54428f items=0 ppid=3402 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.209000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:38:17.210000 audit: BPF prog-id=155 op=UNLOAD Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit: BPF prog-id=156 op=LOAD Jul 15 11:38:17.210000 audit[3557]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff24a44de0 a2=94 a3=2 items=0 ppid=3402 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:38:17.210000 audit: BPF prog-id=156 op=UNLOAD Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff24a44cb0 a2=28 a3=0 items=0 ppid=3402 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff24a44ce0 a2=28 a3=0 items=0 ppid=3402 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff24a44bf0 a2=28 a3=0 items=0 ppid=3402 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff24a44d00 a2=28 a3=0 items=0 ppid=3402 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff24a44ce0 a2=28 a3=0 items=0 ppid=3402 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff24a44cd0 a2=28 a3=0 items=0 ppid=3402 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff24a44d00 a2=28 a3=0 items=0 ppid=3402 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff24a44ce0 a2=28 a3=0 items=0 ppid=3402 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff24a44d00 a2=28 a3=0 items=0 ppid=3402 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff24a44cd0 a2=28 a3=0 items=0 ppid=3402 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff24a44d40 a2=28 a3=0 items=0 ppid=3402 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit: BPF prog-id=157 op=LOAD Jul 15 11:38:17.210000 audit[3557]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff24a44bb0 a2=94 a3=0 items=0 ppid=3402 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:38:17.210000 audit: BPF prog-id=157 op=UNLOAD Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7fff24a44ba0 a2=50 a3=2800 items=0 ppid=3402 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7fff24a44ba0 a2=50 a3=2800 items=0 ppid=3402 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.210000 audit: BPF prog-id=158 op=LOAD Jul 15 11:38:17.210000 audit[3557]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff24a443c0 a2=94 a3=2 items=0 ppid=3402 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:38:17.211000 audit: BPF prog-id=158 op=UNLOAD Jul 15 11:38:17.211000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.211000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.211000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.211000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.211000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.211000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.211000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.211000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.211000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.211000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.211000 audit: BPF prog-id=159 op=LOAD Jul 15 11:38:17.211000 audit[3557]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff24a444c0 a2=94 a3=30 items=0 ppid=3402 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.211000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit: BPF prog-id=160 op=LOAD Jul 15 11:38:17.214000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe1def4a20 a2=98 a3=0 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.214000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.214000 audit: BPF prog-id=160 op=UNLOAD Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit: BPF prog-id=161 op=LOAD Jul 15 11:38:17.214000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe1def4810 a2=94 a3=54428f items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.214000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.214000 audit: BPF prog-id=161 op=UNLOAD Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.214000 audit: BPF prog-id=162 op=LOAD Jul 15 11:38:17.214000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe1def4840 a2=94 a3=2 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.214000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.214000 audit: BPF prog-id=162 op=UNLOAD Jul 15 11:38:17.319000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.319000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.319000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.319000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.319000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.319000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.319000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.319000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.319000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.319000 audit: BPF prog-id=163 op=LOAD Jul 15 11:38:17.319000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe1def4700 a2=94 a3=1 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.319000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.319000 audit: BPF prog-id=163 op=UNLOAD Jul 15 11:38:17.319000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.319000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffe1def47d0 a2=50 a3=7ffe1def48b0 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.319000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.328000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.328000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe1def4710 a2=28 a3=0 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.328000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.328000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.328000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe1def4740 a2=28 a3=0 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.328000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.328000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.328000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe1def4650 a2=28 a3=0 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.328000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.328000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.328000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe1def4760 a2=28 a3=0 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.328000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.328000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.328000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe1def4740 a2=28 a3=0 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.328000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.328000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.328000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe1def4730 a2=28 a3=0 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.328000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.328000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.328000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe1def4760 a2=28 a3=0 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.328000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.328000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.328000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe1def4740 a2=28 a3=0 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.328000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.328000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.328000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe1def4760 a2=28 a3=0 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.328000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.328000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.328000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe1def4730 a2=28 a3=0 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.328000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.328000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.328000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe1def47a0 a2=28 a3=0 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.328000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.328000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.328000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe1def4550 a2=50 a3=1 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.328000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.328000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.328000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.328000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.328000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.328000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.328000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.328000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.328000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.328000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.328000 audit: BPF prog-id=164 op=LOAD Jul 15 11:38:17.328000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe1def4550 a2=94 a3=5 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.328000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.329000 audit: BPF prog-id=164 op=UNLOAD Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe1def4600 a2=50 a3=1 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.329000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffe1def4720 a2=4 a3=38 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.329000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { confidentiality } for pid=3561 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:38:17.329000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe1def4770 a2=94 a3=6 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.329000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { confidentiality } for pid=3561 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:38:17.329000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe1def3f20 a2=94 a3=88 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.329000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { confidentiality } for pid=3561 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:38:17.329000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe1def3f20 a2=94 a3=88 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.329000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe1def5950 a2=10 a3=208 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.329000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe1def57f0 a2=10 a3=3 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.329000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe1def5790 a2=10 a3=3 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.329000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.329000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:17.329000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe1def5790 a2=10 a3=7 items=0 ppid=3402 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.329000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:38:17.337000 audit: BPF prog-id=159 op=UNLOAD Jul 15 11:38:17.374000 audit[3591]: NETFILTER_CFG table=mangle:99 family=2 entries=16 op=nft_register_chain pid=3591 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:38:17.374000 audit[3591]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffda62b3680 a2=0 a3=7ffda62b366c items=0 ppid=3402 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.374000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:38:17.382000 audit[3595]: NETFILTER_CFG table=nat:100 family=2 entries=15 op=nft_register_chain pid=3595 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:38:17.382000 audit[3595]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffe5ec92da0 a2=0 a3=7ffe5ec92d8c items=0 ppid=3402 pid=3595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.382000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:38:17.383000 audit[3590]: NETFILTER_CFG table=raw:101 family=2 entries=21 op=nft_register_chain pid=3590 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:38:17.383000 audit[3590]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffcc69f8df0 a2=0 a3=7ffcc69f8ddc items=0 ppid=3402 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.383000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:38:17.386000 audit[3592]: NETFILTER_CFG table=filter:102 family=2 entries=94 op=nft_register_chain pid=3592 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:38:17.386000 audit[3592]: SYSCALL arch=c000003e syscall=46 success=yes exit=53116 a0=3 a1=7ffe0a57a5f0 a2=0 a3=7ffe0a57a5dc items=0 ppid=3402 pid=3592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.386000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:38:18.151938 env[1204]: time="2025-07-15T11:38:18.151876398Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:18.153737 env[1204]: time="2025-07-15T11:38:18.153679230Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:18.155214 env[1204]: time="2025-07-15T11:38:18.155174083Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:18.156834 env[1204]: time="2025-07-15T11:38:18.156803559Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:18.157280 env[1204]: time="2025-07-15T11:38:18.157256391Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954\"" Jul 15 11:38:18.159178 env[1204]: time="2025-07-15T11:38:18.159131218Z" level=info msg="CreateContainer within sandbox \"42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 15 11:38:18.173407 env[1204]: time="2025-07-15T11:38:18.173376644Z" level=info msg="CreateContainer within sandbox \"42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"3e47fca50b7aa1eb529855af4dbcda565cafd9bb5fff8e695cf198995d74e0fd\"" Jul 15 11:38:18.173829 env[1204]: time="2025-07-15T11:38:18.173777439Z" level=info msg="StartContainer for \"3e47fca50b7aa1eb529855af4dbcda565cafd9bb5fff8e695cf198995d74e0fd\"" Jul 15 11:38:18.194861 systemd[1]: run-containerd-runc-k8s.io-3e47fca50b7aa1eb529855af4dbcda565cafd9bb5fff8e695cf198995d74e0fd-runc.aImXbr.mount: Deactivated successfully. Jul 15 11:38:18.196204 systemd[1]: Started cri-containerd-3e47fca50b7aa1eb529855af4dbcda565cafd9bb5fff8e695cf198995d74e0fd.scope. Jul 15 11:38:18.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.208000 audit: BPF prog-id=165 op=LOAD Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { bpf } for pid=3613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3346 pid=3613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:18.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365343766636135306237616131656235323938353561663464626364 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { perfmon } for pid=3613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=3346 pid=3613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:18.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365343766636135306237616131656235323938353561663464626364 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { bpf } for pid=3613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { bpf } for pid=3613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { bpf } for pid=3613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { perfmon } for pid=3613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { perfmon } for pid=3613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { perfmon } for pid=3613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { perfmon } for pid=3613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { perfmon } for pid=3613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { bpf } for pid=3613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { bpf } for pid=3613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit: BPF prog-id=166 op=LOAD Jul 15 11:38:18.209000 audit[3613]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000024c00 items=0 ppid=3346 pid=3613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:18.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365343766636135306237616131656235323938353561663464626364 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { bpf } for pid=3613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { bpf } for pid=3613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { perfmon } for pid=3613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { perfmon } for pid=3613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { perfmon } for pid=3613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { perfmon } for pid=3613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { perfmon } for pid=3613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { bpf } for pid=3613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { bpf } for pid=3613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit: BPF prog-id=167 op=LOAD Jul 15 11:38:18.209000 audit[3613]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000024c48 items=0 ppid=3346 pid=3613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:18.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365343766636135306237616131656235323938353561663464626364 Jul 15 11:38:18.209000 audit: BPF prog-id=167 op=UNLOAD Jul 15 11:38:18.209000 audit: BPF prog-id=166 op=UNLOAD Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { bpf } for pid=3613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { bpf } for pid=3613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { bpf } for pid=3613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { perfmon } for pid=3613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { perfmon } for pid=3613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { perfmon } for pid=3613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { perfmon } for pid=3613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { perfmon } for pid=3613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { bpf } for pid=3613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit[3613]: AVC avc: denied { bpf } for pid=3613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:18.209000 audit: BPF prog-id=168 op=LOAD Jul 15 11:38:18.209000 audit[3613]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000025058 items=0 ppid=3346 pid=3613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:18.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365343766636135306237616131656235323938353561663464626364 Jul 15 11:38:18.241049 env[1204]: time="2025-07-15T11:38:18.240988699Z" level=info msg="StartContainer for \"3e47fca50b7aa1eb529855af4dbcda565cafd9bb5fff8e695cf198995d74e0fd\" returns successfully" Jul 15 11:38:18.242201 env[1204]: time="2025-07-15T11:38:18.242159192Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 15 11:38:18.247000 audit[3623]: AVC avc: denied { search } for pid=3623 comm="nginx" name="crypto" dev="proc" ino=25259 scontext=system_u:system_r:svirt_lxc_net_t:s0:c56,c596 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 15 11:38:18.247000 audit[3623]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f96c0dfc728 a2=0 a3=0 items=0 ppid=3346 pid=3623 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c56,c596 key=(null) Jul 15 11:38:18.247000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 15 11:38:18.593289 systemd-networkd[1026]: cali1c4e87065c9: Gained IPv6LL Jul 15 11:38:18.977059 systemd-networkd[1026]: vxlan.calico: Gained IPv6LL Jul 15 11:38:19.731152 env[1204]: time="2025-07-15T11:38:19.731098342Z" level=info msg="StopPodSandbox for \"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c\"" Jul 15 11:38:19.818435 env[1204]: 2025-07-15 11:38:19.768 [INFO][3658] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" Jul 15 11:38:19.818435 env[1204]: 2025-07-15 11:38:19.768 [INFO][3658] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" iface="eth0" netns="/var/run/netns/cni-6f06b30e-3b87-7cb1-34a3-460f8912deeb" Jul 15 11:38:19.818435 env[1204]: 2025-07-15 11:38:19.768 [INFO][3658] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" iface="eth0" netns="/var/run/netns/cni-6f06b30e-3b87-7cb1-34a3-460f8912deeb" Jul 15 11:38:19.818435 env[1204]: 2025-07-15 11:38:19.768 [INFO][3658] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" iface="eth0" netns="/var/run/netns/cni-6f06b30e-3b87-7cb1-34a3-460f8912deeb" Jul 15 11:38:19.818435 env[1204]: 2025-07-15 11:38:19.768 [INFO][3658] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" Jul 15 11:38:19.818435 env[1204]: 2025-07-15 11:38:19.768 [INFO][3658] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" Jul 15 11:38:19.818435 env[1204]: 2025-07-15 11:38:19.795 [INFO][3667] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" HandleID="k8s-pod-network.e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" Workload="localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0" Jul 15 11:38:19.818435 env[1204]: 2025-07-15 11:38:19.795 [INFO][3667] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:19.818435 env[1204]: 2025-07-15 11:38:19.795 [INFO][3667] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:19.818435 env[1204]: 2025-07-15 11:38:19.802 [WARNING][3667] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" HandleID="k8s-pod-network.e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" Workload="localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0" Jul 15 11:38:19.818435 env[1204]: 2025-07-15 11:38:19.802 [INFO][3667] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" HandleID="k8s-pod-network.e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" Workload="localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0" Jul 15 11:38:19.818435 env[1204]: 2025-07-15 11:38:19.809 [INFO][3667] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:19.818435 env[1204]: 2025-07-15 11:38:19.811 [INFO][3658] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" Jul 15 11:38:19.821430 env[1204]: time="2025-07-15T11:38:19.818576021Z" level=info msg="TearDown network for sandbox \"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c\" successfully" Jul 15 11:38:19.821430 env[1204]: time="2025-07-15T11:38:19.818607250Z" level=info msg="StopPodSandbox for \"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c\" returns successfully" Jul 15 11:38:19.820576 systemd[1]: run-netns-cni\x2d6f06b30e\x2d3b87\x2d7cb1\x2d34a3\x2d460f8912deeb.mount: Deactivated successfully. Jul 15 11:38:19.821698 kubelet[1929]: E0715 11:38:19.818941 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:38:19.822403 env[1204]: time="2025-07-15T11:38:19.822345222Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-m5mx9,Uid:e041bcfa-663d-4cfb-a0a7-0ab3e7909d02,Namespace:kube-system,Attempt:1,}" Jul 15 11:38:20.054934 systemd-networkd[1026]: cali1afce1fa520: Link UP Jul 15 11:38:20.057801 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:38:20.057911 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1afce1fa520: link becomes ready Jul 15 11:38:20.057609 systemd-networkd[1026]: cali1afce1fa520: Gained carrier Jul 15 11:38:20.074915 env[1204]: 2025-07-15 11:38:19.885 [INFO][3675] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0 coredns-7c65d6cfc9- kube-system e041bcfa-663d-4cfb-a0a7-0ab3e7909d02 950 0 2025-07-15 11:37:47 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-m5mx9 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali1afce1fa520 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a" Namespace="kube-system" Pod="coredns-7c65d6cfc9-m5mx9" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--m5mx9-" Jul 15 11:38:20.074915 env[1204]: 2025-07-15 11:38:19.886 [INFO][3675] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a" Namespace="kube-system" Pod="coredns-7c65d6cfc9-m5mx9" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0" Jul 15 11:38:20.074915 env[1204]: 2025-07-15 11:38:19.908 [INFO][3689] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a" HandleID="k8s-pod-network.32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a" Workload="localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0" Jul 15 11:38:20.074915 env[1204]: 2025-07-15 11:38:19.908 [INFO][3689] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a" HandleID="k8s-pod-network.32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a" Workload="localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c9090), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-m5mx9", "timestamp":"2025-07-15 11:38:19.908166406 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:38:20.074915 env[1204]: 2025-07-15 11:38:19.908 [INFO][3689] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:20.074915 env[1204]: 2025-07-15 11:38:19.908 [INFO][3689] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:20.074915 env[1204]: 2025-07-15 11:38:19.908 [INFO][3689] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:38:20.074915 env[1204]: 2025-07-15 11:38:19.914 [INFO][3689] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a" host="localhost" Jul 15 11:38:20.074915 env[1204]: 2025-07-15 11:38:19.918 [INFO][3689] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:38:20.074915 env[1204]: 2025-07-15 11:38:19.922 [INFO][3689] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:38:20.074915 env[1204]: 2025-07-15 11:38:19.924 [INFO][3689] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:38:20.074915 env[1204]: 2025-07-15 11:38:19.925 [INFO][3689] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:38:20.074915 env[1204]: 2025-07-15 11:38:19.925 [INFO][3689] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a" host="localhost" Jul 15 11:38:20.074915 env[1204]: 2025-07-15 11:38:19.926 [INFO][3689] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a Jul 15 11:38:20.074915 env[1204]: 2025-07-15 11:38:20.024 [INFO][3689] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a" host="localhost" Jul 15 11:38:20.074915 env[1204]: 2025-07-15 11:38:20.028 [INFO][3689] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a" host="localhost" Jul 15 11:38:20.074915 env[1204]: 2025-07-15 11:38:20.028 [INFO][3689] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a" host="localhost" Jul 15 11:38:20.074915 env[1204]: 2025-07-15 11:38:20.029 [INFO][3689] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:20.074915 env[1204]: 2025-07-15 11:38:20.029 [INFO][3689] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a" HandleID="k8s-pod-network.32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a" Workload="localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0" Jul 15 11:38:20.075650 env[1204]: 2025-07-15 11:38:20.046 [INFO][3675] cni-plugin/k8s.go 418: Populated endpoint ContainerID="32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a" Namespace="kube-system" Pod="coredns-7c65d6cfc9-m5mx9" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"e041bcfa-663d-4cfb-a0a7-0ab3e7909d02", ResourceVersion:"950", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-m5mx9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1afce1fa520", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:20.075650 env[1204]: 2025-07-15 11:38:20.046 [INFO][3675] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a" Namespace="kube-system" Pod="coredns-7c65d6cfc9-m5mx9" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0" Jul 15 11:38:20.075650 env[1204]: 2025-07-15 11:38:20.046 [INFO][3675] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali1afce1fa520 ContainerID="32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a" Namespace="kube-system" Pod="coredns-7c65d6cfc9-m5mx9" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0" Jul 15 11:38:20.075650 env[1204]: 2025-07-15 11:38:20.058 [INFO][3675] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a" Namespace="kube-system" Pod="coredns-7c65d6cfc9-m5mx9" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0" Jul 15 11:38:20.075650 env[1204]: 2025-07-15 11:38:20.058 [INFO][3675] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a" Namespace="kube-system" Pod="coredns-7c65d6cfc9-m5mx9" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"e041bcfa-663d-4cfb-a0a7-0ab3e7909d02", ResourceVersion:"950", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a", Pod:"coredns-7c65d6cfc9-m5mx9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1afce1fa520", MAC:"da:97:5a:49:3f:67", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:20.075650 env[1204]: 2025-07-15 11:38:20.072 [INFO][3675] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a" Namespace="kube-system" Pod="coredns-7c65d6cfc9-m5mx9" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0" Jul 15 11:38:20.097383 env[1204]: time="2025-07-15T11:38:20.097290050Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:38:20.097463 env[1204]: time="2025-07-15T11:38:20.097401891Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:38:20.097463 env[1204]: time="2025-07-15T11:38:20.097424804Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:38:20.097612 env[1204]: time="2025-07-15T11:38:20.097579846Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a pid=3713 runtime=io.containerd.runc.v2 Jul 15 11:38:20.113988 systemd[1]: Started cri-containerd-32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a.scope. Jul 15 11:38:20.121000 audit[3743]: NETFILTER_CFG table=filter:103 family=2 entries=42 op=nft_register_chain pid=3743 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:38:20.121000 audit[3743]: SYSCALL arch=c000003e syscall=46 success=yes exit=22552 a0=3 a1=7ffe9fedfd50 a2=0 a3=7ffe9fedfd3c items=0 ppid=3402 pid=3743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:20.121000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:38:20.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit: BPF prog-id=169 op=LOAD Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3713 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:20.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332653766386534616531373630363631303636393631353965643265 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=3713 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:20.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332653766386534616531373630363631303636393631353965643265 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit: BPF prog-id=170 op=LOAD Jul 15 11:38:20.122000 audit[3721]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000329910 items=0 ppid=3713 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:20.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332653766386534616531373630363631303636393631353965643265 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit: BPF prog-id=171 op=LOAD Jul 15 11:38:20.122000 audit[3721]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000329958 items=0 ppid=3713 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:20.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332653766386534616531373630363631303636393631353965643265 Jul 15 11:38:20.122000 audit: BPF prog-id=171 op=UNLOAD Jul 15 11:38:20.122000 audit: BPF prog-id=170 op=UNLOAD Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.122000 audit: BPF prog-id=172 op=LOAD Jul 15 11:38:20.122000 audit[3721]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000329d68 items=0 ppid=3713 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:20.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332653766386534616531373630363631303636393631353965643265 Jul 15 11:38:20.125080 systemd-resolved[1144]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:38:20.147224 env[1204]: time="2025-07-15T11:38:20.147172914Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-m5mx9,Uid:e041bcfa-663d-4cfb-a0a7-0ab3e7909d02,Namespace:kube-system,Attempt:1,} returns sandbox id \"32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a\"" Jul 15 11:38:20.148204 kubelet[1929]: E0715 11:38:20.148180 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:38:20.150389 env[1204]: time="2025-07-15T11:38:20.150304725Z" level=info msg="CreateContainer within sandbox \"32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 15 11:38:20.177202 env[1204]: time="2025-07-15T11:38:20.177157011Z" level=info msg="CreateContainer within sandbox \"32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"82a7a672f96d03de1a365962a18a4e5f35b3bcfc43bde70f3f7b522c35f54f01\"" Jul 15 11:38:20.177708 env[1204]: time="2025-07-15T11:38:20.177678361Z" level=info msg="StartContainer for \"82a7a672f96d03de1a365962a18a4e5f35b3bcfc43bde70f3f7b522c35f54f01\"" Jul 15 11:38:20.192418 systemd[1]: Started cri-containerd-82a7a672f96d03de1a365962a18a4e5f35b3bcfc43bde70f3f7b522c35f54f01.scope. Jul 15 11:38:20.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.203000 audit: BPF prog-id=173 op=LOAD Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3713 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:20.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832613761363732663936643033646531613336353936326131386134 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=3713 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:20.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832613761363732663936643033646531613336353936326131386134 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit: BPF prog-id=174 op=LOAD Jul 15 11:38:20.204000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000214c60 items=0 ppid=3713 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:20.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832613761363732663936643033646531613336353936326131386134 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit: BPF prog-id=175 op=LOAD Jul 15 11:38:20.204000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000214ca8 items=0 ppid=3713 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:20.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832613761363732663936643033646531613336353936326131386134 Jul 15 11:38:20.204000 audit: BPF prog-id=175 op=UNLOAD Jul 15 11:38:20.204000 audit: BPF prog-id=174 op=UNLOAD Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.204000 audit: BPF prog-id=176 op=LOAD Jul 15 11:38:20.204000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0002150b8 items=0 ppid=3713 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:20.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832613761363732663936643033646531613336353936326131386134 Jul 15 11:38:20.218978 env[1204]: time="2025-07-15T11:38:20.218938196Z" level=info msg="StartContainer for \"82a7a672f96d03de1a365962a18a4e5f35b3bcfc43bde70f3f7b522c35f54f01\" returns successfully" Jul 15 11:38:20.250974 kernel: kauditd_printk_skb: 835 callbacks suppressed Jul 15 11:38:20.251124 kernel: audit: type=1400 audit(1752579500.248:1201): avc: denied { getattr } for pid=3767 comm="coredns" path="cgroup:[4026532363]" dev="nsfs" ino=4026532363 scontext=system_u:system_r:svirt_lxc_net_t:s0:c872,c898 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 15 11:38:20.248000 audit[3767]: AVC avc: denied { getattr } for pid=3767 comm="coredns" path="cgroup:[4026532363]" dev="nsfs" ino=4026532363 scontext=system_u:system_r:svirt_lxc_net_t:s0:c872,c898 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 15 11:38:20.248000 audit[3767]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c0000fcac8 a2=c0004c2928 a3=0 items=0 ppid=3713 pid=3767 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c872,c898 key=(null) Jul 15 11:38:20.258519 kernel: audit: type=1300 audit(1752579500.248:1201): arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c0000fcac8 a2=c0004c2928 a3=0 items=0 ppid=3713 pid=3767 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c872,c898 key=(null) Jul 15 11:38:20.248000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 15 11:38:20.260872 kernel: audit: type=1327 audit(1752579500.248:1201): proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 15 11:38:20.742964 env[1204]: time="2025-07-15T11:38:20.742902050Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:20.744633 env[1204]: time="2025-07-15T11:38:20.744584365Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:20.746252 env[1204]: time="2025-07-15T11:38:20.746220562Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:20.747634 env[1204]: time="2025-07-15T11:38:20.747601620Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:20.748065 env[1204]: time="2025-07-15T11:38:20.748042399Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f\"" Jul 15 11:38:20.750013 env[1204]: time="2025-07-15T11:38:20.749980615Z" level=info msg="CreateContainer within sandbox \"42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 15 11:38:20.760422 env[1204]: time="2025-07-15T11:38:20.760384954Z" level=info msg="CreateContainer within sandbox \"42eba8f9fae523a020f2795ae7a7b2b6acb5673068e94d4424909580b830447c\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"155514393e206786da3217af3bcd2f38a3656b213782d629553d1249fc5d23d5\"" Jul 15 11:38:20.760727 env[1204]: time="2025-07-15T11:38:20.760697472Z" level=info msg="StartContainer for \"155514393e206786da3217af3bcd2f38a3656b213782d629553d1249fc5d23d5\"" Jul 15 11:38:20.774372 systemd[1]: Started cri-containerd-155514393e206786da3217af3bcd2f38a3656b213782d629553d1249fc5d23d5.scope. Jul 15 11:38:20.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.793857 kernel: audit: type=1400 audit(1752579500.784:1202): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.793966 kernel: audit: type=1400 audit(1752579500.784:1203): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.793987 kernel: audit: type=1400 audit(1752579500.784:1204): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.796951 kernel: audit: type=1400 audit(1752579500.784:1205): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.799856 kernel: audit: type=1400 audit(1752579500.784:1206): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.799907 kernel: audit: type=1400 audit(1752579500.784:1207): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.805491 kernel: audit: type=1400 audit(1752579500.784:1208): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.784000 audit: BPF prog-id=177 op=LOAD Jul 15 11:38:20.785000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.785000 audit[3795]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3346 pid=3795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:20.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135353531343339336532303637383664613332313761663362636432 Jul 15 11:38:20.785000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.785000 audit[3795]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3346 pid=3795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:20.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135353531343339336532303637383664613332313761663362636432 Jul 15 11:38:20.785000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.785000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.785000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.785000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.785000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.785000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.785000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.785000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.785000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.785000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.785000 audit: BPF prog-id=178 op=LOAD Jul 15 11:38:20.785000 audit[3795]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001eda10 items=0 ppid=3346 pid=3795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:20.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135353531343339336532303637383664613332313761663362636432 Jul 15 11:38:20.790000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.790000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.790000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.790000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.790000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.790000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.790000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.790000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.790000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.790000 audit: BPF prog-id=179 op=LOAD Jul 15 11:38:20.790000 audit[3795]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001eda58 items=0 ppid=3346 pid=3795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:20.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135353531343339336532303637383664613332313761663362636432 Jul 15 11:38:20.796000 audit: BPF prog-id=179 op=UNLOAD Jul 15 11:38:20.796000 audit: BPF prog-id=178 op=UNLOAD Jul 15 11:38:20.796000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.796000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.796000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.796000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.796000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.796000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.796000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.796000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.796000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.796000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:20.796000 audit: BPF prog-id=180 op=LOAD Jul 15 11:38:20.796000 audit[3795]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001ede68 items=0 ppid=3346 pid=3795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:20.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135353531343339336532303637383664613332313761663362636432 Jul 15 11:38:20.821831 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1817954643.mount: Deactivated successfully. Jul 15 11:38:20.828638 env[1204]: time="2025-07-15T11:38:20.828555094Z" level=info msg="StartContainer for \"155514393e206786da3217af3bcd2f38a3656b213782d629553d1249fc5d23d5\" returns successfully" Jul 15 11:38:20.841896 kubelet[1929]: E0715 11:38:20.841456 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:38:20.862640 kubelet[1929]: I0715 11:38:20.862578 1929 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-f779d8f9b-mkwc9" podStartSLOduration=0.924358633 podStartE2EDuration="4.862559331s" podCreationTimestamp="2025-07-15 11:38:16 +0000 UTC" firstStartedPulling="2025-07-15 11:38:16.810496882 +0000 UTC m=+34.151479011" lastFinishedPulling="2025-07-15 11:38:20.748697581 +0000 UTC m=+38.089679709" observedRunningTime="2025-07-15 11:38:20.85251521 +0000 UTC m=+38.193497338" watchObservedRunningTime="2025-07-15 11:38:20.862559331 +0000 UTC m=+38.203541460" Jul 15 11:38:20.864000 audit[3826]: NETFILTER_CFG table=filter:104 family=2 entries=19 op=nft_register_rule pid=3826 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:20.864000 audit[3826]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fff8f39c480 a2=0 a3=7fff8f39c46c items=0 ppid=2039 pid=3826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:20.864000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:20.871000 audit[3826]: NETFILTER_CFG table=nat:105 family=2 entries=21 op=nft_register_chain pid=3826 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:20.871000 audit[3826]: SYSCALL arch=c000003e syscall=46 success=yes exit=7044 a0=3 a1=7fff8f39c480 a2=0 a3=7fff8f39c46c items=0 ppid=2039 pid=3826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:20.871000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:20.884000 audit[3829]: NETFILTER_CFG table=filter:106 family=2 entries=15 op=nft_register_rule pid=3829 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:20.884000 audit[3829]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffd9bc62fd0 a2=0 a3=7ffd9bc62fbc items=0 ppid=2039 pid=3829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:20.884000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:20.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.140:22-10.0.0.1:37804 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:20.889639 systemd[1]: Started sshd@8-10.0.0.140:22-10.0.0.1:37804.service. Jul 15 11:38:20.893000 audit[3829]: NETFILTER_CFG table=nat:107 family=2 entries=37 op=nft_register_chain pid=3829 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:20.893000 audit[3829]: SYSCALL arch=c000003e syscall=46 success=yes exit=14964 a0=3 a1=7ffd9bc62fd0 a2=0 a3=7ffd9bc62fbc items=0 ppid=2039 pid=3829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:20.893000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:20.926000 audit[3831]: USER_ACCT pid=3831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:20.927594 sshd[3831]: Accepted publickey for core from 10.0.0.1 port 37804 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:38:20.927000 audit[3831]: CRED_ACQ pid=3831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:20.927000 audit[3831]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdffa19950 a2=3 a3=0 items=0 ppid=1 pid=3831 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:20.927000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:38:20.928645 sshd[3831]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:38:20.931751 systemd-logind[1189]: New session 9 of user core. Jul 15 11:38:20.932448 systemd[1]: Started session-9.scope. Jul 15 11:38:20.935000 audit[3831]: USER_START pid=3831 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:20.936000 audit[3834]: CRED_ACQ pid=3834 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:21.044170 sshd[3831]: pam_unix(sshd:session): session closed for user core Jul 15 11:38:21.045000 audit[3831]: USER_END pid=3831 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:21.045000 audit[3831]: CRED_DISP pid=3831 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:21.048138 systemd[1]: sshd@8-10.0.0.140:22-10.0.0.1:37804.service: Deactivated successfully. Jul 15 11:38:21.047000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.140:22-10.0.0.1:37804 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:21.048823 systemd[1]: session-9.scope: Deactivated successfully. Jul 15 11:38:21.049436 systemd-logind[1189]: Session 9 logged out. Waiting for processes to exit. Jul 15 11:38:21.050079 systemd-logind[1189]: Removed session 9. Jul 15 11:38:21.731129 env[1204]: time="2025-07-15T11:38:21.731050834Z" level=info msg="StopPodSandbox for \"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8\"" Jul 15 11:38:21.768232 kubelet[1929]: I0715 11:38:21.768032 1929 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-m5mx9" podStartSLOduration=34.768011288 podStartE2EDuration="34.768011288s" podCreationTimestamp="2025-07-15 11:37:47 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:38:20.863170241 +0000 UTC m=+38.204152369" watchObservedRunningTime="2025-07-15 11:38:21.768011288 +0000 UTC m=+39.108993416" Jul 15 11:38:21.797763 env[1204]: 2025-07-15 11:38:21.768 [INFO][3856] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" Jul 15 11:38:21.797763 env[1204]: 2025-07-15 11:38:21.768 [INFO][3856] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" iface="eth0" netns="/var/run/netns/cni-3c2fd659-7c84-5429-3f0c-510ed9998682" Jul 15 11:38:21.797763 env[1204]: 2025-07-15 11:38:21.768 [INFO][3856] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" iface="eth0" netns="/var/run/netns/cni-3c2fd659-7c84-5429-3f0c-510ed9998682" Jul 15 11:38:21.797763 env[1204]: 2025-07-15 11:38:21.768 [INFO][3856] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" iface="eth0" netns="/var/run/netns/cni-3c2fd659-7c84-5429-3f0c-510ed9998682" Jul 15 11:38:21.797763 env[1204]: 2025-07-15 11:38:21.768 [INFO][3856] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" Jul 15 11:38:21.797763 env[1204]: 2025-07-15 11:38:21.768 [INFO][3856] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" Jul 15 11:38:21.797763 env[1204]: 2025-07-15 11:38:21.787 [INFO][3865] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" HandleID="k8s-pod-network.9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" Workload="localhost-k8s-goldmane--58fd7646b9--5bptq-eth0" Jul 15 11:38:21.797763 env[1204]: 2025-07-15 11:38:21.787 [INFO][3865] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:21.797763 env[1204]: 2025-07-15 11:38:21.787 [INFO][3865] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:21.797763 env[1204]: 2025-07-15 11:38:21.792 [WARNING][3865] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" HandleID="k8s-pod-network.9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" Workload="localhost-k8s-goldmane--58fd7646b9--5bptq-eth0" Jul 15 11:38:21.797763 env[1204]: 2025-07-15 11:38:21.792 [INFO][3865] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" HandleID="k8s-pod-network.9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" Workload="localhost-k8s-goldmane--58fd7646b9--5bptq-eth0" Jul 15 11:38:21.797763 env[1204]: 2025-07-15 11:38:21.793 [INFO][3865] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:21.797763 env[1204]: 2025-07-15 11:38:21.796 [INFO][3856] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" Jul 15 11:38:21.798433 env[1204]: time="2025-07-15T11:38:21.797941263Z" level=info msg="TearDown network for sandbox \"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8\" successfully" Jul 15 11:38:21.798433 env[1204]: time="2025-07-15T11:38:21.797971389Z" level=info msg="StopPodSandbox for \"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8\" returns successfully" Jul 15 11:38:21.800157 systemd[1]: run-netns-cni\x2d3c2fd659\x2d7c84\x2d5429\x2d3f0c\x2d510ed9998682.mount: Deactivated successfully. Jul 15 11:38:21.801058 env[1204]: time="2025-07-15T11:38:21.801025342Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-5bptq,Uid:2da410fc-f5e4-4d6a-8712-6df0d9f82617,Namespace:calico-system,Attempt:1,}" Jul 15 11:38:21.843880 kubelet[1929]: E0715 11:38:21.843829 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:38:21.895641 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:38:21.895753 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali17578459fa2: link becomes ready Jul 15 11:38:21.896778 systemd-networkd[1026]: cali17578459fa2: Link UP Jul 15 11:38:21.896975 systemd-networkd[1026]: cali17578459fa2: Gained carrier Jul 15 11:38:21.905795 env[1204]: 2025-07-15 11:38:21.838 [INFO][3872] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--58fd7646b9--5bptq-eth0 goldmane-58fd7646b9- calico-system 2da410fc-f5e4-4d6a-8712-6df0d9f82617 987 0 2025-07-15 11:37:57 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:58fd7646b9 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-58fd7646b9-5bptq eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali17578459fa2 [] [] }} ContainerID="9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11" Namespace="calico-system" Pod="goldmane-58fd7646b9-5bptq" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--5bptq-" Jul 15 11:38:21.905795 env[1204]: 2025-07-15 11:38:21.838 [INFO][3872] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11" Namespace="calico-system" Pod="goldmane-58fd7646b9-5bptq" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--5bptq-eth0" Jul 15 11:38:21.905795 env[1204]: 2025-07-15 11:38:21.861 [INFO][3886] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11" HandleID="k8s-pod-network.9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11" Workload="localhost-k8s-goldmane--58fd7646b9--5bptq-eth0" Jul 15 11:38:21.905795 env[1204]: 2025-07-15 11:38:21.861 [INFO][3886] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11" HandleID="k8s-pod-network.9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11" Workload="localhost-k8s-goldmane--58fd7646b9--5bptq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0001387d0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-58fd7646b9-5bptq", "timestamp":"2025-07-15 11:38:21.86132689 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:38:21.905795 env[1204]: 2025-07-15 11:38:21.861 [INFO][3886] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:21.905795 env[1204]: 2025-07-15 11:38:21.861 [INFO][3886] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:21.905795 env[1204]: 2025-07-15 11:38:21.861 [INFO][3886] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:38:21.905795 env[1204]: 2025-07-15 11:38:21.868 [INFO][3886] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11" host="localhost" Jul 15 11:38:21.905795 env[1204]: 2025-07-15 11:38:21.871 [INFO][3886] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:38:21.905795 env[1204]: 2025-07-15 11:38:21.875 [INFO][3886] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:38:21.905795 env[1204]: 2025-07-15 11:38:21.877 [INFO][3886] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:38:21.905795 env[1204]: 2025-07-15 11:38:21.879 [INFO][3886] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:38:21.905795 env[1204]: 2025-07-15 11:38:21.879 [INFO][3886] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11" host="localhost" Jul 15 11:38:21.905795 env[1204]: 2025-07-15 11:38:21.880 [INFO][3886] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11 Jul 15 11:38:21.905795 env[1204]: 2025-07-15 11:38:21.883 [INFO][3886] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11" host="localhost" Jul 15 11:38:21.905795 env[1204]: 2025-07-15 11:38:21.889 [INFO][3886] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11" host="localhost" Jul 15 11:38:21.905795 env[1204]: 2025-07-15 11:38:21.889 [INFO][3886] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11" host="localhost" Jul 15 11:38:21.905795 env[1204]: 2025-07-15 11:38:21.889 [INFO][3886] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:21.905795 env[1204]: 2025-07-15 11:38:21.889 [INFO][3886] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11" HandleID="k8s-pod-network.9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11" Workload="localhost-k8s-goldmane--58fd7646b9--5bptq-eth0" Jul 15 11:38:21.906526 env[1204]: 2025-07-15 11:38:21.891 [INFO][3872] cni-plugin/k8s.go 418: Populated endpoint ContainerID="9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11" Namespace="calico-system" Pod="goldmane-58fd7646b9-5bptq" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--5bptq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--5bptq-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"2da410fc-f5e4-4d6a-8712-6df0d9f82617", ResourceVersion:"987", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-58fd7646b9-5bptq", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali17578459fa2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:21.906526 env[1204]: 2025-07-15 11:38:21.892 [INFO][3872] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11" Namespace="calico-system" Pod="goldmane-58fd7646b9-5bptq" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--5bptq-eth0" Jul 15 11:38:21.906526 env[1204]: 2025-07-15 11:38:21.892 [INFO][3872] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali17578459fa2 ContainerID="9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11" Namespace="calico-system" Pod="goldmane-58fd7646b9-5bptq" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--5bptq-eth0" Jul 15 11:38:21.906526 env[1204]: 2025-07-15 11:38:21.895 [INFO][3872] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11" Namespace="calico-system" Pod="goldmane-58fd7646b9-5bptq" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--5bptq-eth0" Jul 15 11:38:21.906526 env[1204]: 2025-07-15 11:38:21.896 [INFO][3872] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11" Namespace="calico-system" Pod="goldmane-58fd7646b9-5bptq" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--5bptq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--5bptq-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"2da410fc-f5e4-4d6a-8712-6df0d9f82617", ResourceVersion:"987", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11", Pod:"goldmane-58fd7646b9-5bptq", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali17578459fa2", MAC:"86:c9:f8:99:53:46", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:21.906526 env[1204]: 2025-07-15 11:38:21.903 [INFO][3872] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11" Namespace="calico-system" Pod="goldmane-58fd7646b9-5bptq" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--5bptq-eth0" Jul 15 11:38:21.919633 env[1204]: time="2025-07-15T11:38:21.914180191Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:38:21.919633 env[1204]: time="2025-07-15T11:38:21.914242578Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:38:21.919633 env[1204]: time="2025-07-15T11:38:21.914252958Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:38:21.919633 env[1204]: time="2025-07-15T11:38:21.914900316Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11 pid=3909 runtime=io.containerd.runc.v2 Jul 15 11:38:21.921000 audit[3919]: NETFILTER_CFG table=filter:108 family=2 entries=48 op=nft_register_chain pid=3919 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:38:21.921000 audit[3919]: SYSCALL arch=c000003e syscall=46 success=yes exit=26368 a0=3 a1=7fff8812f980 a2=0 a3=7fff8812f96c items=0 ppid=3402 pid=3919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:21.921000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:38:21.933905 systemd[1]: Started cri-containerd-9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11.scope. Jul 15 11:38:21.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.941000 audit: BPF prog-id=181 op=LOAD Jul 15 11:38:21.941000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.941000 audit[3920]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3909 pid=3920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:21.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965336133366464376462613735666338333537303763316665656536 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3909 pid=3920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:21.942000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965336133366464376462613735666338333537303763316665656536 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit: BPF prog-id=182 op=LOAD Jul 15 11:38:21.942000 audit[3920]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00031bd70 items=0 ppid=3909 pid=3920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:21.942000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965336133366464376462613735666338333537303763316665656536 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit: BPF prog-id=183 op=LOAD Jul 15 11:38:21.942000 audit[3920]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00031bdb8 items=0 ppid=3909 pid=3920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:21.942000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965336133366464376462613735666338333537303763316665656536 Jul 15 11:38:21.942000 audit: BPF prog-id=183 op=UNLOAD Jul 15 11:38:21.942000 audit: BPF prog-id=182 op=UNLOAD Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:21.942000 audit: BPF prog-id=184 op=LOAD Jul 15 11:38:21.942000 audit[3920]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0004041c8 items=0 ppid=3909 pid=3920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:21.942000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965336133366464376462613735666338333537303763316665656536 Jul 15 11:38:21.943776 systemd-resolved[1144]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:38:21.963030 env[1204]: time="2025-07-15T11:38:21.962988315Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-5bptq,Uid:2da410fc-f5e4-4d6a-8712-6df0d9f82617,Namespace:calico-system,Attempt:1,} returns sandbox id \"9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11\"" Jul 15 11:38:21.970723 env[1204]: time="2025-07-15T11:38:21.970693295Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 15 11:38:22.049097 systemd-networkd[1026]: cali1afce1fa520: Gained IPv6LL Jul 15 11:38:22.731222 env[1204]: time="2025-07-15T11:38:22.731170642Z" level=info msg="StopPodSandbox for \"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62\"" Jul 15 11:38:22.731365 env[1204]: time="2025-07-15T11:38:22.731244060Z" level=info msg="StopPodSandbox for \"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7\"" Jul 15 11:38:22.801512 env[1204]: 2025-07-15 11:38:22.767 [INFO][3973] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" Jul 15 11:38:22.801512 env[1204]: 2025-07-15 11:38:22.767 [INFO][3973] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" iface="eth0" netns="/var/run/netns/cni-6bc06118-a32f-994f-cb6f-f8c6b6162a10" Jul 15 11:38:22.801512 env[1204]: 2025-07-15 11:38:22.768 [INFO][3973] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" iface="eth0" netns="/var/run/netns/cni-6bc06118-a32f-994f-cb6f-f8c6b6162a10" Jul 15 11:38:22.801512 env[1204]: 2025-07-15 11:38:22.768 [INFO][3973] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" iface="eth0" netns="/var/run/netns/cni-6bc06118-a32f-994f-cb6f-f8c6b6162a10" Jul 15 11:38:22.801512 env[1204]: 2025-07-15 11:38:22.768 [INFO][3973] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" Jul 15 11:38:22.801512 env[1204]: 2025-07-15 11:38:22.768 [INFO][3973] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" Jul 15 11:38:22.801512 env[1204]: 2025-07-15 11:38:22.790 [INFO][3989] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" HandleID="k8s-pod-network.e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" Workload="localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0" Jul 15 11:38:22.801512 env[1204]: 2025-07-15 11:38:22.790 [INFO][3989] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:22.801512 env[1204]: 2025-07-15 11:38:22.790 [INFO][3989] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:22.801512 env[1204]: 2025-07-15 11:38:22.796 [WARNING][3989] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" HandleID="k8s-pod-network.e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" Workload="localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0" Jul 15 11:38:22.801512 env[1204]: 2025-07-15 11:38:22.796 [INFO][3989] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" HandleID="k8s-pod-network.e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" Workload="localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0" Jul 15 11:38:22.801512 env[1204]: 2025-07-15 11:38:22.797 [INFO][3989] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:22.801512 env[1204]: 2025-07-15 11:38:22.799 [INFO][3973] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" Jul 15 11:38:22.802260 env[1204]: time="2025-07-15T11:38:22.801649234Z" level=info msg="TearDown network for sandbox \"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7\" successfully" Jul 15 11:38:22.802260 env[1204]: time="2025-07-15T11:38:22.801689870Z" level=info msg="StopPodSandbox for \"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7\" returns successfully" Jul 15 11:38:22.804129 systemd[1]: run-netns-cni\x2d6bc06118\x2da32f\x2d994f\x2dcb6f\x2df8c6b6162a10.mount: Deactivated successfully. Jul 15 11:38:22.805120 kubelet[1929]: E0715 11:38:22.804920 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:38:22.805384 env[1204]: time="2025-07-15T11:38:22.805349741Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-4jctz,Uid:b64cb176-d65e-4c7f-a8b1-32a16d63b52f,Namespace:kube-system,Attempt:1,}" Jul 15 11:38:22.808780 env[1204]: 2025-07-15 11:38:22.770 [INFO][3972] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" Jul 15 11:38:22.808780 env[1204]: 2025-07-15 11:38:22.770 [INFO][3972] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" iface="eth0" netns="/var/run/netns/cni-783cfdd5-5a5c-caa3-4129-1a072c964579" Jul 15 11:38:22.808780 env[1204]: 2025-07-15 11:38:22.770 [INFO][3972] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" iface="eth0" netns="/var/run/netns/cni-783cfdd5-5a5c-caa3-4129-1a072c964579" Jul 15 11:38:22.808780 env[1204]: 2025-07-15 11:38:22.770 [INFO][3972] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" iface="eth0" netns="/var/run/netns/cni-783cfdd5-5a5c-caa3-4129-1a072c964579" Jul 15 11:38:22.808780 env[1204]: 2025-07-15 11:38:22.770 [INFO][3972] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" Jul 15 11:38:22.808780 env[1204]: 2025-07-15 11:38:22.770 [INFO][3972] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" Jul 15 11:38:22.808780 env[1204]: 2025-07-15 11:38:22.795 [INFO][3996] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" HandleID="k8s-pod-network.992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" Workload="localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0" Jul 15 11:38:22.808780 env[1204]: 2025-07-15 11:38:22.795 [INFO][3996] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:22.808780 env[1204]: 2025-07-15 11:38:22.797 [INFO][3996] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:22.808780 env[1204]: 2025-07-15 11:38:22.803 [WARNING][3996] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" HandleID="k8s-pod-network.992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" Workload="localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0" Jul 15 11:38:22.808780 env[1204]: 2025-07-15 11:38:22.803 [INFO][3996] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" HandleID="k8s-pod-network.992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" Workload="localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0" Jul 15 11:38:22.808780 env[1204]: 2025-07-15 11:38:22.805 [INFO][3996] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:22.808780 env[1204]: 2025-07-15 11:38:22.807 [INFO][3972] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" Jul 15 11:38:22.809287 env[1204]: time="2025-07-15T11:38:22.808850784Z" level=info msg="TearDown network for sandbox \"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62\" successfully" Jul 15 11:38:22.809287 env[1204]: time="2025-07-15T11:38:22.808869168Z" level=info msg="StopPodSandbox for \"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62\" returns successfully" Jul 15 11:38:22.809375 env[1204]: time="2025-07-15T11:38:22.809345694Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6545649b6d-v7pdw,Uid:22fd715b-454b-448c-8a9b-02017486be43,Namespace:calico-apiserver,Attempt:1,}" Jul 15 11:38:22.810831 systemd[1]: run-netns-cni\x2d783cfdd5\x2d5a5c\x2dcaa3\x2d4129\x2d1a072c964579.mount: Deactivated successfully. Jul 15 11:38:22.846328 kubelet[1929]: E0715 11:38:22.846300 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:38:22.959959 systemd-networkd[1026]: cali0c941481e09: Link UP Jul 15 11:38:22.962480 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:38:22.963150 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0c941481e09: link becomes ready Jul 15 11:38:22.962820 systemd-networkd[1026]: cali0c941481e09: Gained carrier Jul 15 11:38:22.973333 env[1204]: 2025-07-15 11:38:22.914 [INFO][4018] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0 calico-apiserver-6545649b6d- calico-apiserver 22fd715b-454b-448c-8a9b-02017486be43 1002 0 2025-07-15 11:37:55 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6545649b6d projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-6545649b6d-v7pdw eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali0c941481e09 [] [] }} ContainerID="06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb" Namespace="calico-apiserver" Pod="calico-apiserver-6545649b6d-v7pdw" WorkloadEndpoint="localhost-k8s-calico--apiserver--6545649b6d--v7pdw-" Jul 15 11:38:22.973333 env[1204]: 2025-07-15 11:38:22.914 [INFO][4018] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb" Namespace="calico-apiserver" Pod="calico-apiserver-6545649b6d-v7pdw" WorkloadEndpoint="localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0" Jul 15 11:38:22.973333 env[1204]: 2025-07-15 11:38:22.932 [INFO][4036] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb" HandleID="k8s-pod-network.06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb" Workload="localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0" Jul 15 11:38:22.973333 env[1204]: 2025-07-15 11:38:22.932 [INFO][4036] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb" HandleID="k8s-pod-network.06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb" Workload="localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c8fe0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-6545649b6d-v7pdw", "timestamp":"2025-07-15 11:38:22.932742952 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:38:22.973333 env[1204]: 2025-07-15 11:38:22.932 [INFO][4036] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:22.973333 env[1204]: 2025-07-15 11:38:22.933 [INFO][4036] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:22.973333 env[1204]: 2025-07-15 11:38:22.933 [INFO][4036] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:38:22.973333 env[1204]: 2025-07-15 11:38:22.937 [INFO][4036] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb" host="localhost" Jul 15 11:38:22.973333 env[1204]: 2025-07-15 11:38:22.941 [INFO][4036] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:38:22.973333 env[1204]: 2025-07-15 11:38:22.944 [INFO][4036] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:38:22.973333 env[1204]: 2025-07-15 11:38:22.945 [INFO][4036] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:38:22.973333 env[1204]: 2025-07-15 11:38:22.947 [INFO][4036] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:38:22.973333 env[1204]: 2025-07-15 11:38:22.947 [INFO][4036] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb" host="localhost" Jul 15 11:38:22.973333 env[1204]: 2025-07-15 11:38:22.948 [INFO][4036] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb Jul 15 11:38:22.973333 env[1204]: 2025-07-15 11:38:22.951 [INFO][4036] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb" host="localhost" Jul 15 11:38:22.973333 env[1204]: 2025-07-15 11:38:22.956 [INFO][4036] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb" host="localhost" Jul 15 11:38:22.973333 env[1204]: 2025-07-15 11:38:22.956 [INFO][4036] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb" host="localhost" Jul 15 11:38:22.973333 env[1204]: 2025-07-15 11:38:22.956 [INFO][4036] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:22.973333 env[1204]: 2025-07-15 11:38:22.956 [INFO][4036] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb" HandleID="k8s-pod-network.06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb" Workload="localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0" Jul 15 11:38:22.973998 env[1204]: 2025-07-15 11:38:22.958 [INFO][4018] cni-plugin/k8s.go 418: Populated endpoint ContainerID="06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb" Namespace="calico-apiserver" Pod="calico-apiserver-6545649b6d-v7pdw" WorkloadEndpoint="localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0", GenerateName:"calico-apiserver-6545649b6d-", Namespace:"calico-apiserver", SelfLink:"", UID:"22fd715b-454b-448c-8a9b-02017486be43", ResourceVersion:"1002", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6545649b6d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-6545649b6d-v7pdw", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali0c941481e09", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:22.973998 env[1204]: 2025-07-15 11:38:22.958 [INFO][4018] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb" Namespace="calico-apiserver" Pod="calico-apiserver-6545649b6d-v7pdw" WorkloadEndpoint="localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0" Jul 15 11:38:22.973998 env[1204]: 2025-07-15 11:38:22.958 [INFO][4018] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0c941481e09 ContainerID="06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb" Namespace="calico-apiserver" Pod="calico-apiserver-6545649b6d-v7pdw" WorkloadEndpoint="localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0" Jul 15 11:38:22.973998 env[1204]: 2025-07-15 11:38:22.962 [INFO][4018] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb" Namespace="calico-apiserver" Pod="calico-apiserver-6545649b6d-v7pdw" WorkloadEndpoint="localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0" Jul 15 11:38:22.973998 env[1204]: 2025-07-15 11:38:22.962 [INFO][4018] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb" Namespace="calico-apiserver" Pod="calico-apiserver-6545649b6d-v7pdw" WorkloadEndpoint="localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0", GenerateName:"calico-apiserver-6545649b6d-", Namespace:"calico-apiserver", SelfLink:"", UID:"22fd715b-454b-448c-8a9b-02017486be43", ResourceVersion:"1002", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6545649b6d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb", Pod:"calico-apiserver-6545649b6d-v7pdw", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali0c941481e09", MAC:"ba:8f:da:2a:17:f5", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:22.973998 env[1204]: 2025-07-15 11:38:22.969 [INFO][4018] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb" Namespace="calico-apiserver" Pod="calico-apiserver-6545649b6d-v7pdw" WorkloadEndpoint="localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0" Jul 15 11:38:22.979000 audit[4061]: NETFILTER_CFG table=filter:109 family=2 entries=64 op=nft_register_chain pid=4061 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:38:22.979000 audit[4061]: SYSCALL arch=c000003e syscall=46 success=yes exit=33440 a0=3 a1=7ffd4b28f020 a2=0 a3=7ffd4b28f00c items=0 ppid=3402 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:22.979000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:38:22.983120 env[1204]: time="2025-07-15T11:38:22.983002999Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:38:22.983120 env[1204]: time="2025-07-15T11:38:22.983089021Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:38:22.983120 env[1204]: time="2025-07-15T11:38:22.983101544Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:38:22.983387 env[1204]: time="2025-07-15T11:38:22.983275010Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb pid=4068 runtime=io.containerd.runc.v2 Jul 15 11:38:22.997135 systemd[1]: run-containerd-runc-k8s.io-06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb-runc.dwN26H.mount: Deactivated successfully. Jul 15 11:38:23.000105 systemd[1]: Started cri-containerd-06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb.scope. Jul 15 11:38:23.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit: BPF prog-id=185 op=LOAD Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014fc48 a2=10 a3=1c items=0 ppid=4068 pid=4077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:23.007000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036303830663762393238666436663438646330353935343433383636 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014f6b0 a2=3c a3=c items=0 ppid=4068 pid=4077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:23.007000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036303830663762393238666436663438646330353935343433383636 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit: BPF prog-id=186 op=LOAD Jul 15 11:38:23.007000 audit[4077]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014f9d8 a2=78 a3=c0003cc590 items=0 ppid=4068 pid=4077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:23.007000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036303830663762393238666436663438646330353935343433383636 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit: BPF prog-id=187 op=LOAD Jul 15 11:38:23.007000 audit[4077]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014f770 a2=78 a3=c0003cc5d8 items=0 ppid=4068 pid=4077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:23.007000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036303830663762393238666436663438646330353935343433383636 Jul 15 11:38:23.007000 audit: BPF prog-id=187 op=UNLOAD Jul 15 11:38:23.007000 audit: BPF prog-id=186 op=UNLOAD Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.007000 audit: BPF prog-id=188 op=LOAD Jul 15 11:38:23.007000 audit[4077]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014fc30 a2=78 a3=c0003cc9e8 items=0 ppid=4068 pid=4077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:23.007000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036303830663762393238666436663438646330353935343433383636 Jul 15 11:38:23.009378 systemd-resolved[1144]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:38:23.028896 env[1204]: time="2025-07-15T11:38:23.028855721Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6545649b6d-v7pdw,Uid:22fd715b-454b-448c-8a9b-02017486be43,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb\"" Jul 15 11:38:23.064029 systemd-networkd[1026]: cali44603ed6eb5: Link UP Jul 15 11:38:23.068149 systemd-networkd[1026]: cali44603ed6eb5: Gained carrier Jul 15 11:38:23.071082 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali44603ed6eb5: link becomes ready Jul 15 11:38:23.075682 env[1204]: 2025-07-15 11:38:22.912 [INFO][4006] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0 coredns-7c65d6cfc9- kube-system b64cb176-d65e-4c7f-a8b1-32a16d63b52f 1001 0 2025-07-15 11:37:47 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-4jctz eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali44603ed6eb5 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94" Namespace="kube-system" Pod="coredns-7c65d6cfc9-4jctz" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--4jctz-" Jul 15 11:38:23.075682 env[1204]: 2025-07-15 11:38:22.912 [INFO][4006] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94" Namespace="kube-system" Pod="coredns-7c65d6cfc9-4jctz" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0" Jul 15 11:38:23.075682 env[1204]: 2025-07-15 11:38:22.939 [INFO][4034] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94" HandleID="k8s-pod-network.c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94" Workload="localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0" Jul 15 11:38:23.075682 env[1204]: 2025-07-15 11:38:22.939 [INFO][4034] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94" HandleID="k8s-pod-network.c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94" Workload="localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002df0d0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-4jctz", "timestamp":"2025-07-15 11:38:22.939082311 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:38:23.075682 env[1204]: 2025-07-15 11:38:22.941 [INFO][4034] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:23.075682 env[1204]: 2025-07-15 11:38:22.956 [INFO][4034] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:23.075682 env[1204]: 2025-07-15 11:38:22.956 [INFO][4034] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:38:23.075682 env[1204]: 2025-07-15 11:38:23.038 [INFO][4034] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94" host="localhost" Jul 15 11:38:23.075682 env[1204]: 2025-07-15 11:38:23.041 [INFO][4034] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:38:23.075682 env[1204]: 2025-07-15 11:38:23.045 [INFO][4034] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:38:23.075682 env[1204]: 2025-07-15 11:38:23.046 [INFO][4034] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:38:23.075682 env[1204]: 2025-07-15 11:38:23.048 [INFO][4034] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:38:23.075682 env[1204]: 2025-07-15 11:38:23.048 [INFO][4034] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94" host="localhost" Jul 15 11:38:23.075682 env[1204]: 2025-07-15 11:38:23.049 [INFO][4034] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94 Jul 15 11:38:23.075682 env[1204]: 2025-07-15 11:38:23.056 [INFO][4034] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94" host="localhost" Jul 15 11:38:23.075682 env[1204]: 2025-07-15 11:38:23.060 [INFO][4034] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94" host="localhost" Jul 15 11:38:23.075682 env[1204]: 2025-07-15 11:38:23.060 [INFO][4034] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94" host="localhost" Jul 15 11:38:23.075682 env[1204]: 2025-07-15 11:38:23.060 [INFO][4034] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:23.075682 env[1204]: 2025-07-15 11:38:23.060 [INFO][4034] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94" HandleID="k8s-pod-network.c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94" Workload="localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0" Jul 15 11:38:23.076216 env[1204]: 2025-07-15 11:38:23.062 [INFO][4006] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94" Namespace="kube-system" Pod="coredns-7c65d6cfc9-4jctz" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"b64cb176-d65e-4c7f-a8b1-32a16d63b52f", ResourceVersion:"1001", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-4jctz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali44603ed6eb5", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:23.076216 env[1204]: 2025-07-15 11:38:23.062 [INFO][4006] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94" Namespace="kube-system" Pod="coredns-7c65d6cfc9-4jctz" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0" Jul 15 11:38:23.076216 env[1204]: 2025-07-15 11:38:23.062 [INFO][4006] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali44603ed6eb5 ContainerID="c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94" Namespace="kube-system" Pod="coredns-7c65d6cfc9-4jctz" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0" Jul 15 11:38:23.076216 env[1204]: 2025-07-15 11:38:23.064 [INFO][4006] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94" Namespace="kube-system" Pod="coredns-7c65d6cfc9-4jctz" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0" Jul 15 11:38:23.076216 env[1204]: 2025-07-15 11:38:23.064 [INFO][4006] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94" Namespace="kube-system" Pod="coredns-7c65d6cfc9-4jctz" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"b64cb176-d65e-4c7f-a8b1-32a16d63b52f", ResourceVersion:"1001", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94", Pod:"coredns-7c65d6cfc9-4jctz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali44603ed6eb5", MAC:"5e:31:dd:9e:2c:c4", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:23.076216 env[1204]: 2025-07-15 11:38:23.073 [INFO][4006] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94" Namespace="kube-system" Pod="coredns-7c65d6cfc9-4jctz" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0" Jul 15 11:38:23.085182 env[1204]: time="2025-07-15T11:38:23.085125059Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:38:23.085253 env[1204]: time="2025-07-15T11:38:23.085181365Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:38:23.085253 env[1204]: time="2025-07-15T11:38:23.085203617Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:38:23.085385 env[1204]: time="2025-07-15T11:38:23.085353759Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94 pid=4119 runtime=io.containerd.runc.v2 Jul 15 11:38:23.085000 audit[4124]: NETFILTER_CFG table=filter:110 family=2 entries=36 op=nft_register_chain pid=4124 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:38:23.085000 audit[4124]: SYSCALL arch=c000003e syscall=46 success=yes exit=19140 a0=3 a1=7ffc415048b0 a2=0 a3=7ffc4150489c items=0 ppid=3402 pid=4124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:23.085000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:38:23.097989 systemd[1]: Started cri-containerd-c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94.scope. Jul 15 11:38:23.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.106000 audit: BPF prog-id=189 op=LOAD Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4119 pid=4130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:23.107000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337323534613536336161393937613264613533353333616366376438 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4119 pid=4130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:23.107000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337323534613536336161393937613264613533353333616366376438 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit: BPF prog-id=190 op=LOAD Jul 15 11:38:23.107000 audit[4130]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000279d90 items=0 ppid=4119 pid=4130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:23.107000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337323534613536336161393937613264613533353333616366376438 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit: BPF prog-id=191 op=LOAD Jul 15 11:38:23.107000 audit[4130]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000279dd8 items=0 ppid=4119 pid=4130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:23.107000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337323534613536336161393937613264613533353333616366376438 Jul 15 11:38:23.107000 audit: BPF prog-id=191 op=UNLOAD Jul 15 11:38:23.107000 audit: BPF prog-id=190 op=UNLOAD Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.107000 audit: BPF prog-id=192 op=LOAD Jul 15 11:38:23.107000 audit[4130]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003ea1e8 items=0 ppid=4119 pid=4130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:23.107000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337323534613536336161393937613264613533353333616366376438 Jul 15 11:38:23.109117 systemd-resolved[1144]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:38:23.130916 env[1204]: time="2025-07-15T11:38:23.130876114Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-4jctz,Uid:b64cb176-d65e-4c7f-a8b1-32a16d63b52f,Namespace:kube-system,Attempt:1,} returns sandbox id \"c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94\"" Jul 15 11:38:23.131616 kubelet[1929]: E0715 11:38:23.131591 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:38:23.134103 env[1204]: time="2025-07-15T11:38:23.134048607Z" level=info msg="CreateContainer within sandbox \"c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 15 11:38:23.146324 env[1204]: time="2025-07-15T11:38:23.146283086Z" level=info msg="CreateContainer within sandbox \"c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"de0c690d8ed1d0396c38b4cc8931f8c29ba035c58fcdf75bc8556d7e3db06af4\"" Jul 15 11:38:23.146969 env[1204]: time="2025-07-15T11:38:23.146653833Z" level=info msg="StartContainer for \"de0c690d8ed1d0396c38b4cc8931f8c29ba035c58fcdf75bc8556d7e3db06af4\"" Jul 15 11:38:23.158997 systemd[1]: Started cri-containerd-de0c690d8ed1d0396c38b4cc8931f8c29ba035c58fcdf75bc8556d7e3db06af4.scope. Jul 15 11:38:23.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.168000 audit: BPF prog-id=193 op=LOAD Jul 15 11:38:23.174000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.174000 audit[4160]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4119 pid=4160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:23.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465306336393064386564316430333936633338623463633839333166 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4119 pid=4160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:23.175000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465306336393064386564316430333936633338623463633839333166 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit: BPF prog-id=194 op=LOAD Jul 15 11:38:23.175000 audit[4160]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000257d40 items=0 ppid=4119 pid=4160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:23.175000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465306336393064386564316430333936633338623463633839333166 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit: BPF prog-id=195 op=LOAD Jul 15 11:38:23.175000 audit[4160]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000257d88 items=0 ppid=4119 pid=4160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:23.175000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465306336393064386564316430333936633338623463633839333166 Jul 15 11:38:23.175000 audit: BPF prog-id=195 op=UNLOAD Jul 15 11:38:23.175000 audit: BPF prog-id=194 op=UNLOAD Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:23.175000 audit: BPF prog-id=196 op=LOAD Jul 15 11:38:23.175000 audit[4160]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003b2198 items=0 ppid=4119 pid=4160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:23.175000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465306336393064386564316430333936633338623463633839333166 Jul 15 11:38:23.189054 env[1204]: time="2025-07-15T11:38:23.189015948Z" level=info msg="StartContainer for \"de0c690d8ed1d0396c38b4cc8931f8c29ba035c58fcdf75bc8556d7e3db06af4\" returns successfully" Jul 15 11:38:23.197000 audit[4171]: AVC avc: denied { getattr } for pid=4171 comm="coredns" path="cgroup:[4026532648]" dev="nsfs" ino=4026532648 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c492 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 15 11:38:23.197000 audit[4171]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a828 a2=c000511bd8 a3=0 items=0 ppid=4119 pid=4171 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c492 key=(null) Jul 15 11:38:23.197000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 15 11:38:23.731260 env[1204]: time="2025-07-15T11:38:23.731204900Z" level=info msg="StopPodSandbox for \"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1\"" Jul 15 11:38:23.731502 env[1204]: time="2025-07-15T11:38:23.731204990Z" level=info msg="StopPodSandbox for \"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc\"" Jul 15 11:38:23.841142 systemd-networkd[1026]: cali17578459fa2: Gained IPv6LL Jul 15 11:38:23.851130 kubelet[1929]: E0715 11:38:23.851043 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:38:24.033068 systemd-networkd[1026]: cali0c941481e09: Gained IPv6LL Jul 15 11:38:24.256011 kubelet[1929]: I0715 11:38:24.255843 1929 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-4jctz" podStartSLOduration=37.255828263 podStartE2EDuration="37.255828263s" podCreationTimestamp="2025-07-15 11:37:47 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:38:24.255815269 +0000 UTC m=+41.596797397" watchObservedRunningTime="2025-07-15 11:38:24.255828263 +0000 UTC m=+41.596810391" Jul 15 11:38:24.308000 audit[4242]: NETFILTER_CFG table=filter:111 family=2 entries=12 op=nft_register_rule pid=4242 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:24.308000 audit[4242]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffd0b0a5ae0 a2=0 a3=7ffd0b0a5acc items=0 ppid=2039 pid=4242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:24.308000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:24.313000 audit[4242]: NETFILTER_CFG table=nat:112 family=2 entries=46 op=nft_register_rule pid=4242 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:24.313000 audit[4242]: SYSCALL arch=c000003e syscall=46 success=yes exit=14964 a0=3 a1=7ffd0b0a5ae0 a2=0 a3=7ffd0b0a5acc items=0 ppid=2039 pid=4242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:24.313000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:24.342758 env[1204]: 2025-07-15 11:38:24.262 [INFO][4215] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" Jul 15 11:38:24.342758 env[1204]: 2025-07-15 11:38:24.262 [INFO][4215] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" iface="eth0" netns="/var/run/netns/cni-759143d7-4174-dfa7-a611-23a8b22953bd" Jul 15 11:38:24.342758 env[1204]: 2025-07-15 11:38:24.263 [INFO][4215] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" iface="eth0" netns="/var/run/netns/cni-759143d7-4174-dfa7-a611-23a8b22953bd" Jul 15 11:38:24.342758 env[1204]: 2025-07-15 11:38:24.263 [INFO][4215] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" iface="eth0" netns="/var/run/netns/cni-759143d7-4174-dfa7-a611-23a8b22953bd" Jul 15 11:38:24.342758 env[1204]: 2025-07-15 11:38:24.263 [INFO][4215] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" Jul 15 11:38:24.342758 env[1204]: 2025-07-15 11:38:24.263 [INFO][4215] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" Jul 15 11:38:24.342758 env[1204]: 2025-07-15 11:38:24.277 [INFO][4232] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" HandleID="k8s-pod-network.aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" Workload="localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0" Jul 15 11:38:24.342758 env[1204]: 2025-07-15 11:38:24.278 [INFO][4232] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:24.342758 env[1204]: 2025-07-15 11:38:24.278 [INFO][4232] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:24.342758 env[1204]: 2025-07-15 11:38:24.308 [WARNING][4232] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" HandleID="k8s-pod-network.aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" Workload="localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0" Jul 15 11:38:24.342758 env[1204]: 2025-07-15 11:38:24.308 [INFO][4232] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" HandleID="k8s-pod-network.aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" Workload="localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0" Jul 15 11:38:24.342758 env[1204]: 2025-07-15 11:38:24.334 [INFO][4232] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:24.342758 env[1204]: 2025-07-15 11:38:24.337 [INFO][4215] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" Jul 15 11:38:24.344985 systemd[1]: run-netns-cni\x2d759143d7\x2d4174\x2ddfa7\x2da611\x2d23a8b22953bd.mount: Deactivated successfully. Jul 15 11:38:24.345611 env[1204]: time="2025-07-15T11:38:24.345579174Z" level=info msg="TearDown network for sandbox \"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc\" successfully" Jul 15 11:38:24.345695 env[1204]: time="2025-07-15T11:38:24.345672910Z" level=info msg="StopPodSandbox for \"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc\" returns successfully" Jul 15 11:38:24.346534 env[1204]: time="2025-07-15T11:38:24.346510414Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-8684d87554-mv9qj,Uid:766b4edb-b94c-4b2e-965c-aa06b41ea419,Namespace:calico-system,Attempt:1,}" Jul 15 11:38:24.350000 audit[4250]: NETFILTER_CFG table=filter:113 family=2 entries=12 op=nft_register_rule pid=4250 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:24.350000 audit[4250]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fffcd5ef780 a2=0 a3=7fffcd5ef76c items=0 ppid=2039 pid=4250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:24.350000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:24.364000 audit[4250]: NETFILTER_CFG table=nat:114 family=2 entries=58 op=nft_register_chain pid=4250 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:24.364000 audit[4250]: SYSCALL arch=c000003e syscall=46 success=yes exit=20628 a0=3 a1=7fffcd5ef780 a2=0 a3=7fffcd5ef76c items=0 ppid=2039 pid=4250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:24.364000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:24.407522 env[1204]: 2025-07-15 11:38:24.335 [INFO][4214] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" Jul 15 11:38:24.407522 env[1204]: 2025-07-15 11:38:24.335 [INFO][4214] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" iface="eth0" netns="/var/run/netns/cni-c6b8830f-96a8-e6ae-216c-b67a41e27099" Jul 15 11:38:24.407522 env[1204]: 2025-07-15 11:38:24.336 [INFO][4214] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" iface="eth0" netns="/var/run/netns/cni-c6b8830f-96a8-e6ae-216c-b67a41e27099" Jul 15 11:38:24.407522 env[1204]: 2025-07-15 11:38:24.341 [INFO][4214] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" iface="eth0" netns="/var/run/netns/cni-c6b8830f-96a8-e6ae-216c-b67a41e27099" Jul 15 11:38:24.407522 env[1204]: 2025-07-15 11:38:24.341 [INFO][4214] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" Jul 15 11:38:24.407522 env[1204]: 2025-07-15 11:38:24.341 [INFO][4214] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" Jul 15 11:38:24.407522 env[1204]: 2025-07-15 11:38:24.390 [INFO][4245] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" HandleID="k8s-pod-network.181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" Workload="localhost-k8s-csi--node--driver--gc5v5-eth0" Jul 15 11:38:24.407522 env[1204]: 2025-07-15 11:38:24.393 [INFO][4245] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:24.407522 env[1204]: 2025-07-15 11:38:24.393 [INFO][4245] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:24.407522 env[1204]: 2025-07-15 11:38:24.401 [WARNING][4245] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" HandleID="k8s-pod-network.181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" Workload="localhost-k8s-csi--node--driver--gc5v5-eth0" Jul 15 11:38:24.407522 env[1204]: 2025-07-15 11:38:24.401 [INFO][4245] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" HandleID="k8s-pod-network.181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" Workload="localhost-k8s-csi--node--driver--gc5v5-eth0" Jul 15 11:38:24.407522 env[1204]: 2025-07-15 11:38:24.402 [INFO][4245] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:24.407522 env[1204]: 2025-07-15 11:38:24.404 [INFO][4214] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" Jul 15 11:38:24.408420 env[1204]: time="2025-07-15T11:38:24.408368219Z" level=info msg="TearDown network for sandbox \"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1\" successfully" Jul 15 11:38:24.408420 env[1204]: time="2025-07-15T11:38:24.408412893Z" level=info msg="StopPodSandbox for \"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1\" returns successfully" Jul 15 11:38:24.409258 env[1204]: time="2025-07-15T11:38:24.409184884Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-gc5v5,Uid:ff487f86-aaa8-4b99-8f59-bc40829e41d4,Namespace:calico-system,Attempt:1,}" Jul 15 11:38:24.452183 systemd-networkd[1026]: calia356b8fd264: Link UP Jul 15 11:38:24.454970 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:38:24.455107 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia356b8fd264: link becomes ready Jul 15 11:38:24.454465 systemd-networkd[1026]: calia356b8fd264: Gained carrier Jul 15 11:38:24.467529 env[1204]: 2025-07-15 11:38:24.401 [INFO][4257] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0 calico-kube-controllers-8684d87554- calico-system 766b4edb-b94c-4b2e-965c-aa06b41ea419 1023 0 2025-07-15 11:37:58 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:8684d87554 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-8684d87554-mv9qj eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calia356b8fd264 [] [] }} ContainerID="13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6" Namespace="calico-system" Pod="calico-kube-controllers-8684d87554-mv9qj" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-" Jul 15 11:38:24.467529 env[1204]: 2025-07-15 11:38:24.401 [INFO][4257] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6" Namespace="calico-system" Pod="calico-kube-controllers-8684d87554-mv9qj" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0" Jul 15 11:38:24.467529 env[1204]: 2025-07-15 11:38:24.420 [INFO][4272] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6" HandleID="k8s-pod-network.13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6" Workload="localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0" Jul 15 11:38:24.467529 env[1204]: 2025-07-15 11:38:24.420 [INFO][4272] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6" HandleID="k8s-pod-network.13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6" Workload="localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00034d8e0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-8684d87554-mv9qj", "timestamp":"2025-07-15 11:38:24.419985374 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:38:24.467529 env[1204]: 2025-07-15 11:38:24.420 [INFO][4272] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:24.467529 env[1204]: 2025-07-15 11:38:24.420 [INFO][4272] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:24.467529 env[1204]: 2025-07-15 11:38:24.420 [INFO][4272] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:38:24.467529 env[1204]: 2025-07-15 11:38:24.427 [INFO][4272] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6" host="localhost" Jul 15 11:38:24.467529 env[1204]: 2025-07-15 11:38:24.430 [INFO][4272] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:38:24.467529 env[1204]: 2025-07-15 11:38:24.432 [INFO][4272] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:38:24.467529 env[1204]: 2025-07-15 11:38:24.434 [INFO][4272] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:38:24.467529 env[1204]: 2025-07-15 11:38:24.435 [INFO][4272] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:38:24.467529 env[1204]: 2025-07-15 11:38:24.435 [INFO][4272] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6" host="localhost" Jul 15 11:38:24.467529 env[1204]: 2025-07-15 11:38:24.436 [INFO][4272] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6 Jul 15 11:38:24.467529 env[1204]: 2025-07-15 11:38:24.439 [INFO][4272] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6" host="localhost" Jul 15 11:38:24.467529 env[1204]: 2025-07-15 11:38:24.443 [INFO][4272] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6" host="localhost" Jul 15 11:38:24.467529 env[1204]: 2025-07-15 11:38:24.444 [INFO][4272] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6" host="localhost" Jul 15 11:38:24.467529 env[1204]: 2025-07-15 11:38:24.444 [INFO][4272] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:24.467529 env[1204]: 2025-07-15 11:38:24.444 [INFO][4272] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6" HandleID="k8s-pod-network.13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6" Workload="localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0" Jul 15 11:38:24.468170 env[1204]: 2025-07-15 11:38:24.445 [INFO][4257] cni-plugin/k8s.go 418: Populated endpoint ContainerID="13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6" Namespace="calico-system" Pod="calico-kube-controllers-8684d87554-mv9qj" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0", GenerateName:"calico-kube-controllers-8684d87554-", Namespace:"calico-system", SelfLink:"", UID:"766b4edb-b94c-4b2e-965c-aa06b41ea419", ResourceVersion:"1023", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"8684d87554", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-8684d87554-mv9qj", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calia356b8fd264", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:24.468170 env[1204]: 2025-07-15 11:38:24.446 [INFO][4257] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6" Namespace="calico-system" Pod="calico-kube-controllers-8684d87554-mv9qj" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0" Jul 15 11:38:24.468170 env[1204]: 2025-07-15 11:38:24.446 [INFO][4257] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia356b8fd264 ContainerID="13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6" Namespace="calico-system" Pod="calico-kube-controllers-8684d87554-mv9qj" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0" Jul 15 11:38:24.468170 env[1204]: 2025-07-15 11:38:24.454 [INFO][4257] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6" Namespace="calico-system" Pod="calico-kube-controllers-8684d87554-mv9qj" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0" Jul 15 11:38:24.468170 env[1204]: 2025-07-15 11:38:24.454 [INFO][4257] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6" Namespace="calico-system" Pod="calico-kube-controllers-8684d87554-mv9qj" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0", GenerateName:"calico-kube-controllers-8684d87554-", Namespace:"calico-system", SelfLink:"", UID:"766b4edb-b94c-4b2e-965c-aa06b41ea419", ResourceVersion:"1023", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"8684d87554", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6", Pod:"calico-kube-controllers-8684d87554-mv9qj", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calia356b8fd264", MAC:"76:94:cc:96:54:0a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:24.468170 env[1204]: 2025-07-15 11:38:24.463 [INFO][4257] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6" Namespace="calico-system" Pod="calico-kube-controllers-8684d87554-mv9qj" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0" Jul 15 11:38:24.479000 audit[4314]: NETFILTER_CFG table=filter:115 family=2 entries=44 op=nft_register_chain pid=4314 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:38:24.479000 audit[4314]: SYSCALL arch=c000003e syscall=46 success=yes exit=21936 a0=3 a1=7ffd69087690 a2=0 a3=7ffd6908767c items=0 ppid=3402 pid=4314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:24.479000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:38:24.487960 env[1204]: time="2025-07-15T11:38:24.487765680Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:38:24.487960 env[1204]: time="2025-07-15T11:38:24.487802549Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:38:24.487960 env[1204]: time="2025-07-15T11:38:24.487812488Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:38:24.488108 env[1204]: time="2025-07-15T11:38:24.488021089Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6 pid=4323 runtime=io.containerd.runc.v2 Jul 15 11:38:24.500262 systemd[1]: Started cri-containerd-13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6.scope. Jul 15 11:38:24.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.514000 audit: BPF prog-id=197 op=LOAD Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { bpf } for pid=4333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4323 pid=4333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:24.515000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133646165653964353433333162393633313266353866663061656562 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { perfmon } for pid=4333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4323 pid=4333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:24.515000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133646165653964353433333162393633313266353866663061656562 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { bpf } for pid=4333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { bpf } for pid=4333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { bpf } for pid=4333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { perfmon } for pid=4333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { perfmon } for pid=4333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { perfmon } for pid=4333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { perfmon } for pid=4333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { perfmon } for pid=4333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { bpf } for pid=4333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { bpf } for pid=4333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit: BPF prog-id=198 op=LOAD Jul 15 11:38:24.515000 audit[4333]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000308580 items=0 ppid=4323 pid=4333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:24.515000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133646165653964353433333162393633313266353866663061656562 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { bpf } for pid=4333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { bpf } for pid=4333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { perfmon } for pid=4333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { perfmon } for pid=4333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { perfmon } for pid=4333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { perfmon } for pid=4333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { perfmon } for pid=4333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { bpf } for pid=4333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { bpf } for pid=4333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit: BPF prog-id=199 op=LOAD Jul 15 11:38:24.515000 audit[4333]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003085c8 items=0 ppid=4323 pid=4333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:24.515000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133646165653964353433333162393633313266353866663061656562 Jul 15 11:38:24.515000 audit: BPF prog-id=199 op=UNLOAD Jul 15 11:38:24.515000 audit: BPF prog-id=198 op=UNLOAD Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { bpf } for pid=4333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { bpf } for pid=4333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { bpf } for pid=4333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { perfmon } for pid=4333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { perfmon } for pid=4333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { perfmon } for pid=4333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { perfmon } for pid=4333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { perfmon } for pid=4333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { bpf } for pid=4333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit[4333]: AVC avc: denied { bpf } for pid=4333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.515000 audit: BPF prog-id=200 op=LOAD Jul 15 11:38:24.515000 audit[4333]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003089d8 items=0 ppid=4323 pid=4333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:24.515000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133646165653964353433333162393633313266353866663061656562 Jul 15 11:38:24.517044 systemd-resolved[1144]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:38:24.543458 env[1204]: time="2025-07-15T11:38:24.543399056Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-8684d87554-mv9qj,Uid:766b4edb-b94c-4b2e-965c-aa06b41ea419,Namespace:calico-system,Attempt:1,} returns sandbox id \"13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6\"" Jul 15 11:38:24.545179 systemd-networkd[1026]: cali44603ed6eb5: Gained IPv6LL Jul 15 11:38:24.731494 env[1204]: time="2025-07-15T11:38:24.731432852Z" level=info msg="StopPodSandbox for \"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2\"" Jul 15 11:38:24.795516 systemd-networkd[1026]: calie6c5c1f554a: Link UP Jul 15 11:38:24.797043 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie6c5c1f554a: link becomes ready Jul 15 11:38:24.802448 systemd-networkd[1026]: calie6c5c1f554a: Gained carrier Jul 15 11:38:24.821462 env[1204]: 2025-07-15 11:38:24.457 [INFO][4279] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--gc5v5-eth0 csi-node-driver- calico-system ff487f86-aaa8-4b99-8f59-bc40829e41d4 1030 0 2025-07-15 11:37:58 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:57bd658777 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-gc5v5 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] calie6c5c1f554a [] [] }} ContainerID="8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f" Namespace="calico-system" Pod="csi-node-driver-gc5v5" WorkloadEndpoint="localhost-k8s-csi--node--driver--gc5v5-" Jul 15 11:38:24.821462 env[1204]: 2025-07-15 11:38:24.457 [INFO][4279] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f" Namespace="calico-system" Pod="csi-node-driver-gc5v5" WorkloadEndpoint="localhost-k8s-csi--node--driver--gc5v5-eth0" Jul 15 11:38:24.821462 env[1204]: 2025-07-15 11:38:24.495 [INFO][4302] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f" HandleID="k8s-pod-network.8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f" Workload="localhost-k8s-csi--node--driver--gc5v5-eth0" Jul 15 11:38:24.821462 env[1204]: 2025-07-15 11:38:24.495 [INFO][4302] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f" HandleID="k8s-pod-network.8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f" Workload="localhost-k8s-csi--node--driver--gc5v5-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d7030), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-gc5v5", "timestamp":"2025-07-15 11:38:24.495377507 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:38:24.821462 env[1204]: 2025-07-15 11:38:24.495 [INFO][4302] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:24.821462 env[1204]: 2025-07-15 11:38:24.495 [INFO][4302] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:24.821462 env[1204]: 2025-07-15 11:38:24.495 [INFO][4302] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:38:24.821462 env[1204]: 2025-07-15 11:38:24.528 [INFO][4302] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f" host="localhost" Jul 15 11:38:24.821462 env[1204]: 2025-07-15 11:38:24.532 [INFO][4302] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:38:24.821462 env[1204]: 2025-07-15 11:38:24.536 [INFO][4302] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:38:24.821462 env[1204]: 2025-07-15 11:38:24.537 [INFO][4302] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:38:24.821462 env[1204]: 2025-07-15 11:38:24.539 [INFO][4302] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:38:24.821462 env[1204]: 2025-07-15 11:38:24.539 [INFO][4302] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f" host="localhost" Jul 15 11:38:24.821462 env[1204]: 2025-07-15 11:38:24.543 [INFO][4302] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f Jul 15 11:38:24.821462 env[1204]: 2025-07-15 11:38:24.782 [INFO][4302] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f" host="localhost" Jul 15 11:38:24.821462 env[1204]: 2025-07-15 11:38:24.788 [INFO][4302] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f" host="localhost" Jul 15 11:38:24.821462 env[1204]: 2025-07-15 11:38:24.788 [INFO][4302] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f" host="localhost" Jul 15 11:38:24.821462 env[1204]: 2025-07-15 11:38:24.788 [INFO][4302] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:24.821462 env[1204]: 2025-07-15 11:38:24.788 [INFO][4302] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f" HandleID="k8s-pod-network.8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f" Workload="localhost-k8s-csi--node--driver--gc5v5-eth0" Jul 15 11:38:24.822055 env[1204]: 2025-07-15 11:38:24.790 [INFO][4279] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f" Namespace="calico-system" Pod="csi-node-driver-gc5v5" WorkloadEndpoint="localhost-k8s-csi--node--driver--gc5v5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--gc5v5-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ff487f86-aaa8-4b99-8f59-bc40829e41d4", ResourceVersion:"1030", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-gc5v5", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calie6c5c1f554a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:24.822055 env[1204]: 2025-07-15 11:38:24.791 [INFO][4279] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f" Namespace="calico-system" Pod="csi-node-driver-gc5v5" WorkloadEndpoint="localhost-k8s-csi--node--driver--gc5v5-eth0" Jul 15 11:38:24.822055 env[1204]: 2025-07-15 11:38:24.791 [INFO][4279] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie6c5c1f554a ContainerID="8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f" Namespace="calico-system" Pod="csi-node-driver-gc5v5" WorkloadEndpoint="localhost-k8s-csi--node--driver--gc5v5-eth0" Jul 15 11:38:24.822055 env[1204]: 2025-07-15 11:38:24.799 [INFO][4279] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f" Namespace="calico-system" Pod="csi-node-driver-gc5v5" WorkloadEndpoint="localhost-k8s-csi--node--driver--gc5v5-eth0" Jul 15 11:38:24.822055 env[1204]: 2025-07-15 11:38:24.800 [INFO][4279] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f" Namespace="calico-system" Pod="csi-node-driver-gc5v5" WorkloadEndpoint="localhost-k8s-csi--node--driver--gc5v5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--gc5v5-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ff487f86-aaa8-4b99-8f59-bc40829e41d4", ResourceVersion:"1030", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f", Pod:"csi-node-driver-gc5v5", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calie6c5c1f554a", MAC:"3e:83:b5:72:32:c4", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:24.822055 env[1204]: 2025-07-15 11:38:24.809 [INFO][4279] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f" Namespace="calico-system" Pod="csi-node-driver-gc5v5" WorkloadEndpoint="localhost-k8s-csi--node--driver--gc5v5-eth0" Jul 15 11:38:24.824000 audit[4384]: NETFILTER_CFG table=filter:116 family=2 entries=48 op=nft_register_chain pid=4384 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:38:24.824000 audit[4384]: SYSCALL arch=c000003e syscall=46 success=yes exit=23124 a0=3 a1=7fff55193a80 a2=0 a3=7fff55193a6c items=0 ppid=3402 pid=4384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:24.824000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:38:24.835177 env[1204]: time="2025-07-15T11:38:24.835111131Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:38:24.835260 env[1204]: time="2025-07-15T11:38:24.835184369Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:38:24.835260 env[1204]: time="2025-07-15T11:38:24.835207542Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:38:24.835393 env[1204]: time="2025-07-15T11:38:24.835361331Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f pid=4396 runtime=io.containerd.runc.v2 Jul 15 11:38:24.848056 systemd[1]: Started cri-containerd-8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f.scope. Jul 15 11:38:24.850462 env[1204]: 2025-07-15 11:38:24.799 [INFO][4368] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" Jul 15 11:38:24.850462 env[1204]: 2025-07-15 11:38:24.799 [INFO][4368] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" iface="eth0" netns="/var/run/netns/cni-06efb59e-773a-2c09-a280-60d52a0ad9e9" Jul 15 11:38:24.850462 env[1204]: 2025-07-15 11:38:24.799 [INFO][4368] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" iface="eth0" netns="/var/run/netns/cni-06efb59e-773a-2c09-a280-60d52a0ad9e9" Jul 15 11:38:24.850462 env[1204]: 2025-07-15 11:38:24.800 [INFO][4368] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" iface="eth0" netns="/var/run/netns/cni-06efb59e-773a-2c09-a280-60d52a0ad9e9" Jul 15 11:38:24.850462 env[1204]: 2025-07-15 11:38:24.800 [INFO][4368] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" Jul 15 11:38:24.850462 env[1204]: 2025-07-15 11:38:24.800 [INFO][4368] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" Jul 15 11:38:24.850462 env[1204]: 2025-07-15 11:38:24.836 [INFO][4377] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" HandleID="k8s-pod-network.4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" Workload="localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0" Jul 15 11:38:24.850462 env[1204]: 2025-07-15 11:38:24.836 [INFO][4377] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:24.850462 env[1204]: 2025-07-15 11:38:24.836 [INFO][4377] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:24.850462 env[1204]: 2025-07-15 11:38:24.844 [WARNING][4377] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" HandleID="k8s-pod-network.4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" Workload="localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0" Jul 15 11:38:24.850462 env[1204]: 2025-07-15 11:38:24.844 [INFO][4377] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" HandleID="k8s-pod-network.4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" Workload="localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0" Jul 15 11:38:24.850462 env[1204]: 2025-07-15 11:38:24.845 [INFO][4377] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:24.850462 env[1204]: 2025-07-15 11:38:24.847 [INFO][4368] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" Jul 15 11:38:24.850843 env[1204]: time="2025-07-15T11:38:24.850603439Z" level=info msg="TearDown network for sandbox \"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2\" successfully" Jul 15 11:38:24.850843 env[1204]: time="2025-07-15T11:38:24.850633616Z" level=info msg="StopPodSandbox for \"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2\" returns successfully" Jul 15 11:38:24.851493 env[1204]: time="2025-07-15T11:38:24.851467483Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6545649b6d-762v4,Uid:4554d1d6-2aa2-4df3-ac40-87d7e031da9f,Namespace:calico-apiserver,Attempt:1,}" Jul 15 11:38:24.853570 kubelet[1929]: E0715 11:38:24.853547 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:38:24.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit: BPF prog-id=201 op=LOAD Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4396 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:24.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839333065363335373565616234633937306230393762326330383633 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4396 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:24.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839333065363335373565616234633937306230393762326330383633 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit: BPF prog-id=202 op=LOAD Jul 15 11:38:24.858000 audit[4408]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00032cc80 items=0 ppid=4396 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:24.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839333065363335373565616234633937306230393762326330383633 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit: BPF prog-id=203 op=LOAD Jul 15 11:38:24.858000 audit[4408]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00032ccc8 items=0 ppid=4396 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:24.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839333065363335373565616234633937306230393762326330383633 Jul 15 11:38:24.858000 audit: BPF prog-id=203 op=UNLOAD Jul 15 11:38:24.858000 audit: BPF prog-id=202 op=UNLOAD Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:24.858000 audit: BPF prog-id=204 op=LOAD Jul 15 11:38:24.858000 audit[4408]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00032d0d8 items=0 ppid=4396 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:24.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839333065363335373565616234633937306230393762326330383633 Jul 15 11:38:24.860494 systemd-resolved[1144]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:38:24.871033 env[1204]: time="2025-07-15T11:38:24.870993884Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-gc5v5,Uid:ff487f86-aaa8-4b99-8f59-bc40829e41d4,Namespace:calico-system,Attempt:1,} returns sandbox id \"8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f\"" Jul 15 11:38:24.921303 systemd[1]: run-netns-cni\x2dc6b8830f\x2d96a8\x2de6ae\x2d216c\x2db67a41e27099.mount: Deactivated successfully. Jul 15 11:38:24.921451 systemd[1]: run-netns-cni\x2d06efb59e\x2d773a\x2d2c09\x2da280\x2d60d52a0ad9e9.mount: Deactivated successfully. Jul 15 11:38:25.126595 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount901001097.mount: Deactivated successfully. Jul 15 11:38:25.208977 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali851dd344749: link becomes ready Jul 15 11:38:25.209461 systemd-networkd[1026]: cali851dd344749: Link UP Jul 15 11:38:25.209592 systemd-networkd[1026]: cali851dd344749: Gained carrier Jul 15 11:38:25.220584 env[1204]: 2025-07-15 11:38:24.894 [INFO][4433] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0 calico-apiserver-6545649b6d- calico-apiserver 4554d1d6-2aa2-4df3-ac40-87d7e031da9f 1047 0 2025-07-15 11:37:55 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6545649b6d projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-6545649b6d-762v4 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali851dd344749 [] [] }} ContainerID="a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00" Namespace="calico-apiserver" Pod="calico-apiserver-6545649b6d-762v4" WorkloadEndpoint="localhost-k8s-calico--apiserver--6545649b6d--762v4-" Jul 15 11:38:25.220584 env[1204]: 2025-07-15 11:38:24.894 [INFO][4433] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00" Namespace="calico-apiserver" Pod="calico-apiserver-6545649b6d-762v4" WorkloadEndpoint="localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0" Jul 15 11:38:25.220584 env[1204]: 2025-07-15 11:38:24.914 [INFO][4448] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00" HandleID="k8s-pod-network.a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00" Workload="localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0" Jul 15 11:38:25.220584 env[1204]: 2025-07-15 11:38:24.914 [INFO][4448] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00" HandleID="k8s-pod-network.a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00" Workload="localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000138e30), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-6545649b6d-762v4", "timestamp":"2025-07-15 11:38:24.914162351 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:38:25.220584 env[1204]: 2025-07-15 11:38:24.914 [INFO][4448] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:25.220584 env[1204]: 2025-07-15 11:38:24.914 [INFO][4448] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:25.220584 env[1204]: 2025-07-15 11:38:24.914 [INFO][4448] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:38:25.220584 env[1204]: 2025-07-15 11:38:24.920 [INFO][4448] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00" host="localhost" Jul 15 11:38:25.220584 env[1204]: 2025-07-15 11:38:24.924 [INFO][4448] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:38:25.220584 env[1204]: 2025-07-15 11:38:24.928 [INFO][4448] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:38:25.220584 env[1204]: 2025-07-15 11:38:24.929 [INFO][4448] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:38:25.220584 env[1204]: 2025-07-15 11:38:24.931 [INFO][4448] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:38:25.220584 env[1204]: 2025-07-15 11:38:24.931 [INFO][4448] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00" host="localhost" Jul 15 11:38:25.220584 env[1204]: 2025-07-15 11:38:24.932 [INFO][4448] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00 Jul 15 11:38:25.220584 env[1204]: 2025-07-15 11:38:25.026 [INFO][4448] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00" host="localhost" Jul 15 11:38:25.220584 env[1204]: 2025-07-15 11:38:25.204 [INFO][4448] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00" host="localhost" Jul 15 11:38:25.220584 env[1204]: 2025-07-15 11:38:25.204 [INFO][4448] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00" host="localhost" Jul 15 11:38:25.220584 env[1204]: 2025-07-15 11:38:25.204 [INFO][4448] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:25.220584 env[1204]: 2025-07-15 11:38:25.204 [INFO][4448] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00" HandleID="k8s-pod-network.a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00" Workload="localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0" Jul 15 11:38:25.221427 env[1204]: 2025-07-15 11:38:25.205 [INFO][4433] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00" Namespace="calico-apiserver" Pod="calico-apiserver-6545649b6d-762v4" WorkloadEndpoint="localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0", GenerateName:"calico-apiserver-6545649b6d-", Namespace:"calico-apiserver", SelfLink:"", UID:"4554d1d6-2aa2-4df3-ac40-87d7e031da9f", ResourceVersion:"1047", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6545649b6d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-6545649b6d-762v4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali851dd344749", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:25.221427 env[1204]: 2025-07-15 11:38:25.206 [INFO][4433] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00" Namespace="calico-apiserver" Pod="calico-apiserver-6545649b6d-762v4" WorkloadEndpoint="localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0" Jul 15 11:38:25.221427 env[1204]: 2025-07-15 11:38:25.206 [INFO][4433] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali851dd344749 ContainerID="a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00" Namespace="calico-apiserver" Pod="calico-apiserver-6545649b6d-762v4" WorkloadEndpoint="localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0" Jul 15 11:38:25.221427 env[1204]: 2025-07-15 11:38:25.208 [INFO][4433] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00" Namespace="calico-apiserver" Pod="calico-apiserver-6545649b6d-762v4" WorkloadEndpoint="localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0" Jul 15 11:38:25.221427 env[1204]: 2025-07-15 11:38:25.209 [INFO][4433] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00" Namespace="calico-apiserver" Pod="calico-apiserver-6545649b6d-762v4" WorkloadEndpoint="localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0", GenerateName:"calico-apiserver-6545649b6d-", Namespace:"calico-apiserver", SelfLink:"", UID:"4554d1d6-2aa2-4df3-ac40-87d7e031da9f", ResourceVersion:"1047", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6545649b6d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00", Pod:"calico-apiserver-6545649b6d-762v4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali851dd344749", MAC:"0e:92:08:79:60:c3", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:25.221427 env[1204]: 2025-07-15 11:38:25.217 [INFO][4433] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00" Namespace="calico-apiserver" Pod="calico-apiserver-6545649b6d-762v4" WorkloadEndpoint="localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0" Jul 15 11:38:25.229000 audit[4469]: NETFILTER_CFG table=filter:117 family=2 entries=53 op=nft_register_chain pid=4469 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:38:25.229000 audit[4469]: SYSCALL arch=c000003e syscall=46 success=yes exit=26624 a0=3 a1=7ffee37a8f10 a2=0 a3=7ffee37a8efc items=0 ppid=3402 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:25.229000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:38:25.242566 env[1204]: time="2025-07-15T11:38:25.242465813Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:38:25.242566 env[1204]: time="2025-07-15T11:38:25.242505096Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:38:25.242566 env[1204]: time="2025-07-15T11:38:25.242515336Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:38:25.242759 env[1204]: time="2025-07-15T11:38:25.242686147Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00 pid=4473 runtime=io.containerd.runc.v2 Jul 15 11:38:25.270459 systemd[1]: run-containerd-runc-k8s.io-a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00-runc.mPoLao.mount: Deactivated successfully. Jul 15 11:38:25.271882 systemd[1]: Started cri-containerd-a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00.scope. Jul 15 11:38:25.287986 kernel: kauditd_printk_skb: 448 callbacks suppressed Jul 15 11:38:25.288136 kernel: audit: type=1400 audit(1752579505.283:1352): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.292187 kernel: audit: type=1400 audit(1752579505.283:1353): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.292245 kernel: audit: type=1400 audit(1752579505.283:1354): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.298789 kernel: audit: type=1400 audit(1752579505.283:1355): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.298943 kernel: audit: type=1400 audit(1752579505.283:1356): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.301906 systemd-resolved[1144]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:38:25.304644 kernel: audit: type=1400 audit(1752579505.283:1357): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.304716 kernel: audit: type=1400 audit(1752579505.283:1358): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.310715 kernel: audit: type=1400 audit(1752579505.283:1359): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.310758 kernel: audit: type=1400 audit(1752579505.283:1360): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.316271 kernel: audit: type=1400 audit(1752579505.283:1361): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.283000 audit: BPF prog-id=205 op=LOAD Jul 15 11:38:25.287000 audit[4484]: AVC avc: denied { bpf } for pid=4484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.287000 audit[4484]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4473 pid=4484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:25.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139653338313831316436633939633864336366356436386135396235 Jul 15 11:38:25.287000 audit[4484]: AVC avc: denied { perfmon } for pid=4484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.287000 audit[4484]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4473 pid=4484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:25.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139653338313831316436633939633864336366356436386135396235 Jul 15 11:38:25.287000 audit[4484]: AVC avc: denied { bpf } for pid=4484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.287000 audit[4484]: AVC avc: denied { bpf } for pid=4484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.287000 audit[4484]: AVC avc: denied { bpf } for pid=4484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.287000 audit[4484]: AVC avc: denied { perfmon } for pid=4484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.287000 audit[4484]: AVC avc: denied { perfmon } for pid=4484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.287000 audit[4484]: AVC avc: denied { perfmon } for pid=4484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.287000 audit[4484]: AVC avc: denied { perfmon } for pid=4484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.287000 audit[4484]: AVC avc: denied { perfmon } for pid=4484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.287000 audit[4484]: AVC avc: denied { bpf } for pid=4484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.287000 audit[4484]: AVC avc: denied { bpf } for pid=4484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.287000 audit: BPF prog-id=206 op=LOAD Jul 15 11:38:25.287000 audit[4484]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00030c350 items=0 ppid=4473 pid=4484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:25.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139653338313831316436633939633864336366356436386135396235 Jul 15 11:38:25.287000 audit[4484]: AVC avc: denied { bpf } for pid=4484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.287000 audit[4484]: AVC avc: denied { bpf } for pid=4484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.287000 audit[4484]: AVC avc: denied { perfmon } for pid=4484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.287000 audit[4484]: AVC avc: denied { perfmon } for pid=4484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.287000 audit[4484]: AVC avc: denied { perfmon } for pid=4484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.287000 audit[4484]: AVC avc: denied { perfmon } for pid=4484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.287000 audit[4484]: AVC avc: denied { perfmon } for pid=4484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.287000 audit[4484]: AVC avc: denied { bpf } for pid=4484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.287000 audit[4484]: AVC avc: denied { bpf } for pid=4484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.287000 audit: BPF prog-id=207 op=LOAD Jul 15 11:38:25.287000 audit[4484]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00030c398 items=0 ppid=4473 pid=4484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:25.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139653338313831316436633939633864336366356436386135396235 Jul 15 11:38:25.294000 audit: BPF prog-id=207 op=UNLOAD Jul 15 11:38:25.294000 audit: BPF prog-id=206 op=UNLOAD Jul 15 11:38:25.294000 audit[4484]: AVC avc: denied { bpf } for pid=4484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.294000 audit[4484]: AVC avc: denied { bpf } for pid=4484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.294000 audit[4484]: AVC avc: denied { bpf } for pid=4484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.294000 audit[4484]: AVC avc: denied { perfmon } for pid=4484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.294000 audit[4484]: AVC avc: denied { perfmon } for pid=4484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.294000 audit[4484]: AVC avc: denied { perfmon } for pid=4484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.294000 audit[4484]: AVC avc: denied { perfmon } for pid=4484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.294000 audit[4484]: AVC avc: denied { perfmon } for pid=4484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.294000 audit[4484]: AVC avc: denied { bpf } for pid=4484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.294000 audit[4484]: AVC avc: denied { bpf } for pid=4484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:25.294000 audit: BPF prog-id=208 op=LOAD Jul 15 11:38:25.294000 audit[4484]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00030c7a8 items=0 ppid=4473 pid=4484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:25.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139653338313831316436633939633864336366356436386135396235 Jul 15 11:38:25.330833 env[1204]: time="2025-07-15T11:38:25.330790287Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6545649b6d-762v4,Uid:4554d1d6-2aa2-4df3-ac40-87d7e031da9f,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00\"" Jul 15 11:38:25.857326 kubelet[1929]: E0715 11:38:25.857296 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:38:26.017223 systemd-networkd[1026]: calie6c5c1f554a: Gained IPv6LL Jul 15 11:38:26.048667 systemd[1]: Started sshd@9-10.0.0.140:22-10.0.0.1:37812.service. Jul 15 11:38:26.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.140:22-10.0.0.1:37812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:26.210050 systemd-networkd[1026]: calia356b8fd264: Gained IPv6LL Jul 15 11:38:26.341377 env[1204]: time="2025-07-15T11:38:26.341332107Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:26.343490 env[1204]: time="2025-07-15T11:38:26.343455727Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:26.345299 env[1204]: time="2025-07-15T11:38:26.345253476Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:26.347068 env[1204]: time="2025-07-15T11:38:26.347015977Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:26.347319 env[1204]: time="2025-07-15T11:38:26.347266338Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b\"" Jul 15 11:38:26.347000 audit[4509]: USER_ACCT pid=4509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:26.348337 sshd[4509]: Accepted publickey for core from 10.0.0.1 port 37812 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:38:26.349049 env[1204]: time="2025-07-15T11:38:26.349024862Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 15 11:38:26.350284 env[1204]: time="2025-07-15T11:38:26.350258380Z" level=info msg="CreateContainer within sandbox \"9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 15 11:38:26.349000 audit[4509]: CRED_ACQ pid=4509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:26.349000 audit[4509]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc07fb36c0 a2=3 a3=0 items=0 ppid=1 pid=4509 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:26.349000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:38:26.351232 sshd[4509]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:38:26.355468 systemd-logind[1189]: New session 10 of user core. Jul 15 11:38:26.356249 systemd[1]: Started session-10.scope. Jul 15 11:38:26.366000 audit[4509]: USER_START pid=4509 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:26.367000 audit[4511]: CRED_ACQ pid=4511 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:26.369818 env[1204]: time="2025-07-15T11:38:26.369780572Z" level=info msg="CreateContainer within sandbox \"9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"7588a07003d9074b371566bce02e1c1a2d820f797009d676ccf9dcb20e9cd00a\"" Jul 15 11:38:26.371064 env[1204]: time="2025-07-15T11:38:26.371037043Z" level=info msg="StartContainer for \"7588a07003d9074b371566bce02e1c1a2d820f797009d676ccf9dcb20e9cd00a\"" Jul 15 11:38:26.397320 systemd[1]: run-containerd-runc-k8s.io-7588a07003d9074b371566bce02e1c1a2d820f797009d676ccf9dcb20e9cd00a-runc.Vgd9CF.mount: Deactivated successfully. Jul 15 11:38:26.398724 systemd[1]: Started cri-containerd-7588a07003d9074b371566bce02e1c1a2d820f797009d676ccf9dcb20e9cd00a.scope. Jul 15 11:38:26.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.408000 audit: BPF prog-id=209 op=LOAD Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { bpf } for pid=4520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3909 pid=4520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:26.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735383861303730303364393037346233373135363662636530326531 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { perfmon } for pid=4520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=3909 pid=4520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:26.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735383861303730303364393037346233373135363662636530326531 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { bpf } for pid=4520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { bpf } for pid=4520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { bpf } for pid=4520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { perfmon } for pid=4520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { perfmon } for pid=4520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { perfmon } for pid=4520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { perfmon } for pid=4520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { perfmon } for pid=4520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { bpf } for pid=4520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { bpf } for pid=4520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit: BPF prog-id=210 op=LOAD Jul 15 11:38:26.409000 audit[4520]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000350010 items=0 ppid=3909 pid=4520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:26.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735383861303730303364393037346233373135363662636530326531 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { bpf } for pid=4520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { bpf } for pid=4520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { perfmon } for pid=4520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { perfmon } for pid=4520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { perfmon } for pid=4520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { perfmon } for pid=4520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { perfmon } for pid=4520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { bpf } for pid=4520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { bpf } for pid=4520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit: BPF prog-id=211 op=LOAD Jul 15 11:38:26.409000 audit[4520]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000350058 items=0 ppid=3909 pid=4520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:26.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735383861303730303364393037346233373135363662636530326531 Jul 15 11:38:26.409000 audit: BPF prog-id=211 op=UNLOAD Jul 15 11:38:26.409000 audit: BPF prog-id=210 op=UNLOAD Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { bpf } for pid=4520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { bpf } for pid=4520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { bpf } for pid=4520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { perfmon } for pid=4520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { perfmon } for pid=4520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { perfmon } for pid=4520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { perfmon } for pid=4520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { perfmon } for pid=4520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { bpf } for pid=4520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit[4520]: AVC avc: denied { bpf } for pid=4520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:26.409000 audit: BPF prog-id=212 op=LOAD Jul 15 11:38:26.409000 audit[4520]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000350468 items=0 ppid=3909 pid=4520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:26.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735383861303730303364393037346233373135363662636530326531 Jul 15 11:38:26.434267 env[1204]: time="2025-07-15T11:38:26.434228899Z" level=info msg="StartContainer for \"7588a07003d9074b371566bce02e1c1a2d820f797009d676ccf9dcb20e9cd00a\" returns successfully" Jul 15 11:38:26.523227 sshd[4509]: pam_unix(sshd:session): session closed for user core Jul 15 11:38:26.524000 audit[4509]: USER_END pid=4509 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:26.524000 audit[4509]: CRED_DISP pid=4509 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:26.528912 systemd[1]: Started sshd@10-10.0.0.140:22-10.0.0.1:37816.service. Jul 15 11:38:26.528000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.140:22-10.0.0.1:37816 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:26.529468 systemd[1]: sshd@9-10.0.0.140:22-10.0.0.1:37812.service: Deactivated successfully. Jul 15 11:38:26.528000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.140:22-10.0.0.1:37812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:26.530115 systemd[1]: session-10.scope: Deactivated successfully. Jul 15 11:38:26.530686 systemd-logind[1189]: Session 10 logged out. Waiting for processes to exit. Jul 15 11:38:26.531477 systemd-logind[1189]: Removed session 10. Jul 15 11:38:26.561000 audit[4559]: USER_ACCT pid=4559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:26.562962 sshd[4559]: Accepted publickey for core from 10.0.0.1 port 37816 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:38:26.562000 audit[4559]: CRED_ACQ pid=4559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:26.562000 audit[4559]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd2c00f60 a2=3 a3=0 items=0 ppid=1 pid=4559 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:26.562000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:38:26.564031 sshd[4559]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:38:26.567191 systemd-logind[1189]: New session 11 of user core. Jul 15 11:38:26.567979 systemd[1]: Started session-11.scope. Jul 15 11:38:26.571000 audit[4559]: USER_START pid=4559 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:26.572000 audit[4562]: CRED_ACQ pid=4562 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:26.702090 sshd[4559]: pam_unix(sshd:session): session closed for user core Jul 15 11:38:26.702000 audit[4559]: USER_END pid=4559 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:26.702000 audit[4559]: CRED_DISP pid=4559 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:26.705659 systemd[1]: sshd@10-10.0.0.140:22-10.0.0.1:37816.service: Deactivated successfully. Jul 15 11:38:26.706348 systemd[1]: session-11.scope: Deactivated successfully. Jul 15 11:38:26.704000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.140:22-10.0.0.1:37816 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:26.707022 systemd-logind[1189]: Session 11 logged out. Waiting for processes to exit. Jul 15 11:38:26.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.140:22-10.0.0.1:37832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:26.708313 systemd[1]: Started sshd@11-10.0.0.140:22-10.0.0.1:37832.service. Jul 15 11:38:26.709389 systemd-logind[1189]: Removed session 11. Jul 15 11:38:26.748000 audit[4571]: USER_ACCT pid=4571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:26.749682 sshd[4571]: Accepted publickey for core from 10.0.0.1 port 37832 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:38:26.749000 audit[4571]: CRED_ACQ pid=4571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:26.749000 audit[4571]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffccf1a460 a2=3 a3=0 items=0 ppid=1 pid=4571 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:26.749000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:38:26.750790 sshd[4571]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:38:26.755208 systemd-logind[1189]: New session 12 of user core. Jul 15 11:38:26.756123 systemd[1]: Started session-12.scope. Jul 15 11:38:26.760000 audit[4571]: USER_START pid=4571 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:26.761000 audit[4573]: CRED_ACQ pid=4573 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:26.883000 audit[4583]: NETFILTER_CFG table=filter:118 family=2 entries=12 op=nft_register_rule pid=4583 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:26.883000 audit[4583]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffc280f70c0 a2=0 a3=7ffc280f70ac items=0 ppid=2039 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:26.883000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:26.888492 sshd[4571]: pam_unix(sshd:session): session closed for user core Jul 15 11:38:26.887000 audit[4583]: NETFILTER_CFG table=nat:119 family=2 entries=22 op=nft_register_rule pid=4583 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:26.887000 audit[4583]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffc280f70c0 a2=0 a3=7ffc280f70ac items=0 ppid=2039 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:26.887000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:26.888000 audit[4571]: USER_END pid=4571 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:26.888000 audit[4571]: CRED_DISP pid=4571 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:26.890972 systemd[1]: sshd@11-10.0.0.140:22-10.0.0.1:37832.service: Deactivated successfully. Jul 15 11:38:26.890000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.140:22-10.0.0.1:37832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:26.891673 systemd[1]: session-12.scope: Deactivated successfully. Jul 15 11:38:26.892392 systemd-logind[1189]: Session 12 logged out. Waiting for processes to exit. Jul 15 11:38:26.893028 systemd-logind[1189]: Removed session 12. Jul 15 11:38:27.169051 systemd-networkd[1026]: cali851dd344749: Gained IPv6LL Jul 15 11:38:27.863015 kubelet[1929]: I0715 11:38:27.862977 1929 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:38:29.887715 env[1204]: time="2025-07-15T11:38:29.887657052Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:29.889565 env[1204]: time="2025-07-15T11:38:29.889536082Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:29.891165 env[1204]: time="2025-07-15T11:38:29.891133111Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:29.892479 env[1204]: time="2025-07-15T11:38:29.892442660Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:29.892962 env[1204]: time="2025-07-15T11:38:29.892906783Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 15 11:38:29.893915 env[1204]: time="2025-07-15T11:38:29.893891181Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 15 11:38:29.895037 env[1204]: time="2025-07-15T11:38:29.895001988Z" level=info msg="CreateContainer within sandbox \"06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:38:29.907728 env[1204]: time="2025-07-15T11:38:29.907451702Z" level=info msg="CreateContainer within sandbox \"06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"70f510fa5e3506de31f336d39ade32a31b6b58e20c0327f6fa2fb1e985a1b802\"" Jul 15 11:38:29.907953 env[1204]: time="2025-07-15T11:38:29.907901126Z" level=info msg="StartContainer for \"70f510fa5e3506de31f336d39ade32a31b6b58e20c0327f6fa2fb1e985a1b802\"" Jul 15 11:38:29.924568 systemd[1]: Started cri-containerd-70f510fa5e3506de31f336d39ade32a31b6b58e20c0327f6fa2fb1e985a1b802.scope. Jul 15 11:38:29.933000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.933000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.933000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.933000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.933000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.933000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.933000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.933000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.933000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit: BPF prog-id=213 op=LOAD Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4068 pid=4598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:29.934000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730663531306661356533353036646533316633333664333961646533 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4068 pid=4598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:29.934000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730663531306661356533353036646533316633333664333961646533 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit: BPF prog-id=214 op=LOAD Jul 15 11:38:29.934000 audit[4598]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002894d0 items=0 ppid=4068 pid=4598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:29.934000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730663531306661356533353036646533316633333664333961646533 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit: BPF prog-id=215 op=LOAD Jul 15 11:38:29.934000 audit[4598]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000289518 items=0 ppid=4068 pid=4598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:29.934000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730663531306661356533353036646533316633333664333961646533 Jul 15 11:38:29.934000 audit: BPF prog-id=215 op=UNLOAD Jul 15 11:38:29.934000 audit: BPF prog-id=214 op=UNLOAD Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:29.934000 audit: BPF prog-id=216 op=LOAD Jul 15 11:38:29.934000 audit[4598]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000289928 items=0 ppid=4068 pid=4598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:29.934000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730663531306661356533353036646533316633333664333961646533 Jul 15 11:38:29.959123 env[1204]: time="2025-07-15T11:38:29.959063133Z" level=info msg="StartContainer for \"70f510fa5e3506de31f336d39ade32a31b6b58e20c0327f6fa2fb1e985a1b802\" returns successfully" Jul 15 11:38:30.786000 audit[4609]: AVC avc: denied { watch } for pid=4609 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_38_07.3955150565/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c292,c647 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c292,c647 tclass=file permissive=0 Jul 15 11:38:30.791832 kernel: kauditd_printk_skb: 200 callbacks suppressed Jul 15 11:38:30.791984 kernel: audit: type=1400 audit(1752579510.786:1435): avc: denied { watch } for pid=4609 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_38_07.3955150565/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c292,c647 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c292,c647 tclass=file permissive=0 Jul 15 11:38:30.792018 kernel: audit: type=1300 audit(1752579510.786:1435): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0016c4440 a2=fc6 a3=0 items=0 ppid=4068 pid=4609 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c292,c647 key=(null) Jul 15 11:38:30.786000 audit[4609]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0016c4440 a2=fc6 a3=0 items=0 ppid=4068 pid=4609 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c292,c647 key=(null) Jul 15 11:38:30.796421 kernel: audit: type=1327 audit(1752579510.786:1435): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:38:30.786000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:38:30.884192 kubelet[1929]: I0715 11:38:30.884139 1929 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-58fd7646b9-5bptq" podStartSLOduration=29.505941286 podStartE2EDuration="33.884122341s" podCreationTimestamp="2025-07-15 11:37:57 +0000 UTC" firstStartedPulling="2025-07-15 11:38:21.97016428 +0000 UTC m=+39.311146408" lastFinishedPulling="2025-07-15 11:38:26.348345335 +0000 UTC m=+43.689327463" observedRunningTime="2025-07-15 11:38:26.869399302 +0000 UTC m=+44.210381430" watchObservedRunningTime="2025-07-15 11:38:30.884122341 +0000 UTC m=+48.225104469" Jul 15 11:38:30.884539 kubelet[1929]: I0715 11:38:30.884498 1929 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-6545649b6d-v7pdw" podStartSLOduration=29.020739947 podStartE2EDuration="35.884493337s" podCreationTimestamp="2025-07-15 11:37:55 +0000 UTC" firstStartedPulling="2025-07-15 11:38:23.029991086 +0000 UTC m=+40.370973214" lastFinishedPulling="2025-07-15 11:38:29.893744476 +0000 UTC m=+47.234726604" observedRunningTime="2025-07-15 11:38:30.884253778 +0000 UTC m=+48.225235906" watchObservedRunningTime="2025-07-15 11:38:30.884493337 +0000 UTC m=+48.225475455" Jul 15 11:38:30.896000 audit[4634]: NETFILTER_CFG table=filter:120 family=2 entries=12 op=nft_register_rule pid=4634 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:30.906963 kernel: audit: type=1325 audit(1752579510.896:1436): table=filter:120 family=2 entries=12 op=nft_register_rule pid=4634 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:30.907099 kernel: audit: type=1300 audit(1752579510.896:1436): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffe39fc4530 a2=0 a3=7ffe39fc451c items=0 ppid=2039 pid=4634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:30.907122 kernel: audit: type=1327 audit(1752579510.896:1436): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:30.896000 audit[4634]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffe39fc4530 a2=0 a3=7ffe39fc451c items=0 ppid=2039 pid=4634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:30.896000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:30.912000 audit[4634]: NETFILTER_CFG table=nat:121 family=2 entries=22 op=nft_register_rule pid=4634 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:30.912000 audit[4634]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffe39fc4530 a2=0 a3=7ffe39fc451c items=0 ppid=2039 pid=4634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:30.920603 kernel: audit: type=1325 audit(1752579510.912:1437): table=nat:121 family=2 entries=22 op=nft_register_rule pid=4634 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:30.920648 kernel: audit: type=1300 audit(1752579510.912:1437): arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffe39fc4530 a2=0 a3=7ffe39fc451c items=0 ppid=2039 pid=4634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:30.920669 kernel: audit: type=1327 audit(1752579510.912:1437): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:30.912000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:30.929000 audit[4636]: NETFILTER_CFG table=filter:122 family=2 entries=11 op=nft_register_rule pid=4636 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:30.929000 audit[4636]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff0b255550 a2=0 a3=7fff0b25553c items=0 ppid=2039 pid=4636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:30.929000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:30.932967 kernel: audit: type=1325 audit(1752579510.929:1438): table=filter:122 family=2 entries=11 op=nft_register_rule pid=4636 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:30.934000 audit[4636]: NETFILTER_CFG table=nat:123 family=2 entries=29 op=nft_register_chain pid=4636 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:30.934000 audit[4636]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7fff0b255550 a2=0 a3=7fff0b25553c items=0 ppid=2039 pid=4636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:30.934000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:31.892353 systemd[1]: Started sshd@12-10.0.0.140:22-10.0.0.1:53182.service. Jul 15 11:38:31.891000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.140:22-10.0.0.1:53182 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:31.929000 audit[4638]: USER_ACCT pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:31.930785 sshd[4638]: Accepted publickey for core from 10.0.0.1 port 53182 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:38:31.930000 audit[4638]: CRED_ACQ pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:31.930000 audit[4638]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde2d90f10 a2=3 a3=0 items=0 ppid=1 pid=4638 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:31.930000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:38:31.932001 sshd[4638]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:38:31.935408 systemd-logind[1189]: New session 13 of user core. Jul 15 11:38:31.936187 systemd[1]: Started session-13.scope. Jul 15 11:38:31.939000 audit[4638]: USER_START pid=4638 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:31.941000 audit[4640]: CRED_ACQ pid=4640 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:32.106221 sshd[4638]: pam_unix(sshd:session): session closed for user core Jul 15 11:38:32.106000 audit[4638]: USER_END pid=4638 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:32.106000 audit[4638]: CRED_DISP pid=4638 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:32.108000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.140:22-10.0.0.1:53182 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:32.108748 systemd[1]: sshd@12-10.0.0.140:22-10.0.0.1:53182.service: Deactivated successfully. Jul 15 11:38:32.109463 systemd[1]: session-13.scope: Deactivated successfully. Jul 15 11:38:32.110354 systemd-logind[1189]: Session 13 logged out. Waiting for processes to exit. Jul 15 11:38:32.111075 systemd-logind[1189]: Removed session 13. Jul 15 11:38:32.935589 env[1204]: time="2025-07-15T11:38:32.935543392Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:32.937538 env[1204]: time="2025-07-15T11:38:32.937486671Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:32.939456 env[1204]: time="2025-07-15T11:38:32.939417406Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:32.941795 env[1204]: time="2025-07-15T11:38:32.941748143Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:32.942376 env[1204]: time="2025-07-15T11:38:32.942348299Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a\"" Jul 15 11:38:32.943804 env[1204]: time="2025-07-15T11:38:32.943777232Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 15 11:38:32.961195 env[1204]: time="2025-07-15T11:38:32.961141377Z" level=info msg="CreateContainer within sandbox \"13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 15 11:38:32.975416 env[1204]: time="2025-07-15T11:38:32.975329228Z" level=info msg="CreateContainer within sandbox \"13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"32a0439bbd2ee97a3238e83051e0a5bbf3ec38c407528992fadd47e4ff5159ff\"" Jul 15 11:38:32.975910 env[1204]: time="2025-07-15T11:38:32.975859734Z" level=info msg="StartContainer for \"32a0439bbd2ee97a3238e83051e0a5bbf3ec38c407528992fadd47e4ff5159ff\"" Jul 15 11:38:32.994738 systemd[1]: Started cri-containerd-32a0439bbd2ee97a3238e83051e0a5bbf3ec38c407528992fadd47e4ff5159ff.scope. Jul 15 11:38:33.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.011000 audit: BPF prog-id=217 op=LOAD Jul 15 11:38:33.011000 audit[4659]: AVC avc: denied { bpf } for pid=4659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.011000 audit[4659]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4323 pid=4659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:33.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332613034333962626432656539376133323338653833303531653061 Jul 15 11:38:33.011000 audit[4659]: AVC avc: denied { perfmon } for pid=4659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.011000 audit[4659]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4323 pid=4659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:33.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332613034333962626432656539376133323338653833303531653061 Jul 15 11:38:33.011000 audit[4659]: AVC avc: denied { bpf } for pid=4659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.011000 audit[4659]: AVC avc: denied { bpf } for pid=4659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.011000 audit[4659]: AVC avc: denied { bpf } for pid=4659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.011000 audit[4659]: AVC avc: denied { perfmon } for pid=4659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.011000 audit[4659]: AVC avc: denied { perfmon } for pid=4659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.011000 audit[4659]: AVC avc: denied { perfmon } for pid=4659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.011000 audit[4659]: AVC avc: denied { perfmon } for pid=4659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.011000 audit[4659]: AVC avc: denied { perfmon } for pid=4659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.011000 audit[4659]: AVC avc: denied { bpf } for pid=4659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.011000 audit[4659]: AVC avc: denied { bpf } for pid=4659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.011000 audit: BPF prog-id=218 op=LOAD Jul 15 11:38:33.011000 audit[4659]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000231610 items=0 ppid=4323 pid=4659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:33.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332613034333962626432656539376133323338653833303531653061 Jul 15 11:38:33.012000 audit[4659]: AVC avc: denied { bpf } for pid=4659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.012000 audit[4659]: AVC avc: denied { bpf } for pid=4659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.012000 audit[4659]: AVC avc: denied { perfmon } for pid=4659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.012000 audit[4659]: AVC avc: denied { perfmon } for pid=4659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.012000 audit[4659]: AVC avc: denied { perfmon } for pid=4659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.012000 audit[4659]: AVC avc: denied { perfmon } for pid=4659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.012000 audit[4659]: AVC avc: denied { perfmon } for pid=4659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.012000 audit[4659]: AVC avc: denied { bpf } for pid=4659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.012000 audit[4659]: AVC avc: denied { bpf } for pid=4659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.012000 audit: BPF prog-id=219 op=LOAD Jul 15 11:38:33.012000 audit[4659]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000231658 items=0 ppid=4323 pid=4659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:33.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332613034333962626432656539376133323338653833303531653061 Jul 15 11:38:33.012000 audit: BPF prog-id=219 op=UNLOAD Jul 15 11:38:33.012000 audit: BPF prog-id=218 op=UNLOAD Jul 15 11:38:33.012000 audit[4659]: AVC avc: denied { bpf } for pid=4659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.012000 audit[4659]: AVC avc: denied { bpf } for pid=4659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.012000 audit[4659]: AVC avc: denied { bpf } for pid=4659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.012000 audit[4659]: AVC avc: denied { perfmon } for pid=4659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.012000 audit[4659]: AVC avc: denied { perfmon } for pid=4659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.012000 audit[4659]: AVC avc: denied { perfmon } for pid=4659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.012000 audit[4659]: AVC avc: denied { perfmon } for pid=4659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.012000 audit[4659]: AVC avc: denied { perfmon } for pid=4659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.012000 audit[4659]: AVC avc: denied { bpf } for pid=4659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.012000 audit[4659]: AVC avc: denied { bpf } for pid=4659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:33.012000 audit: BPF prog-id=220 op=LOAD Jul 15 11:38:33.012000 audit[4659]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000231a68 items=0 ppid=4323 pid=4659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:33.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332613034333962626432656539376133323338653833303531653061 Jul 15 11:38:33.252710 env[1204]: time="2025-07-15T11:38:33.252612644Z" level=info msg="StartContainer for \"32a0439bbd2ee97a3238e83051e0a5bbf3ec38c407528992fadd47e4ff5159ff\" returns successfully" Jul 15 11:38:33.299833 kubelet[1929]: I0715 11:38:33.299778 1929 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:38:33.484000 audit[4736]: NETFILTER_CFG table=filter:124 family=2 entries=9 op=nft_register_rule pid=4736 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:33.484000 audit[4736]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe4443c650 a2=0 a3=7ffe4443c63c items=0 ppid=2039 pid=4736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:33.484000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:33.489000 audit[4736]: NETFILTER_CFG table=nat:125 family=2 entries=31 op=nft_register_chain pid=4736 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:33.489000 audit[4736]: SYSCALL arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7ffe4443c650 a2=0 a3=7ffe4443c63c items=0 ppid=2039 pid=4736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:33.489000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:34.929369 kubelet[1929]: I0715 11:38:34.929034 1929 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-8684d87554-mv9qj" podStartSLOduration=28.530474106 podStartE2EDuration="36.929013228s" podCreationTimestamp="2025-07-15 11:37:58 +0000 UTC" firstStartedPulling="2025-07-15 11:38:24.544718414 +0000 UTC m=+41.885700543" lastFinishedPulling="2025-07-15 11:38:32.943257547 +0000 UTC m=+50.284239665" observedRunningTime="2025-07-15 11:38:34.113039523 +0000 UTC m=+51.454021651" watchObservedRunningTime="2025-07-15 11:38:34.929013228 +0000 UTC m=+52.269995356" Jul 15 11:38:34.988604 env[1204]: time="2025-07-15T11:38:34.988547607Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:34.990337 env[1204]: time="2025-07-15T11:38:34.990286140Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:34.992318 env[1204]: time="2025-07-15T11:38:34.992281447Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:34.993523 env[1204]: time="2025-07-15T11:38:34.993489495Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:34.993979 env[1204]: time="2025-07-15T11:38:34.993914823Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d\"" Jul 15 11:38:34.994955 env[1204]: time="2025-07-15T11:38:34.994913658Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 15 11:38:34.996134 env[1204]: time="2025-07-15T11:38:34.996104654Z" level=info msg="CreateContainer within sandbox \"8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 15 11:38:35.010455 env[1204]: time="2025-07-15T11:38:35.010418205Z" level=info msg="CreateContainer within sandbox \"8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"fbd6b176f3ed580e5a682974bd5db14cd2d875ff55c2d57eb70f52709b7a48df\"" Jul 15 11:38:35.010868 env[1204]: time="2025-07-15T11:38:35.010829497Z" level=info msg="StartContainer for \"fbd6b176f3ed580e5a682974bd5db14cd2d875ff55c2d57eb70f52709b7a48df\"" Jul 15 11:38:35.028249 systemd[1]: run-containerd-runc-k8s.io-fbd6b176f3ed580e5a682974bd5db14cd2d875ff55c2d57eb70f52709b7a48df-runc.zgb2jE.mount: Deactivated successfully. Jul 15 11:38:35.031196 systemd[1]: Started cri-containerd-fbd6b176f3ed580e5a682974bd5db14cd2d875ff55c2d57eb70f52709b7a48df.scope. Jul 15 11:38:35.043000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.043000 audit[4802]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f612d16fcc8 items=0 ppid=4396 pid=4802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:35.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662643662313736663365643538306535613638323937346264356462 Jul 15 11:38:35.043000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.043000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.043000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.043000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.043000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.043000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.043000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.043000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.043000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.043000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.043000 audit: BPF prog-id=221 op=LOAD Jul 15 11:38:35.043000 audit[4802]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000304e58 items=0 ppid=4396 pid=4802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:35.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662643662313736663365643538306535613638323937346264356462 Jul 15 11:38:35.044000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.044000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.044000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.044000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.044000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.044000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.044000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.044000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.044000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.044000 audit: BPF prog-id=222 op=LOAD Jul 15 11:38:35.044000 audit[4802]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000304ea8 items=0 ppid=4396 pid=4802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:35.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662643662313736663365643538306535613638323937346264356462 Jul 15 11:38:35.045000 audit: BPF prog-id=222 op=UNLOAD Jul 15 11:38:35.045000 audit: BPF prog-id=221 op=UNLOAD Jul 15 11:38:35.045000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.045000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.045000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.045000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.045000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.045000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.045000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.045000 audit[4802]: AVC avc: denied { perfmon } for pid=4802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.045000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.045000 audit[4802]: AVC avc: denied { bpf } for pid=4802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.045000 audit: BPF prog-id=223 op=LOAD Jul 15 11:38:35.045000 audit[4802]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000304f38 items=0 ppid=4396 pid=4802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:35.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662643662313736663365643538306535613638323937346264356462 Jul 15 11:38:35.059468 env[1204]: time="2025-07-15T11:38:35.059428890Z" level=info msg="StartContainer for \"fbd6b176f3ed580e5a682974bd5db14cd2d875ff55c2d57eb70f52709b7a48df\" returns successfully" Jul 15 11:38:35.499851 env[1204]: time="2025-07-15T11:38:35.499800429Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:35.501462 env[1204]: time="2025-07-15T11:38:35.501429508Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:35.502968 env[1204]: time="2025-07-15T11:38:35.502899978Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:35.504354 env[1204]: time="2025-07-15T11:38:35.504321456Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:35.504726 env[1204]: time="2025-07-15T11:38:35.504692032Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 15 11:38:35.505669 env[1204]: time="2025-07-15T11:38:35.505625054Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 15 11:38:35.506695 env[1204]: time="2025-07-15T11:38:35.506657012Z" level=info msg="CreateContainer within sandbox \"a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:38:35.518113 env[1204]: time="2025-07-15T11:38:35.518082950Z" level=info msg="CreateContainer within sandbox \"a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"baad1a2cbe6850de81d5640dd393ccb5e1522976a5191f7e49c17866e046291f\"" Jul 15 11:38:35.518439 env[1204]: time="2025-07-15T11:38:35.518411227Z" level=info msg="StartContainer for \"baad1a2cbe6850de81d5640dd393ccb5e1522976a5191f7e49c17866e046291f\"" Jul 15 11:38:35.532077 systemd[1]: Started cri-containerd-baad1a2cbe6850de81d5640dd393ccb5e1522976a5191f7e49c17866e046291f.scope. Jul 15 11:38:35.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.544000 audit: BPF prog-id=224 op=LOAD Jul 15 11:38:35.544000 audit[4838]: AVC avc: denied { bpf } for pid=4838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.544000 audit[4838]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4473 pid=4838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:35.544000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261616431613263626536383530646538316435363430646433393363 Jul 15 11:38:35.544000 audit[4838]: AVC avc: denied { perfmon } for pid=4838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.544000 audit[4838]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4473 pid=4838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:35.544000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261616431613263626536383530646538316435363430646433393363 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { bpf } for pid=4838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { bpf } for pid=4838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { bpf } for pid=4838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { perfmon } for pid=4838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { perfmon } for pid=4838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { perfmon } for pid=4838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { perfmon } for pid=4838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { perfmon } for pid=4838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { bpf } for pid=4838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { bpf } for pid=4838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit: BPF prog-id=225 op=LOAD Jul 15 11:38:35.545000 audit[4838]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000232b50 items=0 ppid=4473 pid=4838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:35.545000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261616431613263626536383530646538316435363430646433393363 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { bpf } for pid=4838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { bpf } for pid=4838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { perfmon } for pid=4838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { perfmon } for pid=4838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { perfmon } for pid=4838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { perfmon } for pid=4838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { perfmon } for pid=4838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { bpf } for pid=4838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { bpf } for pid=4838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit: BPF prog-id=226 op=LOAD Jul 15 11:38:35.545000 audit[4838]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000232b98 items=0 ppid=4473 pid=4838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:35.545000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261616431613263626536383530646538316435363430646433393363 Jul 15 11:38:35.545000 audit: BPF prog-id=226 op=UNLOAD Jul 15 11:38:35.545000 audit: BPF prog-id=225 op=UNLOAD Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { bpf } for pid=4838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { bpf } for pid=4838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { bpf } for pid=4838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { perfmon } for pid=4838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { perfmon } for pid=4838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { perfmon } for pid=4838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { perfmon } for pid=4838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { perfmon } for pid=4838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { bpf } for pid=4838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit[4838]: AVC avc: denied { bpf } for pid=4838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:35.545000 audit: BPF prog-id=227 op=LOAD Jul 15 11:38:35.545000 audit[4838]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000232fa8 items=0 ppid=4473 pid=4838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:35.545000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261616431613263626536383530646538316435363430646433393363 Jul 15 11:38:35.570004 env[1204]: time="2025-07-15T11:38:35.569943805Z" level=info msg="StartContainer for \"baad1a2cbe6850de81d5640dd393ccb5e1522976a5191f7e49c17866e046291f\" returns successfully" Jul 15 11:38:35.910462 kubelet[1929]: I0715 11:38:35.910404 1929 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-6545649b6d-762v4" podStartSLOduration=30.736915932 podStartE2EDuration="40.910389621s" podCreationTimestamp="2025-07-15 11:37:55 +0000 UTC" firstStartedPulling="2025-07-15 11:38:25.331975685 +0000 UTC m=+42.672957813" lastFinishedPulling="2025-07-15 11:38:35.505449374 +0000 UTC m=+52.846431502" observedRunningTime="2025-07-15 11:38:35.909808361 +0000 UTC m=+53.250790489" watchObservedRunningTime="2025-07-15 11:38:35.910389621 +0000 UTC m=+53.251371749" Jul 15 11:38:35.921000 audit[4871]: NETFILTER_CFG table=filter:126 family=2 entries=8 op=nft_register_rule pid=4871 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:35.924158 kernel: kauditd_printk_skb: 179 callbacks suppressed Jul 15 11:38:35.924290 kernel: audit: type=1325 audit(1752579515.921:1493): table=filter:126 family=2 entries=8 op=nft_register_rule pid=4871 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:35.921000 audit[4871]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fffcc37e590 a2=0 a3=7fffcc37e57c items=0 ppid=2039 pid=4871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:35.932012 kernel: audit: type=1300 audit(1752579515.921:1493): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fffcc37e590 a2=0 a3=7fffcc37e57c items=0 ppid=2039 pid=4871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:35.932054 kernel: audit: type=1327 audit(1752579515.921:1493): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:35.921000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:35.935000 audit[4871]: NETFILTER_CFG table=nat:127 family=2 entries=34 op=nft_register_rule pid=4871 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:35.945554 kernel: audit: type=1325 audit(1752579515.935:1494): table=nat:127 family=2 entries=34 op=nft_register_rule pid=4871 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:35.945636 kernel: audit: type=1300 audit(1752579515.935:1494): arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7fffcc37e590 a2=0 a3=7fffcc37e57c items=0 ppid=2039 pid=4871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:35.935000 audit[4871]: SYSCALL arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7fffcc37e590 a2=0 a3=7fffcc37e57c items=0 ppid=2039 pid=4871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:35.935000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:35.952960 kernel: audit: type=1327 audit(1752579515.935:1494): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:36.888000 audit[4848]: AVC avc: denied { watch } for pid=4848 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_38_07.1562965273/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c764 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c220,c764 tclass=file permissive=0 Jul 15 11:38:36.900831 kernel: audit: type=1400 audit(1752579516.888:1495): avc: denied { watch } for pid=4848 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_38_07.1562965273/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c764 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c220,c764 tclass=file permissive=0 Jul 15 11:38:36.900891 kernel: audit: type=1300 audit(1752579516.888:1495): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0007374a0 a2=fc6 a3=0 items=0 ppid=4473 pid=4848 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c764 key=(null) Jul 15 11:38:36.888000 audit[4848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0007374a0 a2=fc6 a3=0 items=0 ppid=4473 pid=4848 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c764 key=(null) Jul 15 11:38:36.888000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:38:36.906966 kernel: audit: type=1327 audit(1752579516.888:1495): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:38:36.928000 audit[4874]: NETFILTER_CFG table=filter:128 family=2 entries=8 op=nft_register_rule pid=4874 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:36.932944 kernel: audit: type=1325 audit(1752579516.928:1496): table=filter:128 family=2 entries=8 op=nft_register_rule pid=4874 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:36.928000 audit[4874]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc029d4de0 a2=0 a3=7ffc029d4dcc items=0 ppid=2039 pid=4874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:36.928000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:36.937000 audit[4874]: NETFILTER_CFG table=nat:129 family=2 entries=38 op=nft_register_chain pid=4874 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:36.937000 audit[4874]: SYSCALL arch=c000003e syscall=46 success=yes exit=12772 a0=3 a1=7ffc029d4de0 a2=0 a3=7ffc029d4dcc items=0 ppid=2039 pid=4874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:36.937000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:37.110070 systemd[1]: Started sshd@13-10.0.0.140:22-10.0.0.1:53196.service. Jul 15 11:38:37.109000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.140:22-10.0.0.1:53196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:37.168000 audit[4876]: USER_ACCT pid=4876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:37.171080 sshd[4876]: Accepted publickey for core from 10.0.0.1 port 53196 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:38:37.170000 audit[4876]: CRED_ACQ pid=4876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:37.170000 audit[4876]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffff7975a0 a2=3 a3=0 items=0 ppid=1 pid=4876 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:37.170000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:38:37.171551 sshd[4876]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:38:37.175354 systemd-logind[1189]: New session 14 of user core. Jul 15 11:38:37.176025 systemd[1]: Started session-14.scope. Jul 15 11:38:37.179000 audit[4876]: USER_START pid=4876 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:37.180000 audit[4878]: CRED_ACQ pid=4878 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:37.420164 env[1204]: time="2025-07-15T11:38:37.420058831Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:37.422575 env[1204]: time="2025-07-15T11:38:37.422536281Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:37.424473 env[1204]: time="2025-07-15T11:38:37.424447609Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:37.426047 env[1204]: time="2025-07-15T11:38:37.425977550Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:38:37.426326 env[1204]: time="2025-07-15T11:38:37.426301157Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866\"" Jul 15 11:38:37.428642 env[1204]: time="2025-07-15T11:38:37.428382565Z" level=info msg="CreateContainer within sandbox \"8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 15 11:38:37.432873 sshd[4876]: pam_unix(sshd:session): session closed for user core Jul 15 11:38:37.432000 audit[4876]: USER_END pid=4876 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:37.432000 audit[4876]: CRED_DISP pid=4876 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:37.439000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.140:22-10.0.0.1:53196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:37.440172 systemd[1]: sshd@13-10.0.0.140:22-10.0.0.1:53196.service: Deactivated successfully. Jul 15 11:38:37.440753 systemd[1]: session-14.scope: Deactivated successfully. Jul 15 11:38:37.441938 systemd-logind[1189]: Session 14 logged out. Waiting for processes to exit. Jul 15 11:38:37.442781 systemd-logind[1189]: Removed session 14. Jul 15 11:38:37.444132 env[1204]: time="2025-07-15T11:38:37.444098714Z" level=info msg="CreateContainer within sandbox \"8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"80029bfbd7d7b78788fd409d341c74a4f79c2d00032db62f72a3ecc7d41f67b4\"" Jul 15 11:38:37.444585 env[1204]: time="2025-07-15T11:38:37.444553827Z" level=info msg="StartContainer for \"80029bfbd7d7b78788fd409d341c74a4f79c2d00032db62f72a3ecc7d41f67b4\"" Jul 15 11:38:37.463336 systemd[1]: run-containerd-runc-k8s.io-80029bfbd7d7b78788fd409d341c74a4f79c2d00032db62f72a3ecc7d41f67b4-runc.MxyLdr.mount: Deactivated successfully. Jul 15 11:38:37.466098 systemd[1]: Started cri-containerd-80029bfbd7d7b78788fd409d341c74a4f79c2d00032db62f72a3ecc7d41f67b4.scope. Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f550611fbd8 items=0 ppid=4396 pid=4902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:37.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830303239626662643764376237383738386664343039643334316337 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit: BPF prog-id=228 op=LOAD Jul 15 11:38:37.476000 audit[4902]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0000a0d58 items=0 ppid=4396 pid=4902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:37.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830303239626662643764376237383738386664343039643334316337 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit: BPF prog-id=229 op=LOAD Jul 15 11:38:37.476000 audit[4902]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0000a0da8 items=0 ppid=4396 pid=4902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:37.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830303239626662643764376237383738386664343039643334316337 Jul 15 11:38:37.476000 audit: BPF prog-id=229 op=UNLOAD Jul 15 11:38:37.476000 audit: BPF prog-id=228 op=UNLOAD Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:38:37.476000 audit: BPF prog-id=230 op=LOAD Jul 15 11:38:37.476000 audit[4902]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0000a0e38 items=0 ppid=4396 pid=4902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:37.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830303239626662643764376237383738386664343039643334316337 Jul 15 11:38:37.488856 env[1204]: time="2025-07-15T11:38:37.488810536Z" level=info msg="StartContainer for \"80029bfbd7d7b78788fd409d341c74a4f79c2d00032db62f72a3ecc7d41f67b4\" returns successfully" Jul 15 11:38:37.818039 kubelet[1929]: I0715 11:38:37.817947 1929 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 15 11:38:37.818039 kubelet[1929]: I0715 11:38:37.817992 1929 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 15 11:38:39.615000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7309 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:39.615000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:39.615000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002ec9050 a2=fc6 a3=0 items=0 ppid=1662 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 key=(null) Jul 15 11:38:39.615000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002f24ac0 a2=fc6 a3=0 items=0 ppid=1662 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 key=(null) Jul 15 11:38:39.615000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:38:39.615000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:38:39.796000 audit[1770]: AVC avc: denied { watch } for pid=1770 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:39.796000 audit[1770]: AVC avc: denied { watch } for pid=1770 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:39.796000 audit[1770]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=85 a1=c00b173be0 a2=fc6 a3=0 items=0 ppid=1633 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 key=(null) Jul 15 11:38:39.796000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:38:39.796000 audit[1770]: AVC avc: denied { watch } for pid=1770 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7305 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:39.796000 audit[1770]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c009e0ebd0 a2=fc6 a3=0 items=0 ppid=1633 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 key=(null) Jul 15 11:38:39.796000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:38:39.796000 audit[1770]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=88 a1=c009d64270 a2=fc6 a3=0 items=0 ppid=1633 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 key=(null) Jul 15 11:38:39.796000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:38:39.799000 audit[1770]: AVC avc: denied { watch } for pid=1770 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:39.799000 audit[1770]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c00a1eb280 a2=fc6 a3=0 items=0 ppid=1633 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 key=(null) Jul 15 11:38:39.799000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:38:39.800000 audit[1770]: AVC avc: denied { watch } for pid=1770 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7309 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:39.800000 audit[1770]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c006ed1f20 a2=fc6 a3=0 items=0 ppid=1633 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 key=(null) Jul 15 11:38:39.800000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:38:39.806000 audit[1770]: AVC avc: denied { watch } for pid=1770 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7309 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:39.806000 audit[1770]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c009d642d0 a2=fc6 a3=0 items=0 ppid=1633 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c954 key=(null) Jul 15 11:38:39.806000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:38:42.437244 systemd[1]: Started sshd@14-10.0.0.140:22-10.0.0.1:38168.service. Jul 15 11:38:42.436000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.140:22-10.0.0.1:38168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:42.438319 kernel: kauditd_printk_skb: 83 callbacks suppressed Jul 15 11:38:42.438380 kernel: audit: type=1130 audit(1752579522.436:1521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.140:22-10.0.0.1:38168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:42.477000 audit[4934]: USER_ACCT pid=4934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:42.478382 sshd[4934]: Accepted publickey for core from 10.0.0.1 port 38168 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:38:42.480047 sshd[4934]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:38:42.478000 audit[4934]: CRED_ACQ pid=4934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:42.483606 systemd-logind[1189]: New session 15 of user core. Jul 15 11:38:42.484347 systemd[1]: Started session-15.scope. Jul 15 11:38:42.485465 kernel: audit: type=1101 audit(1752579522.477:1522): pid=4934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:42.485518 kernel: audit: type=1103 audit(1752579522.478:1523): pid=4934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:42.485539 kernel: audit: type=1006 audit(1752579522.478:1524): pid=4934 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 15 11:38:42.487635 kernel: audit: type=1300 audit(1752579522.478:1524): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff48237ea0 a2=3 a3=0 items=0 ppid=1 pid=4934 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:42.478000 audit[4934]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff48237ea0 a2=3 a3=0 items=0 ppid=1 pid=4934 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:42.478000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:38:42.492984 kernel: audit: type=1327 audit(1752579522.478:1524): proctitle=737368643A20636F7265205B707269765D Jul 15 11:38:42.623899 kernel: audit: type=1105 audit(1752579522.486:1525): pid=4934 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:42.624017 kernel: audit: type=1103 audit(1752579522.488:1526): pid=4936 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:42.486000 audit[4934]: USER_START pid=4934 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:42.488000 audit[4936]: CRED_ACQ pid=4936 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:42.710846 sshd[4934]: pam_unix(sshd:session): session closed for user core Jul 15 11:38:42.710000 audit[4934]: USER_END pid=4934 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:42.713521 systemd-logind[1189]: Session 15 logged out. Waiting for processes to exit. Jul 15 11:38:42.713720 systemd[1]: sshd@14-10.0.0.140:22-10.0.0.1:38168.service: Deactivated successfully. Jul 15 11:38:42.714356 systemd[1]: session-15.scope: Deactivated successfully. Jul 15 11:38:42.715081 systemd-logind[1189]: Removed session 15. Jul 15 11:38:42.711000 audit[4934]: CRED_DISP pid=4934 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:42.719730 kernel: audit: type=1106 audit(1752579522.710:1527): pid=4934 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:42.719822 kernel: audit: type=1104 audit(1752579522.711:1528): pid=4934 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:42.712000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.140:22-10.0.0.1:38168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:42.724535 env[1204]: time="2025-07-15T11:38:42.724492344Z" level=info msg="StopPodSandbox for \"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc\"" Jul 15 11:38:42.806195 env[1204]: 2025-07-15 11:38:42.771 [WARNING][4956] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0", GenerateName:"calico-kube-controllers-8684d87554-", Namespace:"calico-system", SelfLink:"", UID:"766b4edb-b94c-4b2e-965c-aa06b41ea419", ResourceVersion:"1144", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"8684d87554", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6", Pod:"calico-kube-controllers-8684d87554-mv9qj", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calia356b8fd264", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:42.806195 env[1204]: 2025-07-15 11:38:42.772 [INFO][4956] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" Jul 15 11:38:42.806195 env[1204]: 2025-07-15 11:38:42.772 [INFO][4956] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" iface="eth0" netns="" Jul 15 11:38:42.806195 env[1204]: 2025-07-15 11:38:42.772 [INFO][4956] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" Jul 15 11:38:42.806195 env[1204]: 2025-07-15 11:38:42.772 [INFO][4956] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" Jul 15 11:38:42.806195 env[1204]: 2025-07-15 11:38:42.793 [INFO][4967] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" HandleID="k8s-pod-network.aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" Workload="localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0" Jul 15 11:38:42.806195 env[1204]: 2025-07-15 11:38:42.794 [INFO][4967] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:42.806195 env[1204]: 2025-07-15 11:38:42.794 [INFO][4967] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:42.806195 env[1204]: 2025-07-15 11:38:42.800 [WARNING][4967] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" HandleID="k8s-pod-network.aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" Workload="localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0" Jul 15 11:38:42.806195 env[1204]: 2025-07-15 11:38:42.800 [INFO][4967] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" HandleID="k8s-pod-network.aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" Workload="localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0" Jul 15 11:38:42.806195 env[1204]: 2025-07-15 11:38:42.801 [INFO][4967] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:42.806195 env[1204]: 2025-07-15 11:38:42.803 [INFO][4956] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" Jul 15 11:38:42.806667 env[1204]: time="2025-07-15T11:38:42.806192978Z" level=info msg="TearDown network for sandbox \"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc\" successfully" Jul 15 11:38:42.806667 env[1204]: time="2025-07-15T11:38:42.806225910Z" level=info msg="StopPodSandbox for \"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc\" returns successfully" Jul 15 11:38:42.806721 env[1204]: time="2025-07-15T11:38:42.806690622Z" level=info msg="RemovePodSandbox for \"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc\"" Jul 15 11:38:42.806760 env[1204]: time="2025-07-15T11:38:42.806720097Z" level=info msg="Forcibly stopping sandbox \"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc\"" Jul 15 11:38:42.862837 env[1204]: 2025-07-15 11:38:42.835 [WARNING][4986] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0", GenerateName:"calico-kube-controllers-8684d87554-", Namespace:"calico-system", SelfLink:"", UID:"766b4edb-b94c-4b2e-965c-aa06b41ea419", ResourceVersion:"1144", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"8684d87554", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"13daee9d54331b96312f58ff0aeebc097087c747222c79f77d3bce2ed0ebffd6", Pod:"calico-kube-controllers-8684d87554-mv9qj", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calia356b8fd264", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:42.862837 env[1204]: 2025-07-15 11:38:42.835 [INFO][4986] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" Jul 15 11:38:42.862837 env[1204]: 2025-07-15 11:38:42.835 [INFO][4986] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" iface="eth0" netns="" Jul 15 11:38:42.862837 env[1204]: 2025-07-15 11:38:42.835 [INFO][4986] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" Jul 15 11:38:42.862837 env[1204]: 2025-07-15 11:38:42.835 [INFO][4986] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" Jul 15 11:38:42.862837 env[1204]: 2025-07-15 11:38:42.852 [INFO][4995] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" HandleID="k8s-pod-network.aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" Workload="localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0" Jul 15 11:38:42.862837 env[1204]: 2025-07-15 11:38:42.852 [INFO][4995] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:42.862837 env[1204]: 2025-07-15 11:38:42.852 [INFO][4995] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:42.862837 env[1204]: 2025-07-15 11:38:42.857 [WARNING][4995] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" HandleID="k8s-pod-network.aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" Workload="localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0" Jul 15 11:38:42.862837 env[1204]: 2025-07-15 11:38:42.857 [INFO][4995] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" HandleID="k8s-pod-network.aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" Workload="localhost-k8s-calico--kube--controllers--8684d87554--mv9qj-eth0" Jul 15 11:38:42.862837 env[1204]: 2025-07-15 11:38:42.858 [INFO][4995] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:42.862837 env[1204]: 2025-07-15 11:38:42.860 [INFO][4986] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc" Jul 15 11:38:42.863322 env[1204]: time="2025-07-15T11:38:42.862863125Z" level=info msg="TearDown network for sandbox \"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc\" successfully" Jul 15 11:38:42.876144 env[1204]: time="2025-07-15T11:38:42.876102338Z" level=info msg="RemovePodSandbox \"aaefbe7a8b78b34de50f85b094a5e152ce34fdbc91bb6dcd831361608f7bbecc\" returns successfully" Jul 15 11:38:42.876709 env[1204]: time="2025-07-15T11:38:42.876657008Z" level=info msg="StopPodSandbox for \"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62\"" Jul 15 11:38:42.934816 env[1204]: 2025-07-15 11:38:42.905 [WARNING][5012] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0", GenerateName:"calico-apiserver-6545649b6d-", Namespace:"calico-apiserver", SelfLink:"", UID:"22fd715b-454b-448c-8a9b-02017486be43", ResourceVersion:"1103", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6545649b6d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb", Pod:"calico-apiserver-6545649b6d-v7pdw", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali0c941481e09", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:42.934816 env[1204]: 2025-07-15 11:38:42.905 [INFO][5012] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" Jul 15 11:38:42.934816 env[1204]: 2025-07-15 11:38:42.905 [INFO][5012] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" iface="eth0" netns="" Jul 15 11:38:42.934816 env[1204]: 2025-07-15 11:38:42.905 [INFO][5012] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" Jul 15 11:38:42.934816 env[1204]: 2025-07-15 11:38:42.905 [INFO][5012] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" Jul 15 11:38:42.934816 env[1204]: 2025-07-15 11:38:42.924 [INFO][5021] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" HandleID="k8s-pod-network.992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" Workload="localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0" Jul 15 11:38:42.934816 env[1204]: 2025-07-15 11:38:42.924 [INFO][5021] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:42.934816 env[1204]: 2025-07-15 11:38:42.924 [INFO][5021] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:42.934816 env[1204]: 2025-07-15 11:38:42.928 [WARNING][5021] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" HandleID="k8s-pod-network.992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" Workload="localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0" Jul 15 11:38:42.934816 env[1204]: 2025-07-15 11:38:42.928 [INFO][5021] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" HandleID="k8s-pod-network.992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" Workload="localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0" Jul 15 11:38:42.934816 env[1204]: 2025-07-15 11:38:42.929 [INFO][5021] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:42.934816 env[1204]: 2025-07-15 11:38:42.932 [INFO][5012] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" Jul 15 11:38:42.935608 env[1204]: time="2025-07-15T11:38:42.934842128Z" level=info msg="TearDown network for sandbox \"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62\" successfully" Jul 15 11:38:42.935608 env[1204]: time="2025-07-15T11:38:42.934875160Z" level=info msg="StopPodSandbox for \"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62\" returns successfully" Jul 15 11:38:42.935608 env[1204]: time="2025-07-15T11:38:42.935325645Z" level=info msg="RemovePodSandbox for \"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62\"" Jul 15 11:38:42.935608 env[1204]: time="2025-07-15T11:38:42.935362525Z" level=info msg="Forcibly stopping sandbox \"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62\"" Jul 15 11:38:42.995144 env[1204]: 2025-07-15 11:38:42.963 [WARNING][5039] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0", GenerateName:"calico-apiserver-6545649b6d-", Namespace:"calico-apiserver", SelfLink:"", UID:"22fd715b-454b-448c-8a9b-02017486be43", ResourceVersion:"1103", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6545649b6d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"06080f7b928fd6f48dc0595443866ba58c2fce5fc739b822205b1c650400b3eb", Pod:"calico-apiserver-6545649b6d-v7pdw", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali0c941481e09", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:42.995144 env[1204]: 2025-07-15 11:38:42.963 [INFO][5039] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" Jul 15 11:38:42.995144 env[1204]: 2025-07-15 11:38:42.963 [INFO][5039] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" iface="eth0" netns="" Jul 15 11:38:42.995144 env[1204]: 2025-07-15 11:38:42.963 [INFO][5039] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" Jul 15 11:38:42.995144 env[1204]: 2025-07-15 11:38:42.963 [INFO][5039] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" Jul 15 11:38:42.995144 env[1204]: 2025-07-15 11:38:42.982 [INFO][5047] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" HandleID="k8s-pod-network.992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" Workload="localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0" Jul 15 11:38:42.995144 env[1204]: 2025-07-15 11:38:42.982 [INFO][5047] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:42.995144 env[1204]: 2025-07-15 11:38:42.982 [INFO][5047] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:42.995144 env[1204]: 2025-07-15 11:38:42.987 [WARNING][5047] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" HandleID="k8s-pod-network.992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" Workload="localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0" Jul 15 11:38:42.995144 env[1204]: 2025-07-15 11:38:42.987 [INFO][5047] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" HandleID="k8s-pod-network.992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" Workload="localhost-k8s-calico--apiserver--6545649b6d--v7pdw-eth0" Jul 15 11:38:42.995144 env[1204]: 2025-07-15 11:38:42.988 [INFO][5047] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:42.995144 env[1204]: 2025-07-15 11:38:42.991 [INFO][5039] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62" Jul 15 11:38:42.995144 env[1204]: time="2025-07-15T11:38:42.993875199Z" level=info msg="TearDown network for sandbox \"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62\" successfully" Jul 15 11:38:42.997465 env[1204]: time="2025-07-15T11:38:42.997412267Z" level=info msg="RemovePodSandbox \"992aeb42259e340841a50697a82d00641e6163baf4ab473d66243f682dc42a62\" returns successfully" Jul 15 11:38:42.997893 env[1204]: time="2025-07-15T11:38:42.997856169Z" level=info msg="StopPodSandbox for \"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1\"" Jul 15 11:38:43.052653 env[1204]: 2025-07-15 11:38:43.025 [WARNING][5066] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--gc5v5-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ff487f86-aaa8-4b99-8f59-bc40829e41d4", ResourceVersion:"1177", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f", Pod:"csi-node-driver-gc5v5", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calie6c5c1f554a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:43.052653 env[1204]: 2025-07-15 11:38:43.025 [INFO][5066] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" Jul 15 11:38:43.052653 env[1204]: 2025-07-15 11:38:43.025 [INFO][5066] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" iface="eth0" netns="" Jul 15 11:38:43.052653 env[1204]: 2025-07-15 11:38:43.025 [INFO][5066] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" Jul 15 11:38:43.052653 env[1204]: 2025-07-15 11:38:43.025 [INFO][5066] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" Jul 15 11:38:43.052653 env[1204]: 2025-07-15 11:38:43.042 [INFO][5074] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" HandleID="k8s-pod-network.181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" Workload="localhost-k8s-csi--node--driver--gc5v5-eth0" Jul 15 11:38:43.052653 env[1204]: 2025-07-15 11:38:43.042 [INFO][5074] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:43.052653 env[1204]: 2025-07-15 11:38:43.042 [INFO][5074] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:43.052653 env[1204]: 2025-07-15 11:38:43.047 [WARNING][5074] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" HandleID="k8s-pod-network.181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" Workload="localhost-k8s-csi--node--driver--gc5v5-eth0" Jul 15 11:38:43.052653 env[1204]: 2025-07-15 11:38:43.047 [INFO][5074] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" HandleID="k8s-pod-network.181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" Workload="localhost-k8s-csi--node--driver--gc5v5-eth0" Jul 15 11:38:43.052653 env[1204]: 2025-07-15 11:38:43.049 [INFO][5074] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:43.052653 env[1204]: 2025-07-15 11:38:43.050 [INFO][5066] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" Jul 15 11:38:43.053122 env[1204]: time="2025-07-15T11:38:43.052675740Z" level=info msg="TearDown network for sandbox \"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1\" successfully" Jul 15 11:38:43.053122 env[1204]: time="2025-07-15T11:38:43.052706447Z" level=info msg="StopPodSandbox for \"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1\" returns successfully" Jul 15 11:38:43.053248 env[1204]: time="2025-07-15T11:38:43.053208629Z" level=info msg="RemovePodSandbox for \"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1\"" Jul 15 11:38:43.053280 env[1204]: time="2025-07-15T11:38:43.053247722Z" level=info msg="Forcibly stopping sandbox \"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1\"" Jul 15 11:38:43.109348 env[1204]: 2025-07-15 11:38:43.082 [WARNING][5093] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--gc5v5-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ff487f86-aaa8-4b99-8f59-bc40829e41d4", ResourceVersion:"1177", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8930e63575eab4c970b097b2c0863d3bbf8793efaf5a2548e647517cd0b7496f", Pod:"csi-node-driver-gc5v5", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calie6c5c1f554a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:43.109348 env[1204]: 2025-07-15 11:38:43.082 [INFO][5093] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" Jul 15 11:38:43.109348 env[1204]: 2025-07-15 11:38:43.082 [INFO][5093] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" iface="eth0" netns="" Jul 15 11:38:43.109348 env[1204]: 2025-07-15 11:38:43.082 [INFO][5093] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" Jul 15 11:38:43.109348 env[1204]: 2025-07-15 11:38:43.082 [INFO][5093] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" Jul 15 11:38:43.109348 env[1204]: 2025-07-15 11:38:43.099 [INFO][5102] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" HandleID="k8s-pod-network.181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" Workload="localhost-k8s-csi--node--driver--gc5v5-eth0" Jul 15 11:38:43.109348 env[1204]: 2025-07-15 11:38:43.099 [INFO][5102] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:43.109348 env[1204]: 2025-07-15 11:38:43.099 [INFO][5102] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:43.109348 env[1204]: 2025-07-15 11:38:43.104 [WARNING][5102] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" HandleID="k8s-pod-network.181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" Workload="localhost-k8s-csi--node--driver--gc5v5-eth0" Jul 15 11:38:43.109348 env[1204]: 2025-07-15 11:38:43.104 [INFO][5102] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" HandleID="k8s-pod-network.181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" Workload="localhost-k8s-csi--node--driver--gc5v5-eth0" Jul 15 11:38:43.109348 env[1204]: 2025-07-15 11:38:43.105 [INFO][5102] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:43.109348 env[1204]: 2025-07-15 11:38:43.107 [INFO][5093] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1" Jul 15 11:38:43.109810 env[1204]: time="2025-07-15T11:38:43.109377400Z" level=info msg="TearDown network for sandbox \"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1\" successfully" Jul 15 11:38:43.114483 env[1204]: time="2025-07-15T11:38:43.114451932Z" level=info msg="RemovePodSandbox \"181eb7b3f1a9fc47ed85c51dbda0abfad3fb4d7b580fc9271d4045dc4933a4c1\" returns successfully" Jul 15 11:38:43.114945 env[1204]: time="2025-07-15T11:38:43.114890886Z" level=info msg="StopPodSandbox for \"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7\"" Jul 15 11:38:43.175901 env[1204]: 2025-07-15 11:38:43.145 [WARNING][5121] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"b64cb176-d65e-4c7f-a8b1-32a16d63b52f", ResourceVersion:"1031", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94", Pod:"coredns-7c65d6cfc9-4jctz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali44603ed6eb5", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:43.175901 env[1204]: 2025-07-15 11:38:43.145 [INFO][5121] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" Jul 15 11:38:43.175901 env[1204]: 2025-07-15 11:38:43.145 [INFO][5121] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" iface="eth0" netns="" Jul 15 11:38:43.175901 env[1204]: 2025-07-15 11:38:43.145 [INFO][5121] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" Jul 15 11:38:43.175901 env[1204]: 2025-07-15 11:38:43.145 [INFO][5121] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" Jul 15 11:38:43.175901 env[1204]: 2025-07-15 11:38:43.163 [INFO][5130] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" HandleID="k8s-pod-network.e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" Workload="localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0" Jul 15 11:38:43.175901 env[1204]: 2025-07-15 11:38:43.163 [INFO][5130] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:43.175901 env[1204]: 2025-07-15 11:38:43.163 [INFO][5130] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:43.175901 env[1204]: 2025-07-15 11:38:43.171 [WARNING][5130] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" HandleID="k8s-pod-network.e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" Workload="localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0" Jul 15 11:38:43.175901 env[1204]: 2025-07-15 11:38:43.171 [INFO][5130] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" HandleID="k8s-pod-network.e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" Workload="localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0" Jul 15 11:38:43.175901 env[1204]: 2025-07-15 11:38:43.172 [INFO][5130] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:43.175901 env[1204]: 2025-07-15 11:38:43.174 [INFO][5121] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" Jul 15 11:38:43.176397 env[1204]: time="2025-07-15T11:38:43.175949091Z" level=info msg="TearDown network for sandbox \"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7\" successfully" Jul 15 11:38:43.176397 env[1204]: time="2025-07-15T11:38:43.175979748Z" level=info msg="StopPodSandbox for \"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7\" returns successfully" Jul 15 11:38:43.176480 env[1204]: time="2025-07-15T11:38:43.176447266Z" level=info msg="RemovePodSandbox for \"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7\"" Jul 15 11:38:43.176802 env[1204]: time="2025-07-15T11:38:43.176485718Z" level=info msg="Forcibly stopping sandbox \"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7\"" Jul 15 11:38:43.238035 env[1204]: 2025-07-15 11:38:43.207 [WARNING][5148] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"b64cb176-d65e-4c7f-a8b1-32a16d63b52f", ResourceVersion:"1031", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c7254a563aa997a2da53533acf7d80e0a69b4183599c24ea8fa5cf297e604f94", Pod:"coredns-7c65d6cfc9-4jctz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali44603ed6eb5", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:43.238035 env[1204]: 2025-07-15 11:38:43.207 [INFO][5148] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" Jul 15 11:38:43.238035 env[1204]: 2025-07-15 11:38:43.207 [INFO][5148] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" iface="eth0" netns="" Jul 15 11:38:43.238035 env[1204]: 2025-07-15 11:38:43.207 [INFO][5148] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" Jul 15 11:38:43.238035 env[1204]: 2025-07-15 11:38:43.207 [INFO][5148] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" Jul 15 11:38:43.238035 env[1204]: 2025-07-15 11:38:43.225 [INFO][5156] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" HandleID="k8s-pod-network.e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" Workload="localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0" Jul 15 11:38:43.238035 env[1204]: 2025-07-15 11:38:43.225 [INFO][5156] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:43.238035 env[1204]: 2025-07-15 11:38:43.226 [INFO][5156] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:43.238035 env[1204]: 2025-07-15 11:38:43.232 [WARNING][5156] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" HandleID="k8s-pod-network.e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" Workload="localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0" Jul 15 11:38:43.238035 env[1204]: 2025-07-15 11:38:43.232 [INFO][5156] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" HandleID="k8s-pod-network.e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" Workload="localhost-k8s-coredns--7c65d6cfc9--4jctz-eth0" Jul 15 11:38:43.238035 env[1204]: 2025-07-15 11:38:43.234 [INFO][5156] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:43.238035 env[1204]: 2025-07-15 11:38:43.235 [INFO][5148] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7" Jul 15 11:38:43.238535 env[1204]: time="2025-07-15T11:38:43.238055062Z" level=info msg="TearDown network for sandbox \"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7\" successfully" Jul 15 11:38:43.241831 env[1204]: time="2025-07-15T11:38:43.241753893Z" level=info msg="RemovePodSandbox \"e5b488ee832d989ec05c048a7d2b69a2717e0fbd2b4bb1ae7b326d760e8817d7\" returns successfully" Jul 15 11:38:43.243526 env[1204]: time="2025-07-15T11:38:43.243486624Z" level=info msg="StopPodSandbox for \"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab\"" Jul 15 11:38:43.309989 env[1204]: 2025-07-15 11:38:43.275 [WARNING][5173] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" WorkloadEndpoint="localhost-k8s-whisker--6d74f9b8bd--w6rps-eth0" Jul 15 11:38:43.309989 env[1204]: 2025-07-15 11:38:43.276 [INFO][5173] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" Jul 15 11:38:43.309989 env[1204]: 2025-07-15 11:38:43.276 [INFO][5173] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" iface="eth0" netns="" Jul 15 11:38:43.309989 env[1204]: 2025-07-15 11:38:43.276 [INFO][5173] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" Jul 15 11:38:43.309989 env[1204]: 2025-07-15 11:38:43.276 [INFO][5173] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" Jul 15 11:38:43.309989 env[1204]: 2025-07-15 11:38:43.296 [INFO][5182] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" HandleID="k8s-pod-network.d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" Workload="localhost-k8s-whisker--6d74f9b8bd--w6rps-eth0" Jul 15 11:38:43.309989 env[1204]: 2025-07-15 11:38:43.297 [INFO][5182] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:43.309989 env[1204]: 2025-07-15 11:38:43.297 [INFO][5182] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:43.309989 env[1204]: 2025-07-15 11:38:43.302 [WARNING][5182] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" HandleID="k8s-pod-network.d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" Workload="localhost-k8s-whisker--6d74f9b8bd--w6rps-eth0" Jul 15 11:38:43.309989 env[1204]: 2025-07-15 11:38:43.302 [INFO][5182] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" HandleID="k8s-pod-network.d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" Workload="localhost-k8s-whisker--6d74f9b8bd--w6rps-eth0" Jul 15 11:38:43.309989 env[1204]: 2025-07-15 11:38:43.304 [INFO][5182] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:43.309989 env[1204]: 2025-07-15 11:38:43.306 [INFO][5173] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" Jul 15 11:38:43.309989 env[1204]: time="2025-07-15T11:38:43.308618654Z" level=info msg="TearDown network for sandbox \"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab\" successfully" Jul 15 11:38:43.309989 env[1204]: time="2025-07-15T11:38:43.308648730Z" level=info msg="StopPodSandbox for \"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab\" returns successfully" Jul 15 11:38:43.309989 env[1204]: time="2025-07-15T11:38:43.309403567Z" level=info msg="RemovePodSandbox for \"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab\"" Jul 15 11:38:43.309989 env[1204]: time="2025-07-15T11:38:43.309448240Z" level=info msg="Forcibly stopping sandbox \"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab\"" Jul 15 11:38:43.368743 env[1204]: 2025-07-15 11:38:43.339 [WARNING][5199] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" WorkloadEndpoint="localhost-k8s-whisker--6d74f9b8bd--w6rps-eth0" Jul 15 11:38:43.368743 env[1204]: 2025-07-15 11:38:43.339 [INFO][5199] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" Jul 15 11:38:43.368743 env[1204]: 2025-07-15 11:38:43.339 [INFO][5199] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" iface="eth0" netns="" Jul 15 11:38:43.368743 env[1204]: 2025-07-15 11:38:43.340 [INFO][5199] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" Jul 15 11:38:43.368743 env[1204]: 2025-07-15 11:38:43.340 [INFO][5199] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" Jul 15 11:38:43.368743 env[1204]: 2025-07-15 11:38:43.357 [INFO][5208] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" HandleID="k8s-pod-network.d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" Workload="localhost-k8s-whisker--6d74f9b8bd--w6rps-eth0" Jul 15 11:38:43.368743 env[1204]: 2025-07-15 11:38:43.357 [INFO][5208] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:43.368743 env[1204]: 2025-07-15 11:38:43.357 [INFO][5208] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:43.368743 env[1204]: 2025-07-15 11:38:43.364 [WARNING][5208] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" HandleID="k8s-pod-network.d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" Workload="localhost-k8s-whisker--6d74f9b8bd--w6rps-eth0" Jul 15 11:38:43.368743 env[1204]: 2025-07-15 11:38:43.364 [INFO][5208] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" HandleID="k8s-pod-network.d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" Workload="localhost-k8s-whisker--6d74f9b8bd--w6rps-eth0" Jul 15 11:38:43.368743 env[1204]: 2025-07-15 11:38:43.365 [INFO][5208] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:43.368743 env[1204]: 2025-07-15 11:38:43.366 [INFO][5199] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab" Jul 15 11:38:43.369157 env[1204]: time="2025-07-15T11:38:43.368766050Z" level=info msg="TearDown network for sandbox \"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab\" successfully" Jul 15 11:38:43.372236 env[1204]: time="2025-07-15T11:38:43.372197668Z" level=info msg="RemovePodSandbox \"d6e08c0142ea1d6bb4ac858a61d2585d7c711e96eabb42b5144f8f7e9ed4b0ab\" returns successfully" Jul 15 11:38:43.372809 env[1204]: time="2025-07-15T11:38:43.372749404Z" level=info msg="StopPodSandbox for \"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2\"" Jul 15 11:38:43.428677 env[1204]: 2025-07-15 11:38:43.401 [WARNING][5226] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0", GenerateName:"calico-apiserver-6545649b6d-", Namespace:"calico-apiserver", SelfLink:"", UID:"4554d1d6-2aa2-4df3-ac40-87d7e031da9f", ResourceVersion:"1166", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6545649b6d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00", Pod:"calico-apiserver-6545649b6d-762v4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali851dd344749", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:43.428677 env[1204]: 2025-07-15 11:38:43.401 [INFO][5226] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" Jul 15 11:38:43.428677 env[1204]: 2025-07-15 11:38:43.402 [INFO][5226] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" iface="eth0" netns="" Jul 15 11:38:43.428677 env[1204]: 2025-07-15 11:38:43.402 [INFO][5226] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" Jul 15 11:38:43.428677 env[1204]: 2025-07-15 11:38:43.402 [INFO][5226] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" Jul 15 11:38:43.428677 env[1204]: 2025-07-15 11:38:43.419 [INFO][5235] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" HandleID="k8s-pod-network.4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" Workload="localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0" Jul 15 11:38:43.428677 env[1204]: 2025-07-15 11:38:43.419 [INFO][5235] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:43.428677 env[1204]: 2025-07-15 11:38:43.419 [INFO][5235] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:43.428677 env[1204]: 2025-07-15 11:38:43.423 [WARNING][5235] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" HandleID="k8s-pod-network.4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" Workload="localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0" Jul 15 11:38:43.428677 env[1204]: 2025-07-15 11:38:43.423 [INFO][5235] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" HandleID="k8s-pod-network.4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" Workload="localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0" Jul 15 11:38:43.428677 env[1204]: 2025-07-15 11:38:43.425 [INFO][5235] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:43.428677 env[1204]: 2025-07-15 11:38:43.426 [INFO][5226] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" Jul 15 11:38:43.429467 env[1204]: time="2025-07-15T11:38:43.428702471Z" level=info msg="TearDown network for sandbox \"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2\" successfully" Jul 15 11:38:43.429467 env[1204]: time="2025-07-15T11:38:43.428733579Z" level=info msg="StopPodSandbox for \"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2\" returns successfully" Jul 15 11:38:43.429467 env[1204]: time="2025-07-15T11:38:43.429270076Z" level=info msg="RemovePodSandbox for \"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2\"" Jul 15 11:38:43.429467 env[1204]: time="2025-07-15T11:38:43.429310181Z" level=info msg="Forcibly stopping sandbox \"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2\"" Jul 15 11:38:43.491309 env[1204]: 2025-07-15 11:38:43.458 [WARNING][5254] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0", GenerateName:"calico-apiserver-6545649b6d-", Namespace:"calico-apiserver", SelfLink:"", UID:"4554d1d6-2aa2-4df3-ac40-87d7e031da9f", ResourceVersion:"1166", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6545649b6d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a9e381811d6c99c8d3cf5d68a59b51754621859c4da60e37c9ec86a5d822ab00", Pod:"calico-apiserver-6545649b6d-762v4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali851dd344749", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:43.491309 env[1204]: 2025-07-15 11:38:43.458 [INFO][5254] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" Jul 15 11:38:43.491309 env[1204]: 2025-07-15 11:38:43.458 [INFO][5254] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" iface="eth0" netns="" Jul 15 11:38:43.491309 env[1204]: 2025-07-15 11:38:43.458 [INFO][5254] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" Jul 15 11:38:43.491309 env[1204]: 2025-07-15 11:38:43.458 [INFO][5254] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" Jul 15 11:38:43.491309 env[1204]: 2025-07-15 11:38:43.479 [INFO][5263] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" HandleID="k8s-pod-network.4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" Workload="localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0" Jul 15 11:38:43.491309 env[1204]: 2025-07-15 11:38:43.480 [INFO][5263] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:43.491309 env[1204]: 2025-07-15 11:38:43.480 [INFO][5263] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:43.491309 env[1204]: 2025-07-15 11:38:43.486 [WARNING][5263] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" HandleID="k8s-pod-network.4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" Workload="localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0" Jul 15 11:38:43.491309 env[1204]: 2025-07-15 11:38:43.486 [INFO][5263] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" HandleID="k8s-pod-network.4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" Workload="localhost-k8s-calico--apiserver--6545649b6d--762v4-eth0" Jul 15 11:38:43.491309 env[1204]: 2025-07-15 11:38:43.487 [INFO][5263] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:43.491309 env[1204]: 2025-07-15 11:38:43.489 [INFO][5254] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2" Jul 15 11:38:43.491861 env[1204]: time="2025-07-15T11:38:43.491318730Z" level=info msg="TearDown network for sandbox \"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2\" successfully" Jul 15 11:38:44.083147 env[1204]: time="2025-07-15T11:38:44.083087268Z" level=info msg="RemovePodSandbox \"4f212d9a71f98c591952aa3ab96d03bae87520b8a824089e280cf1971e7b9eb2\" returns successfully" Jul 15 11:38:44.083608 env[1204]: time="2025-07-15T11:38:44.083477821Z" level=info msg="StopPodSandbox for \"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8\"" Jul 15 11:38:44.155911 kubelet[1929]: I0715 11:38:44.155842 1929 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-gc5v5" podStartSLOduration=33.600981251 podStartE2EDuration="46.155823879s" podCreationTimestamp="2025-07-15 11:37:58 +0000 UTC" firstStartedPulling="2025-07-15 11:38:24.872234606 +0000 UTC m=+42.213216724" lastFinishedPulling="2025-07-15 11:38:37.427077224 +0000 UTC m=+54.768059352" observedRunningTime="2025-07-15 11:38:37.910683927 +0000 UTC m=+55.251666055" watchObservedRunningTime="2025-07-15 11:38:44.155823879 +0000 UTC m=+61.496806027" Jul 15 11:38:44.185135 env[1204]: 2025-07-15 11:38:44.156 [WARNING][5304] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--5bptq-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"2da410fc-f5e4-4d6a-8712-6df0d9f82617", ResourceVersion:"1122", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11", Pod:"goldmane-58fd7646b9-5bptq", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali17578459fa2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:44.185135 env[1204]: 2025-07-15 11:38:44.156 [INFO][5304] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" Jul 15 11:38:44.185135 env[1204]: 2025-07-15 11:38:44.156 [INFO][5304] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" iface="eth0" netns="" Jul 15 11:38:44.185135 env[1204]: 2025-07-15 11:38:44.156 [INFO][5304] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" Jul 15 11:38:44.185135 env[1204]: 2025-07-15 11:38:44.156 [INFO][5304] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" Jul 15 11:38:44.185135 env[1204]: 2025-07-15 11:38:44.174 [INFO][5312] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" HandleID="k8s-pod-network.9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" Workload="localhost-k8s-goldmane--58fd7646b9--5bptq-eth0" Jul 15 11:38:44.185135 env[1204]: 2025-07-15 11:38:44.174 [INFO][5312] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:44.185135 env[1204]: 2025-07-15 11:38:44.174 [INFO][5312] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:44.185135 env[1204]: 2025-07-15 11:38:44.180 [WARNING][5312] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" HandleID="k8s-pod-network.9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" Workload="localhost-k8s-goldmane--58fd7646b9--5bptq-eth0" Jul 15 11:38:44.185135 env[1204]: 2025-07-15 11:38:44.180 [INFO][5312] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" HandleID="k8s-pod-network.9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" Workload="localhost-k8s-goldmane--58fd7646b9--5bptq-eth0" Jul 15 11:38:44.185135 env[1204]: 2025-07-15 11:38:44.181 [INFO][5312] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:44.185135 env[1204]: 2025-07-15 11:38:44.183 [INFO][5304] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" Jul 15 11:38:44.185642 env[1204]: time="2025-07-15T11:38:44.185154221Z" level=info msg="TearDown network for sandbox \"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8\" successfully" Jul 15 11:38:44.185642 env[1204]: time="2025-07-15T11:38:44.185187122Z" level=info msg="StopPodSandbox for \"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8\" returns successfully" Jul 15 11:38:44.185692 env[1204]: time="2025-07-15T11:38:44.185648358Z" level=info msg="RemovePodSandbox for \"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8\"" Jul 15 11:38:44.185718 env[1204]: time="2025-07-15T11:38:44.185683093Z" level=info msg="Forcibly stopping sandbox \"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8\"" Jul 15 11:38:44.247180 env[1204]: 2025-07-15 11:38:44.215 [WARNING][5330] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--5bptq-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"2da410fc-f5e4-4d6a-8712-6df0d9f82617", ResourceVersion:"1122", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9e3a36dd7dba75fc835707c1feee68395cba652dda2155d1a9f10d6ed6279f11", Pod:"goldmane-58fd7646b9-5bptq", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali17578459fa2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:44.247180 env[1204]: 2025-07-15 11:38:44.215 [INFO][5330] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" Jul 15 11:38:44.247180 env[1204]: 2025-07-15 11:38:44.215 [INFO][5330] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" iface="eth0" netns="" Jul 15 11:38:44.247180 env[1204]: 2025-07-15 11:38:44.215 [INFO][5330] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" Jul 15 11:38:44.247180 env[1204]: 2025-07-15 11:38:44.215 [INFO][5330] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" Jul 15 11:38:44.247180 env[1204]: 2025-07-15 11:38:44.236 [INFO][5339] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" HandleID="k8s-pod-network.9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" Workload="localhost-k8s-goldmane--58fd7646b9--5bptq-eth0" Jul 15 11:38:44.247180 env[1204]: 2025-07-15 11:38:44.237 [INFO][5339] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:44.247180 env[1204]: 2025-07-15 11:38:44.237 [INFO][5339] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:44.247180 env[1204]: 2025-07-15 11:38:44.242 [WARNING][5339] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" HandleID="k8s-pod-network.9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" Workload="localhost-k8s-goldmane--58fd7646b9--5bptq-eth0" Jul 15 11:38:44.247180 env[1204]: 2025-07-15 11:38:44.242 [INFO][5339] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" HandleID="k8s-pod-network.9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" Workload="localhost-k8s-goldmane--58fd7646b9--5bptq-eth0" Jul 15 11:38:44.247180 env[1204]: 2025-07-15 11:38:44.243 [INFO][5339] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:44.247180 env[1204]: 2025-07-15 11:38:44.245 [INFO][5330] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8" Jul 15 11:38:44.247636 env[1204]: time="2025-07-15T11:38:44.247209733Z" level=info msg="TearDown network for sandbox \"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8\" successfully" Jul 15 11:38:44.250542 env[1204]: time="2025-07-15T11:38:44.250484697Z" level=info msg="RemovePodSandbox \"9e9d5cc74fb84084a9fc597f5c322a5cdbade7e89ea71f0bed072f6d4fd0f1a8\" returns successfully" Jul 15 11:38:44.251015 env[1204]: time="2025-07-15T11:38:44.250988783Z" level=info msg="StopPodSandbox for \"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c\"" Jul 15 11:38:44.311524 env[1204]: 2025-07-15 11:38:44.279 [WARNING][5356] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"e041bcfa-663d-4cfb-a0a7-0ab3e7909d02", ResourceVersion:"975", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a", Pod:"coredns-7c65d6cfc9-m5mx9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1afce1fa520", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:44.311524 env[1204]: 2025-07-15 11:38:44.280 [INFO][5356] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" Jul 15 11:38:44.311524 env[1204]: 2025-07-15 11:38:44.280 [INFO][5356] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" iface="eth0" netns="" Jul 15 11:38:44.311524 env[1204]: 2025-07-15 11:38:44.280 [INFO][5356] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" Jul 15 11:38:44.311524 env[1204]: 2025-07-15 11:38:44.280 [INFO][5356] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" Jul 15 11:38:44.311524 env[1204]: 2025-07-15 11:38:44.301 [INFO][5365] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" HandleID="k8s-pod-network.e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" Workload="localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0" Jul 15 11:38:44.311524 env[1204]: 2025-07-15 11:38:44.301 [INFO][5365] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:44.311524 env[1204]: 2025-07-15 11:38:44.301 [INFO][5365] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:44.311524 env[1204]: 2025-07-15 11:38:44.306 [WARNING][5365] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" HandleID="k8s-pod-network.e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" Workload="localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0" Jul 15 11:38:44.311524 env[1204]: 2025-07-15 11:38:44.306 [INFO][5365] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" HandleID="k8s-pod-network.e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" Workload="localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0" Jul 15 11:38:44.311524 env[1204]: 2025-07-15 11:38:44.307 [INFO][5365] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:44.311524 env[1204]: 2025-07-15 11:38:44.309 [INFO][5356] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" Jul 15 11:38:44.312272 env[1204]: time="2025-07-15T11:38:44.311534281Z" level=info msg="TearDown network for sandbox \"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c\" successfully" Jul 15 11:38:44.312272 env[1204]: time="2025-07-15T11:38:44.311564408Z" level=info msg="StopPodSandbox for \"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c\" returns successfully" Jul 15 11:38:44.312272 env[1204]: time="2025-07-15T11:38:44.312090505Z" level=info msg="RemovePodSandbox for \"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c\"" Jul 15 11:38:44.312272 env[1204]: time="2025-07-15T11:38:44.312130009Z" level=info msg="Forcibly stopping sandbox \"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c\"" Jul 15 11:38:44.367453 env[1204]: 2025-07-15 11:38:44.340 [WARNING][5382] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"e041bcfa-663d-4cfb-a0a7-0ab3e7909d02", ResourceVersion:"975", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 37, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"32e7f8e4ae176066106696159ed2e5476695f0108054e63949eaafbfb978c88a", Pod:"coredns-7c65d6cfc9-m5mx9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1afce1fa520", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:38:44.367453 env[1204]: 2025-07-15 11:38:44.340 [INFO][5382] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" Jul 15 11:38:44.367453 env[1204]: 2025-07-15 11:38:44.340 [INFO][5382] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" iface="eth0" netns="" Jul 15 11:38:44.367453 env[1204]: 2025-07-15 11:38:44.340 [INFO][5382] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" Jul 15 11:38:44.367453 env[1204]: 2025-07-15 11:38:44.340 [INFO][5382] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" Jul 15 11:38:44.367453 env[1204]: 2025-07-15 11:38:44.356 [INFO][5391] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" HandleID="k8s-pod-network.e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" Workload="localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0" Jul 15 11:38:44.367453 env[1204]: 2025-07-15 11:38:44.356 [INFO][5391] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:38:44.367453 env[1204]: 2025-07-15 11:38:44.356 [INFO][5391] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:38:44.367453 env[1204]: 2025-07-15 11:38:44.362 [WARNING][5391] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" HandleID="k8s-pod-network.e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" Workload="localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0" Jul 15 11:38:44.367453 env[1204]: 2025-07-15 11:38:44.362 [INFO][5391] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" HandleID="k8s-pod-network.e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" Workload="localhost-k8s-coredns--7c65d6cfc9--m5mx9-eth0" Jul 15 11:38:44.367453 env[1204]: 2025-07-15 11:38:44.364 [INFO][5391] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:38:44.367453 env[1204]: 2025-07-15 11:38:44.365 [INFO][5382] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c" Jul 15 11:38:44.367453 env[1204]: time="2025-07-15T11:38:44.367415949Z" level=info msg="TearDown network for sandbox \"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c\" successfully" Jul 15 11:38:44.370868 env[1204]: time="2025-07-15T11:38:44.370843490Z" level=info msg="RemovePodSandbox \"e4da5e91d157bd518ab266af56aa21050b7d0184d066f59b9283973ec34b132c\" returns successfully" Jul 15 11:38:44.874000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:44.874000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002fdf1a0 a2=fc6 a3=0 items=0 ppid=1662 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 key=(null) Jul 15 11:38:44.874000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:38:44.874000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:44.874000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002ec16a0 a2=fc6 a3=0 items=0 ppid=1662 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 key=(null) Jul 15 11:38:44.874000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:38:44.874000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:44.874000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002ec16c0 a2=fc6 a3=0 items=0 ppid=1662 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 key=(null) Jul 15 11:38:44.874000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:38:44.875000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:44.875000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002fdf1c0 a2=fc6 a3=0 items=0 ppid=1662 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c547 key=(null) Jul 15 11:38:44.875000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:38:47.715621 systemd[1]: Started sshd@15-10.0.0.140:22-10.0.0.1:38184.service. Jul 15 11:38:47.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.140:22-10.0.0.1:38184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:47.717005 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 15 11:38:47.717062 kernel: audit: type=1130 audit(1752579527.714:1534): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.140:22-10.0.0.1:38184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:47.754000 audit[5403]: USER_ACCT pid=5403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:47.756196 sshd[5403]: Accepted publickey for core from 10.0.0.1 port 38184 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:38:47.758611 sshd[5403]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:38:47.757000 audit[5403]: CRED_ACQ pid=5403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:47.762470 systemd-logind[1189]: New session 16 of user core. Jul 15 11:38:47.763708 kernel: audit: type=1101 audit(1752579527.754:1535): pid=5403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:47.763750 kernel: audit: type=1103 audit(1752579527.757:1536): pid=5403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:47.763771 kernel: audit: type=1006 audit(1752579527.757:1537): pid=5403 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 15 11:38:47.763161 systemd[1]: Started session-16.scope. Jul 15 11:38:47.757000 audit[5403]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6e06cd00 a2=3 a3=0 items=0 ppid=1 pid=5403 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:47.769542 kernel: audit: type=1300 audit(1752579527.757:1537): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6e06cd00 a2=3 a3=0 items=0 ppid=1 pid=5403 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:47.769599 kernel: audit: type=1327 audit(1752579527.757:1537): proctitle=737368643A20636F7265205B707269765D Jul 15 11:38:47.757000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:38:47.770805 kernel: audit: type=1105 audit(1752579527.766:1538): pid=5403 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:47.766000 audit[5403]: USER_START pid=5403 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:47.774903 kernel: audit: type=1103 audit(1752579527.767:1539): pid=5405 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:47.767000 audit[5405]: CRED_ACQ pid=5405 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:47.926375 sshd[5403]: pam_unix(sshd:session): session closed for user core Jul 15 11:38:47.926000 audit[5403]: USER_END pid=5403 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:47.929618 systemd[1]: sshd@15-10.0.0.140:22-10.0.0.1:38184.service: Deactivated successfully. Jul 15 11:38:47.930178 systemd[1]: session-16.scope: Deactivated successfully. Jul 15 11:38:47.931067 systemd-logind[1189]: Session 16 logged out. Waiting for processes to exit. Jul 15 11:38:47.926000 audit[5403]: CRED_DISP pid=5403 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:47.932454 systemd[1]: Started sshd@16-10.0.0.140:22-10.0.0.1:38196.service. Jul 15 11:38:47.933190 systemd-logind[1189]: Removed session 16. Jul 15 11:38:47.935218 kernel: audit: type=1106 audit(1752579527.926:1540): pid=5403 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:47.935410 kernel: audit: type=1104 audit(1752579527.926:1541): pid=5403 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:47.928000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.140:22-10.0.0.1:38184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:47.931000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.140:22-10.0.0.1:38196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:47.966000 audit[5416]: USER_ACCT pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:47.967362 sshd[5416]: Accepted publickey for core from 10.0.0.1 port 38196 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:38:47.967000 audit[5416]: CRED_ACQ pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:47.967000 audit[5416]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd6e3bbf80 a2=3 a3=0 items=0 ppid=1 pid=5416 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:47.967000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:38:47.968444 sshd[5416]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:38:47.972201 systemd-logind[1189]: New session 17 of user core. Jul 15 11:38:47.972998 systemd[1]: Started session-17.scope. Jul 15 11:38:47.977000 audit[5416]: USER_START pid=5416 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:47.978000 audit[5418]: CRED_ACQ pid=5418 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:48.154900 sshd[5416]: pam_unix(sshd:session): session closed for user core Jul 15 11:38:48.155000 audit[5416]: USER_END pid=5416 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:48.155000 audit[5416]: CRED_DISP pid=5416 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:48.158091 systemd[1]: sshd@16-10.0.0.140:22-10.0.0.1:38196.service: Deactivated successfully. Jul 15 11:38:48.157000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.140:22-10.0.0.1:38196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:48.158623 systemd[1]: session-17.scope: Deactivated successfully. Jul 15 11:38:48.159376 systemd-logind[1189]: Session 17 logged out. Waiting for processes to exit. Jul 15 11:38:48.160481 systemd[1]: Started sshd@17-10.0.0.140:22-10.0.0.1:38204.service. Jul 15 11:38:48.159000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.140:22-10.0.0.1:38204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:48.161375 systemd-logind[1189]: Removed session 17. Jul 15 11:38:48.196000 audit[5428]: USER_ACCT pid=5428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:48.197313 sshd[5428]: Accepted publickey for core from 10.0.0.1 port 38204 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:38:48.197000 audit[5428]: CRED_ACQ pid=5428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:48.197000 audit[5428]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd2b346100 a2=3 a3=0 items=0 ppid=1 pid=5428 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:48.197000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:38:48.198391 sshd[5428]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:38:48.201601 systemd-logind[1189]: New session 18 of user core. Jul 15 11:38:48.202373 systemd[1]: Started session-18.scope. Jul 15 11:38:48.205000 audit[5428]: USER_START pid=5428 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:48.206000 audit[5430]: CRED_ACQ pid=5430 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:49.654000 audit[5447]: NETFILTER_CFG table=filter:130 family=2 entries=20 op=nft_register_rule pid=5447 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:49.654000 audit[5447]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffe144dfe00 a2=0 a3=7ffe144dfdec items=0 ppid=2039 pid=5447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:49.654000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:49.661000 audit[5447]: NETFILTER_CFG table=nat:131 family=2 entries=26 op=nft_register_rule pid=5447 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:49.661000 audit[5447]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffe144dfe00 a2=0 a3=0 items=0 ppid=2039 pid=5447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:49.661000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:49.662945 sshd[5428]: pam_unix(sshd:session): session closed for user core Jul 15 11:38:49.663000 audit[5428]: USER_END pid=5428 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:49.663000 audit[5428]: CRED_DISP pid=5428 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:49.666327 systemd[1]: Started sshd@18-10.0.0.140:22-10.0.0.1:38208.service. Jul 15 11:38:49.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.140:22-10.0.0.1:38208 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:49.666000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.140:22-10.0.0.1:38204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:49.666774 systemd[1]: sshd@17-10.0.0.140:22-10.0.0.1:38204.service: Deactivated successfully. Jul 15 11:38:49.668021 systemd[1]: session-18.scope: Deactivated successfully. Jul 15 11:38:49.668810 systemd-logind[1189]: Session 18 logged out. Waiting for processes to exit. Jul 15 11:38:49.669756 systemd-logind[1189]: Removed session 18. Jul 15 11:38:49.678000 audit[5452]: NETFILTER_CFG table=filter:132 family=2 entries=32 op=nft_register_rule pid=5452 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:49.678000 audit[5452]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffc8f19f8a0 a2=0 a3=7ffc8f19f88c items=0 ppid=2039 pid=5452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:49.678000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:49.682000 audit[5452]: NETFILTER_CFG table=nat:133 family=2 entries=26 op=nft_register_rule pid=5452 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:49.682000 audit[5452]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffc8f19f8a0 a2=0 a3=0 items=0 ppid=2039 pid=5452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:49.682000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:49.704000 audit[5449]: USER_ACCT pid=5449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:49.705905 sshd[5449]: Accepted publickey for core from 10.0.0.1 port 38208 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:38:49.705000 audit[5449]: CRED_ACQ pid=5449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:49.705000 audit[5449]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffcdb00bc0 a2=3 a3=0 items=0 ppid=1 pid=5449 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:49.705000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:38:49.706949 sshd[5449]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:38:49.710469 systemd-logind[1189]: New session 19 of user core. Jul 15 11:38:49.711223 systemd[1]: Started session-19.scope. Jul 15 11:38:49.714000 audit[5449]: USER_START pid=5449 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:49.715000 audit[5454]: CRED_ACQ pid=5454 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:50.097960 sshd[5449]: pam_unix(sshd:session): session closed for user core Jul 15 11:38:50.098000 audit[5449]: USER_END pid=5449 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:50.098000 audit[5449]: CRED_DISP pid=5449 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:50.100000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.140:22-10.0.0.1:38208 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:50.101160 systemd[1]: sshd@18-10.0.0.140:22-10.0.0.1:38208.service: Deactivated successfully. Jul 15 11:38:50.101686 systemd[1]: session-19.scope: Deactivated successfully. Jul 15 11:38:50.103445 systemd[1]: Started sshd@19-10.0.0.140:22-10.0.0.1:49164.service. Jul 15 11:38:50.103731 systemd-logind[1189]: Session 19 logged out. Waiting for processes to exit. Jul 15 11:38:50.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.140:22-10.0.0.1:49164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:50.105229 systemd-logind[1189]: Removed session 19. Jul 15 11:38:50.137000 audit[5464]: USER_ACCT pid=5464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:50.139115 sshd[5464]: Accepted publickey for core from 10.0.0.1 port 49164 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:38:50.138000 audit[5464]: CRED_ACQ pid=5464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:50.138000 audit[5464]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec0bff850 a2=3 a3=0 items=0 ppid=1 pid=5464 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:50.138000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:38:50.140129 sshd[5464]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:38:50.143334 systemd-logind[1189]: New session 20 of user core. Jul 15 11:38:50.144100 systemd[1]: Started session-20.scope. Jul 15 11:38:50.148000 audit[5464]: USER_START pid=5464 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:50.149000 audit[5466]: CRED_ACQ pid=5466 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:50.268133 sshd[5464]: pam_unix(sshd:session): session closed for user core Jul 15 11:38:50.268000 audit[5464]: USER_END pid=5464 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:50.268000 audit[5464]: CRED_DISP pid=5464 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:50.270483 systemd[1]: sshd@19-10.0.0.140:22-10.0.0.1:49164.service: Deactivated successfully. Jul 15 11:38:50.269000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.140:22-10.0.0.1:49164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:50.271409 systemd[1]: session-20.scope: Deactivated successfully. Jul 15 11:38:50.272078 systemd-logind[1189]: Session 20 logged out. Waiting for processes to exit. Jul 15 11:38:50.272805 systemd-logind[1189]: Removed session 20. Jul 15 11:38:55.271000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.140:22-10.0.0.1:49180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:55.272622 systemd[1]: Started sshd@20-10.0.0.140:22-10.0.0.1:49180.service. Jul 15 11:38:55.273670 kernel: kauditd_printk_skb: 57 callbacks suppressed Jul 15 11:38:55.273716 kernel: audit: type=1130 audit(1752579535.271:1583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.140:22-10.0.0.1:49180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:55.309000 audit[5479]: USER_ACCT pid=5479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:55.310595 sshd[5479]: Accepted publickey for core from 10.0.0.1 port 49180 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:38:55.312412 sshd[5479]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:38:55.311000 audit[5479]: CRED_ACQ pid=5479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:55.315691 systemd-logind[1189]: New session 21 of user core. Jul 15 11:38:55.316400 systemd[1]: Started session-21.scope. Jul 15 11:38:55.318235 kernel: audit: type=1101 audit(1752579535.309:1584): pid=5479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:55.318304 kernel: audit: type=1103 audit(1752579535.311:1585): pid=5479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:55.318329 kernel: audit: type=1006 audit(1752579535.311:1586): pid=5479 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Jul 15 11:38:55.320692 kernel: audit: type=1300 audit(1752579535.311:1586): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea5d60150 a2=3 a3=0 items=0 ppid=1 pid=5479 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:55.311000 audit[5479]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea5d60150 a2=3 a3=0 items=0 ppid=1 pid=5479 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:55.324945 kernel: audit: type=1327 audit(1752579535.311:1586): proctitle=737368643A20636F7265205B707269765D Jul 15 11:38:55.311000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:38:55.326313 kernel: audit: type=1105 audit(1752579535.319:1587): pid=5479 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:55.319000 audit[5479]: USER_START pid=5479 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:55.330765 kernel: audit: type=1103 audit(1752579535.320:1588): pid=5481 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:55.320000 audit[5481]: CRED_ACQ pid=5481 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:55.432285 sshd[5479]: pam_unix(sshd:session): session closed for user core Jul 15 11:38:55.432000 audit[5479]: USER_END pid=5479 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:55.434680 systemd[1]: sshd@20-10.0.0.140:22-10.0.0.1:49180.service: Deactivated successfully. Jul 15 11:38:55.435367 systemd[1]: session-21.scope: Deactivated successfully. Jul 15 11:38:55.432000 audit[5479]: CRED_DISP pid=5479 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:55.441389 systemd-logind[1189]: Session 21 logged out. Waiting for processes to exit. Jul 15 11:38:55.441847 kernel: audit: type=1106 audit(1752579535.432:1589): pid=5479 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:55.441908 kernel: audit: type=1104 audit(1752579535.432:1590): pid=5479 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:38:55.433000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.140:22-10.0.0.1:49180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:38:55.442180 systemd-logind[1189]: Removed session 21. Jul 15 11:38:56.303000 audit[5494]: NETFILTER_CFG table=filter:134 family=2 entries=20 op=nft_register_rule pid=5494 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:56.303000 audit[5494]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd2666b600 a2=0 a3=7ffd2666b5ec items=0 ppid=2039 pid=5494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:56.303000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:56.309000 audit[5494]: NETFILTER_CFG table=nat:135 family=2 entries=110 op=nft_register_chain pid=5494 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:56.309000 audit[5494]: SYSCALL arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffd2666b600 a2=0 a3=7ffd2666b5ec items=0 ppid=2039 pid=5494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:56.309000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:39:00.436899 systemd[1]: Started sshd@21-10.0.0.140:22-10.0.0.1:51196.service. Jul 15 11:39:00.435000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.140:22-10.0.0.1:51196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:39:00.437983 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 15 11:39:00.438099 kernel: audit: type=1130 audit(1752579540.435:1594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.140:22-10.0.0.1:51196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:39:00.473000 audit[5543]: USER_ACCT pid=5543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:00.475964 sshd[5543]: Accepted publickey for core from 10.0.0.1 port 51196 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:39:00.476998 sshd[5543]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:39:00.474000 audit[5543]: CRED_ACQ pid=5543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:00.480560 systemd-logind[1189]: New session 22 of user core. Jul 15 11:39:00.481325 systemd[1]: Started session-22.scope. Jul 15 11:39:00.483339 kernel: audit: type=1101 audit(1752579540.473:1595): pid=5543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:00.483383 kernel: audit: type=1103 audit(1752579540.474:1596): pid=5543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:00.485784 kernel: audit: type=1006 audit(1752579540.474:1597): pid=5543 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 15 11:39:00.485854 kernel: audit: type=1300 audit(1752579540.474:1597): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbf2e2490 a2=3 a3=0 items=0 ppid=1 pid=5543 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:39:00.474000 audit[5543]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbf2e2490 a2=3 a3=0 items=0 ppid=1 pid=5543 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:39:00.474000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:39:00.491284 kernel: audit: type=1327 audit(1752579540.474:1597): proctitle=737368643A20636F7265205B707269765D Jul 15 11:39:00.491324 kernel: audit: type=1105 audit(1752579540.483:1598): pid=5543 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:00.483000 audit[5543]: USER_START pid=5543 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:00.495499 kernel: audit: type=1103 audit(1752579540.484:1599): pid=5545 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:00.484000 audit[5545]: CRED_ACQ pid=5545 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:00.648717 sshd[5543]: pam_unix(sshd:session): session closed for user core Jul 15 11:39:00.647000 audit[5543]: USER_END pid=5543 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:00.651117 systemd[1]: sshd@21-10.0.0.140:22-10.0.0.1:51196.service: Deactivated successfully. Jul 15 11:39:00.651804 systemd[1]: session-22.scope: Deactivated successfully. Jul 15 11:39:00.652285 systemd-logind[1189]: Session 22 logged out. Waiting for processes to exit. Jul 15 11:39:00.653102 systemd-logind[1189]: Removed session 22. Jul 15 11:39:00.647000 audit[5543]: CRED_DISP pid=5543 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:00.657249 kernel: audit: type=1106 audit(1752579540.647:1600): pid=5543 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:00.657293 kernel: audit: type=1104 audit(1752579540.647:1601): pid=5543 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:00.649000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.140:22-10.0.0.1:51196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:39:01.744371 kubelet[1929]: E0715 11:39:01.744329 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:39:03.322221 systemd[1]: run-containerd-runc-k8s.io-7588a07003d9074b371566bce02e1c1a2d820f797009d676ccf9dcb20e9cd00a-runc.fLMihV.mount: Deactivated successfully. Jul 15 11:39:05.657233 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 15 11:39:05.657367 kernel: audit: type=1130 audit(1752579545.652:1603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.140:22-10.0.0.1:51208 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:39:05.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.140:22-10.0.0.1:51208 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:39:05.653669 systemd[1]: Started sshd@22-10.0.0.140:22-10.0.0.1:51208.service. Jul 15 11:39:05.692000 audit[5579]: USER_ACCT pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:05.693439 sshd[5579]: Accepted publickey for core from 10.0.0.1 port 51208 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:39:05.694886 sshd[5579]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:39:05.693000 audit[5579]: CRED_ACQ pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:05.700723 kernel: audit: type=1101 audit(1752579545.692:1604): pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:05.700782 kernel: audit: type=1103 audit(1752579545.693:1605): pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:05.700806 kernel: audit: type=1006 audit(1752579545.693:1606): pid=5579 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 15 11:39:05.700047 systemd-logind[1189]: New session 23 of user core. Jul 15 11:39:05.700455 systemd[1]: Started session-23.scope. Jul 15 11:39:05.693000 audit[5579]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2de86d80 a2=3 a3=0 items=0 ppid=1 pid=5579 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:39:05.706917 kernel: audit: type=1300 audit(1752579545.693:1606): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2de86d80 a2=3 a3=0 items=0 ppid=1 pid=5579 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:39:05.693000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:39:05.703000 audit[5579]: USER_START pid=5579 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:05.712362 kernel: audit: type=1327 audit(1752579545.693:1606): proctitle=737368643A20636F7265205B707269765D Jul 15 11:39:05.712559 kernel: audit: type=1105 audit(1752579545.703:1607): pid=5579 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:05.712598 kernel: audit: type=1103 audit(1752579545.705:1608): pid=5581 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:05.705000 audit[5581]: CRED_ACQ pid=5581 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:05.856052 sshd[5579]: pam_unix(sshd:session): session closed for user core Jul 15 11:39:05.856000 audit[5579]: USER_END pid=5579 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:05.858794 systemd[1]: sshd@22-10.0.0.140:22-10.0.0.1:51208.service: Deactivated successfully. Jul 15 11:39:05.859548 systemd[1]: session-23.scope: Deactivated successfully. Jul 15 11:39:05.860134 systemd-logind[1189]: Session 23 logged out. Waiting for processes to exit. Jul 15 11:39:05.860745 systemd-logind[1189]: Removed session 23. Jul 15 11:39:05.856000 audit[5579]: CRED_DISP pid=5579 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:05.864755 kernel: audit: type=1106 audit(1752579545.856:1609): pid=5579 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:05.864818 kernel: audit: type=1104 audit(1752579545.856:1610): pid=5579 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:05.856000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.140:22-10.0.0.1:51208 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:39:09.731217 kubelet[1929]: E0715 11:39:09.731168 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:39:10.861155 systemd[1]: Started sshd@23-10.0.0.140:22-10.0.0.1:57462.service. Jul 15 11:39:10.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.140:22-10.0.0.1:57462 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:39:10.862707 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 15 11:39:10.862747 kernel: audit: type=1130 audit(1752579550.860:1612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.140:22-10.0.0.1:57462 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:39:10.897000 audit[5592]: USER_ACCT pid=5592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:10.898895 sshd[5592]: Accepted publickey for core from 10.0.0.1 port 57462 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:39:10.899650 sshd[5592]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:39:10.898000 audit[5592]: CRED_ACQ pid=5592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:10.904337 systemd-logind[1189]: New session 24 of user core. Jul 15 11:39:10.904340 systemd[1]: Started session-24.scope. Jul 15 11:39:10.906152 kernel: audit: type=1101 audit(1752579550.897:1613): pid=5592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:10.906228 kernel: audit: type=1103 audit(1752579550.898:1614): pid=5592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:10.906246 kernel: audit: type=1006 audit(1752579550.898:1615): pid=5592 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 15 11:39:10.912137 kernel: audit: type=1300 audit(1752579550.898:1615): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2e2ca4b0 a2=3 a3=0 items=0 ppid=1 pid=5592 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:39:10.898000 audit[5592]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2e2ca4b0 a2=3 a3=0 items=0 ppid=1 pid=5592 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:39:10.898000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:39:10.913596 kernel: audit: type=1327 audit(1752579550.898:1615): proctitle=737368643A20636F7265205B707269765D Jul 15 11:39:10.913640 kernel: audit: type=1105 audit(1752579550.908:1616): pid=5592 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:10.908000 audit[5592]: USER_START pid=5592 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:10.917588 kernel: audit: type=1103 audit(1752579550.909:1617): pid=5594 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:10.909000 audit[5594]: CRED_ACQ pid=5594 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:11.068127 sshd[5592]: pam_unix(sshd:session): session closed for user core Jul 15 11:39:11.068000 audit[5592]: USER_END pid=5592 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:11.073967 kernel: audit: type=1106 audit(1752579551.068:1618): pid=5592 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:11.076000 audit[5592]: CRED_DISP pid=5592 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:11.080953 kernel: audit: type=1104 audit(1752579551.076:1619): pid=5592 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:39:11.082831 systemd[1]: sshd@23-10.0.0.140:22-10.0.0.1:57462.service: Deactivated successfully. Jul 15 11:39:11.082000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.140:22-10.0.0.1:57462 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:39:11.083982 systemd[1]: session-24.scope: Deactivated successfully. Jul 15 11:39:11.084570 systemd-logind[1189]: Session 24 logged out. Waiting for processes to exit. Jul 15 11:39:11.085751 systemd-logind[1189]: Removed session 24. Jul 15 11:39:12.736402 kubelet[1929]: E0715 11:39:12.736376 1929 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8"