Jul 15 11:26:03.834837 kernel: Linux version 5.15.188-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Tue Jul 15 10:04:37 -00 2025 Jul 15 11:26:03.834855 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:26:03.834863 kernel: BIOS-provided physical RAM map: Jul 15 11:26:03.834869 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Jul 15 11:26:03.834874 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Jul 15 11:26:03.834880 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Jul 15 11:26:03.834886 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000009cfdbfff] usable Jul 15 11:26:03.834892 kernel: BIOS-e820: [mem 0x000000009cfdc000-0x000000009cffffff] reserved Jul 15 11:26:03.834898 kernel: BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Jul 15 11:26:03.834904 kernel: BIOS-e820: [mem 0x00000000fed1c000-0x00000000fed1ffff] reserved Jul 15 11:26:03.834909 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Jul 15 11:26:03.834915 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Jul 15 11:26:03.834920 kernel: BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved Jul 15 11:26:03.834926 kernel: NX (Execute Disable) protection: active Jul 15 11:26:03.834934 kernel: SMBIOS 2.8 present. Jul 15 11:26:03.834940 kernel: DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Jul 15 11:26:03.834946 kernel: Hypervisor detected: KVM Jul 15 11:26:03.834952 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Jul 15 11:26:03.834958 kernel: kvm-clock: cpu 0, msr 6419b001, primary cpu clock Jul 15 11:26:03.834964 kernel: kvm-clock: using sched offset of 2399802801 cycles Jul 15 11:26:03.834970 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Jul 15 11:26:03.834977 kernel: tsc: Detected 2794.750 MHz processor Jul 15 11:26:03.834983 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 15 11:26:03.834991 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 15 11:26:03.835006 kernel: last_pfn = 0x9cfdc max_arch_pfn = 0x400000000 Jul 15 11:26:03.835013 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 15 11:26:03.835019 kernel: Using GB pages for direct mapping Jul 15 11:26:03.835025 kernel: ACPI: Early table checksum verification disabled Jul 15 11:26:03.835031 kernel: ACPI: RSDP 0x00000000000F59D0 000014 (v00 BOCHS ) Jul 15 11:26:03.835038 kernel: ACPI: RSDT 0x000000009CFE241A 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:26:03.835044 kernel: ACPI: FACP 0x000000009CFE21FA 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:26:03.835050 kernel: ACPI: DSDT 0x000000009CFE0040 0021BA (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:26:03.835057 kernel: ACPI: FACS 0x000000009CFE0000 000040 Jul 15 11:26:03.835063 kernel: ACPI: APIC 0x000000009CFE22EE 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:26:03.835069 kernel: ACPI: HPET 0x000000009CFE237E 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:26:03.835075 kernel: ACPI: MCFG 0x000000009CFE23B6 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:26:03.835081 kernel: ACPI: WAET 0x000000009CFE23F2 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:26:03.835087 kernel: ACPI: Reserving FACP table memory at [mem 0x9cfe21fa-0x9cfe22ed] Jul 15 11:26:03.835094 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cfe0040-0x9cfe21f9] Jul 15 11:26:03.835100 kernel: ACPI: Reserving FACS table memory at [mem 0x9cfe0000-0x9cfe003f] Jul 15 11:26:03.835109 kernel: ACPI: Reserving APIC table memory at [mem 0x9cfe22ee-0x9cfe237d] Jul 15 11:26:03.835116 kernel: ACPI: Reserving HPET table memory at [mem 0x9cfe237e-0x9cfe23b5] Jul 15 11:26:03.835122 kernel: ACPI: Reserving MCFG table memory at [mem 0x9cfe23b6-0x9cfe23f1] Jul 15 11:26:03.835129 kernel: ACPI: Reserving WAET table memory at [mem 0x9cfe23f2-0x9cfe2419] Jul 15 11:26:03.835135 kernel: No NUMA configuration found Jul 15 11:26:03.835142 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cfdbfff] Jul 15 11:26:03.835150 kernel: NODE_DATA(0) allocated [mem 0x9cfd6000-0x9cfdbfff] Jul 15 11:26:03.835156 kernel: Zone ranges: Jul 15 11:26:03.835163 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 15 11:26:03.835169 kernel: DMA32 [mem 0x0000000001000000-0x000000009cfdbfff] Jul 15 11:26:03.835175 kernel: Normal empty Jul 15 11:26:03.835182 kernel: Movable zone start for each node Jul 15 11:26:03.835188 kernel: Early memory node ranges Jul 15 11:26:03.835195 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Jul 15 11:26:03.835201 kernel: node 0: [mem 0x0000000000100000-0x000000009cfdbfff] Jul 15 11:26:03.835209 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cfdbfff] Jul 15 11:26:03.835215 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 15 11:26:03.835222 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Jul 15 11:26:03.835239 kernel: On node 0, zone DMA32: 12324 pages in unavailable ranges Jul 15 11:26:03.835246 kernel: ACPI: PM-Timer IO Port: 0x608 Jul 15 11:26:03.835252 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Jul 15 11:26:03.835259 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Jul 15 11:26:03.835265 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Jul 15 11:26:03.835272 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Jul 15 11:26:03.835278 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Jul 15 11:26:03.835286 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Jul 15 11:26:03.835292 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Jul 15 11:26:03.835299 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 15 11:26:03.835305 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Jul 15 11:26:03.835312 kernel: TSC deadline timer available Jul 15 11:26:03.835318 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Jul 15 11:26:03.835324 kernel: kvm-guest: KVM setup pv remote TLB flush Jul 15 11:26:03.835331 kernel: kvm-guest: setup PV sched yield Jul 15 11:26:03.835338 kernel: [mem 0xc0000000-0xfed1bfff] available for PCI devices Jul 15 11:26:03.835345 kernel: Booting paravirtualized kernel on KVM Jul 15 11:26:03.835352 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 15 11:26:03.835358 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Jul 15 11:26:03.835365 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u524288 Jul 15 11:26:03.835371 kernel: pcpu-alloc: s188696 r8192 d32488 u524288 alloc=1*2097152 Jul 15 11:26:03.835378 kernel: pcpu-alloc: [0] 0 1 2 3 Jul 15 11:26:03.835384 kernel: kvm-guest: setup async PF for cpu 0 Jul 15 11:26:03.835390 kernel: kvm-guest: stealtime: cpu 0, msr 9a41c0c0 Jul 15 11:26:03.835397 kernel: kvm-guest: PV spinlocks enabled Jul 15 11:26:03.835405 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Jul 15 11:26:03.835411 kernel: Built 1 zonelists, mobility grouping on. Total pages: 632732 Jul 15 11:26:03.835417 kernel: Policy zone: DMA32 Jul 15 11:26:03.835425 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:26:03.835432 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 15 11:26:03.835439 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 15 11:26:03.835445 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 15 11:26:03.835452 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 15 11:26:03.835460 kernel: Memory: 2436696K/2571752K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47476K init, 4104K bss, 134796K reserved, 0K cma-reserved) Jul 15 11:26:03.835467 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 15 11:26:03.835473 kernel: ftrace: allocating 34607 entries in 136 pages Jul 15 11:26:03.835480 kernel: ftrace: allocated 136 pages with 2 groups Jul 15 11:26:03.835486 kernel: rcu: Hierarchical RCU implementation. Jul 15 11:26:03.835493 kernel: rcu: RCU event tracing is enabled. Jul 15 11:26:03.835500 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 15 11:26:03.835506 kernel: Rude variant of Tasks RCU enabled. Jul 15 11:26:03.835513 kernel: Tracing variant of Tasks RCU enabled. Jul 15 11:26:03.835521 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 15 11:26:03.835527 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 15 11:26:03.835534 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Jul 15 11:26:03.835540 kernel: random: crng init done Jul 15 11:26:03.835546 kernel: Console: colour VGA+ 80x25 Jul 15 11:26:03.835553 kernel: printk: console [ttyS0] enabled Jul 15 11:26:03.835559 kernel: ACPI: Core revision 20210730 Jul 15 11:26:03.835566 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Jul 15 11:26:03.835572 kernel: APIC: Switch to symmetric I/O mode setup Jul 15 11:26:03.835580 kernel: x2apic enabled Jul 15 11:26:03.835586 kernel: Switched APIC routing to physical x2apic. Jul 15 11:26:03.835592 kernel: kvm-guest: setup PV IPIs Jul 15 11:26:03.835599 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jul 15 11:26:03.835605 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Jul 15 11:26:03.835612 kernel: Calibrating delay loop (skipped) preset value.. 5589.50 BogoMIPS (lpj=2794750) Jul 15 11:26:03.835619 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Jul 15 11:26:03.835625 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Jul 15 11:26:03.835632 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Jul 15 11:26:03.835644 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 15 11:26:03.835651 kernel: Spectre V2 : Mitigation: Retpolines Jul 15 11:26:03.835658 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Jul 15 11:26:03.835665 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Jul 15 11:26:03.835672 kernel: RETBleed: Mitigation: untrained return thunk Jul 15 11:26:03.835679 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jul 15 11:26:03.835686 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Jul 15 11:26:03.835693 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 15 11:26:03.835700 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 15 11:26:03.835708 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 15 11:26:03.835715 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 15 11:26:03.835722 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Jul 15 11:26:03.835729 kernel: Freeing SMP alternatives memory: 32K Jul 15 11:26:03.835736 kernel: pid_max: default: 32768 minimum: 301 Jul 15 11:26:03.835743 kernel: LSM: Security Framework initializing Jul 15 11:26:03.835750 kernel: SELinux: Initializing. Jul 15 11:26:03.835756 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 15 11:26:03.835765 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 15 11:26:03.835773 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Jul 15 11:26:03.835779 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Jul 15 11:26:03.835786 kernel: ... version: 0 Jul 15 11:26:03.835793 kernel: ... bit width: 48 Jul 15 11:26:03.835800 kernel: ... generic registers: 6 Jul 15 11:26:03.835807 kernel: ... value mask: 0000ffffffffffff Jul 15 11:26:03.835814 kernel: ... max period: 00007fffffffffff Jul 15 11:26:03.835820 kernel: ... fixed-purpose events: 0 Jul 15 11:26:03.835829 kernel: ... event mask: 000000000000003f Jul 15 11:26:03.835835 kernel: signal: max sigframe size: 1776 Jul 15 11:26:03.835842 kernel: rcu: Hierarchical SRCU implementation. Jul 15 11:26:03.835849 kernel: smp: Bringing up secondary CPUs ... Jul 15 11:26:03.835856 kernel: x86: Booting SMP configuration: Jul 15 11:26:03.835862 kernel: .... node #0, CPUs: #1 Jul 15 11:26:03.835869 kernel: kvm-clock: cpu 1, msr 6419b041, secondary cpu clock Jul 15 11:26:03.835876 kernel: kvm-guest: setup async PF for cpu 1 Jul 15 11:26:03.835883 kernel: kvm-guest: stealtime: cpu 1, msr 9a49c0c0 Jul 15 11:26:03.835891 kernel: #2 Jul 15 11:26:03.835898 kernel: kvm-clock: cpu 2, msr 6419b081, secondary cpu clock Jul 15 11:26:03.835905 kernel: kvm-guest: setup async PF for cpu 2 Jul 15 11:26:03.835911 kernel: kvm-guest: stealtime: cpu 2, msr 9a51c0c0 Jul 15 11:26:03.835918 kernel: #3 Jul 15 11:26:03.835925 kernel: kvm-clock: cpu 3, msr 6419b0c1, secondary cpu clock Jul 15 11:26:03.835932 kernel: kvm-guest: setup async PF for cpu 3 Jul 15 11:26:03.835939 kernel: kvm-guest: stealtime: cpu 3, msr 9a59c0c0 Jul 15 11:26:03.835946 kernel: smp: Brought up 1 node, 4 CPUs Jul 15 11:26:03.835954 kernel: smpboot: Max logical packages: 1 Jul 15 11:26:03.835960 kernel: smpboot: Total of 4 processors activated (22358.00 BogoMIPS) Jul 15 11:26:03.835967 kernel: devtmpfs: initialized Jul 15 11:26:03.835974 kernel: x86/mm: Memory block size: 128MB Jul 15 11:26:03.835981 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 15 11:26:03.835988 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 15 11:26:03.835995 kernel: pinctrl core: initialized pinctrl subsystem Jul 15 11:26:03.836009 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 15 11:26:03.836016 kernel: audit: initializing netlink subsys (disabled) Jul 15 11:26:03.836024 kernel: audit: type=2000 audit(1752578764.124:1): state=initialized audit_enabled=0 res=1 Jul 15 11:26:03.836030 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 15 11:26:03.836037 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 15 11:26:03.836045 kernel: cpuidle: using governor menu Jul 15 11:26:03.836051 kernel: ACPI: bus type PCI registered Jul 15 11:26:03.836058 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 15 11:26:03.836065 kernel: dca service started, version 1.12.1 Jul 15 11:26:03.836072 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xb0000000-0xbfffffff] (base 0xb0000000) Jul 15 11:26:03.836079 kernel: PCI: MMCONFIG at [mem 0xb0000000-0xbfffffff] reserved in E820 Jul 15 11:26:03.836087 kernel: PCI: Using configuration type 1 for base access Jul 15 11:26:03.836094 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 15 11:26:03.836101 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 15 11:26:03.836108 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 15 11:26:03.836114 kernel: ACPI: Added _OSI(Module Device) Jul 15 11:26:03.836121 kernel: ACPI: Added _OSI(Processor Device) Jul 15 11:26:03.836128 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 15 11:26:03.836135 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 15 11:26:03.836142 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 15 11:26:03.836148 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 15 11:26:03.836157 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 15 11:26:03.836163 kernel: ACPI: Interpreter enabled Jul 15 11:26:03.836170 kernel: ACPI: PM: (supports S0 S3 S5) Jul 15 11:26:03.836177 kernel: ACPI: Using IOAPIC for interrupt routing Jul 15 11:26:03.836184 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 15 11:26:03.836191 kernel: ACPI: Enabled 2 GPEs in block 00 to 3F Jul 15 11:26:03.836198 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 15 11:26:03.836328 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 15 11:26:03.836404 kernel: acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR] Jul 15 11:26:03.836472 kernel: acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] Jul 15 11:26:03.836481 kernel: PCI host bridge to bus 0000:00 Jul 15 11:26:03.836553 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 15 11:26:03.836615 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Jul 15 11:26:03.836674 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 15 11:26:03.836738 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xafffffff window] Jul 15 11:26:03.836803 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Jul 15 11:26:03.836864 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x8ffffffff window] Jul 15 11:26:03.836924 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 15 11:26:03.837011 kernel: pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 Jul 15 11:26:03.837089 kernel: pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 Jul 15 11:26:03.837159 kernel: pci 0000:00:01.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] Jul 15 11:26:03.837258 kernel: pci 0000:00:01.0: reg 0x18: [mem 0xfebd0000-0xfebd0fff] Jul 15 11:26:03.837336 kernel: pci 0000:00:01.0: reg 0x30: [mem 0xfebc0000-0xfebcffff pref] Jul 15 11:26:03.838303 kernel: pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 15 11:26:03.838429 kernel: pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00 Jul 15 11:26:03.838508 kernel: pci 0000:00:02.0: reg 0x10: [io 0xc0c0-0xc0df] Jul 15 11:26:03.838585 kernel: pci 0000:00:02.0: reg 0x14: [mem 0xfebd1000-0xfebd1fff] Jul 15 11:26:03.838659 kernel: pci 0000:00:02.0: reg 0x20: [mem 0xfe000000-0xfe003fff 64bit pref] Jul 15 11:26:03.838743 kernel: pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000 Jul 15 11:26:03.838817 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc000-0xc07f] Jul 15 11:26:03.838889 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfebd2000-0xfebd2fff] Jul 15 11:26:03.838961 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe004000-0xfe007fff 64bit pref] Jul 15 11:26:03.839105 kernel: pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 Jul 15 11:26:03.842286 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc0e0-0xc0ff] Jul 15 11:26:03.842366 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfebd3000-0xfebd3fff] Jul 15 11:26:03.842441 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe008000-0xfe00bfff 64bit pref] Jul 15 11:26:03.842510 kernel: pci 0000:00:04.0: reg 0x30: [mem 0xfeb80000-0xfebbffff pref] Jul 15 11:26:03.842586 kernel: pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 Jul 15 11:26:03.842655 kernel: pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO Jul 15 11:26:03.842744 kernel: pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 Jul 15 11:26:03.842814 kernel: pci 0000:00:1f.2: reg 0x20: [io 0xc100-0xc11f] Jul 15 11:26:03.842884 kernel: pci 0000:00:1f.2: reg 0x24: [mem 0xfebd4000-0xfebd4fff] Jul 15 11:26:03.842956 kernel: pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 Jul 15 11:26:03.843035 kernel: pci 0000:00:1f.3: reg 0x20: [io 0x0700-0x073f] Jul 15 11:26:03.843045 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Jul 15 11:26:03.843052 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Jul 15 11:26:03.843060 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 15 11:26:03.843067 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Jul 15 11:26:03.843074 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 10 Jul 15 11:26:03.843084 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 10 Jul 15 11:26:03.843091 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 11 Jul 15 11:26:03.843098 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 11 Jul 15 11:26:03.843106 kernel: ACPI: PCI: Interrupt link GSIA configured for IRQ 16 Jul 15 11:26:03.843123 kernel: ACPI: PCI: Interrupt link GSIB configured for IRQ 17 Jul 15 11:26:03.843130 kernel: ACPI: PCI: Interrupt link GSIC configured for IRQ 18 Jul 15 11:26:03.843137 kernel: ACPI: PCI: Interrupt link GSID configured for IRQ 19 Jul 15 11:26:03.843144 kernel: ACPI: PCI: Interrupt link GSIE configured for IRQ 20 Jul 15 11:26:03.843151 kernel: ACPI: PCI: Interrupt link GSIF configured for IRQ 21 Jul 15 11:26:03.843160 kernel: ACPI: PCI: Interrupt link GSIG configured for IRQ 22 Jul 15 11:26:03.843167 kernel: ACPI: PCI: Interrupt link GSIH configured for IRQ 23 Jul 15 11:26:03.843174 kernel: iommu: Default domain type: Translated Jul 15 11:26:03.843181 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 15 11:26:03.843267 kernel: pci 0000:00:01.0: vgaarb: setting as boot VGA device Jul 15 11:26:03.843336 kernel: pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 15 11:26:03.843401 kernel: pci 0000:00:01.0: vgaarb: bridge control possible Jul 15 11:26:03.843411 kernel: vgaarb: loaded Jul 15 11:26:03.843418 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 15 11:26:03.843428 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 15 11:26:03.843435 kernel: PTP clock support registered Jul 15 11:26:03.843443 kernel: PCI: Using ACPI for IRQ routing Jul 15 11:26:03.843450 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 15 11:26:03.843457 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Jul 15 11:26:03.843464 kernel: e820: reserve RAM buffer [mem 0x9cfdc000-0x9fffffff] Jul 15 11:26:03.843471 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Jul 15 11:26:03.843478 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Jul 15 11:26:03.843486 kernel: clocksource: Switched to clocksource kvm-clock Jul 15 11:26:03.843495 kernel: VFS: Disk quotas dquot_6.6.0 Jul 15 11:26:03.843502 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 15 11:26:03.843509 kernel: pnp: PnP ACPI init Jul 15 11:26:03.843583 kernel: system 00:05: [mem 0xb0000000-0xbfffffff window] has been reserved Jul 15 11:26:03.843594 kernel: pnp: PnP ACPI: found 6 devices Jul 15 11:26:03.843601 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 15 11:26:03.843609 kernel: NET: Registered PF_INET protocol family Jul 15 11:26:03.843616 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 15 11:26:03.843625 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 15 11:26:03.843632 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 15 11:26:03.843640 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 15 11:26:03.843647 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 15 11:26:03.843654 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 15 11:26:03.843662 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 15 11:26:03.843669 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 15 11:26:03.843676 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 15 11:26:03.843683 kernel: NET: Registered PF_XDP protocol family Jul 15 11:26:03.843753 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Jul 15 11:26:03.843813 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Jul 15 11:26:03.843874 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Jul 15 11:26:03.843934 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xafffffff window] Jul 15 11:26:03.844025 kernel: pci_bus 0000:00: resource 8 [mem 0xc0000000-0xfebfffff window] Jul 15 11:26:03.844086 kernel: pci_bus 0000:00: resource 9 [mem 0x100000000-0x8ffffffff window] Jul 15 11:26:03.844096 kernel: PCI: CLS 0 bytes, default 64 Jul 15 11:26:03.844103 kernel: Initialise system trusted keyrings Jul 15 11:26:03.844112 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 15 11:26:03.844120 kernel: Key type asymmetric registered Jul 15 11:26:03.844127 kernel: Asymmetric key parser 'x509' registered Jul 15 11:26:03.844134 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 15 11:26:03.844141 kernel: io scheduler mq-deadline registered Jul 15 11:26:03.844148 kernel: io scheduler kyber registered Jul 15 11:26:03.844155 kernel: io scheduler bfq registered Jul 15 11:26:03.844162 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 15 11:26:03.844170 kernel: ACPI: \_SB_.GSIG: Enabled at IRQ 22 Jul 15 11:26:03.844178 kernel: ACPI: \_SB_.GSIH: Enabled at IRQ 23 Jul 15 11:26:03.844185 kernel: ACPI: \_SB_.GSIE: Enabled at IRQ 20 Jul 15 11:26:03.844197 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 15 11:26:03.844205 kernel: 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 15 11:26:03.844212 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Jul 15 11:26:03.844219 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 15 11:26:03.844238 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 15 11:26:03.844310 kernel: rtc_cmos 00:04: RTC can wake from S4 Jul 15 11:26:03.844322 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 15 11:26:03.844389 kernel: rtc_cmos 00:04: registered as rtc0 Jul 15 11:26:03.844452 kernel: rtc_cmos 00:04: setting system clock to 2025-07-15T11:26:03 UTC (1752578763) Jul 15 11:26:03.844514 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Jul 15 11:26:03.844523 kernel: NET: Registered PF_INET6 protocol family Jul 15 11:26:03.844530 kernel: Segment Routing with IPv6 Jul 15 11:26:03.844537 kernel: In-situ OAM (IOAM) with IPv6 Jul 15 11:26:03.844545 kernel: NET: Registered PF_PACKET protocol family Jul 15 11:26:03.844552 kernel: Key type dns_resolver registered Jul 15 11:26:03.844561 kernel: IPI shorthand broadcast: enabled Jul 15 11:26:03.844568 kernel: sched_clock: Marking stable (389073692, 97898991)->(534812192, -47839509) Jul 15 11:26:03.844575 kernel: registered taskstats version 1 Jul 15 11:26:03.844582 kernel: Loading compiled-in X.509 certificates Jul 15 11:26:03.844590 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.188-flatcar: c4b3a19d3bd6de5654dc12075428550cf6251289' Jul 15 11:26:03.844597 kernel: Key type .fscrypt registered Jul 15 11:26:03.844603 kernel: Key type fscrypt-provisioning registered Jul 15 11:26:03.844611 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 15 11:26:03.844617 kernel: ima: Allocated hash algorithm: sha1 Jul 15 11:26:03.844626 kernel: ima: No architecture policies found Jul 15 11:26:03.844633 kernel: clk: Disabling unused clocks Jul 15 11:26:03.844640 kernel: Freeing unused kernel image (initmem) memory: 47476K Jul 15 11:26:03.844647 kernel: Write protecting the kernel read-only data: 28672k Jul 15 11:26:03.844654 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 15 11:26:03.844661 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Jul 15 11:26:03.844668 kernel: Run /init as init process Jul 15 11:26:03.844675 kernel: with arguments: Jul 15 11:26:03.844682 kernel: /init Jul 15 11:26:03.844691 kernel: with environment: Jul 15 11:26:03.844698 kernel: HOME=/ Jul 15 11:26:03.844704 kernel: TERM=linux Jul 15 11:26:03.844711 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 15 11:26:03.844721 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 15 11:26:03.844731 systemd[1]: Detected virtualization kvm. Jul 15 11:26:03.844739 systemd[1]: Detected architecture x86-64. Jul 15 11:26:03.844746 systemd[1]: Running in initrd. Jul 15 11:26:03.844755 systemd[1]: No hostname configured, using default hostname. Jul 15 11:26:03.844762 systemd[1]: Hostname set to . Jul 15 11:26:03.844770 systemd[1]: Initializing machine ID from VM UUID. Jul 15 11:26:03.844778 systemd[1]: Queued start job for default target initrd.target. Jul 15 11:26:03.844785 systemd[1]: Started systemd-ask-password-console.path. Jul 15 11:26:03.844792 systemd[1]: Reached target cryptsetup.target. Jul 15 11:26:03.844800 systemd[1]: Reached target paths.target. Jul 15 11:26:03.844807 systemd[1]: Reached target slices.target. Jul 15 11:26:03.844816 systemd[1]: Reached target swap.target. Jul 15 11:26:03.844831 systemd[1]: Reached target timers.target. Jul 15 11:26:03.844841 systemd[1]: Listening on iscsid.socket. Jul 15 11:26:03.844849 systemd[1]: Listening on iscsiuio.socket. Jul 15 11:26:03.844856 systemd[1]: Listening on systemd-journald-audit.socket. Jul 15 11:26:03.844865 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 15 11:26:03.844873 systemd[1]: Listening on systemd-journald.socket. Jul 15 11:26:03.844881 systemd[1]: Listening on systemd-networkd.socket. Jul 15 11:26:03.844889 systemd[1]: Listening on systemd-udevd-control.socket. Jul 15 11:26:03.844896 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 15 11:26:03.844904 systemd[1]: Reached target sockets.target. Jul 15 11:26:03.844912 systemd[1]: Starting kmod-static-nodes.service... Jul 15 11:26:03.844920 systemd[1]: Finished network-cleanup.service. Jul 15 11:26:03.844927 systemd[1]: Starting systemd-fsck-usr.service... Jul 15 11:26:03.844937 systemd[1]: Starting systemd-journald.service... Jul 15 11:26:03.844944 systemd[1]: Starting systemd-modules-load.service... Jul 15 11:26:03.844952 systemd[1]: Starting systemd-resolved.service... Jul 15 11:26:03.844960 systemd[1]: Starting systemd-vconsole-setup.service... Jul 15 11:26:03.844968 systemd[1]: Finished kmod-static-nodes.service. Jul 15 11:26:03.844976 systemd[1]: Finished systemd-fsck-usr.service. Jul 15 11:26:03.844984 kernel: audit: type=1130 audit(1752578763.834:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:03.844992 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 15 11:26:03.845011 systemd-journald[199]: Journal started Jul 15 11:26:03.845053 systemd-journald[199]: Runtime Journal (/run/log/journal/526b73d402fe4e93a9b0101586866714) is 6.0M, max 48.5M, 42.5M free. Jul 15 11:26:03.834000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:03.839367 systemd-modules-load[200]: Inserted module 'overlay' Jul 15 11:26:03.874496 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 15 11:26:03.874513 kernel: Bridge firewalling registered Jul 15 11:26:03.855075 systemd-resolved[201]: Positive Trust Anchors: Jul 15 11:26:03.855087 systemd-resolved[201]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 15 11:26:03.855115 systemd-resolved[201]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 15 11:26:03.857177 systemd-resolved[201]: Defaulting to hostname 'linux'. Jul 15 11:26:03.883815 systemd[1]: Started systemd-journald.service. Jul 15 11:26:03.873457 systemd-modules-load[200]: Inserted module 'br_netfilter' Jul 15 11:26:03.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:03.885515 systemd[1]: Started systemd-resolved.service. Jul 15 11:26:03.889761 kernel: audit: type=1130 audit(1752578763.885:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:03.889778 kernel: audit: type=1130 audit(1752578763.889:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:03.889000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:03.889941 systemd[1]: Finished systemd-vconsole-setup.service. Jul 15 11:26:03.894657 kernel: SCSI subsystem initialized Jul 15 11:26:03.894000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:03.894789 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 15 11:26:03.899196 kernel: audit: type=1130 audit(1752578763.894:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:03.899209 kernel: audit: type=1130 audit(1752578763.898:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:03.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:03.899298 systemd[1]: Reached target nss-lookup.target. Jul 15 11:26:03.904163 systemd[1]: Starting dracut-cmdline-ask.service... Jul 15 11:26:03.908055 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 15 11:26:03.908069 kernel: device-mapper: uevent: version 1.0.3 Jul 15 11:26:03.908078 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 15 11:26:03.910453 systemd-modules-load[200]: Inserted module 'dm_multipath' Jul 15 11:26:03.911415 systemd[1]: Finished systemd-modules-load.service. Jul 15 11:26:03.912000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:03.915840 systemd[1]: Starting systemd-sysctl.service... Jul 15 11:26:03.916619 kernel: audit: type=1130 audit(1752578763.912:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:03.921805 systemd[1]: Finished systemd-sysctl.service. Jul 15 11:26:03.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:03.923496 systemd[1]: Finished dracut-cmdline-ask.service. Jul 15 11:26:03.927682 kernel: audit: type=1130 audit(1752578763.923:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:03.927706 kernel: audit: type=1130 audit(1752578763.927:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:03.927000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:03.928297 systemd[1]: Starting dracut-cmdline.service... Jul 15 11:26:03.936008 dracut-cmdline[220]: dracut-dracut-053 Jul 15 11:26:03.937820 dracut-cmdline[220]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:26:03.989252 kernel: Loading iSCSI transport class v2.0-870. Jul 15 11:26:04.005256 kernel: iscsi: registered transport (tcp) Jul 15 11:26:04.025636 kernel: iscsi: registered transport (qla4xxx) Jul 15 11:26:04.025658 kernel: QLogic iSCSI HBA Driver Jul 15 11:26:04.053767 systemd[1]: Finished dracut-cmdline.service. Jul 15 11:26:04.054000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:04.056036 systemd[1]: Starting dracut-pre-udev.service... Jul 15 11:26:04.059432 kernel: audit: type=1130 audit(1752578764.054:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:04.100257 kernel: raid6: avx2x4 gen() 30131 MB/s Jul 15 11:26:04.117252 kernel: raid6: avx2x4 xor() 7423 MB/s Jul 15 11:26:04.134257 kernel: raid6: avx2x2 gen() 32285 MB/s Jul 15 11:26:04.151254 kernel: raid6: avx2x2 xor() 19215 MB/s Jul 15 11:26:04.168252 kernel: raid6: avx2x1 gen() 26562 MB/s Jul 15 11:26:04.185251 kernel: raid6: avx2x1 xor() 15305 MB/s Jul 15 11:26:04.202252 kernel: raid6: sse2x4 gen() 14818 MB/s Jul 15 11:26:04.219251 kernel: raid6: sse2x4 xor() 7111 MB/s Jul 15 11:26:04.236254 kernel: raid6: sse2x2 gen() 16189 MB/s Jul 15 11:26:04.253254 kernel: raid6: sse2x2 xor() 9810 MB/s Jul 15 11:26:04.270255 kernel: raid6: sse2x1 gen() 12410 MB/s Jul 15 11:26:04.287533 kernel: raid6: sse2x1 xor() 7743 MB/s Jul 15 11:26:04.287550 kernel: raid6: using algorithm avx2x2 gen() 32285 MB/s Jul 15 11:26:04.287559 kernel: raid6: .... xor() 19215 MB/s, rmw enabled Jul 15 11:26:04.288812 kernel: raid6: using avx2x2 recovery algorithm Jul 15 11:26:04.300253 kernel: xor: automatically using best checksumming function avx Jul 15 11:26:04.389259 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 15 11:26:04.397444 systemd[1]: Finished dracut-pre-udev.service. Jul 15 11:26:04.398000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:04.399000 audit: BPF prog-id=7 op=LOAD Jul 15 11:26:04.399000 audit: BPF prog-id=8 op=LOAD Jul 15 11:26:04.399994 systemd[1]: Starting systemd-udevd.service... Jul 15 11:26:04.411525 systemd-udevd[399]: Using default interface naming scheme 'v252'. Jul 15 11:26:04.415198 systemd[1]: Started systemd-udevd.service. Jul 15 11:26:04.417000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:04.418061 systemd[1]: Starting dracut-pre-trigger.service... Jul 15 11:26:04.427046 dracut-pre-trigger[409]: rd.md=0: removing MD RAID activation Jul 15 11:26:04.448647 systemd[1]: Finished dracut-pre-trigger.service. Jul 15 11:26:04.448000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:04.449419 systemd[1]: Starting systemd-udev-trigger.service... Jul 15 11:26:04.479447 systemd[1]: Finished systemd-udev-trigger.service. Jul 15 11:26:04.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:04.508552 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 15 11:26:04.514030 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 15 11:26:04.514046 kernel: GPT:9289727 != 19775487 Jul 15 11:26:04.514055 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 15 11:26:04.514064 kernel: GPT:9289727 != 19775487 Jul 15 11:26:04.514072 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 15 11:26:04.514080 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:26:04.522246 kernel: cryptd: max_cpu_qlen set to 1000 Jul 15 11:26:04.527316 kernel: libata version 3.00 loaded. Jul 15 11:26:04.532170 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 15 11:26:04.533524 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 15 11:26:04.544057 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (451) Jul 15 11:26:04.544075 kernel: ahci 0000:00:1f.2: version 3.0 Jul 15 11:26:04.555613 kernel: ACPI: \_SB_.GSIA: Enabled at IRQ 16 Jul 15 11:26:04.555626 kernel: ahci 0000:00:1f.2: AHCI 0001.0000 32 slots 6 ports 1.5 Gbps 0x3f impl SATA mode Jul 15 11:26:04.555711 kernel: ahci 0000:00:1f.2: flags: 64bit ncq only Jul 15 11:26:04.555784 kernel: AVX2 version of gcm_enc/dec engaged. Jul 15 11:26:04.555794 kernel: AES CTR mode by8 optimization enabled Jul 15 11:26:04.555803 kernel: scsi host0: ahci Jul 15 11:26:04.555894 kernel: scsi host1: ahci Jul 15 11:26:04.555993 kernel: scsi host2: ahci Jul 15 11:26:04.556074 kernel: scsi host3: ahci Jul 15 11:26:04.556153 kernel: scsi host4: ahci Jul 15 11:26:04.556247 kernel: scsi host5: ahci Jul 15 11:26:04.556331 kernel: ata1: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4100 irq 34 Jul 15 11:26:04.556340 kernel: ata2: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4180 irq 34 Jul 15 11:26:04.556352 kernel: ata3: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4200 irq 34 Jul 15 11:26:04.556360 kernel: ata4: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4280 irq 34 Jul 15 11:26:04.556369 kernel: ata5: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4300 irq 34 Jul 15 11:26:04.556378 kernel: ata6: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4380 irq 34 Jul 15 11:26:04.539193 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 15 11:26:04.553793 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 15 11:26:04.598919 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 15 11:26:04.602127 systemd[1]: Starting disk-uuid.service... Jul 15 11:26:04.610104 disk-uuid[521]: Primary Header is updated. Jul 15 11:26:04.610104 disk-uuid[521]: Secondary Entries is updated. Jul 15 11:26:04.610104 disk-uuid[521]: Secondary Header is updated. Jul 15 11:26:04.614257 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:26:04.617254 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:26:04.865573 kernel: ata5: SATA link down (SStatus 0 SControl 300) Jul 15 11:26:04.865645 kernel: ata2: SATA link down (SStatus 0 SControl 300) Jul 15 11:26:04.865656 kernel: ata1: SATA link down (SStatus 0 SControl 300) Jul 15 11:26:04.867263 kernel: ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300) Jul 15 11:26:04.868259 kernel: ata6: SATA link down (SStatus 0 SControl 300) Jul 15 11:26:04.869252 kernel: ata4: SATA link down (SStatus 0 SControl 300) Jul 15 11:26:04.869270 kernel: ata3.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Jul 15 11:26:04.870575 kernel: ata3.00: applying bridge limits Jul 15 11:26:04.871252 kernel: ata3.00: configured for UDMA/100 Jul 15 11:26:04.872257 kernel: scsi 2:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Jul 15 11:26:04.904267 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Jul 15 11:26:04.920806 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jul 15 11:26:04.920823 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Jul 15 11:26:05.618258 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:26:05.618533 disk-uuid[522]: The operation has completed successfully. Jul 15 11:26:05.642774 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 15 11:26:05.643000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:05.643000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:05.642850 systemd[1]: Finished disk-uuid.service. Jul 15 11:26:05.646682 systemd[1]: Starting verity-setup.service... Jul 15 11:26:05.658257 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Jul 15 11:26:05.676838 systemd[1]: Found device dev-mapper-usr.device. Jul 15 11:26:05.677414 systemd[1]: Mounting sysusr-usr.mount... Jul 15 11:26:05.681007 systemd[1]: Finished verity-setup.service. Jul 15 11:26:05.680000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:05.736034 systemd[1]: Mounted sysusr-usr.mount. Jul 15 11:26:05.737382 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 15 11:26:05.736189 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 15 11:26:05.736738 systemd[1]: Starting ignition-setup.service... Jul 15 11:26:05.739390 systemd[1]: Starting parse-ip-for-networkd.service... Jul 15 11:26:05.747249 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 15 11:26:05.747278 kernel: BTRFS info (device vda6): using free space tree Jul 15 11:26:05.747291 kernel: BTRFS info (device vda6): has skinny extents Jul 15 11:26:05.756308 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 15 11:26:05.764655 systemd[1]: Finished ignition-setup.service. Jul 15 11:26:05.766298 systemd[1]: Starting ignition-fetch-offline.service... Jul 15 11:26:05.765000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:05.802301 ignition[637]: Ignition 2.14.0 Jul 15 11:26:05.802312 ignition[637]: Stage: fetch-offline Jul 15 11:26:05.802380 ignition[637]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:26:05.802388 ignition[637]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:26:05.802475 ignition[637]: parsed url from cmdline: "" Jul 15 11:26:05.802478 ignition[637]: no config URL provided Jul 15 11:26:05.802482 ignition[637]: reading system config file "/usr/lib/ignition/user.ign" Jul 15 11:26:05.802489 ignition[637]: no config at "/usr/lib/ignition/user.ign" Jul 15 11:26:05.802508 ignition[637]: op(1): [started] loading QEMU firmware config module Jul 15 11:26:05.802512 ignition[637]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 15 11:26:05.805553 ignition[637]: op(1): [finished] loading QEMU firmware config module Jul 15 11:26:05.822709 systemd[1]: Finished parse-ip-for-networkd.service. Jul 15 11:26:05.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:05.824000 audit: BPF prog-id=9 op=LOAD Jul 15 11:26:05.825162 systemd[1]: Starting systemd-networkd.service... Jul 15 11:26:05.847631 ignition[637]: parsing config with SHA512: f3b1453ce499ad91cb419ff7b93dfd45959cc576ca77bfa8473127074160ccf93fb151f2273c0493df00c8414bda222510e12c16d4c38fc48eca9502f9f87d7a Jul 15 11:26:05.854780 unknown[637]: fetched base config from "system" Jul 15 11:26:05.854939 unknown[637]: fetched user config from "qemu" Jul 15 11:26:05.855394 ignition[637]: fetch-offline: fetch-offline passed Jul 15 11:26:05.856847 systemd[1]: Finished ignition-fetch-offline.service. Jul 15 11:26:05.858000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:05.855443 ignition[637]: Ignition finished successfully Jul 15 11:26:05.870018 systemd-networkd[719]: lo: Link UP Jul 15 11:26:05.870026 systemd-networkd[719]: lo: Gained carrier Jul 15 11:26:05.871667 systemd-networkd[719]: Enumeration completed Jul 15 11:26:05.871741 systemd[1]: Started systemd-networkd.service. Jul 15 11:26:05.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:05.872502 systemd[1]: Reached target network.target. Jul 15 11:26:05.874567 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 15 11:26:05.875271 systemd[1]: Starting ignition-kargs.service... Jul 15 11:26:05.878027 systemd[1]: Starting iscsiuio.service... Jul 15 11:26:05.878298 systemd-networkd[719]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 15 11:26:05.880709 systemd-networkd[719]: eth0: Link UP Jul 15 11:26:05.880712 systemd-networkd[719]: eth0: Gained carrier Jul 15 11:26:05.882909 systemd[1]: Started iscsiuio.service. Jul 15 11:26:05.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:05.885741 systemd[1]: Starting iscsid.service... Jul 15 11:26:05.886095 ignition[721]: Ignition 2.14.0 Jul 15 11:26:05.886100 ignition[721]: Stage: kargs Jul 15 11:26:05.886175 ignition[721]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:26:05.886182 ignition[721]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:26:05.890276 iscsid[731]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 15 11:26:05.890276 iscsid[731]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 15 11:26:05.890276 iscsid[731]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 15 11:26:05.890276 iscsid[731]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 15 11:26:05.890276 iscsid[731]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 15 11:26:05.890276 iscsid[731]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 15 11:26:05.892000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:05.887042 ignition[721]: kargs: kargs passed Jul 15 11:26:05.890308 systemd[1]: Started iscsid.service. Jul 15 11:26:05.902000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:05.887071 ignition[721]: Ignition finished successfully Jul 15 11:26:05.901680 systemd[1]: Finished ignition-kargs.service. Jul 15 11:26:05.905689 systemd[1]: Starting dracut-initqueue.service... Jul 15 11:26:05.908081 systemd[1]: Starting ignition-disks.service... Jul 15 11:26:05.914403 ignition[733]: Ignition 2.14.0 Jul 15 11:26:05.915000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:05.914953 systemd[1]: Finished dracut-initqueue.service. Jul 15 11:26:05.914413 ignition[733]: Stage: disks Jul 15 11:26:05.915312 systemd-networkd[719]: eth0: DHCPv4 address 10.0.0.18/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 15 11:26:05.914490 ignition[733]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:26:05.916051 systemd[1]: Reached target remote-fs-pre.target. Jul 15 11:26:05.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:05.914499 ignition[733]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:26:05.916884 systemd[1]: Reached target remote-cryptsetup.target. Jul 15 11:26:05.916369 ignition[733]: disks: disks passed Jul 15 11:26:05.918563 systemd[1]: Reached target remote-fs.target. Jul 15 11:26:05.931000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:05.916401 ignition[733]: Ignition finished successfully Jul 15 11:26:05.920006 systemd[1]: Starting dracut-pre-mount.service... Jul 15 11:26:05.922104 systemd[1]: Finished ignition-disks.service. Jul 15 11:26:05.923725 systemd[1]: Reached target initrd-root-device.target. Jul 15 11:26:05.925297 systemd[1]: Reached target local-fs-pre.target. Jul 15 11:26:05.926466 systemd[1]: Reached target local-fs.target. Jul 15 11:26:05.928279 systemd[1]: Reached target sysinit.target. Jul 15 11:26:05.929866 systemd[1]: Reached target basic.target. Jul 15 11:26:05.930839 systemd[1]: Finished dracut-pre-mount.service. Jul 15 11:26:05.932695 systemd[1]: Starting systemd-fsck-root.service... Jul 15 11:26:05.943142 systemd-fsck[753]: ROOT: clean, 619/553520 files, 56023/553472 blocks Jul 15 11:26:05.948043 systemd[1]: Finished systemd-fsck-root.service. Jul 15 11:26:05.950000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:05.950967 systemd[1]: Mounting sysroot.mount... Jul 15 11:26:05.959074 systemd[1]: Mounted sysroot.mount. Jul 15 11:26:05.961269 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 15 11:26:05.959835 systemd[1]: Reached target initrd-root-fs.target. Jul 15 11:26:05.962034 systemd[1]: Mounting sysroot-usr.mount... Jul 15 11:26:05.963006 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 15 11:26:05.963034 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 15 11:26:05.963051 systemd[1]: Reached target ignition-diskful.target. Jul 15 11:26:05.964954 systemd[1]: Mounted sysroot-usr.mount. Jul 15 11:26:05.967011 systemd[1]: Starting initrd-setup-root.service... Jul 15 11:26:05.971491 initrd-setup-root[763]: cut: /sysroot/etc/passwd: No such file or directory Jul 15 11:26:05.974201 initrd-setup-root[771]: cut: /sysroot/etc/group: No such file or directory Jul 15 11:26:05.978008 initrd-setup-root[779]: cut: /sysroot/etc/shadow: No such file or directory Jul 15 11:26:05.980709 initrd-setup-root[787]: cut: /sysroot/etc/gshadow: No such file or directory Jul 15 11:26:06.007433 systemd[1]: Finished initrd-setup-root.service. Jul 15 11:26:06.007000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:06.008199 systemd[1]: Starting ignition-mount.service... Jul 15 11:26:06.010123 systemd[1]: Starting sysroot-boot.service... Jul 15 11:26:06.014910 bash[804]: umount: /sysroot/usr/share/oem: not mounted. Jul 15 11:26:06.021868 ignition[806]: INFO : Ignition 2.14.0 Jul 15 11:26:06.021868 ignition[806]: INFO : Stage: mount Jul 15 11:26:06.023633 ignition[806]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:26:06.023633 ignition[806]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:26:06.023633 ignition[806]: INFO : mount: mount passed Jul 15 11:26:06.023633 ignition[806]: INFO : Ignition finished successfully Jul 15 11:26:06.025000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:06.023826 systemd[1]: Finished ignition-mount.service. Jul 15 11:26:06.029219 systemd[1]: Finished sysroot-boot.service. Jul 15 11:26:06.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:06.686678 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 15 11:26:06.692248 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (814) Jul 15 11:26:06.694454 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 15 11:26:06.694471 kernel: BTRFS info (device vda6): using free space tree Jul 15 11:26:06.694480 kernel: BTRFS info (device vda6): has skinny extents Jul 15 11:26:06.698435 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 15 11:26:06.700843 systemd[1]: Starting ignition-files.service... Jul 15 11:26:06.714888 ignition[834]: INFO : Ignition 2.14.0 Jul 15 11:26:06.714888 ignition[834]: INFO : Stage: files Jul 15 11:26:06.716815 ignition[834]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:26:06.716815 ignition[834]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:26:06.716815 ignition[834]: DEBUG : files: compiled without relabeling support, skipping Jul 15 11:26:06.720568 ignition[834]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 15 11:26:06.720568 ignition[834]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 15 11:26:06.720568 ignition[834]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 15 11:26:06.720568 ignition[834]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 15 11:26:06.720568 ignition[834]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 15 11:26:06.720568 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Jul 15 11:26:06.720568 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.0-linux-amd64.tar.gz: attempt #1 Jul 15 11:26:06.719343 unknown[834]: wrote ssh authorized keys file for user: core Jul 15 11:26:06.758713 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 15 11:26:07.076368 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Jul 15 11:26:07.076368 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 15 11:26:07.080342 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 15 11:26:07.082135 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 15 11:26:07.083884 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 15 11:26:07.085502 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 15 11:26:07.087139 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 15 11:26:07.088736 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 15 11:26:07.090411 systemd-networkd[719]: eth0: Gained IPv6LL Jul 15 11:26:07.091508 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 15 11:26:07.091508 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 15 11:26:07.091508 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 15 11:26:07.091508 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jul 15 11:26:07.091508 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jul 15 11:26:07.091508 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jul 15 11:26:07.091508 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-x86-64.raw: attempt #1 Jul 15 11:26:07.896963 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 15 11:26:08.232976 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jul 15 11:26:08.232976 ignition[834]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 15 11:26:08.236376 ignition[834]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 15 11:26:08.238339 ignition[834]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 15 11:26:08.238339 ignition[834]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 15 11:26:08.238339 ignition[834]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 15 11:26:08.242505 ignition[834]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 15 11:26:08.244352 ignition[834]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 15 11:26:08.244352 ignition[834]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 15 11:26:08.244352 ignition[834]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 15 11:26:08.248732 ignition[834]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 15 11:26:08.248732 ignition[834]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 15 11:26:08.248732 ignition[834]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 15 11:26:08.272112 ignition[834]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 15 11:26:08.273859 ignition[834]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 15 11:26:08.275481 ignition[834]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 15 11:26:08.277420 ignition[834]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 15 11:26:08.279287 ignition[834]: INFO : files: files passed Jul 15 11:26:08.279999 ignition[834]: INFO : Ignition finished successfully Jul 15 11:26:08.281763 systemd[1]: Finished ignition-files.service. Jul 15 11:26:08.287447 kernel: kauditd_printk_skb: 24 callbacks suppressed Jul 15 11:26:08.287473 kernel: audit: type=1130 audit(1752578768.282:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.283428 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 15 11:26:08.288267 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 15 11:26:08.288752 systemd[1]: Starting ignition-quench.service... Jul 15 11:26:08.298582 kernel: audit: type=1130 audit(1752578768.292:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.298601 kernel: audit: type=1131 audit(1752578768.292:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.292000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.292000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.291513 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 15 11:26:08.291576 systemd[1]: Finished ignition-quench.service. Jul 15 11:26:08.300368 initrd-setup-root-after-ignition[860]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 15 11:26:08.303254 initrd-setup-root-after-ignition[862]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 15 11:26:08.305158 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 15 11:26:08.310622 kernel: audit: type=1130 audit(1752578768.305:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.305000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.305319 systemd[1]: Reached target ignition-complete.target. Jul 15 11:26:08.311218 systemd[1]: Starting initrd-parse-etc.service... Jul 15 11:26:08.322291 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 15 11:26:08.322377 systemd[1]: Finished initrd-parse-etc.service. Jul 15 11:26:08.330993 kernel: audit: type=1130 audit(1752578768.323:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.331009 kernel: audit: type=1131 audit(1752578768.323:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.323000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.323000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.324090 systemd[1]: Reached target initrd-fs.target. Jul 15 11:26:08.331061 systemd[1]: Reached target initrd.target. Jul 15 11:26:08.331157 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 15 11:26:08.331805 systemd[1]: Starting dracut-pre-pivot.service... Jul 15 11:26:08.340789 systemd[1]: Finished dracut-pre-pivot.service. Jul 15 11:26:08.345007 kernel: audit: type=1130 audit(1752578768.340:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.340000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.345022 systemd[1]: Starting initrd-cleanup.service... Jul 15 11:26:08.354246 systemd[1]: Stopped target nss-lookup.target. Jul 15 11:26:08.354375 systemd[1]: Stopped target remote-cryptsetup.target. Jul 15 11:26:08.355861 systemd[1]: Stopped target timers.target. Jul 15 11:26:08.358135 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 15 11:26:08.358000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.358268 systemd[1]: Stopped dracut-pre-pivot.service. Jul 15 11:26:08.358955 systemd[1]: Stopped target initrd.target. Jul 15 11:26:08.365760 kernel: audit: type=1131 audit(1752578768.358:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.362066 systemd[1]: Stopped target basic.target. Jul 15 11:26:08.362545 systemd[1]: Stopped target ignition-complete.target. Jul 15 11:26:08.366725 systemd[1]: Stopped target ignition-diskful.target. Jul 15 11:26:08.368216 systemd[1]: Stopped target initrd-root-device.target. Jul 15 11:26:08.369058 systemd[1]: Stopped target remote-fs.target. Jul 15 11:26:08.369528 systemd[1]: Stopped target remote-fs-pre.target. Jul 15 11:26:08.372700 systemd[1]: Stopped target sysinit.target. Jul 15 11:26:08.374115 systemd[1]: Stopped target local-fs.target. Jul 15 11:26:08.375610 systemd[1]: Stopped target local-fs-pre.target. Jul 15 11:26:08.376348 systemd[1]: Stopped target swap.target. Jul 15 11:26:08.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.378320 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 15 11:26:08.384556 kernel: audit: type=1131 audit(1752578768.378:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.378413 systemd[1]: Stopped dracut-pre-mount.service. Jul 15 11:26:08.388749 kernel: audit: type=1131 audit(1752578768.385:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.385000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.379174 systemd[1]: Stopped target cryptsetup.target. Jul 15 11:26:08.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.382472 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 15 11:26:08.382550 systemd[1]: Stopped dracut-initqueue.service. Jul 15 11:26:08.385432 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 15 11:26:08.385509 systemd[1]: Stopped ignition-fetch-offline.service. Jul 15 11:26:08.389658 systemd[1]: Stopped target paths.target. Jul 15 11:26:08.391015 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 15 11:26:08.392299 systemd[1]: Stopped systemd-ask-password-console.path. Jul 15 11:26:08.398000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.393478 systemd[1]: Stopped target slices.target. Jul 15 11:26:08.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.394454 systemd[1]: Stopped target sockets.target. Jul 15 11:26:08.395842 systemd[1]: iscsid.socket: Deactivated successfully. Jul 15 11:26:08.395913 systemd[1]: Closed iscsid.socket. Jul 15 11:26:08.397221 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 15 11:26:08.397313 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 15 11:26:08.398745 systemd[1]: ignition-files.service: Deactivated successfully. Jul 15 11:26:08.407000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.408962 ignition[875]: INFO : Ignition 2.14.0 Jul 15 11:26:08.408962 ignition[875]: INFO : Stage: umount Jul 15 11:26:08.408962 ignition[875]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:26:08.408962 ignition[875]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:26:08.398818 systemd[1]: Stopped ignition-files.service. Jul 15 11:26:08.413208 ignition[875]: INFO : umount: umount passed Jul 15 11:26:08.413208 ignition[875]: INFO : Ignition finished successfully Jul 15 11:26:08.401795 systemd[1]: Stopping ignition-mount.service... Jul 15 11:26:08.402542 systemd[1]: Stopping iscsiuio.service... Jul 15 11:26:08.405037 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 15 11:26:08.405186 systemd[1]: Stopped kmod-static-nodes.service. Jul 15 11:26:08.416245 systemd[1]: Stopping sysroot-boot.service... Jul 15 11:26:08.419099 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 15 11:26:08.420200 systemd[1]: Stopped systemd-udev-trigger.service. Jul 15 11:26:08.421000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.421921 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 15 11:26:08.422922 systemd[1]: Stopped dracut-pre-trigger.service. Jul 15 11:26:08.424000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.425965 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 15 11:26:08.426044 systemd[1]: Stopped iscsiuio.service. Jul 15 11:26:08.428000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.429395 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 15 11:26:08.430658 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 15 11:26:08.431575 systemd[1]: Stopped ignition-mount.service. Jul 15 11:26:08.432000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.433330 systemd[1]: Stopped target network.target. Jul 15 11:26:08.434902 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 15 11:26:08.434931 systemd[1]: Closed iscsiuio.socket. Jul 15 11:26:08.436953 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 15 11:26:08.436989 systemd[1]: Stopped ignition-disks.service. Jul 15 11:26:08.438000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.439410 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 15 11:26:08.439441 systemd[1]: Stopped ignition-kargs.service. Jul 15 11:26:08.441000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.441891 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 15 11:26:08.441920 systemd[1]: Stopped ignition-setup.service. Jul 15 11:26:08.444000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.444355 systemd[1]: Stopping systemd-networkd.service... Jul 15 11:26:08.446127 systemd[1]: Stopping systemd-resolved.service... Jul 15 11:26:08.447932 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 15 11:26:08.448000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.449000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.447999 systemd[1]: Finished initrd-cleanup.service. Jul 15 11:26:08.449260 systemd-networkd[719]: eth0: DHCPv6 lease lost Jul 15 11:26:08.451932 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 15 11:26:08.452900 systemd[1]: Stopped systemd-networkd.service. Jul 15 11:26:08.454000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.455133 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 15 11:26:08.455174 systemd[1]: Closed systemd-networkd.socket. Jul 15 11:26:08.457000 audit: BPF prog-id=9 op=UNLOAD Jul 15 11:26:08.457977 systemd[1]: Stopping network-cleanup.service... Jul 15 11:26:08.459547 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 15 11:26:08.459585 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 15 11:26:08.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.462237 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 15 11:26:08.462269 systemd[1]: Stopped systemd-sysctl.service. Jul 15 11:26:08.464000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.464786 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 15 11:26:08.464820 systemd[1]: Stopped systemd-modules-load.service. Jul 15 11:26:08.467000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.467577 systemd[1]: Stopping systemd-udevd.service... Jul 15 11:26:08.470202 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 15 11:26:08.470634 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 15 11:26:08.470714 systemd[1]: Stopped systemd-resolved.service. Jul 15 11:26:08.471000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.474916 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 15 11:26:08.474996 systemd[1]: Stopped network-cleanup.service. Jul 15 11:26:08.474000 audit: BPF prog-id=6 op=UNLOAD Jul 15 11:26:08.475000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.478859 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 15 11:26:08.478970 systemd[1]: Stopped systemd-udevd.service. Jul 15 11:26:08.479000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.479993 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 15 11:26:08.480020 systemd[1]: Closed systemd-udevd-control.socket. Jul 15 11:26:08.481490 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 15 11:26:08.481524 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 15 11:26:08.484000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.484000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.482142 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 15 11:26:08.487000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.482188 systemd[1]: Stopped dracut-pre-udev.service. Jul 15 11:26:08.484594 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 15 11:26:08.484635 systemd[1]: Stopped dracut-cmdline.service. Jul 15 11:26:08.492000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.494000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.484883 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 15 11:26:08.495000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.496000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.484919 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 15 11:26:08.488833 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 15 11:26:08.489825 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 15 11:26:08.499000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.489865 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 15 11:26:08.493436 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 15 11:26:08.493516 systemd[1]: Stopped sysroot-boot.service. Jul 15 11:26:08.494521 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 15 11:26:08.494578 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 15 11:26:08.496354 systemd[1]: Reached target initrd-switch-root.target. Jul 15 11:26:08.497878 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 15 11:26:08.497911 systemd[1]: Stopped initrd-setup-root.service. Jul 15 11:26:08.500108 systemd[1]: Starting initrd-switch-root.service... Jul 15 11:26:08.515551 systemd[1]: Switching root. Jul 15 11:26:08.533756 iscsid[731]: iscsid shutting down. Jul 15 11:26:08.534477 systemd-journald[199]: Received SIGTERM from PID 1 (systemd). Jul 15 11:26:08.534514 systemd-journald[199]: Journal stopped Jul 15 11:26:11.018921 kernel: SELinux: Class mctp_socket not defined in policy. Jul 15 11:26:11.018978 kernel: SELinux: Class anon_inode not defined in policy. Jul 15 11:26:11.018989 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 15 11:26:11.019003 kernel: SELinux: policy capability network_peer_controls=1 Jul 15 11:26:11.019012 kernel: SELinux: policy capability open_perms=1 Jul 15 11:26:11.019022 kernel: SELinux: policy capability extended_socket_class=1 Jul 15 11:26:11.019031 kernel: SELinux: policy capability always_check_network=0 Jul 15 11:26:11.019040 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 15 11:26:11.019051 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 15 11:26:11.019060 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 15 11:26:11.019071 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 15 11:26:11.019081 systemd[1]: Successfully loaded SELinux policy in 37.822ms. Jul 15 11:26:11.019098 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.381ms. Jul 15 11:26:11.019119 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 15 11:26:11.019129 systemd[1]: Detected virtualization kvm. Jul 15 11:26:11.019141 systemd[1]: Detected architecture x86-64. Jul 15 11:26:11.019151 systemd[1]: Detected first boot. Jul 15 11:26:11.019161 systemd[1]: Initializing machine ID from VM UUID. Jul 15 11:26:11.019172 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 15 11:26:11.019183 systemd[1]: Populated /etc with preset unit settings. Jul 15 11:26:11.019193 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:26:11.019205 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:26:11.019216 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:26:11.019244 systemd[1]: iscsid.service: Deactivated successfully. Jul 15 11:26:11.019255 systemd[1]: Stopped iscsid.service. Jul 15 11:26:11.019266 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 15 11:26:11.019276 systemd[1]: Stopped initrd-switch-root.service. Jul 15 11:26:11.019287 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 15 11:26:11.019298 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 15 11:26:11.019310 systemd[1]: Created slice system-addon\x2drun.slice. Jul 15 11:26:11.019320 systemd[1]: Created slice system-getty.slice. Jul 15 11:26:11.019331 systemd[1]: Created slice system-modprobe.slice. Jul 15 11:26:11.019344 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 15 11:26:11.019354 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 15 11:26:11.019364 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 15 11:26:11.019374 systemd[1]: Created slice user.slice. Jul 15 11:26:11.019384 systemd[1]: Started systemd-ask-password-console.path. Jul 15 11:26:11.019394 systemd[1]: Started systemd-ask-password-wall.path. Jul 15 11:26:11.019404 systemd[1]: Set up automount boot.automount. Jul 15 11:26:11.019413 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 15 11:26:11.019424 systemd[1]: Stopped target initrd-switch-root.target. Jul 15 11:26:11.019434 systemd[1]: Stopped target initrd-fs.target. Jul 15 11:26:11.019444 systemd[1]: Stopped target initrd-root-fs.target. Jul 15 11:26:11.019454 systemd[1]: Reached target integritysetup.target. Jul 15 11:26:11.019464 systemd[1]: Reached target remote-cryptsetup.target. Jul 15 11:26:11.019473 systemd[1]: Reached target remote-fs.target. Jul 15 11:26:11.019483 systemd[1]: Reached target slices.target. Jul 15 11:26:11.019493 systemd[1]: Reached target swap.target. Jul 15 11:26:11.019504 systemd[1]: Reached target torcx.target. Jul 15 11:26:11.019514 systemd[1]: Reached target veritysetup.target. Jul 15 11:26:11.019526 systemd[1]: Listening on systemd-coredump.socket. Jul 15 11:26:11.019535 systemd[1]: Listening on systemd-initctl.socket. Jul 15 11:26:11.019545 systemd[1]: Listening on systemd-networkd.socket. Jul 15 11:26:11.019555 systemd[1]: Listening on systemd-udevd-control.socket. Jul 15 11:26:11.019565 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 15 11:26:11.019576 systemd[1]: Listening on systemd-userdbd.socket. Jul 15 11:26:11.019585 systemd[1]: Mounting dev-hugepages.mount... Jul 15 11:26:11.019597 systemd[1]: Mounting dev-mqueue.mount... Jul 15 11:26:11.019607 systemd[1]: Mounting media.mount... Jul 15 11:26:11.019617 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:26:11.019627 systemd[1]: Mounting sys-kernel-debug.mount... Jul 15 11:26:11.019637 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 15 11:26:11.019647 systemd[1]: Mounting tmp.mount... Jul 15 11:26:11.019657 systemd[1]: Starting flatcar-tmpfiles.service... Jul 15 11:26:11.019666 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:26:11.019676 systemd[1]: Starting kmod-static-nodes.service... Jul 15 11:26:11.019690 systemd[1]: Starting modprobe@configfs.service... Jul 15 11:26:11.019700 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:26:11.019710 systemd[1]: Starting modprobe@drm.service... Jul 15 11:26:11.019719 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:26:11.019729 systemd[1]: Starting modprobe@fuse.service... Jul 15 11:26:11.019740 systemd[1]: Starting modprobe@loop.service... Jul 15 11:26:11.019751 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 15 11:26:11.019760 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 15 11:26:11.019773 systemd[1]: Stopped systemd-fsck-root.service. Jul 15 11:26:11.019784 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 15 11:26:11.019794 systemd[1]: Stopped systemd-fsck-usr.service. Jul 15 11:26:11.019812 kernel: fuse: init (API version 7.34) Jul 15 11:26:11.019822 kernel: loop: module loaded Jul 15 11:26:11.019833 systemd[1]: Stopped systemd-journald.service. Jul 15 11:26:11.019845 systemd[1]: Starting systemd-journald.service... Jul 15 11:26:11.019856 systemd[1]: Starting systemd-modules-load.service... Jul 15 11:26:11.019867 systemd[1]: Starting systemd-network-generator.service... Jul 15 11:26:11.019877 systemd[1]: Starting systemd-remount-fs.service... Jul 15 11:26:11.019888 systemd[1]: Starting systemd-udev-trigger.service... Jul 15 11:26:11.019898 systemd[1]: verity-setup.service: Deactivated successfully. Jul 15 11:26:11.019910 systemd-journald[994]: Journal started Jul 15 11:26:11.019946 systemd-journald[994]: Runtime Journal (/run/log/journal/526b73d402fe4e93a9b0101586866714) is 6.0M, max 48.5M, 42.5M free. Jul 15 11:26:08.590000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 15 11:26:08.780000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:26:08.780000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:26:08.780000 audit: BPF prog-id=10 op=LOAD Jul 15 11:26:08.780000 audit: BPF prog-id=10 op=UNLOAD Jul 15 11:26:08.780000 audit: BPF prog-id=11 op=LOAD Jul 15 11:26:08.780000 audit: BPF prog-id=11 op=UNLOAD Jul 15 11:26:08.808000 audit[909]: AVC avc: denied { associate } for pid=909 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 15 11:26:08.808000 audit[909]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001878e4 a1=c00002ae40 a2=c000029080 a3=32 items=0 ppid=892 pid=909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:08.808000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 15 11:26:08.809000 audit[909]: AVC avc: denied { associate } for pid=909 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 15 11:26:08.809000 audit[909]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001879b9 a2=1ed a3=0 items=2 ppid=892 pid=909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:08.809000 audit: CWD cwd="/" Jul 15 11:26:08.809000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:08.809000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:08.809000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 15 11:26:10.896000 audit: BPF prog-id=12 op=LOAD Jul 15 11:26:10.896000 audit: BPF prog-id=3 op=UNLOAD Jul 15 11:26:10.896000 audit: BPF prog-id=13 op=LOAD Jul 15 11:26:10.896000 audit: BPF prog-id=14 op=LOAD Jul 15 11:26:10.896000 audit: BPF prog-id=4 op=UNLOAD Jul 15 11:26:10.896000 audit: BPF prog-id=5 op=UNLOAD Jul 15 11:26:10.897000 audit: BPF prog-id=15 op=LOAD Jul 15 11:26:10.897000 audit: BPF prog-id=12 op=UNLOAD Jul 15 11:26:10.897000 audit: BPF prog-id=16 op=LOAD Jul 15 11:26:10.897000 audit: BPF prog-id=17 op=LOAD Jul 15 11:26:10.897000 audit: BPF prog-id=13 op=UNLOAD Jul 15 11:26:10.897000 audit: BPF prog-id=14 op=UNLOAD Jul 15 11:26:10.897000 audit: BPF prog-id=18 op=LOAD Jul 15 11:26:10.897000 audit: BPF prog-id=15 op=UNLOAD Jul 15 11:26:10.897000 audit: BPF prog-id=19 op=LOAD Jul 15 11:26:10.897000 audit: BPF prog-id=20 op=LOAD Jul 15 11:26:10.897000 audit: BPF prog-id=16 op=UNLOAD Jul 15 11:26:10.897000 audit: BPF prog-id=17 op=UNLOAD Jul 15 11:26:10.898000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:10.900000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:10.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:10.903000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:10.910000 audit: BPF prog-id=18 op=UNLOAD Jul 15 11:26:10.996000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.001000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.003000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.003000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.004000 audit: BPF prog-id=21 op=LOAD Jul 15 11:26:11.004000 audit: BPF prog-id=22 op=LOAD Jul 15 11:26:11.004000 audit: BPF prog-id=23 op=LOAD Jul 15 11:26:11.004000 audit: BPF prog-id=19 op=UNLOAD Jul 15 11:26:11.004000 audit: BPF prog-id=20 op=UNLOAD Jul 15 11:26:11.017000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 15 11:26:11.017000 audit[994]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=4 a1=7fff50f08eb0 a2=4000 a3=7fff50f08f4c items=0 ppid=1 pid=994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:11.017000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 15 11:26:10.894455 systemd[1]: Queued start job for default target multi-user.target. Jul 15 11:26:08.807080 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:26:08Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:26:10.894467 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 15 11:26:08.807323 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:26:08Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 15 11:26:10.898295 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 15 11:26:08.807342 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:26:08Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 15 11:26:08.807368 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:26:08Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 15 11:26:11.021502 systemd[1]: Stopped verity-setup.service. Jul 15 11:26:08.807377 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:26:08Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 15 11:26:08.807410 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:26:08Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 15 11:26:08.807423 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:26:08Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 15 11:26:08.807595 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:26:08Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 15 11:26:08.807628 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:26:08Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 15 11:26:08.807639 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:26:08Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 15 11:26:08.808113 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:26:08Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 15 11:26:08.808143 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:26:08Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 15 11:26:08.808160 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:26:08Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.100: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.100 Jul 15 11:26:08.808173 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:26:08Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 15 11:26:11.022000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:08.808188 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:26:08Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.100: no such file or directory" path=/var/lib/torcx/store/3510.3.100 Jul 15 11:26:08.808200 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:26:08Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 15 11:26:10.629138 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:26:10Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:26:10.629394 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:26:10Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:26:10.629477 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:26:10Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:26:10.629613 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:26:10Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:26:10.629658 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:26:10Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 15 11:26:10.629708 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-15T11:26:10Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 15 11:26:11.024251 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:26:11.026000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.027307 systemd[1]: Started systemd-journald.service. Jul 15 11:26:11.027590 systemd[1]: Mounted dev-hugepages.mount. Jul 15 11:26:11.028383 systemd[1]: Mounted dev-mqueue.mount. Jul 15 11:26:11.029126 systemd[1]: Mounted media.mount. Jul 15 11:26:11.029824 systemd[1]: Mounted sys-kernel-debug.mount. Jul 15 11:26:11.030634 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 15 11:26:11.031470 systemd[1]: Mounted tmp.mount. Jul 15 11:26:11.032335 systemd[1]: Finished flatcar-tmpfiles.service. Jul 15 11:26:11.032000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.033429 systemd[1]: Finished kmod-static-nodes.service. Jul 15 11:26:11.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.034402 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 15 11:26:11.034559 systemd[1]: Finished modprobe@configfs.service. Jul 15 11:26:11.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.035000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.035533 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:26:11.035708 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:26:11.036000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.036000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.036671 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 15 11:26:11.036859 systemd[1]: Finished modprobe@drm.service. Jul 15 11:26:11.037000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.037000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.037793 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:26:11.037975 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:26:11.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.038000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.038982 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 15 11:26:11.039138 systemd[1]: Finished modprobe@fuse.service. Jul 15 11:26:11.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.039000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.040076 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:26:11.040339 systemd[1]: Finished modprobe@loop.service. Jul 15 11:26:11.040000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.040000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.041418 systemd[1]: Finished systemd-modules-load.service. Jul 15 11:26:11.042000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.042591 systemd[1]: Finished systemd-network-generator.service. Jul 15 11:26:11.043000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.043833 systemd[1]: Finished systemd-remount-fs.service. Jul 15 11:26:11.044000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.045034 systemd[1]: Reached target network-pre.target. Jul 15 11:26:11.046844 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 15 11:26:11.048744 systemd[1]: Mounting sys-kernel-config.mount... Jul 15 11:26:11.049535 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 15 11:26:11.051242 systemd[1]: Starting systemd-hwdb-update.service... Jul 15 11:26:11.053154 systemd[1]: Starting systemd-journal-flush.service... Jul 15 11:26:11.054085 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:26:11.055197 systemd[1]: Starting systemd-random-seed.service... Jul 15 11:26:11.056051 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:26:11.057154 systemd[1]: Starting systemd-sysctl.service... Jul 15 11:26:11.058969 systemd[1]: Starting systemd-sysusers.service... Jul 15 11:26:11.061992 systemd-journald[994]: Time spent on flushing to /var/log/journal/526b73d402fe4e93a9b0101586866714 is 20.106ms for 1101 entries. Jul 15 11:26:11.061992 systemd-journald[994]: System Journal (/var/log/journal/526b73d402fe4e93a9b0101586866714) is 8.0M, max 195.6M, 187.6M free. Jul 15 11:26:11.100986 systemd-journald[994]: Received client request to flush runtime journal. Jul 15 11:26:11.072000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.076000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.080000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.100000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.061524 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 15 11:26:11.065564 systemd[1]: Mounted sys-kernel-config.mount. Jul 15 11:26:11.071371 systemd[1]: Finished systemd-random-seed.service. Jul 15 11:26:11.072615 systemd[1]: Reached target first-boot-complete.target. Jul 15 11:26:11.075943 systemd[1]: Finished systemd-sysctl.service. Jul 15 11:26:11.079698 systemd[1]: Finished systemd-sysusers.service. Jul 15 11:26:11.099328 systemd[1]: Finished systemd-udev-trigger.service. Jul 15 11:26:11.101725 systemd[1]: Starting systemd-udev-settle.service... Jul 15 11:26:11.102808 systemd[1]: Finished systemd-journal-flush.service. Jul 15 11:26:11.103000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.110965 udevadm[1014]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Jul 15 11:26:11.463602 systemd[1]: Finished systemd-hwdb-update.service. Jul 15 11:26:11.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.465000 audit: BPF prog-id=24 op=LOAD Jul 15 11:26:11.465000 audit: BPF prog-id=25 op=LOAD Jul 15 11:26:11.465000 audit: BPF prog-id=7 op=UNLOAD Jul 15 11:26:11.465000 audit: BPF prog-id=8 op=UNLOAD Jul 15 11:26:11.465947 systemd[1]: Starting systemd-udevd.service... Jul 15 11:26:11.480577 systemd-udevd[1015]: Using default interface naming scheme 'v252'. Jul 15 11:26:11.493063 systemd[1]: Started systemd-udevd.service. Jul 15 11:26:11.493000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.494000 audit: BPF prog-id=26 op=LOAD Jul 15 11:26:11.495578 systemd[1]: Starting systemd-networkd.service... Jul 15 11:26:11.501000 audit: BPF prog-id=27 op=LOAD Jul 15 11:26:11.501000 audit: BPF prog-id=28 op=LOAD Jul 15 11:26:11.501000 audit: BPF prog-id=29 op=LOAD Jul 15 11:26:11.502438 systemd[1]: Starting systemd-userdbd.service... Jul 15 11:26:11.518305 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 15 11:26:11.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.537273 systemd[1]: Started systemd-userdbd.service. Jul 15 11:26:11.553030 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 15 11:26:11.560262 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Jul 15 11:26:11.569250 kernel: ACPI: button: Power Button [PWRF] Jul 15 11:26:11.577953 systemd-networkd[1025]: lo: Link UP Jul 15 11:26:11.577962 systemd-networkd[1025]: lo: Gained carrier Jul 15 11:26:11.578679 systemd-networkd[1025]: Enumeration completed Jul 15 11:26:11.578803 systemd[1]: Started systemd-networkd.service. Jul 15 11:26:11.579079 systemd-networkd[1025]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 15 11:26:11.579000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.580733 systemd-networkd[1025]: eth0: Link UP Jul 15 11:26:11.580738 systemd-networkd[1025]: eth0: Gained carrier Jul 15 11:26:11.581000 audit[1034]: AVC avc: denied { confidentiality } for pid=1034 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 15 11:26:11.581000 audit[1034]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=560ebf781b70 a1=338ac a2=7f256434dbc5 a3=5 items=110 ppid=1015 pid=1034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:11.581000 audit: CWD cwd="/" Jul 15 11:26:11.581000 audit: PATH item=0 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=1 name=(null) inode=13671 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=2 name=(null) inode=13671 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=3 name=(null) inode=13672 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=4 name=(null) inode=13671 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=5 name=(null) inode=13673 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=6 name=(null) inode=13671 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=7 name=(null) inode=13674 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=8 name=(null) inode=13674 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=9 name=(null) inode=13675 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=10 name=(null) inode=13674 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=11 name=(null) inode=13676 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=12 name=(null) inode=13674 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=13 name=(null) inode=13677 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=14 name=(null) inode=13674 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=15 name=(null) inode=13678 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=16 name=(null) inode=13674 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=17 name=(null) inode=13679 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=18 name=(null) inode=13671 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=19 name=(null) inode=13680 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=20 name=(null) inode=13680 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=21 name=(null) inode=13681 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=22 name=(null) inode=13680 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=23 name=(null) inode=13682 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=24 name=(null) inode=13680 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=25 name=(null) inode=13683 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=26 name=(null) inode=13680 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=27 name=(null) inode=13684 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=28 name=(null) inode=13680 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=29 name=(null) inode=13685 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=30 name=(null) inode=13671 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=31 name=(null) inode=13686 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=32 name=(null) inode=13686 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=33 name=(null) inode=13687 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=34 name=(null) inode=13686 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=35 name=(null) inode=13688 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=36 name=(null) inode=13686 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=37 name=(null) inode=13689 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=38 name=(null) inode=13686 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=39 name=(null) inode=13690 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=40 name=(null) inode=13686 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=41 name=(null) inode=13691 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=42 name=(null) inode=13671 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=43 name=(null) inode=13692 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=44 name=(null) inode=13692 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=45 name=(null) inode=13693 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=46 name=(null) inode=13692 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=47 name=(null) inode=13694 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=48 name=(null) inode=13692 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=49 name=(null) inode=13695 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=50 name=(null) inode=13692 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=51 name=(null) inode=13696 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=52 name=(null) inode=13692 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=53 name=(null) inode=13697 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=54 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=55 name=(null) inode=13698 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=56 name=(null) inode=13698 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=57 name=(null) inode=13699 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=58 name=(null) inode=13698 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=59 name=(null) inode=13700 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=60 name=(null) inode=13698 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=61 name=(null) inode=13701 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=62 name=(null) inode=13701 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=63 name=(null) inode=13702 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=64 name=(null) inode=13701 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=65 name=(null) inode=13703 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=66 name=(null) inode=13701 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=67 name=(null) inode=13704 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=68 name=(null) inode=13701 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=69 name=(null) inode=13705 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=70 name=(null) inode=13701 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=71 name=(null) inode=13706 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=72 name=(null) inode=13698 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=73 name=(null) inode=13707 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=74 name=(null) inode=13707 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=75 name=(null) inode=13708 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=76 name=(null) inode=13707 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=77 name=(null) inode=13709 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=78 name=(null) inode=13707 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=79 name=(null) inode=13710 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=80 name=(null) inode=13707 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=81 name=(null) inode=13711 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=82 name=(null) inode=13707 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=83 name=(null) inode=13712 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=84 name=(null) inode=13698 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=85 name=(null) inode=13713 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=86 name=(null) inode=13713 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=87 name=(null) inode=13714 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=88 name=(null) inode=13713 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=89 name=(null) inode=13715 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=90 name=(null) inode=13713 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=91 name=(null) inode=13716 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=92 name=(null) inode=13713 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=93 name=(null) inode=13717 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=94 name=(null) inode=13713 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=95 name=(null) inode=13718 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=96 name=(null) inode=13698 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=97 name=(null) inode=13719 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=98 name=(null) inode=13719 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=99 name=(null) inode=13720 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=100 name=(null) inode=13719 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=101 name=(null) inode=13721 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=102 name=(null) inode=13719 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=103 name=(null) inode=13722 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=104 name=(null) inode=13719 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=105 name=(null) inode=13723 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=106 name=(null) inode=13719 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=107 name=(null) inode=13724 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PATH item=109 name=(null) inode=13725 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:11.581000 audit: PROCTITLE proctitle="(udev-worker)" Jul 15 11:26:11.593263 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Jul 15 11:26:11.593364 systemd-networkd[1025]: eth0: DHCPv4 address 10.0.0.18/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 15 11:26:11.607806 kernel: i801_smbus 0000:00:1f.3: SMBus using PCI interrupt Jul 15 11:26:11.608123 kernel: i2c i2c-0: 1/1 memory slots populated (from DMI) Jul 15 11:26:11.608257 kernel: i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD Jul 15 11:26:11.621251 kernel: mousedev: PS/2 mouse device common for all mice Jul 15 11:26:11.656264 kernel: kvm: Nested Virtualization enabled Jul 15 11:26:11.656402 kernel: SVM: kvm: Nested Paging enabled Jul 15 11:26:11.656438 kernel: SVM: Virtual VMLOAD VMSAVE supported Jul 15 11:26:11.656466 kernel: SVM: Virtual GIF supported Jul 15 11:26:11.676273 kernel: EDAC MC: Ver: 3.0.0 Jul 15 11:26:11.701675 systemd[1]: Finished systemd-udev-settle.service. Jul 15 11:26:11.702000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.704056 systemd[1]: Starting lvm2-activation-early.service... Jul 15 11:26:11.710952 lvm[1050]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 15 11:26:11.733911 systemd[1]: Finished lvm2-activation-early.service. Jul 15 11:26:11.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.734940 systemd[1]: Reached target cryptsetup.target. Jul 15 11:26:11.736756 systemd[1]: Starting lvm2-activation.service... Jul 15 11:26:11.739574 lvm[1051]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 15 11:26:11.764112 systemd[1]: Finished lvm2-activation.service. Jul 15 11:26:11.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.765211 systemd[1]: Reached target local-fs-pre.target. Jul 15 11:26:11.766090 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 15 11:26:11.766108 systemd[1]: Reached target local-fs.target. Jul 15 11:26:11.767057 systemd[1]: Reached target machines.target. Jul 15 11:26:11.769071 systemd[1]: Starting ldconfig.service... Jul 15 11:26:11.770090 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:26:11.770138 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:26:11.770995 systemd[1]: Starting systemd-boot-update.service... Jul 15 11:26:11.772659 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 15 11:26:11.775222 systemd[1]: Starting systemd-machine-id-commit.service... Jul 15 11:26:11.776998 systemd[1]: Starting systemd-sysext.service... Jul 15 11:26:11.778007 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1053 (bootctl) Jul 15 11:26:11.778824 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 15 11:26:11.782770 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 15 11:26:11.783000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.789356 systemd[1]: Unmounting usr-share-oem.mount... Jul 15 11:26:11.792816 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 15 11:26:11.792991 systemd[1]: Unmounted usr-share-oem.mount. Jul 15 11:26:11.805258 kernel: loop0: detected capacity change from 0 to 224512 Jul 15 11:26:11.811108 systemd-fsck[1060]: fsck.fat 4.2 (2021-01-31) Jul 15 11:26:11.811108 systemd-fsck[1060]: /dev/vda1: 790 files, 120725/258078 clusters Jul 15 11:26:11.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:11.813175 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 15 11:26:11.867736 systemd[1]: Mounting boot.mount... Jul 15 11:26:11.886723 systemd[1]: Mounted boot.mount. Jul 15 11:26:12.325956 systemd[1]: Finished systemd-boot-update.service. Jul 15 11:26:12.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:12.329245 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 15 11:26:12.341242 kernel: loop1: detected capacity change from 0 to 224512 Jul 15 11:26:12.344823 (sd-sysext)[1066]: Using extensions 'kubernetes'. Jul 15 11:26:12.345204 (sd-sysext)[1066]: Merged extensions into '/usr'. Jul 15 11:26:12.361009 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:26:12.362475 systemd[1]: Mounting usr-share-oem.mount... Jul 15 11:26:12.363744 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:26:12.365595 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:26:12.367536 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:26:12.369776 systemd[1]: Starting modprobe@loop.service... Jul 15 11:26:12.370655 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:26:12.370808 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:26:12.370949 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:26:12.373681 systemd[1]: Mounted usr-share-oem.mount. Jul 15 11:26:12.374887 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:26:12.375025 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:26:12.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:12.375000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:12.376386 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:26:12.376518 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:26:12.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:12.377000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:12.377849 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:26:12.377963 systemd[1]: Finished modprobe@loop.service. Jul 15 11:26:12.378000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:12.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:12.379325 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:26:12.379421 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:26:12.380387 systemd[1]: Finished systemd-sysext.service. Jul 15 11:26:12.380000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:12.382090 systemd[1]: Starting ensure-sysext.service... Jul 15 11:26:12.383593 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 15 11:26:12.388287 systemd[1]: Reloading. Jul 15 11:26:12.395368 ldconfig[1052]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 15 11:26:12.395651 systemd-tmpfiles[1073]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 15 11:26:12.397614 systemd-tmpfiles[1073]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 15 11:26:12.400220 systemd-tmpfiles[1073]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 15 11:26:12.431161 /usr/lib/systemd/system-generators/torcx-generator[1094]: time="2025-07-15T11:26:12Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:26:12.431185 /usr/lib/systemd/system-generators/torcx-generator[1094]: time="2025-07-15T11:26:12Z" level=info msg="torcx already run" Jul 15 11:26:12.643986 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:26:12.644002 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:26:12.660341 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:26:12.709000 audit: BPF prog-id=30 op=LOAD Jul 15 11:26:12.709000 audit: BPF prog-id=26 op=UNLOAD Jul 15 11:26:12.710000 audit: BPF prog-id=31 op=LOAD Jul 15 11:26:12.710000 audit: BPF prog-id=27 op=UNLOAD Jul 15 11:26:12.710000 audit: BPF prog-id=32 op=LOAD Jul 15 11:26:12.710000 audit: BPF prog-id=33 op=LOAD Jul 15 11:26:12.710000 audit: BPF prog-id=28 op=UNLOAD Jul 15 11:26:12.710000 audit: BPF prog-id=29 op=UNLOAD Jul 15 11:26:12.711000 audit: BPF prog-id=34 op=LOAD Jul 15 11:26:12.711000 audit: BPF prog-id=21 op=UNLOAD Jul 15 11:26:12.712000 audit: BPF prog-id=35 op=LOAD Jul 15 11:26:12.712000 audit: BPF prog-id=36 op=LOAD Jul 15 11:26:12.712000 audit: BPF prog-id=22 op=UNLOAD Jul 15 11:26:12.712000 audit: BPF prog-id=23 op=UNLOAD Jul 15 11:26:12.712000 audit: BPF prog-id=37 op=LOAD Jul 15 11:26:12.712000 audit: BPF prog-id=38 op=LOAD Jul 15 11:26:12.712000 audit: BPF prog-id=24 op=UNLOAD Jul 15 11:26:12.712000 audit: BPF prog-id=25 op=UNLOAD Jul 15 11:26:12.716106 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 15 11:26:12.717136 systemd[1]: Finished ldconfig.service. Jul 15 11:26:12.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:12.718120 systemd[1]: Finished systemd-machine-id-commit.service. Jul 15 11:26:12.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:12.719773 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 15 11:26:12.720000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:12.722937 systemd[1]: Starting audit-rules.service... Jul 15 11:26:12.724553 systemd[1]: Starting clean-ca-certificates.service... Jul 15 11:26:12.727000 audit: BPF prog-id=39 op=LOAD Jul 15 11:26:12.726256 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 15 11:26:12.728672 systemd[1]: Starting systemd-resolved.service... Jul 15 11:26:12.729000 audit: BPF prog-id=40 op=LOAD Jul 15 11:26:12.730559 systemd[1]: Starting systemd-timesyncd.service... Jul 15 11:26:12.732115 systemd[1]: Starting systemd-update-utmp.service... Jul 15 11:26:12.733363 systemd[1]: Finished clean-ca-certificates.service. Jul 15 11:26:12.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:12.735000 audit[1146]: SYSTEM_BOOT pid=1146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 15 11:26:12.739066 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:26:12.739288 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:26:12.740649 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:26:12.742612 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:26:12.744384 systemd[1]: Starting modprobe@loop.service... Jul 15 11:26:12.745159 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:26:12.745349 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:26:12.745505 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:26:12.745624 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:26:12.746980 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 15 11:26:12.747000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:12.748474 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:26:12.748572 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:26:12.749000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:12.749000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:12.749967 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:26:12.750075 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:26:12.750000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:12.751000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:12.751501 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:26:12.751588 systemd[1]: Finished modprobe@loop.service. Jul 15 11:26:12.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:12.752000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:12.754395 systemd[1]: Finished systemd-update-utmp.service. Jul 15 11:26:12.755723 augenrules[1158]: No rules Jul 15 11:26:12.755000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 15 11:26:12.755000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:12.755000 audit[1158]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffcb94345f0 a2=420 a3=0 items=0 ppid=1135 pid=1158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:12.755000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 15 11:26:12.756699 systemd[1]: Finished audit-rules.service. Jul 15 11:26:12.757719 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:26:12.757906 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:26:12.758956 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:26:12.760670 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:26:12.762396 systemd[1]: Starting modprobe@loop.service... Jul 15 11:26:12.763208 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:26:12.763429 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:26:12.764365 systemd[1]: Starting systemd-update-done.service... Jul 15 11:26:12.765426 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:26:12.765507 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:26:12.766390 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:26:12.766499 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:26:12.767823 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:26:12.767918 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:26:12.769113 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:26:12.769210 systemd[1]: Finished modprobe@loop.service. Jul 15 11:26:12.770334 systemd[1]: Finished systemd-update-done.service. Jul 15 11:26:12.771517 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:26:12.771611 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:26:12.773910 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:26:12.774213 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:26:12.776111 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:26:12.777857 systemd[1]: Starting modprobe@drm.service... Jul 15 11:26:12.779672 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:26:12.781647 systemd[1]: Starting modprobe@loop.service... Jul 15 11:26:12.782634 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:26:12.782733 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:26:12.783629 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 15 11:26:12.784732 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:26:12.784856 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:26:12.785777 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:26:12.785878 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:26:12.787163 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 15 11:26:12.787279 systemd[1]: Finished modprobe@drm.service. Jul 15 11:26:12.788271 systemd-resolved[1141]: Positive Trust Anchors: Jul 15 11:26:12.788460 systemd-resolved[1141]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 15 11:26:12.788539 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:26:12.788616 systemd-resolved[1141]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 15 11:26:12.788632 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:26:12.789970 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:26:12.790053 systemd[1]: Finished modprobe@loop.service. Jul 15 11:26:12.791462 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:26:12.791548 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:26:12.792284 systemd[1]: Started systemd-timesyncd.service. Jul 15 11:26:13.852667 systemd-timesyncd[1142]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 15 11:26:13.852707 systemd-timesyncd[1142]: Initial clock synchronization to Tue 2025-07-15 11:26:13.852582 UTC. Jul 15 11:26:13.853639 systemd[1]: Finished ensure-sysext.service. Jul 15 11:26:13.854775 systemd[1]: Reached target time-set.target. Jul 15 11:26:13.859288 systemd-resolved[1141]: Defaulting to hostname 'linux'. Jul 15 11:26:13.860615 systemd[1]: Started systemd-resolved.service. Jul 15 11:26:13.861485 systemd[1]: Reached target network.target. Jul 15 11:26:13.862285 systemd[1]: Reached target nss-lookup.target. Jul 15 11:26:13.863136 systemd[1]: Reached target sysinit.target. Jul 15 11:26:13.863977 systemd[1]: Started motdgen.path. Jul 15 11:26:13.864750 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 15 11:26:13.865970 systemd[1]: Started logrotate.timer. Jul 15 11:26:13.866804 systemd[1]: Started mdadm.timer. Jul 15 11:26:13.867518 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 15 11:26:13.868389 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 15 11:26:13.868410 systemd[1]: Reached target paths.target. Jul 15 11:26:13.869265 systemd[1]: Reached target timers.target. Jul 15 11:26:13.870312 systemd[1]: Listening on dbus.socket. Jul 15 11:26:13.871852 systemd[1]: Starting docker.socket... Jul 15 11:26:13.874151 systemd[1]: Listening on sshd.socket. Jul 15 11:26:13.874987 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:26:13.875327 systemd[1]: Listening on docker.socket. Jul 15 11:26:13.876157 systemd[1]: Reached target sockets.target. Jul 15 11:26:13.876949 systemd[1]: Reached target basic.target. Jul 15 11:26:13.877796 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 15 11:26:13.877821 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 15 11:26:13.878483 systemd[1]: Starting containerd.service... Jul 15 11:26:13.880005 systemd[1]: Starting dbus.service... Jul 15 11:26:13.881461 systemd[1]: Starting enable-oem-cloudinit.service... Jul 15 11:26:13.883247 systemd[1]: Starting extend-filesystems.service... Jul 15 11:26:13.884250 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 15 11:26:13.884973 systemd[1]: Starting motdgen.service... Jul 15 11:26:13.886146 jq[1177]: false Jul 15 11:26:13.886589 systemd[1]: Starting prepare-helm.service... Jul 15 11:26:13.888232 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 15 11:26:13.890053 systemd[1]: Starting sshd-keygen.service... Jul 15 11:26:13.892954 systemd[1]: Starting systemd-logind.service... Jul 15 11:26:13.893845 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:26:13.893903 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 15 11:26:13.894269 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 15 11:26:13.894777 systemd[1]: Starting update-engine.service... Jul 15 11:26:13.898497 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 15 11:26:13.901536 jq[1196]: true Jul 15 11:26:13.902975 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 15 11:26:13.903148 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 15 11:26:13.903405 systemd[1]: motdgen.service: Deactivated successfully. Jul 15 11:26:13.903529 systemd[1]: Finished motdgen.service. Jul 15 11:26:13.905704 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 15 11:26:13.905838 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 15 11:26:13.906250 extend-filesystems[1178]: Found loop1 Jul 15 11:26:13.907944 extend-filesystems[1178]: Found sr0 Jul 15 11:26:13.907944 extend-filesystems[1178]: Found vda Jul 15 11:26:13.907944 extend-filesystems[1178]: Found vda1 Jul 15 11:26:13.907944 extend-filesystems[1178]: Found vda2 Jul 15 11:26:13.907944 extend-filesystems[1178]: Found vda3 Jul 15 11:26:13.907944 extend-filesystems[1178]: Found usr Jul 15 11:26:13.907944 extend-filesystems[1178]: Found vda4 Jul 15 11:26:13.907944 extend-filesystems[1178]: Found vda6 Jul 15 11:26:13.907944 extend-filesystems[1178]: Found vda7 Jul 15 11:26:13.907944 extend-filesystems[1178]: Found vda9 Jul 15 11:26:13.907944 extend-filesystems[1178]: Checking size of /dev/vda9 Jul 15 11:26:13.910851 dbus-daemon[1176]: [system] SELinux support is enabled Jul 15 11:26:13.915298 systemd[1]: Started dbus.service. Jul 15 11:26:13.919746 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 15 11:26:13.919775 systemd[1]: Reached target system-config.target. Jul 15 11:26:13.919846 tar[1198]: linux-amd64/LICENSE Jul 15 11:26:13.919990 tar[1198]: linux-amd64/helm Jul 15 11:26:13.920817 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 15 11:26:13.920845 systemd[1]: Reached target user-config.target. Jul 15 11:26:13.929404 update_engine[1193]: I0715 11:26:13.929271 1193 main.cc:92] Flatcar Update Engine starting Jul 15 11:26:13.930350 jq[1202]: true Jul 15 11:26:13.931002 update_engine[1193]: I0715 11:26:13.930975 1193 update_check_scheduler.cc:74] Next update check in 7m42s Jul 15 11:26:13.931192 systemd[1]: Started update-engine.service. Jul 15 11:26:13.933622 systemd[1]: Started locksmithd.service. Jul 15 11:26:13.944558 env[1203]: time="2025-07-15T11:26:13.944345385Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 15 11:26:13.945890 extend-filesystems[1178]: Resized partition /dev/vda9 Jul 15 11:26:13.949482 extend-filesystems[1226]: resize2fs 1.46.5 (30-Dec-2021) Jul 15 11:26:13.951307 systemd-logind[1191]: Watching system buttons on /dev/input/event1 (Power Button) Jul 15 11:26:13.951614 systemd-logind[1191]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 15 11:26:13.953124 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 15 11:26:13.955905 systemd-logind[1191]: New seat seat0. Jul 15 11:26:13.959582 systemd[1]: Started systemd-logind.service. Jul 15 11:26:13.971508 env[1203]: time="2025-07-15T11:26:13.971466818Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 15 11:26:13.973769 env[1203]: time="2025-07-15T11:26:13.973741734Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:26:13.974948 env[1203]: time="2025-07-15T11:26:13.974918199Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.188-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:26:13.974948 env[1203]: time="2025-07-15T11:26:13.974944168Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:26:13.975119 env[1203]: time="2025-07-15T11:26:13.975086154Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:26:13.975119 env[1203]: time="2025-07-15T11:26:13.975114377Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 15 11:26:13.975193 env[1203]: time="2025-07-15T11:26:13.975125228Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 15 11:26:13.975193 env[1203]: time="2025-07-15T11:26:13.975133944Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 15 11:26:13.975232 env[1203]: time="2025-07-15T11:26:13.975192454Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:26:13.975399 env[1203]: time="2025-07-15T11:26:13.975375016Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:26:13.975502 env[1203]: time="2025-07-15T11:26:13.975477628Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:26:13.975502 env[1203]: time="2025-07-15T11:26:13.975495702Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 15 11:26:13.975561 env[1203]: time="2025-07-15T11:26:13.975533894Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 15 11:26:13.975561 env[1203]: time="2025-07-15T11:26:13.975543963Z" level=info msg="metadata content store policy set" policy=shared Jul 15 11:26:13.977093 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 15 11:26:14.017533 extend-filesystems[1226]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 15 11:26:14.017533 extend-filesystems[1226]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 15 11:26:14.017533 extend-filesystems[1226]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 15 11:26:14.023095 extend-filesystems[1178]: Resized filesystem in /dev/vda9 Jul 15 11:26:14.017752 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 15 11:26:14.017890 systemd[1]: Finished extend-filesystems.service. Jul 15 11:26:14.026131 env[1203]: time="2025-07-15T11:26:14.024562623Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 15 11:26:14.026131 env[1203]: time="2025-07-15T11:26:14.024626673Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 15 11:26:14.026131 env[1203]: time="2025-07-15T11:26:14.024640950Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 15 11:26:14.026131 env[1203]: time="2025-07-15T11:26:14.024722352Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 15 11:26:14.026131 env[1203]: time="2025-07-15T11:26:14.024738533Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 15 11:26:14.026131 env[1203]: time="2025-07-15T11:26:14.024772727Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 15 11:26:14.026131 env[1203]: time="2025-07-15T11:26:14.024788867Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 15 11:26:14.026131 env[1203]: time="2025-07-15T11:26:14.024805127Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 15 11:26:14.026131 env[1203]: time="2025-07-15T11:26:14.024818523Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 15 11:26:14.026131 env[1203]: time="2025-07-15T11:26:14.024845824Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 15 11:26:14.026131 env[1203]: time="2025-07-15T11:26:14.024858568Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 15 11:26:14.026131 env[1203]: time="2025-07-15T11:26:14.024869338Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 15 11:26:14.026131 env[1203]: time="2025-07-15T11:26:14.024972601Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 15 11:26:14.026131 env[1203]: time="2025-07-15T11:26:14.025084822Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 15 11:26:14.026411 bash[1231]: Updated "/home/core/.ssh/authorized_keys" Jul 15 11:26:14.026551 env[1203]: time="2025-07-15T11:26:14.025372321Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 15 11:26:14.026551 env[1203]: time="2025-07-15T11:26:14.025393531Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 15 11:26:14.026551 env[1203]: time="2025-07-15T11:26:14.025404451Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 15 11:26:14.026551 env[1203]: time="2025-07-15T11:26:14.025458733Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 15 11:26:14.026551 env[1203]: time="2025-07-15T11:26:14.025473591Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 15 11:26:14.026551 env[1203]: time="2025-07-15T11:26:14.025488268Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 15 11:26:14.026551 env[1203]: time="2025-07-15T11:26:14.025562187Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 15 11:26:14.026551 env[1203]: time="2025-07-15T11:26:14.025594197Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 15 11:26:14.026551 env[1203]: time="2025-07-15T11:26:14.025605729Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 15 11:26:14.026551 env[1203]: time="2025-07-15T11:26:14.025616369Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 15 11:26:14.026551 env[1203]: time="2025-07-15T11:26:14.025625926Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 15 11:26:14.026551 env[1203]: time="2025-07-15T11:26:14.025638079Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 15 11:26:14.026551 env[1203]: time="2025-07-15T11:26:14.025773754Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 15 11:26:14.026551 env[1203]: time="2025-07-15T11:26:14.025786638Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 15 11:26:14.026551 env[1203]: time="2025-07-15T11:26:14.025796536Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 15 11:26:14.026867 env[1203]: time="2025-07-15T11:26:14.025823387Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 15 11:26:14.026867 env[1203]: time="2025-07-15T11:26:14.025837072Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 15 11:26:14.026867 env[1203]: time="2025-07-15T11:26:14.025847221Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 15 11:26:14.026867 env[1203]: time="2025-07-15T11:26:14.025868411Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 15 11:26:14.026867 env[1203]: time="2025-07-15T11:26:14.025917513Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 15 11:26:14.026966 env[1203]: time="2025-07-15T11:26:14.026207497Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 15 11:26:14.026966 env[1203]: time="2025-07-15T11:26:14.026256048Z" level=info msg="Connect containerd service" Jul 15 11:26:14.026966 env[1203]: time="2025-07-15T11:26:14.026280384Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 15 11:26:14.026966 env[1203]: time="2025-07-15T11:26:14.026802973Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 15 11:26:14.026966 env[1203]: time="2025-07-15T11:26:14.026903772Z" level=info msg="Start subscribing containerd event" Jul 15 11:26:14.026966 env[1203]: time="2025-07-15T11:26:14.026939219Z" level=info msg="Start recovering state" Jul 15 11:26:14.027625 env[1203]: time="2025-07-15T11:26:14.026981889Z" level=info msg="Start event monitor" Jul 15 11:26:14.027625 env[1203]: time="2025-07-15T11:26:14.026994563Z" level=info msg="Start snapshots syncer" Jul 15 11:26:14.027625 env[1203]: time="2025-07-15T11:26:14.027002307Z" level=info msg="Start cni network conf syncer for default" Jul 15 11:26:14.027625 env[1203]: time="2025-07-15T11:26:14.027008559Z" level=info msg="Start streaming server" Jul 15 11:26:14.027608 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 15 11:26:14.029297 env[1203]: time="2025-07-15T11:26:14.029275539Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 15 11:26:14.029339 env[1203]: time="2025-07-15T11:26:14.029328198Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 15 11:26:14.029434 systemd[1]: Started containerd.service. Jul 15 11:26:14.030974 env[1203]: time="2025-07-15T11:26:14.030945861Z" level=info msg="containerd successfully booted in 0.087104s" Jul 15 11:26:14.041131 locksmithd[1210]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 15 11:26:14.362924 tar[1198]: linux-amd64/README.md Jul 15 11:26:14.367243 systemd[1]: Finished prepare-helm.service. Jul 15 11:26:14.422305 systemd-networkd[1025]: eth0: Gained IPv6LL Jul 15 11:26:14.423854 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 15 11:26:14.425155 systemd[1]: Reached target network-online.target. Jul 15 11:26:14.427278 systemd[1]: Starting kubelet.service... Jul 15 11:26:14.564613 sshd_keygen[1195]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 15 11:26:14.588281 systemd[1]: Finished sshd-keygen.service. Jul 15 11:26:14.591630 systemd[1]: Starting issuegen.service... Jul 15 11:26:14.597781 systemd[1]: issuegen.service: Deactivated successfully. Jul 15 11:26:14.597960 systemd[1]: Finished issuegen.service. Jul 15 11:26:14.601181 systemd[1]: Starting systemd-user-sessions.service... Jul 15 11:26:14.608267 systemd[1]: Finished systemd-user-sessions.service. Jul 15 11:26:14.611303 systemd[1]: Started getty@tty1.service. Jul 15 11:26:14.613202 systemd[1]: Started serial-getty@ttyS0.service. Jul 15 11:26:14.614338 systemd[1]: Reached target getty.target. Jul 15 11:26:15.077398 systemd[1]: Started kubelet.service. Jul 15 11:26:15.078692 systemd[1]: Reached target multi-user.target. Jul 15 11:26:15.080712 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 15 11:26:15.086759 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 15 11:26:15.086887 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 15 11:26:15.088005 systemd[1]: Startup finished in 590ms (kernel) + 4.843s (initrd) + 5.477s (userspace) = 10.910s. Jul 15 11:26:15.452294 kubelet[1257]: E0715 11:26:15.452178 1257 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:26:15.453435 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:26:15.453537 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:26:17.759228 systemd[1]: Created slice system-sshd.slice. Jul 15 11:26:17.760165 systemd[1]: Started sshd@0-10.0.0.18:22-10.0.0.1:54326.service. Jul 15 11:26:17.792182 sshd[1266]: Accepted publickey for core from 10.0.0.1 port 54326 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:26:17.793317 sshd[1266]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:26:17.802551 systemd-logind[1191]: New session 1 of user core. Jul 15 11:26:17.803687 systemd[1]: Created slice user-500.slice. Jul 15 11:26:17.804793 systemd[1]: Starting user-runtime-dir@500.service... Jul 15 11:26:17.814186 systemd[1]: Finished user-runtime-dir@500.service. Jul 15 11:26:17.815842 systemd[1]: Starting user@500.service... Jul 15 11:26:17.818504 (systemd)[1269]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:26:17.897854 systemd[1269]: Queued start job for default target default.target. Jul 15 11:26:17.898321 systemd[1269]: Reached target paths.target. Jul 15 11:26:17.898347 systemd[1269]: Reached target sockets.target. Jul 15 11:26:17.898363 systemd[1269]: Reached target timers.target. Jul 15 11:26:17.898377 systemd[1269]: Reached target basic.target. Jul 15 11:26:17.898411 systemd[1269]: Reached target default.target. Jul 15 11:26:17.898431 systemd[1269]: Startup finished in 74ms. Jul 15 11:26:17.898558 systemd[1]: Started user@500.service. Jul 15 11:26:17.899725 systemd[1]: Started session-1.scope. Jul 15 11:26:17.952141 systemd[1]: Started sshd@1-10.0.0.18:22-10.0.0.1:54340.service. Jul 15 11:26:17.985862 sshd[1278]: Accepted publickey for core from 10.0.0.1 port 54340 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:26:17.987101 sshd[1278]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:26:17.990914 systemd-logind[1191]: New session 2 of user core. Jul 15 11:26:17.991952 systemd[1]: Started session-2.scope. Jul 15 11:26:18.045136 sshd[1278]: pam_unix(sshd:session): session closed for user core Jul 15 11:26:18.047998 systemd[1]: sshd@1-10.0.0.18:22-10.0.0.1:54340.service: Deactivated successfully. Jul 15 11:26:18.048515 systemd[1]: session-2.scope: Deactivated successfully. Jul 15 11:26:18.049019 systemd-logind[1191]: Session 2 logged out. Waiting for processes to exit. Jul 15 11:26:18.049968 systemd[1]: Started sshd@2-10.0.0.18:22-10.0.0.1:54346.service. Jul 15 11:26:18.050740 systemd-logind[1191]: Removed session 2. Jul 15 11:26:18.082110 sshd[1284]: Accepted publickey for core from 10.0.0.1 port 54346 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:26:18.083046 sshd[1284]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:26:18.086194 systemd-logind[1191]: New session 3 of user core. Jul 15 11:26:18.086912 systemd[1]: Started session-3.scope. Jul 15 11:26:18.136712 sshd[1284]: pam_unix(sshd:session): session closed for user core Jul 15 11:26:18.139847 systemd[1]: Started sshd@3-10.0.0.18:22-10.0.0.1:54362.service. Jul 15 11:26:18.140256 systemd[1]: sshd@2-10.0.0.18:22-10.0.0.1:54346.service: Deactivated successfully. Jul 15 11:26:18.140861 systemd[1]: session-3.scope: Deactivated successfully. Jul 15 11:26:18.141397 systemd-logind[1191]: Session 3 logged out. Waiting for processes to exit. Jul 15 11:26:18.142152 systemd-logind[1191]: Removed session 3. Jul 15 11:26:18.170457 sshd[1289]: Accepted publickey for core from 10.0.0.1 port 54362 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:26:18.171522 sshd[1289]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:26:18.174680 systemd-logind[1191]: New session 4 of user core. Jul 15 11:26:18.175572 systemd[1]: Started session-4.scope. Jul 15 11:26:18.228937 sshd[1289]: pam_unix(sshd:session): session closed for user core Jul 15 11:26:18.231852 systemd[1]: sshd@3-10.0.0.18:22-10.0.0.1:54362.service: Deactivated successfully. Jul 15 11:26:18.232499 systemd[1]: session-4.scope: Deactivated successfully. Jul 15 11:26:18.232992 systemd-logind[1191]: Session 4 logged out. Waiting for processes to exit. Jul 15 11:26:18.234217 systemd[1]: Started sshd@4-10.0.0.18:22-10.0.0.1:54370.service. Jul 15 11:26:18.234867 systemd-logind[1191]: Removed session 4. Jul 15 11:26:18.263088 sshd[1297]: Accepted publickey for core from 10.0.0.1 port 54370 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:26:18.264148 sshd[1297]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:26:18.267313 systemd-logind[1191]: New session 5 of user core. Jul 15 11:26:18.268134 systemd[1]: Started session-5.scope. Jul 15 11:26:18.323239 sudo[1300]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 15 11:26:18.323417 sudo[1300]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:26:18.332302 dbus-daemon[1176]: н\xe7R\xa3U: received setenforce notice (enforcing=-1307295248) Jul 15 11:26:18.334435 sudo[1300]: pam_unix(sudo:session): session closed for user root Jul 15 11:26:18.336062 sshd[1297]: pam_unix(sshd:session): session closed for user core Jul 15 11:26:18.338842 systemd[1]: sshd@4-10.0.0.18:22-10.0.0.1:54370.service: Deactivated successfully. Jul 15 11:26:18.339342 systemd[1]: session-5.scope: Deactivated successfully. Jul 15 11:26:18.339844 systemd-logind[1191]: Session 5 logged out. Waiting for processes to exit. Jul 15 11:26:18.340850 systemd[1]: Started sshd@5-10.0.0.18:22-10.0.0.1:54378.service. Jul 15 11:26:18.341480 systemd-logind[1191]: Removed session 5. Jul 15 11:26:18.370586 sshd[1304]: Accepted publickey for core from 10.0.0.1 port 54378 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:26:18.371638 sshd[1304]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:26:18.374884 systemd-logind[1191]: New session 6 of user core. Jul 15 11:26:18.375614 systemd[1]: Started session-6.scope. Jul 15 11:26:18.426718 sudo[1308]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 15 11:26:18.426907 sudo[1308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:26:18.429477 sudo[1308]: pam_unix(sudo:session): session closed for user root Jul 15 11:26:18.433731 sudo[1307]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 15 11:26:18.433911 sudo[1307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:26:18.441526 systemd[1]: Stopping audit-rules.service... Jul 15 11:26:18.441000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 15 11:26:18.442884 auditctl[1311]: No rules Jul 15 11:26:18.443178 systemd[1]: audit-rules.service: Deactivated successfully. Jul 15 11:26:18.443302 systemd[1]: Stopped audit-rules.service. Jul 15 11:26:18.443558 kernel: kauditd_printk_skb: 280 callbacks suppressed Jul 15 11:26:18.443597 kernel: audit: type=1305 audit(1752578778.441:201): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 15 11:26:18.444487 systemd[1]: Starting audit-rules.service... Jul 15 11:26:18.441000 audit[1311]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffeeb6621c0 a2=420 a3=0 items=0 ppid=1 pid=1311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:18.452262 kernel: audit: type=1300 audit(1752578778.441:201): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffeeb6621c0 a2=420 a3=0 items=0 ppid=1 pid=1311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:18.452350 kernel: audit: type=1327 audit(1752578778.441:201): proctitle=2F7362696E2F617564697463746C002D44 Jul 15 11:26:18.452365 kernel: audit: type=1131 audit(1752578778.442:202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:18.441000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 15 11:26:18.442000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:18.459211 augenrules[1328]: No rules Jul 15 11:26:18.459729 systemd[1]: Finished audit-rules.service. Jul 15 11:26:18.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:18.460695 sudo[1307]: pam_unix(sudo:session): session closed for user root Jul 15 11:26:18.459000 audit[1307]: USER_END pid=1307 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:26:18.463218 sshd[1304]: pam_unix(sshd:session): session closed for user core Jul 15 11:26:18.465401 systemd[1]: sshd@5-10.0.0.18:22-10.0.0.1:54378.service: Deactivated successfully. Jul 15 11:26:18.465889 systemd[1]: session-6.scope: Deactivated successfully. Jul 15 11:26:18.466321 systemd-logind[1191]: Session 6 logged out. Waiting for processes to exit. Jul 15 11:26:18.466424 kernel: audit: type=1130 audit(1752578778.458:203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:18.466445 kernel: audit: type=1106 audit(1752578778.459:204): pid=1307 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:26:18.466460 kernel: audit: type=1104 audit(1752578778.459:205): pid=1307 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:26:18.459000 audit[1307]: CRED_DISP pid=1307 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:26:18.469528 kernel: audit: type=1106 audit(1752578778.462:206): pid=1304 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:18.462000 audit[1304]: USER_END pid=1304 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:18.469855 systemd[1]: Started sshd@6-10.0.0.18:22-10.0.0.1:54386.service. Jul 15 11:26:18.470250 systemd-logind[1191]: Removed session 6. Jul 15 11:26:18.462000 audit[1304]: CRED_DISP pid=1304 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:18.476874 kernel: audit: type=1104 audit(1752578778.462:207): pid=1304 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:18.476952 kernel: audit: type=1131 audit(1752578778.464:208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.18:22-10.0.0.1:54378 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:18.464000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.18:22-10.0.0.1:54378 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:18.468000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.18:22-10.0.0.1:54386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:18.500000 audit[1334]: USER_ACCT pid=1334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:18.501673 sshd[1334]: Accepted publickey for core from 10.0.0.1 port 54386 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:26:18.501000 audit[1334]: CRED_ACQ pid=1334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:18.501000 audit[1334]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff5d45ab30 a2=3 a3=0 items=0 ppid=1 pid=1334 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:18.501000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:26:18.502753 sshd[1334]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:26:18.506054 systemd-logind[1191]: New session 7 of user core. Jul 15 11:26:18.506767 systemd[1]: Started session-7.scope. Jul 15 11:26:18.509000 audit[1334]: USER_START pid=1334 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:18.510000 audit[1336]: CRED_ACQ pid=1336 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:18.558000 audit[1337]: USER_ACCT pid=1337 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:26:18.559450 sudo[1337]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 15 11:26:18.558000 audit[1337]: CRED_REFR pid=1337 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:26:18.559719 sudo[1337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:26:18.560000 audit[1337]: USER_START pid=1337 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:26:18.577874 systemd[1]: Starting docker.service... Jul 15 11:26:18.610153 env[1349]: time="2025-07-15T11:26:18.610088753Z" level=info msg="Starting up" Jul 15 11:26:18.611495 env[1349]: time="2025-07-15T11:26:18.611467538Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 15 11:26:18.611565 env[1349]: time="2025-07-15T11:26:18.611547618Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 15 11:26:18.611650 env[1349]: time="2025-07-15T11:26:18.611629933Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 15 11:26:18.611730 env[1349]: time="2025-07-15T11:26:18.611712718Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 15 11:26:18.613324 env[1349]: time="2025-07-15T11:26:18.613292250Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 15 11:26:18.613324 env[1349]: time="2025-07-15T11:26:18.613315583Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 15 11:26:18.613394 env[1349]: time="2025-07-15T11:26:18.613331133Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 15 11:26:18.613394 env[1349]: time="2025-07-15T11:26:18.613340951Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 15 11:26:19.121440 env[1349]: time="2025-07-15T11:26:19.121387127Z" level=info msg="Loading containers: start." Jul 15 11:26:19.168000 audit[1383]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1383 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.168000 audit[1383]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fffdc564160 a2=0 a3=7fffdc56414c items=0 ppid=1349 pid=1383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.168000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 15 11:26:19.170000 audit[1385]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1385 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.170000 audit[1385]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffcf61605c0 a2=0 a3=7ffcf61605ac items=0 ppid=1349 pid=1385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.170000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 15 11:26:19.171000 audit[1387]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1387 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.171000 audit[1387]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe953d0340 a2=0 a3=7ffe953d032c items=0 ppid=1349 pid=1387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.171000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 15 11:26:19.172000 audit[1389]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1389 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.172000 audit[1389]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd66262330 a2=0 a3=7ffd6626231c items=0 ppid=1349 pid=1389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.172000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 15 11:26:19.174000 audit[1391]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1391 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.174000 audit[1391]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe5b896480 a2=0 a3=7ffe5b89646c items=0 ppid=1349 pid=1391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.174000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 15 11:26:19.188000 audit[1396]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1396 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.188000 audit[1396]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff965883a0 a2=0 a3=7fff9658838c items=0 ppid=1349 pid=1396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.188000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 15 11:26:19.196000 audit[1398]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1398 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.196000 audit[1398]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe55ddc7f0 a2=0 a3=7ffe55ddc7dc items=0 ppid=1349 pid=1398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.196000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 15 11:26:19.197000 audit[1400]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1400 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.197000 audit[1400]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7fff8a1d88e0 a2=0 a3=7fff8a1d88cc items=0 ppid=1349 pid=1400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.197000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 15 11:26:19.199000 audit[1402]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1402 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.199000 audit[1402]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffe19517c10 a2=0 a3=7ffe19517bfc items=0 ppid=1349 pid=1402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.199000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:26:19.206000 audit[1406]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.206000 audit[1406]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffe616abbb0 a2=0 a3=7ffe616abb9c items=0 ppid=1349 pid=1406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.206000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:26:19.213000 audit[1407]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.213000 audit[1407]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffced6cfa00 a2=0 a3=7ffced6cf9ec items=0 ppid=1349 pid=1407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.213000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:26:19.222102 kernel: Initializing XFRM netlink socket Jul 15 11:26:19.248250 env[1349]: time="2025-07-15T11:26:19.248209018Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 15 11:26:19.261000 audit[1415]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1415 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.261000 audit[1415]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7fffa8b37a30 a2=0 a3=7fffa8b37a1c items=0 ppid=1349 pid=1415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.261000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 15 11:26:19.273000 audit[1418]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.273000 audit[1418]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7fff930b5380 a2=0 a3=7fff930b536c items=0 ppid=1349 pid=1418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.273000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 15 11:26:19.275000 audit[1421]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1421 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.275000 audit[1421]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fff3aa861e0 a2=0 a3=7fff3aa861cc items=0 ppid=1349 pid=1421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.275000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 15 11:26:19.277000 audit[1423]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1423 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.277000 audit[1423]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd9b000820 a2=0 a3=7ffd9b00080c items=0 ppid=1349 pid=1423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.277000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 15 11:26:19.278000 audit[1425]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1425 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.278000 audit[1425]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffcf2068b00 a2=0 a3=7ffcf2068aec items=0 ppid=1349 pid=1425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.278000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 15 11:26:19.280000 audit[1427]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1427 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.280000 audit[1427]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffde36e46f0 a2=0 a3=7ffde36e46dc items=0 ppid=1349 pid=1427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.280000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 15 11:26:19.281000 audit[1429]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1429 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.281000 audit[1429]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffd202269b0 a2=0 a3=7ffd2022699c items=0 ppid=1349 pid=1429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.281000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 15 11:26:19.287000 audit[1432]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1432 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.287000 audit[1432]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fff3cb12090 a2=0 a3=7fff3cb1207c items=0 ppid=1349 pid=1432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.287000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 15 11:26:19.289000 audit[1434]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.289000 audit[1434]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffd2c058c70 a2=0 a3=7ffd2c058c5c items=0 ppid=1349 pid=1434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.289000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 15 11:26:19.290000 audit[1436]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.290000 audit[1436]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffde92ef590 a2=0 a3=7ffde92ef57c items=0 ppid=1349 pid=1436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.290000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 15 11:26:19.292000 audit[1438]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.292000 audit[1438]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe94fc4180 a2=0 a3=7ffe94fc416c items=0 ppid=1349 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.292000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 15 11:26:19.293853 systemd-networkd[1025]: docker0: Link UP Jul 15 11:26:19.623000 audit[1442]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1442 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.623000 audit[1442]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff7fcbcec0 a2=0 a3=7fff7fcbceac items=0 ppid=1349 pid=1442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.623000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:26:19.632000 audit[1443]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:19.632000 audit[1443]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd5515d390 a2=0 a3=7ffd5515d37c items=0 ppid=1349 pid=1443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:19.632000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:26:19.634200 env[1349]: time="2025-07-15T11:26:19.634162401Z" level=info msg="Loading containers: done." Jul 15 11:26:19.642018 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1968841192-merged.mount: Deactivated successfully. Jul 15 11:26:19.692671 env[1349]: time="2025-07-15T11:26:19.692624998Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 15 11:26:19.692810 env[1349]: time="2025-07-15T11:26:19.692783015Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 15 11:26:19.692880 env[1349]: time="2025-07-15T11:26:19.692869988Z" level=info msg="Daemon has completed initialization" Jul 15 11:26:19.744000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:19.744965 systemd[1]: Started docker.service. Jul 15 11:26:19.749087 env[1349]: time="2025-07-15T11:26:19.749021532Z" level=info msg="API listen on /run/docker.sock" Jul 15 11:26:20.418351 env[1203]: time="2025-07-15T11:26:20.418285532Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.6\"" Jul 15 11:26:21.348085 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1973656920.mount: Deactivated successfully. Jul 15 11:26:23.267428 env[1203]: time="2025-07-15T11:26:23.267359104Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:23.269363 env[1203]: time="2025-07-15T11:26:23.269301265Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8c5b95b1b5cb4a908fcbbbe81697c57019f9e9d89bfb5e0355235d440b7a6aa9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:23.270986 env[1203]: time="2025-07-15T11:26:23.270951089Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:23.273458 env[1203]: time="2025-07-15T11:26:23.273426009Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:0f5764551d7de4ef70489ff8a70f32df7dea00701f5545af089b60bc5ede4f6f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:23.274298 env[1203]: time="2025-07-15T11:26:23.274269240Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.6\" returns image reference \"sha256:8c5b95b1b5cb4a908fcbbbe81697c57019f9e9d89bfb5e0355235d440b7a6aa9\"" Jul 15 11:26:23.275114 env[1203]: time="2025-07-15T11:26:23.275081413Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.6\"" Jul 15 11:26:25.689000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:25.690009 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 15 11:26:25.690204 systemd[1]: Stopped kubelet.service. Jul 15 11:26:25.691870 systemd[1]: Starting kubelet.service... Jul 15 11:26:25.694186 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 15 11:26:25.694242 kernel: audit: type=1130 audit(1752578785.689:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:25.694274 kernel: audit: type=1131 audit(1752578785.689:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:25.689000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:25.876086 systemd[1]: Started kubelet.service. Jul 15 11:26:25.875000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:25.880105 kernel: audit: type=1130 audit(1752578785.875:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:27.151238 kubelet[1484]: E0715 11:26:27.151156 1484 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:26:27.154228 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:26:27.154371 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:26:27.153000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:26:27.158100 kernel: audit: type=1131 audit(1752578787.153:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:26:27.223639 env[1203]: time="2025-07-15T11:26:27.223583684Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:27.226193 env[1203]: time="2025-07-15T11:26:27.226158812Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77d0e7de0c6b41e2331c3997698c3f917527cf7bbe462f5c813f514e788436de,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:27.228755 env[1203]: time="2025-07-15T11:26:27.228710527Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:27.230593 env[1203]: time="2025-07-15T11:26:27.230568039Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:3425f29c94a77d74cb89f38413e6274277dcf5e2bc7ab6ae953578a91e9e8356,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:27.231426 env[1203]: time="2025-07-15T11:26:27.231369071Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.6\" returns image reference \"sha256:77d0e7de0c6b41e2331c3997698c3f917527cf7bbe462f5c813f514e788436de\"" Jul 15 11:26:27.231964 env[1203]: time="2025-07-15T11:26:27.231942607Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.6\"" Jul 15 11:26:30.007889 env[1203]: time="2025-07-15T11:26:30.007828702Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:30.220790 env[1203]: time="2025-07-15T11:26:30.220725093Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b34d1cd163151c2491919f315274d85bff904721213f2b19341b403a28a39ae2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:30.453871 env[1203]: time="2025-07-15T11:26:30.453829213Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:30.542189 env[1203]: time="2025-07-15T11:26:30.542104680Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:130f633cbd1d70e2f4655350153cb3fc469f4d5a6310b4f0b49d93fb2ba2132b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:30.542828 env[1203]: time="2025-07-15T11:26:30.542792529Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.6\" returns image reference \"sha256:b34d1cd163151c2491919f315274d85bff904721213f2b19341b403a28a39ae2\"" Jul 15 11:26:30.543288 env[1203]: time="2025-07-15T11:26:30.543266528Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.6\"" Jul 15 11:26:32.385889 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1167589763.mount: Deactivated successfully. Jul 15 11:26:33.246210 env[1203]: time="2025-07-15T11:26:33.246156296Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:33.248343 env[1203]: time="2025-07-15T11:26:33.248313831Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:63f0cbe3b7339c5d006efc9964228e48271bae73039320037c451b5e8f763e02,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:33.249697 env[1203]: time="2025-07-15T11:26:33.249667740Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:33.251220 env[1203]: time="2025-07-15T11:26:33.251191176Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:b13d9da413b983d130bf090b83fce12e1ccc704e95f366da743c18e964d9d7e9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:33.251649 env[1203]: time="2025-07-15T11:26:33.251623327Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.6\" returns image reference \"sha256:63f0cbe3b7339c5d006efc9964228e48271bae73039320037c451b5e8f763e02\"" Jul 15 11:26:33.252197 env[1203]: time="2025-07-15T11:26:33.252162888Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jul 15 11:26:34.169302 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2272044239.mount: Deactivated successfully. Jul 15 11:26:35.715598 env[1203]: time="2025-07-15T11:26:35.715531193Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:35.717631 env[1203]: time="2025-07-15T11:26:35.717580696Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:35.719314 env[1203]: time="2025-07-15T11:26:35.719288348Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:35.720976 env[1203]: time="2025-07-15T11:26:35.720950294Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:35.721588 env[1203]: time="2025-07-15T11:26:35.721555960Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\"" Jul 15 11:26:35.722066 env[1203]: time="2025-07-15T11:26:35.722046399Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 15 11:26:36.325178 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4207988314.mount: Deactivated successfully. Jul 15 11:26:36.330182 env[1203]: time="2025-07-15T11:26:36.330136137Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:36.332123 env[1203]: time="2025-07-15T11:26:36.332066316Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:36.333389 env[1203]: time="2025-07-15T11:26:36.333344473Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:36.334753 env[1203]: time="2025-07-15T11:26:36.334719000Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:36.335059 env[1203]: time="2025-07-15T11:26:36.335020956Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Jul 15 11:26:36.335589 env[1203]: time="2025-07-15T11:26:36.335543917Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Jul 15 11:26:36.846872 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount546308589.mount: Deactivated successfully. Jul 15 11:26:37.190204 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 15 11:26:37.190405 systemd[1]: Stopped kubelet.service. Jul 15 11:26:37.198799 kernel: audit: type=1130 audit(1752578797.189:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:37.199008 kernel: audit: type=1131 audit(1752578797.189:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:37.189000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:37.189000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:37.216293 systemd[1]: Starting kubelet.service... Jul 15 11:26:37.343000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:37.343665 systemd[1]: Started kubelet.service. Jul 15 11:26:37.349175 kernel: audit: type=1130 audit(1752578797.343:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:37.403100 kubelet[1495]: E0715 11:26:37.403024 1495 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:26:37.404848 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:26:37.404975 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:26:37.404000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:26:37.409103 kernel: audit: type=1131 audit(1752578797.404:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:26:44.122551 env[1203]: time="2025-07-15T11:26:44.122486873Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:44.214281 env[1203]: time="2025-07-15T11:26:44.213941250Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:44.226064 env[1203]: time="2025-07-15T11:26:44.226009558Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:44.293064 env[1203]: time="2025-07-15T11:26:44.293015624Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:44.294029 env[1203]: time="2025-07-15T11:26:44.294002094Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc\"" Jul 15 11:26:46.965674 systemd[1]: Stopped kubelet.service. Jul 15 11:26:46.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.967853 systemd[1]: Starting kubelet.service... Jul 15 11:26:46.964000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.972291 kernel: audit: type=1130 audit(1752578806.964:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.972415 kernel: audit: type=1131 audit(1752578806.964:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.989776 systemd[1]: Reloading. Jul 15 11:26:47.062594 /usr/lib/systemd/system-generators/torcx-generator[1549]: time="2025-07-15T11:26:47Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:26:47.062624 /usr/lib/systemd/system-generators/torcx-generator[1549]: time="2025-07-15T11:26:47Z" level=info msg="torcx already run" Jul 15 11:26:47.308768 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:26:47.308783 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:26:47.327308 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:26:47.404884 kernel: audit: type=1400 audit(1752578807.394:253): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.405026 kernel: audit: type=1400 audit(1752578807.394:254): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.405049 kernel: audit: type=1400 audit(1752578807.394:255): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.411348 kernel: audit: type=1400 audit(1752578807.394:256): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.411384 kernel: audit: type=1400 audit(1752578807.394:257): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.411411 kernel: audit: type=1400 audit(1752578807.394:258): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.414383 kernel: audit: type=1400 audit(1752578807.394:259): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.420585 kernel: audit: type=1400 audit(1752578807.394:260): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.400000 audit: BPF prog-id=46 op=LOAD Jul 15 11:26:47.400000 audit: BPF prog-id=30 op=UNLOAD Jul 15 11:26:47.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.403000 audit: BPF prog-id=47 op=LOAD Jul 15 11:26:47.403000 audit: BPF prog-id=39 op=UNLOAD Jul 15 11:26:47.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.410000 audit: BPF prog-id=48 op=LOAD Jul 15 11:26:47.410000 audit: BPF prog-id=31 op=UNLOAD Jul 15 11:26:47.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.416000 audit: BPF prog-id=49 op=LOAD Jul 15 11:26:47.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.419000 audit: BPF prog-id=50 op=LOAD Jul 15 11:26:47.419000 audit: BPF prog-id=32 op=UNLOAD Jul 15 11:26:47.419000 audit: BPF prog-id=33 op=UNLOAD Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit: BPF prog-id=51 op=LOAD Jul 15 11:26:47.421000 audit: BPF prog-id=34 op=UNLOAD Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit: BPF prog-id=52 op=LOAD Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.421000 audit: BPF prog-id=53 op=LOAD Jul 15 11:26:47.421000 audit: BPF prog-id=35 op=UNLOAD Jul 15 11:26:47.421000 audit: BPF prog-id=36 op=UNLOAD Jul 15 11:26:47.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.422000 audit: BPF prog-id=54 op=LOAD Jul 15 11:26:47.422000 audit: BPF prog-id=40 op=UNLOAD Jul 15 11:26:47.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.422000 audit: BPF prog-id=55 op=LOAD Jul 15 11:26:47.422000 audit: BPF prog-id=44 op=UNLOAD Jul 15 11:26:47.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.423000 audit: BPF prog-id=56 op=LOAD Jul 15 11:26:47.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.423000 audit: BPF prog-id=57 op=LOAD Jul 15 11:26:47.423000 audit: BPF prog-id=37 op=UNLOAD Jul 15 11:26:47.423000 audit: BPF prog-id=38 op=UNLOAD Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit: BPF prog-id=58 op=LOAD Jul 15 11:26:47.425000 audit: BPF prog-id=41 op=UNLOAD Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit: BPF prog-id=59 op=LOAD Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:47.425000 audit: BPF prog-id=60 op=LOAD Jul 15 11:26:47.425000 audit: BPF prog-id=42 op=UNLOAD Jul 15 11:26:47.425000 audit: BPF prog-id=43 op=UNLOAD Jul 15 11:26:47.437762 systemd[1]: Started kubelet.service. Jul 15 11:26:47.436000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:47.439175 systemd[1]: Stopping kubelet.service... Jul 15 11:26:47.439459 systemd[1]: kubelet.service: Deactivated successfully. Jul 15 11:26:47.439609 systemd[1]: Stopped kubelet.service. Jul 15 11:26:47.438000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:47.441265 systemd[1]: Starting kubelet.service... Jul 15 11:26:47.523473 systemd[1]: Started kubelet.service. Jul 15 11:26:47.522000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:47.574993 kubelet[1598]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:26:47.574993 kubelet[1598]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 15 11:26:47.574993 kubelet[1598]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:26:47.575390 kubelet[1598]: I0715 11:26:47.575010 1598 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 15 11:26:47.960495 kubelet[1598]: I0715 11:26:47.960435 1598 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jul 15 11:26:47.960495 kubelet[1598]: I0715 11:26:47.960469 1598 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 15 11:26:47.960753 kubelet[1598]: I0715 11:26:47.960729 1598 server.go:954] "Client rotation is on, will bootstrap in background" Jul 15 11:26:47.981495 kubelet[1598]: E0715 11:26:47.981439 1598 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.18:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.18:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:26:47.988027 kubelet[1598]: I0715 11:26:47.987986 1598 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 15 11:26:47.992988 kubelet[1598]: E0715 11:26:47.992952 1598 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 15 11:26:47.992988 kubelet[1598]: I0715 11:26:47.992984 1598 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 15 11:26:47.997679 kubelet[1598]: I0715 11:26:47.997654 1598 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 15 11:26:47.999810 kubelet[1598]: I0715 11:26:47.999762 1598 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 15 11:26:47.999999 kubelet[1598]: I0715 11:26:47.999803 1598 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 15 11:26:47.999999 kubelet[1598]: I0715 11:26:47.999998 1598 topology_manager.go:138] "Creating topology manager with none policy" Jul 15 11:26:48.000256 kubelet[1598]: I0715 11:26:48.000010 1598 container_manager_linux.go:304] "Creating device plugin manager" Jul 15 11:26:48.000256 kubelet[1598]: I0715 11:26:48.000167 1598 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:26:48.003758 kubelet[1598]: I0715 11:26:48.003730 1598 kubelet.go:446] "Attempting to sync node with API server" Jul 15 11:26:48.003804 kubelet[1598]: I0715 11:26:48.003768 1598 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 15 11:26:48.003804 kubelet[1598]: I0715 11:26:48.003789 1598 kubelet.go:352] "Adding apiserver pod source" Jul 15 11:26:48.003804 kubelet[1598]: I0715 11:26:48.003800 1598 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 15 11:26:48.031228 kubelet[1598]: I0715 11:26:48.031189 1598 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 15 11:26:48.031599 kubelet[1598]: I0715 11:26:48.031575 1598 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 15 11:26:48.032735 kubelet[1598]: W0715 11:26:48.032680 1598 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.18:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Jul 15 11:26:48.032794 kubelet[1598]: E0715 11:26:48.032745 1598 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.18:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.18:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:26:48.033399 kubelet[1598]: W0715 11:26:48.033373 1598 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 15 11:26:48.034197 kubelet[1598]: W0715 11:26:48.034146 1598 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Jul 15 11:26:48.034290 kubelet[1598]: E0715 11:26:48.034198 1598 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.18:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:26:48.038217 kubelet[1598]: I0715 11:26:48.038193 1598 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 15 11:26:48.038273 kubelet[1598]: I0715 11:26:48.038231 1598 server.go:1287] "Started kubelet" Jul 15 11:26:48.086000 audit[1598]: AVC avc: denied { mac_admin } for pid=1598 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:48.086000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:26:48.086000 audit[1598]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b644b0 a1=c000973020 a2=c000b64480 a3=25 items=0 ppid=1 pid=1598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:48.086000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:26:48.087000 audit[1598]: AVC avc: denied { mac_admin } for pid=1598 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:48.087000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:26:48.087000 audit[1598]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b6a200 a1=c000973038 a2=c000b64540 a3=25 items=0 ppid=1 pid=1598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:48.087000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:26:48.088685 kubelet[1598]: I0715 11:26:48.088086 1598 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 15 11:26:48.088685 kubelet[1598]: I0715 11:26:48.088178 1598 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 15 11:26:48.088685 kubelet[1598]: I0715 11:26:48.088352 1598 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 15 11:26:48.091000 audit[1611]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1611 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:48.091000 audit[1611]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe46bd0dd0 a2=0 a3=7ffe46bd0dbc items=0 ppid=1598 pid=1611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:48.091000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 15 11:26:48.092000 audit[1612]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1612 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:48.092000 audit[1612]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff4f6cdea0 a2=0 a3=7fff4f6cde8c items=0 ppid=1598 pid=1612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:48.092000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 15 11:26:48.095366 kubelet[1598]: I0715 11:26:48.095342 1598 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 15 11:26:48.096688 kubelet[1598]: E0715 11:26:48.096048 1598 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:26:48.097144 kubelet[1598]: I0715 11:26:48.097111 1598 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jul 15 11:26:48.097266 kubelet[1598]: I0715 11:26:48.097241 1598 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 15 11:26:48.097710 kubelet[1598]: I0715 11:26:48.097673 1598 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 15 11:26:48.097858 kubelet[1598]: I0715 11:26:48.097821 1598 reconciler.go:26] "Reconciler: start to sync state" Jul 15 11:26:48.100444 kubelet[1598]: I0715 11:26:48.100392 1598 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 15 11:26:48.100502 kubelet[1598]: I0715 11:26:48.100468 1598 server.go:479] "Adding debug handlers to kubelet server" Jul 15 11:26:48.100625 kubelet[1598]: I0715 11:26:48.100599 1598 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 15 11:26:48.100690 kubelet[1598]: W0715 11:26:48.100585 1598 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Jul 15 11:26:48.100791 kubelet[1598]: E0715 11:26:48.100772 1598 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.18:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:26:48.100939 kubelet[1598]: E0715 11:26:48.100914 1598 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.18:6443: connect: connection refused" interval="200ms" Jul 15 11:26:48.101310 kubelet[1598]: I0715 11:26:48.101283 1598 factory.go:221] Registration of the systemd container factory successfully Jul 15 11:26:48.101518 kubelet[1598]: I0715 11:26:48.101490 1598 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 15 11:26:48.101000 audit[1614]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1614 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:48.101000 audit[1614]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffcc45ee730 a2=0 a3=7ffcc45ee71c items=0 ppid=1598 pid=1614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:48.101000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:26:48.105207 kubelet[1598]: E0715 11:26:48.100302 1598 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.18:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.18:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.18526923edfeb055 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-15 11:26:48.038207573 +0000 UTC m=+0.510716969,LastTimestamp:2025-07-15 11:26:48.038207573 +0000 UTC m=+0.510716969,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 15 11:26:48.106642 kubelet[1598]: I0715 11:26:48.106628 1598 factory.go:221] Registration of the containerd container factory successfully Jul 15 11:26:48.106803 kubelet[1598]: E0715 11:26:48.106781 1598 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 15 11:26:48.108000 audit[1616]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1616 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:48.108000 audit[1616]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffca7569730 a2=0 a3=7ffca756971c items=0 ppid=1598 pid=1616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:48.108000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:26:48.115000 audit[1621]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1621 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:48.115000 audit[1621]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffd20ac4c60 a2=0 a3=7ffd20ac4c4c items=0 ppid=1598 pid=1621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:48.115000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 15 11:26:48.116618 kubelet[1598]: I0715 11:26:48.116563 1598 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 15 11:26:48.118188 kubelet[1598]: I0715 11:26:48.118168 1598 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 15 11:26:48.118274 kubelet[1598]: I0715 11:26:48.118259 1598 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 15 11:26:48.117000 audit[1622]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1622 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:26:48.118432 kubelet[1598]: I0715 11:26:48.118385 1598 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:26:48.117000 audit[1624]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1624 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:48.117000 audit[1624]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc43ae4bd0 a2=0 a3=7ffc43ae4bbc items=0 ppid=1598 pid=1624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:48.117000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 15 11:26:48.117000 audit[1622]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff357ed250 a2=0 a3=7fff357ed23c items=0 ppid=1598 pid=1622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:48.117000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 15 11:26:48.119007 kubelet[1598]: I0715 11:26:48.118970 1598 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 15 11:26:48.119007 kubelet[1598]: I0715 11:26:48.119000 1598 status_manager.go:227] "Starting to sync pod status with apiserver" Jul 15 11:26:48.119138 kubelet[1598]: I0715 11:26:48.119026 1598 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 15 11:26:48.119138 kubelet[1598]: I0715 11:26:48.119036 1598 kubelet.go:2382] "Starting kubelet main sync loop" Jul 15 11:26:48.119138 kubelet[1598]: E0715 11:26:48.119115 1598 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 15 11:26:48.118000 audit[1628]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1628 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:48.118000 audit[1628]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffccd48d660 a2=0 a3=7ffccd48d64c items=0 ppid=1598 pid=1628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:48.118000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 15 11:26:48.120180 kubelet[1598]: W0715 11:26:48.120128 1598 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Jul 15 11:26:48.119000 audit[1629]: NETFILTER_CFG table=mangle:34 family=10 entries=1 op=nft_register_chain pid=1629 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:26:48.119000 audit[1629]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc255b58f0 a2=0 a3=7ffc255b58dc items=0 ppid=1598 pid=1629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:48.119000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 15 11:26:48.120437 kubelet[1598]: E0715 11:26:48.120275 1598 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.18:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:26:48.119000 audit[1631]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=1631 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:26:48.119000 audit[1631]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffeba6fcb60 a2=0 a3=7ffeba6fcb4c items=0 ppid=1598 pid=1631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:48.119000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 15 11:26:48.120000 audit[1632]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1632 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:26:48.120000 audit[1632]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffe88952c80 a2=0 a3=7ffe88952c6c items=0 ppid=1598 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:48.120000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 15 11:26:48.120000 audit[1633]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1633 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:26:48.120000 audit[1633]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd02febe60 a2=0 a3=7ffd02febe4c items=0 ppid=1598 pid=1633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:48.120000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 15 11:26:48.196507 kubelet[1598]: E0715 11:26:48.196451 1598 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:26:48.219936 kubelet[1598]: E0715 11:26:48.219842 1598 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 15 11:26:48.297180 kubelet[1598]: E0715 11:26:48.297118 1598 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:26:48.301868 kubelet[1598]: E0715 11:26:48.301834 1598 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.18:6443: connect: connection refused" interval="400ms" Jul 15 11:26:48.398157 kubelet[1598]: E0715 11:26:48.398105 1598 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:26:48.420505 kubelet[1598]: E0715 11:26:48.420469 1598 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 15 11:26:48.499044 kubelet[1598]: E0715 11:26:48.498942 1598 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:26:48.599502 kubelet[1598]: E0715 11:26:48.599478 1598 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:26:48.700166 kubelet[1598]: E0715 11:26:48.700132 1598 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:26:48.702622 kubelet[1598]: E0715 11:26:48.702591 1598 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.18:6443: connect: connection refused" interval="800ms" Jul 15 11:26:48.801150 kubelet[1598]: E0715 11:26:48.801064 1598 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:26:48.821381 kubelet[1598]: E0715 11:26:48.821345 1598 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 15 11:26:48.902004 kubelet[1598]: E0715 11:26:48.901936 1598 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:26:49.002829 kubelet[1598]: E0715 11:26:49.002781 1598 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:26:49.098449 kubelet[1598]: I0715 11:26:49.098354 1598 policy_none.go:49] "None policy: Start" Jul 15 11:26:49.098449 kubelet[1598]: I0715 11:26:49.098385 1598 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 15 11:26:49.098449 kubelet[1598]: I0715 11:26:49.098396 1598 state_mem.go:35] "Initializing new in-memory state store" Jul 15 11:26:49.103219 kubelet[1598]: E0715 11:26:49.103177 1598 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:26:49.136053 kubelet[1598]: W0715 11:26:49.135988 1598 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.18:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Jul 15 11:26:49.136053 kubelet[1598]: E0715 11:26:49.136048 1598 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.18:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.18:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:26:49.151120 systemd[1]: Created slice kubepods.slice. Jul 15 11:26:49.154919 systemd[1]: Created slice kubepods-burstable.slice. Jul 15 11:26:49.157089 systemd[1]: Created slice kubepods-besteffort.slice. Jul 15 11:26:49.163665 kubelet[1598]: I0715 11:26:49.163647 1598 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 15 11:26:49.162000 audit[1598]: AVC avc: denied { mac_admin } for pid=1598 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:49.162000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:26:49.162000 audit[1598]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000bda5a0 a1=c000f36270 a2=c000bda570 a3=25 items=0 ppid=1 pid=1598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:49.162000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:26:49.163901 kubelet[1598]: I0715 11:26:49.163697 1598 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Jul 15 11:26:49.163901 kubelet[1598]: I0715 11:26:49.163818 1598 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 15 11:26:49.163901 kubelet[1598]: I0715 11:26:49.163828 1598 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 15 11:26:49.164028 kubelet[1598]: I0715 11:26:49.164014 1598 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 15 11:26:49.164764 kubelet[1598]: E0715 11:26:49.164727 1598 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 15 11:26:49.164881 kubelet[1598]: E0715 11:26:49.164867 1598 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 15 11:26:49.266609 kubelet[1598]: I0715 11:26:49.266560 1598 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:26:49.267039 kubelet[1598]: E0715 11:26:49.267002 1598 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.18:6443/api/v1/nodes\": dial tcp 10.0.0.18:6443: connect: connection refused" node="localhost" Jul 15 11:26:49.301900 kubelet[1598]: W0715 11:26:49.301857 1598 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Jul 15 11:26:49.302150 kubelet[1598]: E0715 11:26:49.301912 1598 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.18:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:26:49.375968 kubelet[1598]: W0715 11:26:49.375855 1598 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Jul 15 11:26:49.375968 kubelet[1598]: E0715 11:26:49.375916 1598 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.18:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:26:49.452097 kubelet[1598]: W0715 11:26:49.452055 1598 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Jul 15 11:26:49.452238 kubelet[1598]: E0715 11:26:49.452107 1598 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.18:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:26:49.468437 kubelet[1598]: I0715 11:26:49.468412 1598 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:26:49.468674 kubelet[1598]: E0715 11:26:49.468642 1598 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.18:6443/api/v1/nodes\": dial tcp 10.0.0.18:6443: connect: connection refused" node="localhost" Jul 15 11:26:49.503366 kubelet[1598]: E0715 11:26:49.503317 1598 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.18:6443: connect: connection refused" interval="1.6s" Jul 15 11:26:49.628462 systemd[1]: Created slice kubepods-burstable-podb791af6d3b0f69f882310949225dd91f.slice. Jul 15 11:26:49.638764 kubelet[1598]: E0715 11:26:49.638719 1598 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:26:49.641395 systemd[1]: Created slice kubepods-burstable-podd1af03769b64da1b1e8089a7035018fc.slice. Jul 15 11:26:49.647804 kubelet[1598]: E0715 11:26:49.647770 1598 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:26:49.649634 systemd[1]: Created slice kubepods-burstable-pod8a75e163f27396b2168da0f88f85f8a5.slice. Jul 15 11:26:49.650777 kubelet[1598]: E0715 11:26:49.650746 1598 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:26:49.709092 kubelet[1598]: I0715 11:26:49.709041 1598 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:26:49.709092 kubelet[1598]: I0715 11:26:49.709070 1598 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8a75e163f27396b2168da0f88f85f8a5-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"8a75e163f27396b2168da0f88f85f8a5\") " pod="kube-system/kube-scheduler-localhost" Jul 15 11:26:49.709199 kubelet[1598]: I0715 11:26:49.709099 1598 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:26:49.709199 kubelet[1598]: I0715 11:26:49.709114 1598 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:26:49.709199 kubelet[1598]: I0715 11:26:49.709131 1598 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:26:49.709199 kubelet[1598]: I0715 11:26:49.709147 1598 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:26:49.709199 kubelet[1598]: I0715 11:26:49.709159 1598 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b791af6d3b0f69f882310949225dd91f-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"b791af6d3b0f69f882310949225dd91f\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:26:49.709317 kubelet[1598]: I0715 11:26:49.709174 1598 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b791af6d3b0f69f882310949225dd91f-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"b791af6d3b0f69f882310949225dd91f\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:26:49.709317 kubelet[1598]: I0715 11:26:49.709203 1598 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b791af6d3b0f69f882310949225dd91f-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"b791af6d3b0f69f882310949225dd91f\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:26:49.870555 kubelet[1598]: I0715 11:26:49.870522 1598 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:26:49.870970 kubelet[1598]: E0715 11:26:49.870933 1598 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.18:6443/api/v1/nodes\": dial tcp 10.0.0.18:6443: connect: connection refused" node="localhost" Jul 15 11:26:49.939511 kubelet[1598]: E0715 11:26:49.939477 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:49.940091 env[1203]: time="2025-07-15T11:26:49.940033760Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:b791af6d3b0f69f882310949225dd91f,Namespace:kube-system,Attempt:0,}" Jul 15 11:26:49.948758 kubelet[1598]: E0715 11:26:49.948720 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:49.951548 kubelet[1598]: E0715 11:26:49.951513 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:49.951731 env[1203]: time="2025-07-15T11:26:49.951692018Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:d1af03769b64da1b1e8089a7035018fc,Namespace:kube-system,Attempt:0,}" Jul 15 11:26:49.951988 env[1203]: time="2025-07-15T11:26:49.951963386Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:8a75e163f27396b2168da0f88f85f8a5,Namespace:kube-system,Attempt:0,}" Jul 15 11:26:50.134456 kubelet[1598]: E0715 11:26:50.134411 1598 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.18:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.18:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:26:50.671990 kubelet[1598]: I0715 11:26:50.671964 1598 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:26:50.672334 kubelet[1598]: E0715 11:26:50.672251 1598 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.18:6443/api/v1/nodes\": dial tcp 10.0.0.18:6443: connect: connection refused" node="localhost" Jul 15 11:26:50.952928 kubelet[1598]: W0715 11:26:50.952878 1598 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Jul 15 11:26:50.952928 kubelet[1598]: E0715 11:26:50.952925 1598 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.18:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:26:51.104473 kubelet[1598]: E0715 11:26:51.104410 1598 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.18:6443: connect: connection refused" interval="3.2s" Jul 15 11:26:51.220680 kubelet[1598]: W0715 11:26:51.220592 1598 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.18:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Jul 15 11:26:51.220680 kubelet[1598]: E0715 11:26:51.220632 1598 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.18:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.18:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:26:51.317433 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount361944264.mount: Deactivated successfully. Jul 15 11:26:51.322025 env[1203]: time="2025-07-15T11:26:51.321977459Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:51.325906 env[1203]: time="2025-07-15T11:26:51.325878947Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:51.327102 env[1203]: time="2025-07-15T11:26:51.327051503Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:51.328649 env[1203]: time="2025-07-15T11:26:51.328617589Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:51.329582 env[1203]: time="2025-07-15T11:26:51.329555627Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:51.331780 env[1203]: time="2025-07-15T11:26:51.331739731Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:51.332690 env[1203]: time="2025-07-15T11:26:51.332653112Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:51.333782 env[1203]: time="2025-07-15T11:26:51.333755865Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:51.334765 env[1203]: time="2025-07-15T11:26:51.334733870Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:51.336959 env[1203]: time="2025-07-15T11:26:51.336911712Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:51.338050 env[1203]: time="2025-07-15T11:26:51.338025004Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:51.339152 env[1203]: time="2025-07-15T11:26:51.339124249Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:51.368840 env[1203]: time="2025-07-15T11:26:51.367209635Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:26:51.368840 env[1203]: time="2025-07-15T11:26:51.367240193Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:26:51.368840 env[1203]: time="2025-07-15T11:26:51.367249480Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:26:51.368840 env[1203]: time="2025-07-15T11:26:51.367359020Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9df6aeffa28db5800fb9a0eff5306d2cd6ecb32beb22021b831162d81cd86bc1 pid=1641 runtime=io.containerd.runc.v2 Jul 15 11:26:51.391045 env[1203]: time="2025-07-15T11:26:51.390963562Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:26:51.391045 env[1203]: time="2025-07-15T11:26:51.390994641Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:26:51.391045 env[1203]: time="2025-07-15T11:26:51.391004089Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:26:51.391355 env[1203]: time="2025-07-15T11:26:51.391303660Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/df9e1542ccb6c0d6c5138b21b28cf0b0715ad46caf6d276960e318481feb7741 pid=1670 runtime=io.containerd.runc.v2 Jul 15 11:26:51.406449 systemd[1]: Started cri-containerd-9df6aeffa28db5800fb9a0eff5306d2cd6ecb32beb22021b831162d81cd86bc1.scope. Jul 15 11:26:51.434571 env[1203]: time="2025-07-15T11:26:51.434457953Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:26:51.434571 env[1203]: time="2025-07-15T11:26:51.434518038Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:26:51.434571 env[1203]: time="2025-07-15T11:26:51.434530613Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:26:51.434848 env[1203]: time="2025-07-15T11:26:51.434721827Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/94fbcc9aa1852ab28519ac4f80b8acdb0611ad93245519b17aa4cc773bcb5354 pid=1652 runtime=io.containerd.runc.v2 Jul 15 11:26:51.441982 systemd[1]: Started cri-containerd-df9e1542ccb6c0d6c5138b21b28cf0b0715ad46caf6d276960e318481feb7741.scope. Jul 15 11:26:51.467255 systemd[1]: Started cri-containerd-94fbcc9aa1852ab28519ac4f80b8acdb0611ad93245519b17aa4cc773bcb5354.scope. Jul 15 11:26:51.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.497000 audit: BPF prog-id=61 op=LOAD Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=1641 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.498000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964663661656666613238646235383030666239613065666635333036 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=1641 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.498000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964663661656666613238646235383030666239613065666635333036 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit: BPF prog-id=62 op=LOAD Jul 15 11:26:51.498000 audit[1678]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000024970 items=0 ppid=1641 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.498000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964663661656666613238646235383030666239613065666635333036 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit: BPF prog-id=63 op=LOAD Jul 15 11:26:51.498000 audit[1678]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0000249b8 items=0 ppid=1641 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.498000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964663661656666613238646235383030666239613065666635333036 Jul 15 11:26:51.498000 audit: BPF prog-id=63 op=UNLOAD Jul 15 11:26:51.498000 audit: BPF prog-id=62 op=UNLOAD Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.498000 audit: BPF prog-id=64 op=LOAD Jul 15 11:26:51.498000 audit: BPF prog-id=65 op=LOAD Jul 15 11:26:51.498000 audit[1678]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000024dc8 items=0 ppid=1641 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.498000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964663661656666613238646235383030666239613065666635333036 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1670 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466396531353432636362366330643663353133386232316232386366 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1670 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466396531353432636362366330643663353133386232316232386366 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit: BPF prog-id=66 op=LOAD Jul 15 11:26:51.499000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000390ed0 items=0 ppid=1670 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466396531353432636362366330643663353133386232316232386366 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit: BPF prog-id=67 op=LOAD Jul 15 11:26:51.499000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000390f18 items=0 ppid=1670 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466396531353432636362366330643663353133386232316232386366 Jul 15 11:26:51.499000 audit: BPF prog-id=67 op=UNLOAD Jul 15 11:26:51.499000 audit: BPF prog-id=66 op=UNLOAD Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.499000 audit: BPF prog-id=68 op=LOAD Jul 15 11:26:51.499000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000391328 items=0 ppid=1670 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466396531353432636362366330643663353133386232316232386366 Jul 15 11:26:51.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit: BPF prog-id=69 op=LOAD Jul 15 11:26:51.532000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1703]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000119c48 a2=10 a3=1c items=0 ppid=1652 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.532000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934666263633961613138353261623238353139616334663830623861 Jul 15 11:26:51.532000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1703]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001196b0 a2=3c a3=c items=0 ppid=1652 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.532000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934666263633961613138353261623238353139616334663830623861 Jul 15 11:26:51.532000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit: BPF prog-id=70 op=LOAD Jul 15 11:26:51.532000 audit[1703]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001199d8 a2=78 a3=c0003906e0 items=0 ppid=1652 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.532000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934666263633961613138353261623238353139616334663830623861 Jul 15 11:26:51.532000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.532000 audit: BPF prog-id=71 op=LOAD Jul 15 11:26:51.532000 audit[1703]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000119770 a2=78 a3=c000390728 items=0 ppid=1652 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.532000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934666263633961613138353261623238353139616334663830623861 Jul 15 11:26:51.533000 audit: BPF prog-id=71 op=UNLOAD Jul 15 11:26:51.533000 audit: BPF prog-id=70 op=UNLOAD Jul 15 11:26:51.533000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.533000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.533000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.533000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.533000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.533000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.533000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.533000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.533000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.533000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.533000 audit: BPF prog-id=72 op=LOAD Jul 15 11:26:51.533000 audit[1703]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000119c30 a2=78 a3=c000390b38 items=0 ppid=1652 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934666263633961613138353261623238353139616334663830623861 Jul 15 11:26:51.549696 env[1203]: time="2025-07-15T11:26:51.548566402Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:b791af6d3b0f69f882310949225dd91f,Namespace:kube-system,Attempt:0,} returns sandbox id \"df9e1542ccb6c0d6c5138b21b28cf0b0715ad46caf6d276960e318481feb7741\"" Jul 15 11:26:51.550142 kubelet[1598]: E0715 11:26:51.550117 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:51.553187 env[1203]: time="2025-07-15T11:26:51.553158417Z" level=info msg="CreateContainer within sandbox \"df9e1542ccb6c0d6c5138b21b28cf0b0715ad46caf6d276960e318481feb7741\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 15 11:26:51.556485 env[1203]: time="2025-07-15T11:26:51.555179801Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:d1af03769b64da1b1e8089a7035018fc,Namespace:kube-system,Attempt:0,} returns sandbox id \"9df6aeffa28db5800fb9a0eff5306d2cd6ecb32beb22021b831162d81cd86bc1\"" Jul 15 11:26:51.557223 kubelet[1598]: E0715 11:26:51.557191 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:51.558627 env[1203]: time="2025-07-15T11:26:51.558593679Z" level=info msg="CreateContainer within sandbox \"9df6aeffa28db5800fb9a0eff5306d2cd6ecb32beb22021b831162d81cd86bc1\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 15 11:26:51.561124 env[1203]: time="2025-07-15T11:26:51.561093485Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:8a75e163f27396b2168da0f88f85f8a5,Namespace:kube-system,Attempt:0,} returns sandbox id \"94fbcc9aa1852ab28519ac4f80b8acdb0611ad93245519b17aa4cc773bcb5354\"" Jul 15 11:26:51.562017 kubelet[1598]: E0715 11:26:51.561990 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:51.563368 env[1203]: time="2025-07-15T11:26:51.563342403Z" level=info msg="CreateContainer within sandbox \"94fbcc9aa1852ab28519ac4f80b8acdb0611ad93245519b17aa4cc773bcb5354\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 15 11:26:51.580178 env[1203]: time="2025-07-15T11:26:51.580146259Z" level=info msg="CreateContainer within sandbox \"df9e1542ccb6c0d6c5138b21b28cf0b0715ad46caf6d276960e318481feb7741\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"15a953764d1da8f85c52c026e1cfaceb13c58091f7dc22622ec572551d363780\"" Jul 15 11:26:51.580881 env[1203]: time="2025-07-15T11:26:51.580854519Z" level=info msg="StartContainer for \"15a953764d1da8f85c52c026e1cfaceb13c58091f7dc22622ec572551d363780\"" Jul 15 11:26:51.584787 env[1203]: time="2025-07-15T11:26:51.584761268Z" level=info msg="CreateContainer within sandbox \"9df6aeffa28db5800fb9a0eff5306d2cd6ecb32beb22021b831162d81cd86bc1\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"9288cfc95fd9dabca87b5d74b5f5bcc8cce26a33d893a5cd8ba11172c4c2ab3d\"" Jul 15 11:26:51.585444 env[1203]: time="2025-07-15T11:26:51.585409574Z" level=info msg="StartContainer for \"9288cfc95fd9dabca87b5d74b5f5bcc8cce26a33d893a5cd8ba11172c4c2ab3d\"" Jul 15 11:26:51.587609 env[1203]: time="2025-07-15T11:26:51.587550436Z" level=info msg="CreateContainer within sandbox \"94fbcc9aa1852ab28519ac4f80b8acdb0611ad93245519b17aa4cc773bcb5354\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"ceaa57fe409b0982ce405b5fa465cf1e063e6fbe9f4ea84f84b0131c1a613557\"" Jul 15 11:26:51.588168 env[1203]: time="2025-07-15T11:26:51.588145070Z" level=info msg="StartContainer for \"ceaa57fe409b0982ce405b5fa465cf1e063e6fbe9f4ea84f84b0131c1a613557\"" Jul 15 11:26:51.594742 systemd[1]: Started cri-containerd-15a953764d1da8f85c52c026e1cfaceb13c58091f7dc22622ec572551d363780.scope. Jul 15 11:26:51.604005 systemd[1]: Started cri-containerd-ceaa57fe409b0982ce405b5fa465cf1e063e6fbe9f4ea84f84b0131c1a613557.scope. Jul 15 11:26:51.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.608000 audit: BPF prog-id=73 op=LOAD Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1670 pid=1765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135613935333736346431646138663835633532633032366531636661 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1670 pid=1765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135613935333736346431646138663835633532633032366531636661 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit: BPF prog-id=74 op=LOAD Jul 15 11:26:51.609000 audit[1765]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000212f80 items=0 ppid=1670 pid=1765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135613935333736346431646138663835633532633032366531636661 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit: BPF prog-id=75 op=LOAD Jul 15 11:26:51.609000 audit[1765]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000212fc8 items=0 ppid=1670 pid=1765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135613935333736346431646138663835633532633032366531636661 Jul 15 11:26:51.609000 audit: BPF prog-id=75 op=UNLOAD Jul 15 11:26:51.609000 audit: BPF prog-id=74 op=UNLOAD Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.609000 audit: BPF prog-id=76 op=LOAD Jul 15 11:26:51.609000 audit[1765]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002133d8 items=0 ppid=1670 pid=1765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135613935333736346431646138663835633532633032366531636661 Jul 15 11:26:51.611304 systemd[1]: Started cri-containerd-9288cfc95fd9dabca87b5d74b5f5bcc8cce26a33d893a5cd8ba11172c4c2ab3d.scope. Jul 15 11:26:51.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit: BPF prog-id=77 op=LOAD Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=1652 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.628000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365616135376665343039623039383263653430356235666134363563 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=1652 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.628000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365616135376665343039623039383263653430356235666134363563 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit: BPF prog-id=78 op=LOAD Jul 15 11:26:51.628000 audit[1788]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0001912d0 items=0 ppid=1652 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.628000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365616135376665343039623039383263653430356235666134363563 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit: BPF prog-id=79 op=LOAD Jul 15 11:26:51.628000 audit[1788]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000191318 items=0 ppid=1652 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.628000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365616135376665343039623039383263653430356235666134363563 Jul 15 11:26:51.628000 audit: BPF prog-id=79 op=UNLOAD Jul 15 11:26:51.628000 audit: BPF prog-id=78 op=UNLOAD Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.628000 audit: BPF prog-id=80 op=LOAD Jul 15 11:26:51.628000 audit[1788]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000191728 items=0 ppid=1652 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.628000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365616135376665343039623039383263653430356235666134363563 Jul 15 11:26:51.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.662000 audit: BPF prog-id=81 op=LOAD Jul 15 11:26:51.662000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.662000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1641 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.662000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932383863666339356664396461626361383762356437346235663562 Jul 15 11:26:51.662000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.662000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=1641 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.662000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932383863666339356664396461626361383762356437346235663562 Jul 15 11:26:51.662000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.662000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.662000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.662000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.662000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.662000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.662000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.662000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.662000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.662000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.662000 audit: BPF prog-id=82 op=LOAD Jul 15 11:26:51.662000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0000a55f0 items=0 ppid=1641 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.662000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932383863666339356664396461626361383762356437346235663562 Jul 15 11:26:51.663000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.663000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.663000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.663000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.663000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.663000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.663000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.663000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.663000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.663000 audit: BPF prog-id=83 op=LOAD Jul 15 11:26:51.663000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000a5638 items=0 ppid=1641 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.663000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932383863666339356664396461626361383762356437346235663562 Jul 15 11:26:51.663000 audit: BPF prog-id=83 op=UNLOAD Jul 15 11:26:51.663000 audit: BPF prog-id=82 op=UNLOAD Jul 15 11:26:51.663000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.663000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.663000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.663000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.663000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.663000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.663000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.663000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.663000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.663000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:51.663000 audit: BPF prog-id=84 op=LOAD Jul 15 11:26:51.663000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0000a5a48 items=0 ppid=1641 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.663000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932383863666339356664396461626361383762356437346235663562 Jul 15 11:26:51.669541 env[1203]: time="2025-07-15T11:26:51.669486938Z" level=info msg="StartContainer for \"15a953764d1da8f85c52c026e1cfaceb13c58091f7dc22622ec572551d363780\" returns successfully" Jul 15 11:26:51.678512 env[1203]: time="2025-07-15T11:26:51.678472379Z" level=info msg="StartContainer for \"ceaa57fe409b0982ce405b5fa465cf1e063e6fbe9f4ea84f84b0131c1a613557\" returns successfully" Jul 15 11:26:51.707472 env[1203]: time="2025-07-15T11:26:51.707421350Z" level=info msg="StartContainer for \"9288cfc95fd9dabca87b5d74b5f5bcc8cce26a33d893a5cd8ba11172c4c2ab3d\" returns successfully" Jul 15 11:26:51.719864 kubelet[1598]: W0715 11:26:51.719734 1598 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Jul 15 11:26:51.720315 kubelet[1598]: E0715 11:26:51.719890 1598 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.18:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:26:52.142677 kubelet[1598]: E0715 11:26:52.142630 1598 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:26:52.142885 kubelet[1598]: E0715 11:26:52.142771 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:52.144299 kubelet[1598]: E0715 11:26:52.144274 1598 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:26:52.144390 kubelet[1598]: E0715 11:26:52.144363 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:52.145677 kubelet[1598]: E0715 11:26:52.145652 1598 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:26:52.145766 kubelet[1598]: E0715 11:26:52.145738 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:52.273710 kubelet[1598]: I0715 11:26:52.273672 1598 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:26:52.506105 kernel: kauditd_printk_skb: 557 callbacks suppressed Jul 15 11:26:52.506229 kernel: audit: type=1400 audit(1752578812.500:551): avc: denied { watch } for pid=1827 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7309 scontext=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:52.506249 kernel: audit: type=1300 audit(1752578812.500:551): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0004f4180 a2=fc6 a3=0 items=0 ppid=1641 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 key=(null) Jul 15 11:26:52.500000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7309 scontext=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:52.500000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0004f4180 a2=fc6 a3=0 items=0 ppid=1641 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 key=(null) Jul 15 11:26:52.514577 kernel: audit: type=1327 audit(1752578812.500:551): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:26:52.500000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:26:52.500000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:52.500000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000374280 a2=fc6 a3=0 items=0 ppid=1641 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 key=(null) Jul 15 11:26:52.570071 kernel: audit: type=1400 audit(1752578812.500:552): avc: denied { watch } for pid=1827 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:52.570145 kernel: audit: type=1300 audit(1752578812.500:552): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000374280 a2=fc6 a3=0 items=0 ppid=1641 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 key=(null) Jul 15 11:26:52.570189 kernel: audit: type=1327 audit(1752578812.500:552): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:26:52.500000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:26:52.801000 audit[1796]: AVC avc: denied { watch } for pid=1796 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7309 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:52.801000 audit[1796]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c0061970e0 a2=fc6 a3=0 items=0 ppid=1670 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 key=(null) Jul 15 11:26:52.811099 kernel: audit: type=1400 audit(1752578812.801:553): avc: denied { watch } for pid=1796 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7309 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:52.811133 kernel: audit: type=1300 audit(1752578812.801:553): arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c0061970e0 a2=fc6 a3=0 items=0 ppid=1670 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 key=(null) Jul 15 11:26:52.811148 kernel: audit: type=1327 audit(1752578812.801:553): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:26:52.801000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:26:52.801000 audit[1796]: AVC avc: denied { watch } for pid=1796 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7305 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:52.818522 kernel: audit: type=1400 audit(1752578812.801:554): avc: denied { watch } for pid=1796 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7305 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:52.801000 audit[1796]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c003d72900 a2=fc6 a3=0 items=0 ppid=1670 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 key=(null) Jul 15 11:26:52.801000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:26:52.818000 audit[1796]: AVC avc: denied { watch } for pid=1796 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:52.818000 audit[1796]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c0086b40c0 a2=fc6 a3=0 items=0 ppid=1670 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 key=(null) Jul 15 11:26:52.818000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:26:52.818000 audit[1796]: AVC avc: denied { watch } for pid=1796 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:52.818000 audit[1796]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c0036223c0 a2=fc6 a3=0 items=0 ppid=1670 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 key=(null) Jul 15 11:26:52.818000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:26:52.822000 audit[1796]: AVC avc: denied { watch } for pid=1796 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:52.822000 audit[1796]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c0067c6c20 a2=fc6 a3=0 items=0 ppid=1670 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 key=(null) Jul 15 11:26:52.822000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:26:52.823000 audit[1796]: AVC avc: denied { watch } for pid=1796 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7309 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:52.823000 audit[1796]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c00630a330 a2=fc6 a3=0 items=0 ppid=1670 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 key=(null) Jul 15 11:26:52.823000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:26:53.007407 kubelet[1598]: I0715 11:26:53.007346 1598 apiserver.go:52] "Watching apiserver" Jul 15 11:26:53.097916 kubelet[1598]: I0715 11:26:53.097795 1598 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 15 11:26:53.147584 kubelet[1598]: E0715 11:26:53.147557 1598 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:26:53.147698 kubelet[1598]: E0715 11:26:53.147666 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:53.147768 kubelet[1598]: E0715 11:26:53.147724 1598 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:26:53.147923 kubelet[1598]: E0715 11:26:53.147891 1598 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:53.440782 kubelet[1598]: I0715 11:26:53.440727 1598 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 15 11:26:53.497781 kubelet[1598]: I0715 11:26:53.497733 1598 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:26:53.549004 kubelet[1598]: E0715 11:26:53.548943 1598 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:26:53.549004 kubelet[1598]: I0715 11:26:53.548977 1598 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 15 11:26:53.550618 kubelet[1598]: E0715 11:26:53.550597 1598 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 15 11:26:53.550700 kubelet[1598]: I0715 11:26:53.550620 1598 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 15 11:26:53.552401 kubelet[1598]: E0715 11:26:53.552379 1598 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 15 11:26:55.079795 systemd[1]: Reloading. Jul 15 11:26:55.153722 /usr/lib/systemd/system-generators/torcx-generator[1897]: time="2025-07-15T11:26:55Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:26:55.153753 /usr/lib/systemd/system-generators/torcx-generator[1897]: time="2025-07-15T11:26:55Z" level=info msg="torcx already run" Jul 15 11:26:55.349766 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:26:55.349782 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:26:55.367025 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:26:55.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.434000 audit: BPF prog-id=85 op=LOAD Jul 15 11:26:55.434000 audit: BPF prog-id=81 op=UNLOAD Jul 15 11:26:55.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.435000 audit: BPF prog-id=86 op=LOAD Jul 15 11:26:55.435000 audit: BPF prog-id=46 op=UNLOAD Jul 15 11:26:55.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.436000 audit: BPF prog-id=87 op=LOAD Jul 15 11:26:55.436000 audit: BPF prog-id=47 op=UNLOAD Jul 15 11:26:55.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit: BPF prog-id=88 op=LOAD Jul 15 11:26:55.438000 audit: BPF prog-id=48 op=UNLOAD Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit: BPF prog-id=89 op=LOAD Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit: BPF prog-id=90 op=LOAD Jul 15 11:26:55.438000 audit: BPF prog-id=49 op=UNLOAD Jul 15 11:26:55.438000 audit: BPF prog-id=50 op=UNLOAD Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.438000 audit: BPF prog-id=91 op=LOAD Jul 15 11:26:55.439000 audit: BPF prog-id=61 op=UNLOAD Jul 15 11:26:55.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.439000 audit: BPF prog-id=92 op=LOAD Jul 15 11:26:55.439000 audit: BPF prog-id=77 op=UNLOAD Jul 15 11:26:55.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.440000 audit: BPF prog-id=93 op=LOAD Jul 15 11:26:55.440000 audit: BPF prog-id=73 op=UNLOAD Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit: BPF prog-id=94 op=LOAD Jul 15 11:26:55.441000 audit: BPF prog-id=51 op=UNLOAD Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit: BPF prog-id=95 op=LOAD Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit: BPF prog-id=96 op=LOAD Jul 15 11:26:55.441000 audit: BPF prog-id=52 op=UNLOAD Jul 15 11:26:55.441000 audit: BPF prog-id=53 op=UNLOAD Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.442000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.442000 audit: BPF prog-id=97 op=LOAD Jul 15 11:26:55.442000 audit: BPF prog-id=54 op=UNLOAD Jul 15 11:26:55.442000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.442000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.442000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.442000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.442000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.442000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.442000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.442000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.442000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.442000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.442000 audit: BPF prog-id=98 op=LOAD Jul 15 11:26:55.442000 audit: BPF prog-id=55 op=UNLOAD Jul 15 11:26:55.442000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.442000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.443000 audit: BPF prog-id=99 op=LOAD Jul 15 11:26:55.443000 audit: BPF prog-id=64 op=UNLOAD Jul 15 11:26:55.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.444000 audit: BPF prog-id=100 op=LOAD Jul 15 11:26:55.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.444000 audit: BPF prog-id=101 op=LOAD Jul 15 11:26:55.444000 audit: BPF prog-id=56 op=UNLOAD Jul 15 11:26:55.444000 audit: BPF prog-id=57 op=UNLOAD Jul 15 11:26:55.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.446000 audit: BPF prog-id=102 op=LOAD Jul 15 11:26:55.446000 audit: BPF prog-id=69 op=UNLOAD Jul 15 11:26:55.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.447000 audit: BPF prog-id=103 op=LOAD Jul 15 11:26:55.447000 audit: BPF prog-id=58 op=UNLOAD Jul 15 11:26:55.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.447000 audit: BPF prog-id=104 op=LOAD Jul 15 11:26:55.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.447000 audit: BPF prog-id=105 op=LOAD Jul 15 11:26:55.447000 audit: BPF prog-id=59 op=UNLOAD Jul 15 11:26:55.447000 audit: BPF prog-id=60 op=UNLOAD Jul 15 11:26:55.459814 systemd[1]: Stopping kubelet.service... Jul 15 11:26:55.485457 systemd[1]: kubelet.service: Deactivated successfully. Jul 15 11:26:55.485642 systemd[1]: Stopped kubelet.service. Jul 15 11:26:55.484000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:55.487320 systemd[1]: Starting kubelet.service... Jul 15 11:26:55.572658 systemd[1]: Started kubelet.service. Jul 15 11:26:55.572000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:55.629259 kubelet[1942]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:26:55.629259 kubelet[1942]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 15 11:26:55.629259 kubelet[1942]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:26:55.629259 kubelet[1942]: I0715 11:26:55.621912 1942 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 15 11:26:55.634005 kubelet[1942]: I0715 11:26:55.633717 1942 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jul 15 11:26:55.634005 kubelet[1942]: I0715 11:26:55.633756 1942 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 15 11:26:55.634005 kubelet[1942]: I0715 11:26:55.634012 1942 server.go:954] "Client rotation is on, will bootstrap in background" Jul 15 11:26:55.635173 kubelet[1942]: I0715 11:26:55.635155 1942 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 15 11:26:55.637390 kubelet[1942]: I0715 11:26:55.637367 1942 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 15 11:26:55.640517 kubelet[1942]: E0715 11:26:55.640480 1942 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 15 11:26:55.640665 kubelet[1942]: I0715 11:26:55.640519 1942 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 15 11:26:55.644809 kubelet[1942]: I0715 11:26:55.644782 1942 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 15 11:26:55.645121 kubelet[1942]: I0715 11:26:55.645045 1942 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 15 11:26:55.645454 kubelet[1942]: I0715 11:26:55.645105 1942 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 15 11:26:55.645580 kubelet[1942]: I0715 11:26:55.645472 1942 topology_manager.go:138] "Creating topology manager with none policy" Jul 15 11:26:55.645580 kubelet[1942]: I0715 11:26:55.645490 1942 container_manager_linux.go:304] "Creating device plugin manager" Jul 15 11:26:55.645580 kubelet[1942]: I0715 11:26:55.645542 1942 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:26:55.645713 kubelet[1942]: I0715 11:26:55.645699 1942 kubelet.go:446] "Attempting to sync node with API server" Jul 15 11:26:55.645763 kubelet[1942]: I0715 11:26:55.645727 1942 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 15 11:26:55.645805 kubelet[1942]: I0715 11:26:55.645767 1942 kubelet.go:352] "Adding apiserver pod source" Jul 15 11:26:55.645805 kubelet[1942]: I0715 11:26:55.645780 1942 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 15 11:26:55.646447 kubelet[1942]: I0715 11:26:55.646412 1942 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 15 11:26:55.646815 kubelet[1942]: I0715 11:26:55.646798 1942 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 15 11:26:55.647842 kubelet[1942]: I0715 11:26:55.647823 1942 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 15 11:26:55.647926 kubelet[1942]: I0715 11:26:55.647865 1942 server.go:1287] "Started kubelet" Jul 15 11:26:55.648012 kubelet[1942]: I0715 11:26:55.647955 1942 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 15 11:26:55.648497 kubelet[1942]: I0715 11:26:55.648464 1942 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 15 11:26:55.648838 kubelet[1942]: I0715 11:26:55.648759 1942 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jul 15 11:26:55.649977 kubelet[1942]: I0715 11:26:55.649941 1942 server.go:479] "Adding debug handlers to kubelet server" Jul 15 11:26:55.649000 audit[1942]: AVC avc: denied { mac_admin } for pid=1942 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.649000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:26:55.649000 audit[1942]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000cf72c0 a1=c000e1c360 a2=c000cf7290 a3=25 items=0 ppid=1 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:55.649000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:26:55.649000 audit[1942]: AVC avc: denied { mac_admin } for pid=1942 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.649000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:26:55.649000 audit[1942]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a73a20 a1=c000e1c378 a2=c000cf7350 a3=25 items=0 ppid=1 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:55.649000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:26:55.651484 kubelet[1942]: I0715 11:26:55.650941 1942 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 15 11:26:55.651484 kubelet[1942]: I0715 11:26:55.650994 1942 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 15 11:26:55.651484 kubelet[1942]: I0715 11:26:55.651035 1942 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 15 11:26:55.651684 kubelet[1942]: I0715 11:26:55.651521 1942 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 15 11:26:55.651684 kubelet[1942]: E0715 11:26:55.651622 1942 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:26:55.654667 kubelet[1942]: I0715 11:26:55.652297 1942 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 15 11:26:55.654667 kubelet[1942]: I0715 11:26:55.652460 1942 reconciler.go:26] "Reconciler: start to sync state" Jul 15 11:26:55.656050 kubelet[1942]: I0715 11:26:55.656028 1942 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 15 11:26:55.670212 kubelet[1942]: I0715 11:26:55.670016 1942 factory.go:221] Registration of the systemd container factory successfully Jul 15 11:26:55.670212 kubelet[1942]: I0715 11:26:55.670183 1942 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 15 11:26:55.671424 kubelet[1942]: I0715 11:26:55.671394 1942 factory.go:221] Registration of the containerd container factory successfully Jul 15 11:26:55.671742 kubelet[1942]: E0715 11:26:55.671714 1942 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 15 11:26:55.675902 kubelet[1942]: I0715 11:26:55.675863 1942 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 15 11:26:55.677669 kubelet[1942]: I0715 11:26:55.677630 1942 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 15 11:26:55.677730 kubelet[1942]: I0715 11:26:55.677686 1942 status_manager.go:227] "Starting to sync pod status with apiserver" Jul 15 11:26:55.677730 kubelet[1942]: I0715 11:26:55.677712 1942 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 15 11:26:55.677730 kubelet[1942]: I0715 11:26:55.677719 1942 kubelet.go:2382] "Starting kubelet main sync loop" Jul 15 11:26:55.677840 kubelet[1942]: E0715 11:26:55.677781 1942 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 15 11:26:55.699151 kubelet[1942]: I0715 11:26:55.699121 1942 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 15 11:26:55.699151 kubelet[1942]: I0715 11:26:55.699138 1942 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 15 11:26:55.699151 kubelet[1942]: I0715 11:26:55.699153 1942 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:26:55.699351 kubelet[1942]: I0715 11:26:55.699283 1942 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 15 11:26:55.699351 kubelet[1942]: I0715 11:26:55.699292 1942 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 15 11:26:55.699351 kubelet[1942]: I0715 11:26:55.699308 1942 policy_none.go:49] "None policy: Start" Jul 15 11:26:55.699351 kubelet[1942]: I0715 11:26:55.699315 1942 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 15 11:26:55.699351 kubelet[1942]: I0715 11:26:55.699324 1942 state_mem.go:35] "Initializing new in-memory state store" Jul 15 11:26:55.699458 kubelet[1942]: I0715 11:26:55.699406 1942 state_mem.go:75] "Updated machine memory state" Jul 15 11:26:55.702638 kubelet[1942]: I0715 11:26:55.702608 1942 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 15 11:26:55.701000 audit[1942]: AVC avc: denied { mac_admin } for pid=1942 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:55.701000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:26:55.701000 audit[1942]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000ef3620 a1=c000a608e8 a2=c000ef35f0 a3=25 items=0 ppid=1 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:55.701000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:26:55.702948 kubelet[1942]: I0715 11:26:55.702694 1942 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Jul 15 11:26:55.702948 kubelet[1942]: I0715 11:26:55.702915 1942 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 15 11:26:55.703014 kubelet[1942]: I0715 11:26:55.702933 1942 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 15 11:26:55.703733 kubelet[1942]: I0715 11:26:55.703668 1942 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 15 11:26:55.705780 kubelet[1942]: E0715 11:26:55.704146 1942 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 15 11:26:55.779250 kubelet[1942]: I0715 11:26:55.779180 1942 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 15 11:26:55.779395 kubelet[1942]: I0715 11:26:55.779349 1942 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 15 11:26:55.779395 kubelet[1942]: I0715 11:26:55.779378 1942 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:26:55.806728 kubelet[1942]: I0715 11:26:55.806696 1942 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:26:55.956241 kubelet[1942]: I0715 11:26:55.956212 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8a75e163f27396b2168da0f88f85f8a5-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"8a75e163f27396b2168da0f88f85f8a5\") " pod="kube-system/kube-scheduler-localhost" Jul 15 11:26:55.956241 kubelet[1942]: I0715 11:26:55.956253 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b791af6d3b0f69f882310949225dd91f-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"b791af6d3b0f69f882310949225dd91f\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:26:55.956440 kubelet[1942]: I0715 11:26:55.956275 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b791af6d3b0f69f882310949225dd91f-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"b791af6d3b0f69f882310949225dd91f\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:26:55.956440 kubelet[1942]: I0715 11:26:55.956297 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b791af6d3b0f69f882310949225dd91f-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"b791af6d3b0f69f882310949225dd91f\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:26:55.956440 kubelet[1942]: I0715 11:26:55.956325 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:26:55.956440 kubelet[1942]: I0715 11:26:55.956351 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:26:55.956440 kubelet[1942]: I0715 11:26:55.956372 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:26:55.956551 kubelet[1942]: I0715 11:26:55.956420 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:26:55.956551 kubelet[1942]: I0715 11:26:55.956434 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:26:56.141053 kubelet[1942]: E0715 11:26:56.141009 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:56.141387 kubelet[1942]: E0715 11:26:56.141362 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:56.145733 kubelet[1942]: I0715 11:26:56.145701 1942 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Jul 15 11:26:56.145864 kubelet[1942]: I0715 11:26:56.145773 1942 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 15 11:26:56.194000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=520971 scontext=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 15 11:26:56.194000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0007f2140 a2=fc6 a3=0 items=0 ppid=1641 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 key=(null) Jul 15 11:26:56.194000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:26:56.224317 kubelet[1942]: E0715 11:26:56.224232 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:56.647866 kubelet[1942]: I0715 11:26:56.647735 1942 apiserver.go:52] "Watching apiserver" Jul 15 11:26:56.654920 kubelet[1942]: I0715 11:26:56.654876 1942 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 15 11:26:56.688396 kubelet[1942]: E0715 11:26:56.688356 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:56.688564 kubelet[1942]: I0715 11:26:56.688489 1942 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 15 11:26:56.689155 kubelet[1942]: E0715 11:26:56.689127 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:56.697337 kubelet[1942]: E0715 11:26:56.697290 1942 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 15 11:26:56.697853 kubelet[1942]: E0715 11:26:56.697393 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:57.035238 kubelet[1942]: I0715 11:26:57.035187 1942 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=2.0351723 podStartE2EDuration="2.0351723s" podCreationTimestamp="2025-07-15 11:26:55 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:26:57.034519291 +0000 UTC m=+1.454961594" watchObservedRunningTime="2025-07-15 11:26:57.0351723 +0000 UTC m=+1.455614432" Jul 15 11:26:57.312140 kubelet[1942]: I0715 11:26:57.311998 1942 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=2.311960939 podStartE2EDuration="2.311960939s" podCreationTimestamp="2025-07-15 11:26:55 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:26:57.31194601 +0000 UTC m=+1.732388142" watchObservedRunningTime="2025-07-15 11:26:57.311960939 +0000 UTC m=+1.732403071" Jul 15 11:26:57.312324 kubelet[1942]: I0715 11:26:57.312203 1942 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=2.312196486 podStartE2EDuration="2.312196486s" podCreationTimestamp="2025-07-15 11:26:55 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:26:57.298682017 +0000 UTC m=+1.719124149" watchObservedRunningTime="2025-07-15 11:26:57.312196486 +0000 UTC m=+1.732638618" Jul 15 11:26:57.689498 kubelet[1942]: E0715 11:26:57.689398 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:57.689854 kubelet[1942]: E0715 11:26:57.689496 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:59.181420 update_engine[1193]: I0715 11:26:59.181372 1193 update_attempter.cc:509] Updating boot flags... Jul 15 11:26:59.346000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:59.348864 kernel: kauditd_printk_skb: 275 callbacks suppressed Jul 15 11:26:59.348910 kernel: audit: type=1400 audit(1752578819.346:809): avc: denied { watch } for pid=1827 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:59.346000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000375980 a2=fc6 a3=0 items=0 ppid=1641 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 key=(null) Jul 15 11:26:59.356805 kernel: audit: type=1300 audit(1752578819.346:809): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000375980 a2=fc6 a3=0 items=0 ppid=1641 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 key=(null) Jul 15 11:26:59.356830 kernel: audit: type=1327 audit(1752578819.346:809): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:26:59.346000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:26:59.346000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:59.364178 kernel: audit: type=1400 audit(1752578819.346:810): avc: denied { watch } for pid=1827 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:59.364220 kernel: audit: type=1300 audit(1752578819.346:810): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000375a40 a2=fc6 a3=0 items=0 ppid=1641 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 key=(null) Jul 15 11:26:59.346000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000375a40 a2=fc6 a3=0 items=0 ppid=1641 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 key=(null) Jul 15 11:26:59.346000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:26:59.372569 kernel: audit: type=1327 audit(1752578819.346:810): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:26:59.372602 kernel: audit: type=1400 audit(1752578819.346:811): avc: denied { watch } for pid=1827 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:59.346000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:59.346000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000375bc0 a2=fc6 a3=0 items=0 ppid=1641 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 key=(null) Jul 15 11:26:59.380732 kernel: audit: type=1300 audit(1752578819.346:811): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000375bc0 a2=fc6 a3=0 items=0 ppid=1641 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 key=(null) Jul 15 11:26:59.380769 kernel: audit: type=1327 audit(1752578819.346:811): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:26:59.346000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:26:59.347000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:59.388185 kernel: audit: type=1400 audit(1752578819.347:812): avc: denied { watch } for pid=1827 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:59.347000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00041a3c0 a2=fc6 a3=0 items=0 ppid=1641 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 key=(null) Jul 15 11:26:59.347000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:27:00.522785 kubelet[1942]: E0715 11:27:00.522740 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:00.939290 kubelet[1942]: I0715 11:27:00.939195 1942 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 15 11:27:00.939588 env[1203]: time="2025-07-15T11:27:00.939552026Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 15 11:27:00.939869 kubelet[1942]: I0715 11:27:00.939775 1942 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 15 11:27:01.157833 kubelet[1942]: W0715 11:27:01.157791 1942 reflector.go:569] object-"kube-system"/"kube-proxy": failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Jul 15 11:27:01.158012 kubelet[1942]: E0715 11:27:01.157841 1942 reflector.go:166] "Unhandled Error" err="object-\"kube-system\"/\"kube-proxy\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"kube-proxy\" is forbidden: User \"system:node:localhost\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"kube-system\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Jul 15 11:27:01.158012 kubelet[1942]: I0715 11:27:01.157985 1942 status_manager.go:890] "Failed to get status for pod" podUID="a4ea8105-8053-4ecb-b93c-db270bab2320" pod="kube-system/kube-proxy-d25lv" err="pods \"kube-proxy-d25lv\" is forbidden: User \"system:node:localhost\" cannot get resource \"pods\" in API group \"\" in the namespace \"kube-system\": no relationship found between node 'localhost' and this object" Jul 15 11:27:01.158177 kubelet[1942]: W0715 11:27:01.158148 1942 reflector.go:569] object-"kube-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Jul 15 11:27:01.158177 kubelet[1942]: E0715 11:27:01.158166 1942 reflector.go:166] "Unhandled Error" err="object-\"kube-system\"/\"kube-root-ca.crt\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"kube-root-ca.crt\" is forbidden: User \"system:node:localhost\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"kube-system\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Jul 15 11:27:01.159686 systemd[1]: Created slice kubepods-besteffort-poda4ea8105_8053_4ecb_b93c_db270bab2320.slice. Jul 15 11:27:01.189070 kubelet[1942]: I0715 11:27:01.189005 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/a4ea8105-8053-4ecb-b93c-db270bab2320-xtables-lock\") pod \"kube-proxy-d25lv\" (UID: \"a4ea8105-8053-4ecb-b93c-db270bab2320\") " pod="kube-system/kube-proxy-d25lv" Jul 15 11:27:01.189070 kubelet[1942]: I0715 11:27:01.189053 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/a4ea8105-8053-4ecb-b93c-db270bab2320-kube-proxy\") pod \"kube-proxy-d25lv\" (UID: \"a4ea8105-8053-4ecb-b93c-db270bab2320\") " pod="kube-system/kube-proxy-d25lv" Jul 15 11:27:01.189070 kubelet[1942]: I0715 11:27:01.189066 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/a4ea8105-8053-4ecb-b93c-db270bab2320-lib-modules\") pod \"kube-proxy-d25lv\" (UID: \"a4ea8105-8053-4ecb-b93c-db270bab2320\") " pod="kube-system/kube-proxy-d25lv" Jul 15 11:27:01.189348 kubelet[1942]: I0715 11:27:01.189101 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fbc6c\" (UniqueName: \"kubernetes.io/projected/a4ea8105-8053-4ecb-b93c-db270bab2320-kube-api-access-fbc6c\") pod \"kube-proxy-d25lv\" (UID: \"a4ea8105-8053-4ecb-b93c-db270bab2320\") " pod="kube-system/kube-proxy-d25lv" Jul 15 11:27:01.895169 systemd[1]: Created slice kubepods-besteffort-pod9c192853_e3b1_4e27_b9e2_eb1f6900484d.slice. Jul 15 11:27:01.992648 kubelet[1942]: I0715 11:27:01.992612 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ksh8g\" (UniqueName: \"kubernetes.io/projected/9c192853-e3b1-4e27-b9e2-eb1f6900484d-kube-api-access-ksh8g\") pod \"tigera-operator-747864d56d-vx8lg\" (UID: \"9c192853-e3b1-4e27-b9e2-eb1f6900484d\") " pod="tigera-operator/tigera-operator-747864d56d-vx8lg" Jul 15 11:27:01.992648 kubelet[1942]: I0715 11:27:01.992648 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/9c192853-e3b1-4e27-b9e2-eb1f6900484d-var-lib-calico\") pod \"tigera-operator-747864d56d-vx8lg\" (UID: \"9c192853-e3b1-4e27-b9e2-eb1f6900484d\") " pod="tigera-operator/tigera-operator-747864d56d-vx8lg" Jul 15 11:27:02.097729 kubelet[1942]: I0715 11:27:02.097683 1942 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 15 11:27:02.199061 env[1203]: time="2025-07-15T11:27:02.199020129Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-vx8lg,Uid:9c192853-e3b1-4e27-b9e2-eb1f6900484d,Namespace:tigera-operator,Attempt:0,}" Jul 15 11:27:02.220257 env[1203]: time="2025-07-15T11:27:02.220188437Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:27:02.220257 env[1203]: time="2025-07-15T11:27:02.220226409Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:27:02.220257 env[1203]: time="2025-07-15T11:27:02.220238482Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:27:02.220474 env[1203]: time="2025-07-15T11:27:02.220374349Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/695a821a5c53e3eefc1ec7ed5e6daf7701f5b690ff768d71c0621cdfedb43696 pid=2015 runtime=io.containerd.runc.v2 Jul 15 11:27:02.235217 systemd[1]: Started cri-containerd-695a821a5c53e3eefc1ec7ed5e6daf7701f5b690ff768d71c0621cdfedb43696.scope. Jul 15 11:27:02.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.258000 audit: BPF prog-id=106 op=LOAD Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2015 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:02.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639356138323161356335336533656566633165633765643565366461 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2015 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:02.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639356138323161356335336533656566633165633765643565366461 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit: BPF prog-id=107 op=LOAD Jul 15 11:27:02.259000 audit[2024]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00026dd90 items=0 ppid=2015 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:02.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639356138323161356335336533656566633165633765643565366461 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit: BPF prog-id=108 op=LOAD Jul 15 11:27:02.259000 audit[2024]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00026ddd8 items=0 ppid=2015 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:02.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639356138323161356335336533656566633165633765643565366461 Jul 15 11:27:02.259000 audit: BPF prog-id=108 op=UNLOAD Jul 15 11:27:02.259000 audit: BPF prog-id=107 op=UNLOAD Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:02.259000 audit: BPF prog-id=109 op=LOAD Jul 15 11:27:02.259000 audit[2024]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003e41e8 items=0 ppid=2015 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:02.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639356138323161356335336533656566633165633765643565366461 Jul 15 11:27:02.287094 env[1203]: time="2025-07-15T11:27:02.287036413Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-vx8lg,Uid:9c192853-e3b1-4e27-b9e2-eb1f6900484d,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"695a821a5c53e3eefc1ec7ed5e6daf7701f5b690ff768d71c0621cdfedb43696\"" Jul 15 11:27:02.288638 env[1203]: time="2025-07-15T11:27:02.288613895Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 15 11:27:02.290614 kubelet[1942]: E0715 11:27:02.290587 1942 configmap.go:193] Couldn't get configMap kube-system/kube-proxy: failed to sync configmap cache: timed out waiting for the condition Jul 15 11:27:02.290713 kubelet[1942]: E0715 11:27:02.290669 1942 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/a4ea8105-8053-4ecb-b93c-db270bab2320-kube-proxy podName:a4ea8105-8053-4ecb-b93c-db270bab2320 nodeName:}" failed. No retries permitted until 2025-07-15 11:27:02.790646638 +0000 UTC m=+7.211088770 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-proxy" (UniqueName: "kubernetes.io/configmap/a4ea8105-8053-4ecb-b93c-db270bab2320-kube-proxy") pod "kube-proxy-d25lv" (UID: "a4ea8105-8053-4ecb-b93c-db270bab2320") : failed to sync configmap cache: timed out waiting for the condition Jul 15 11:27:02.967594 kubelet[1942]: E0715 11:27:02.967557 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:02.968223 env[1203]: time="2025-07-15T11:27:02.968178615Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-d25lv,Uid:a4ea8105-8053-4ecb-b93c-db270bab2320,Namespace:kube-system,Attempt:0,}" Jul 15 11:27:02.982391 env[1203]: time="2025-07-15T11:27:02.982314077Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:27:02.982391 env[1203]: time="2025-07-15T11:27:02.982351649Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:27:02.982391 env[1203]: time="2025-07-15T11:27:02.982362529Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:27:02.982575 env[1203]: time="2025-07-15T11:27:02.982521339Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2274707407497672406668f5f8376e2794abc5e244a265f2a01c5d663625c88f pid=2054 runtime=io.containerd.runc.v2 Jul 15 11:27:02.994992 systemd[1]: Started cri-containerd-2274707407497672406668f5f8376e2794abc5e244a265f2a01c5d663625c88f.scope. Jul 15 11:27:03.014000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit: BPF prog-id=110 op=LOAD Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2054 pid=2064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232373437303734303734393736373234303636363866356638333736 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2054 pid=2064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232373437303734303734393736373234303636363866356638333736 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit: BPF prog-id=111 op=LOAD Jul 15 11:27:03.014000 audit[2064]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002c5ce0 items=0 ppid=2054 pid=2064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232373437303734303734393736373234303636363866356638333736 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit: BPF prog-id=112 op=LOAD Jul 15 11:27:03.014000 audit[2064]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002c5d28 items=0 ppid=2054 pid=2064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232373437303734303734393736373234303636363866356638333736 Jul 15 11:27:03.014000 audit: BPF prog-id=112 op=UNLOAD Jul 15 11:27:03.014000 audit: BPF prog-id=111 op=UNLOAD Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.014000 audit: BPF prog-id=113 op=LOAD Jul 15 11:27:03.014000 audit[2064]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00032e138 items=0 ppid=2054 pid=2064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232373437303734303734393736373234303636363866356638333736 Jul 15 11:27:03.027647 env[1203]: time="2025-07-15T11:27:03.027605914Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-d25lv,Uid:a4ea8105-8053-4ecb-b93c-db270bab2320,Namespace:kube-system,Attempt:0,} returns sandbox id \"2274707407497672406668f5f8376e2794abc5e244a265f2a01c5d663625c88f\"" Jul 15 11:27:03.028241 kubelet[1942]: E0715 11:27:03.028215 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:03.029657 env[1203]: time="2025-07-15T11:27:03.029630140Z" level=info msg="CreateContainer within sandbox \"2274707407497672406668f5f8376e2794abc5e244a265f2a01c5d663625c88f\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 15 11:27:03.044835 env[1203]: time="2025-07-15T11:27:03.044775046Z" level=info msg="CreateContainer within sandbox \"2274707407497672406668f5f8376e2794abc5e244a265f2a01c5d663625c88f\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"7d7b4612f850c614d69d92e4b8a6147842799b7032b0e3bcdc4a6bb92a866ba1\"" Jul 15 11:27:03.045448 env[1203]: time="2025-07-15T11:27:03.045422400Z" level=info msg="StartContainer for \"7d7b4612f850c614d69d92e4b8a6147842799b7032b0e3bcdc4a6bb92a866ba1\"" Jul 15 11:27:03.061192 systemd[1]: Started cri-containerd-7d7b4612f850c614d69d92e4b8a6147842799b7032b0e3bcdc4a6bb92a866ba1.scope. Jul 15 11:27:03.077000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.077000 audit[2097]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fdf0cfc8c68 items=0 ppid=2054 pid=2097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764376234363132663835306336313464363964393265346238613631 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit: BPF prog-id=114 op=LOAD Jul 15 11:27:03.078000 audit[2097]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000098a68 items=0 ppid=2054 pid=2097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.078000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764376234363132663835306336313464363964393265346238613631 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit: BPF prog-id=115 op=LOAD Jul 15 11:27:03.078000 audit[2097]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000098ab8 items=0 ppid=2054 pid=2097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.078000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764376234363132663835306336313464363964393265346238613631 Jul 15 11:27:03.078000 audit: BPF prog-id=115 op=UNLOAD Jul 15 11:27:03.078000 audit: BPF prog-id=114 op=UNLOAD Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:03.078000 audit: BPF prog-id=116 op=LOAD Jul 15 11:27:03.078000 audit[2097]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000098b48 items=0 ppid=2054 pid=2097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.078000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764376234363132663835306336313464363964393265346238613631 Jul 15 11:27:03.092142 env[1203]: time="2025-07-15T11:27:03.092099006Z" level=info msg="StartContainer for \"7d7b4612f850c614d69d92e4b8a6147842799b7032b0e3bcdc4a6bb92a866ba1\" returns successfully" Jul 15 11:27:03.204000 audit[2158]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2158 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:27:03.204000 audit[2158]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff453fc6d0 a2=0 a3=7fff453fc6bc items=0 ppid=2108 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.204000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 15 11:27:03.204000 audit[2159]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2159 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.204000 audit[2159]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd6ed89660 a2=0 a3=7ffd6ed8964c items=0 ppid=2108 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.204000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 15 11:27:03.205000 audit[2161]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2161 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.205000 audit[2161]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd8c3d5110 a2=0 a3=7ffd8c3d50fc items=0 ppid=2108 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.205000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 15 11:27:03.205000 audit[2160]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=2160 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:27:03.205000 audit[2160]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd15cfaf70 a2=0 a3=7ffd15cfaf5c items=0 ppid=2108 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.205000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 15 11:27:03.206000 audit[2163]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=2163 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.206000 audit[2163]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcafb79330 a2=0 a3=7ffcafb7931c items=0 ppid=2108 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.206000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 15 11:27:03.206000 audit[2164]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2164 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:27:03.206000 audit[2164]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd030a6db0 a2=0 a3=7ffd030a6d9c items=0 ppid=2108 pid=2164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.206000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 15 11:27:03.306000 audit[2165]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2165 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:27:03.306000 audit[2165]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffdd89834c0 a2=0 a3=7ffdd89834ac items=0 ppid=2108 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.306000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 15 11:27:03.308000 audit[2167]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:27:03.308000 audit[2167]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffcc90bda20 a2=0 a3=7ffcc90bda0c items=0 ppid=2108 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.308000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 15 11:27:03.311000 audit[2170]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2170 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:27:03.311000 audit[2170]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe391117a0 a2=0 a3=7ffe3911178c items=0 ppid=2108 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.311000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 15 11:27:03.312000 audit[2171]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:27:03.312000 audit[2171]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeb4946f70 a2=0 a3=7ffeb4946f5c items=0 ppid=2108 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.312000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 15 11:27:03.314000 audit[2173]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:27:03.314000 audit[2173]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd0fbb4ad0 a2=0 a3=7ffd0fbb4abc items=0 ppid=2108 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.314000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 15 11:27:03.315000 audit[2174]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2174 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:27:03.315000 audit[2174]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdbbbd4d40 a2=0 a3=7ffdbbbd4d2c items=0 ppid=2108 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.315000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 15 11:27:03.317000 audit[2176]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2176 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:27:03.317000 audit[2176]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd1efb8d90 a2=0 a3=7ffd1efb8d7c items=0 ppid=2108 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.317000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 15 11:27:03.319000 audit[2179]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:27:03.319000 audit[2179]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe0b6aba40 a2=0 a3=7ffe0b6aba2c items=0 ppid=2108 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.319000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 15 11:27:03.322000 audit[2180]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:27:03.322000 audit[2180]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcf33e16a0 a2=0 a3=7ffcf33e168c items=0 ppid=2108 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.322000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 15 11:27:03.324000 audit[2182]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:27:03.324000 audit[2182]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdbc717660 a2=0 a3=7ffdbc71764c items=0 ppid=2108 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.324000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 15 11:27:03.324000 audit[2183]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2183 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:27:03.324000 audit[2183]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffecea68ff0 a2=0 a3=7ffecea68fdc items=0 ppid=2108 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.324000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 15 11:27:03.326000 audit[2185]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:27:03.326000 audit[2185]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffea4f92390 a2=0 a3=7ffea4f9237c items=0 ppid=2108 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.326000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:27:03.329000 audit[2188]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:27:03.329000 audit[2188]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffddf52d7b0 a2=0 a3=7ffddf52d79c items=0 ppid=2108 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.329000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:27:03.332000 audit[2191]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:27:03.332000 audit[2191]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd13db5b90 a2=0 a3=7ffd13db5b7c items=0 ppid=2108 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.332000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 15 11:27:03.333000 audit[2192]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2192 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:27:03.333000 audit[2192]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff0a277f20 a2=0 a3=7fff0a277f0c items=0 ppid=2108 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.333000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 15 11:27:03.335000 audit[2194]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:27:03.335000 audit[2194]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffdfe891330 a2=0 a3=7ffdfe89131c items=0 ppid=2108 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.335000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:27:03.338000 audit[2197]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2197 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:27:03.338000 audit[2197]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe31c136c0 a2=0 a3=7ffe31c136ac items=0 ppid=2108 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.338000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:27:03.338000 audit[2198]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2198 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:27:03.338000 audit[2198]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc7eb6b550 a2=0 a3=7ffc7eb6b53c items=0 ppid=2108 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.338000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 15 11:27:03.340000 audit[2200]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2200 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:27:03.340000 audit[2200]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffdf1aff910 a2=0 a3=7ffdf1aff8fc items=0 ppid=2108 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.340000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 15 11:27:03.361000 audit[2206]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2206 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:03.361000 audit[2206]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffc95ca790 a2=0 a3=7fffc95ca77c items=0 ppid=2108 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.361000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:03.370000 audit[2206]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2206 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:03.370000 audit[2206]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7fffc95ca790 a2=0 a3=7fffc95ca77c items=0 ppid=2108 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.370000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:03.371000 audit[2211]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2211 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.371000 audit[2211]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffeb87abaa0 a2=0 a3=7ffeb87aba8c items=0 ppid=2108 pid=2211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.371000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 15 11:27:03.373000 audit[2213]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2213 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.373000 audit[2213]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff6234e4e0 a2=0 a3=7fff6234e4cc items=0 ppid=2108 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.373000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 15 11:27:03.376000 audit[2216]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2216 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.376000 audit[2216]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc1e412e10 a2=0 a3=7ffc1e412dfc items=0 ppid=2108 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.376000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 15 11:27:03.376000 audit[2217]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.376000 audit[2217]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc391b5b90 a2=0 a3=7ffc391b5b7c items=0 ppid=2108 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.376000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 15 11:27:03.378000 audit[2219]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.378000 audit[2219]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe60967bd0 a2=0 a3=7ffe60967bbc items=0 ppid=2108 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.378000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 15 11:27:03.379000 audit[2220]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2220 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.379000 audit[2220]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffea5d6b500 a2=0 a3=7ffea5d6b4ec items=0 ppid=2108 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.379000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 15 11:27:03.381000 audit[2222]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.381000 audit[2222]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe52cf8390 a2=0 a3=7ffe52cf837c items=0 ppid=2108 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.381000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 15 11:27:03.384000 audit[2225]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.384000 audit[2225]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffdfdbbd960 a2=0 a3=7ffdfdbbd94c items=0 ppid=2108 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.384000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 15 11:27:03.385000 audit[2226]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.385000 audit[2226]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffd620e7f0 a2=0 a3=7fffd620e7dc items=0 ppid=2108 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.385000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 15 11:27:03.387000 audit[2228]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.387000 audit[2228]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe91f8fdc0 a2=0 a3=7ffe91f8fdac items=0 ppid=2108 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.387000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 15 11:27:03.387000 audit[2229]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2229 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.387000 audit[2229]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffaa250620 a2=0 a3=7fffaa25060c items=0 ppid=2108 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.387000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 15 11:27:03.389000 audit[2231]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.389000 audit[2231]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdd021e970 a2=0 a3=7ffdd021e95c items=0 ppid=2108 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.389000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:27:03.392000 audit[2234]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.392000 audit[2234]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd74ae06e0 a2=0 a3=7ffd74ae06cc items=0 ppid=2108 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.392000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 15 11:27:03.395000 audit[2237]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.395000 audit[2237]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffbe07cee0 a2=0 a3=7fffbe07cecc items=0 ppid=2108 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.395000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 15 11:27:03.396000 audit[2238]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2238 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.396000 audit[2238]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc6b454430 a2=0 a3=7ffc6b45441c items=0 ppid=2108 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.396000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 15 11:27:03.397000 audit[2240]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.397000 audit[2240]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffcbaea38f0 a2=0 a3=7ffcbaea38dc items=0 ppid=2108 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.397000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:27:03.400000 audit[2243]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2243 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.400000 audit[2243]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fff23755f60 a2=0 a3=7fff23755f4c items=0 ppid=2108 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.400000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:27:03.401000 audit[2244]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2244 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.401000 audit[2244]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffffc87c160 a2=0 a3=7ffffc87c14c items=0 ppid=2108 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.401000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 15 11:27:03.402000 audit[2246]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2246 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.402000 audit[2246]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffe1680cd80 a2=0 a3=7ffe1680cd6c items=0 ppid=2108 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.402000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 15 11:27:03.403000 audit[2247]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2247 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.403000 audit[2247]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc0d52cfb0 a2=0 a3=7ffc0d52cf9c items=0 ppid=2108 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.403000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 15 11:27:03.405000 audit[2249]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2249 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.405000 audit[2249]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd901acb60 a2=0 a3=7ffd901acb4c items=0 ppid=2108 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.405000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:27:03.407000 audit[2252]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2252 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:27:03.407000 audit[2252]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffee22a4cd0 a2=0 a3=7ffee22a4cbc items=0 ppid=2108 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.407000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:27:03.410000 audit[2254]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2254 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 15 11:27:03.410000 audit[2254]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffe8544ef30 a2=0 a3=7ffe8544ef1c items=0 ppid=2108 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.410000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:03.410000 audit[2254]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2254 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 15 11:27:03.410000 audit[2254]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffe8544ef30 a2=0 a3=7ffe8544ef1c items=0 ppid=2108 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:03.410000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:03.702996 kubelet[1942]: E0715 11:27:03.702808 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:03.756825 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1085667144.mount: Deactivated successfully. Jul 15 11:27:04.116155 kubelet[1942]: E0715 11:27:04.116029 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:04.128685 kubelet[1942]: I0715 11:27:04.128619 1942 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-d25lv" podStartSLOduration=4.128602244 podStartE2EDuration="4.128602244s" podCreationTimestamp="2025-07-15 11:27:00 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:27:03.715194929 +0000 UTC m=+8.135637091" watchObservedRunningTime="2025-07-15 11:27:04.128602244 +0000 UTC m=+8.549044366" Jul 15 11:27:04.595861 env[1203]: time="2025-07-15T11:27:04.595801975Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:04.597817 env[1203]: time="2025-07-15T11:27:04.597754272Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:04.599340 env[1203]: time="2025-07-15T11:27:04.599286997Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:04.600607 env[1203]: time="2025-07-15T11:27:04.600580129Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:04.601049 env[1203]: time="2025-07-15T11:27:04.601021312Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93\"" Jul 15 11:27:04.603139 env[1203]: time="2025-07-15T11:27:04.603109246Z" level=info msg="CreateContainer within sandbox \"695a821a5c53e3eefc1ec7ed5e6daf7701f5b690ff768d71c0621cdfedb43696\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 15 11:27:04.615582 env[1203]: time="2025-07-15T11:27:04.615536315Z" level=info msg="CreateContainer within sandbox \"695a821a5c53e3eefc1ec7ed5e6daf7701f5b690ff768d71c0621cdfedb43696\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"91faa9cb98d63cf2d1c592d0c57de053edd05c623941063388cddac3cf092d3f\"" Jul 15 11:27:04.616153 env[1203]: time="2025-07-15T11:27:04.616117563Z" level=info msg="StartContainer for \"91faa9cb98d63cf2d1c592d0c57de053edd05c623941063388cddac3cf092d3f\"" Jul 15 11:27:04.634905 systemd[1]: Started cri-containerd-91faa9cb98d63cf2d1c592d0c57de053edd05c623941063388cddac3cf092d3f.scope. Jul 15 11:27:04.649104 kernel: kauditd_printk_skb: 312 callbacks suppressed Jul 15 11:27:04.649232 kernel: audit: type=1400 audit(1752578824.645:906): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.649252 kernel: audit: type=1400 audit(1752578824.645:907): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.652111 kernel: audit: type=1400 audit(1752578824.645:908): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.658222 kernel: audit: type=1400 audit(1752578824.645:909): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.658259 kernel: audit: type=1400 audit(1752578824.645:910): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.664294 kernel: audit: type=1400 audit(1752578824.645:911): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.664344 kernel: audit: type=1400 audit(1752578824.645:912): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.667177 kernel: audit: type=1400 audit(1752578824.645:913): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.673006 kernel: audit: type=1400 audit(1752578824.645:914): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.673049 kernel: audit: type=1400 audit(1752578824.648:915): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.648000 audit: BPF prog-id=117 op=LOAD Jul 15 11:27:04.649000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.649000 audit[2262]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2015 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:04.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931666161396362393864363363663264316335393264306335376465 Jul 15 11:27:04.649000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.649000 audit[2262]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2015 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:04.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931666161396362393864363363663264316335393264306335376465 Jul 15 11:27:04.649000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.649000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.649000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.649000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.649000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.649000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.649000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.649000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.649000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.649000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.649000 audit: BPF prog-id=118 op=LOAD Jul 15 11:27:04.649000 audit[2262]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000024bb0 items=0 ppid=2015 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:04.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931666161396362393864363363663264316335393264306335376465 Jul 15 11:27:04.655000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.655000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.655000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.655000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.655000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.655000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.655000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.655000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.655000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.655000 audit: BPF prog-id=119 op=LOAD Jul 15 11:27:04.655000 audit[2262]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000024bf8 items=0 ppid=2015 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:04.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931666161396362393864363363663264316335393264306335376465 Jul 15 11:27:04.658000 audit: BPF prog-id=119 op=UNLOAD Jul 15 11:27:04.658000 audit: BPF prog-id=118 op=UNLOAD Jul 15 11:27:04.658000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.658000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.658000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.658000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.658000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.658000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.658000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.658000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.658000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.658000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:04.658000 audit: BPF prog-id=120 op=LOAD Jul 15 11:27:04.658000 audit[2262]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000025008 items=0 ppid=2015 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:04.658000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931666161396362393864363363663264316335393264306335376465 Jul 15 11:27:04.684744 env[1203]: time="2025-07-15T11:27:04.684687455Z" level=info msg="StartContainer for \"91faa9cb98d63cf2d1c592d0c57de053edd05c623941063388cddac3cf092d3f\" returns successfully" Jul 15 11:27:04.706209 kubelet[1942]: E0715 11:27:04.706173 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:05.611862 systemd[1]: run-containerd-runc-k8s.io-91faa9cb98d63cf2d1c592d0c57de053edd05c623941063388cddac3cf092d3f-runc.Or7bCi.mount: Deactivated successfully. Jul 15 11:27:05.647764 kubelet[1942]: E0715 11:27:05.647736 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:05.659427 kubelet[1942]: I0715 11:27:05.659362 1942 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-vx8lg" podStartSLOduration=2.345683109 podStartE2EDuration="4.659345919s" podCreationTimestamp="2025-07-15 11:27:01 +0000 UTC" firstStartedPulling="2025-07-15 11:27:02.288062532 +0000 UTC m=+6.708504664" lastFinishedPulling="2025-07-15 11:27:04.601725342 +0000 UTC m=+9.022167474" observedRunningTime="2025-07-15 11:27:04.721580412 +0000 UTC m=+9.142022544" watchObservedRunningTime="2025-07-15 11:27:05.659345919 +0000 UTC m=+10.079788051" Jul 15 11:27:05.706939 kubelet[1942]: E0715 11:27:05.706901 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:05.708027 kubelet[1942]: E0715 11:27:05.707993 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:10.234232 sudo[1337]: pam_unix(sudo:session): session closed for user root Jul 15 11:27:10.233000 audit[1337]: USER_END pid=1337 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:27:10.235269 kernel: kauditd_printk_skb: 47 callbacks suppressed Jul 15 11:27:10.235332 kernel: audit: type=1106 audit(1752578830.233:924): pid=1337 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:27:10.237023 sshd[1334]: pam_unix(sshd:session): session closed for user core Jul 15 11:27:10.243222 kernel: audit: type=1104 audit(1752578830.233:925): pid=1337 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:27:10.233000 audit[1337]: CRED_DISP pid=1337 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:27:10.240039 systemd[1]: sshd@6-10.0.0.18:22-10.0.0.1:54386.service: Deactivated successfully. Jul 15 11:27:10.241422 systemd[1]: session-7.scope: Deactivated successfully. Jul 15 11:27:10.241586 systemd[1]: session-7.scope: Consumed 4.620s CPU time. Jul 15 11:27:10.242279 systemd-logind[1191]: Session 7 logged out. Waiting for processes to exit. Jul 15 11:27:10.243182 systemd-logind[1191]: Removed session 7. Jul 15 11:27:10.237000 audit[1334]: USER_END pid=1334 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:10.253869 kernel: audit: type=1106 audit(1752578830.237:926): pid=1334 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:10.253929 kernel: audit: type=1104 audit(1752578830.237:927): pid=1334 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:10.237000 audit[1334]: CRED_DISP pid=1334 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:10.257784 kernel: audit: type=1131 audit(1752578830.239:928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.18:22-10.0.0.1:54386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:10.239000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.18:22-10.0.0.1:54386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:10.532939 kubelet[1942]: E0715 11:27:10.532842 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:10.563658 kernel: audit: type=1325 audit(1752578830.555:929): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2348 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:10.563798 kernel: audit: type=1300 audit(1752578830.555:929): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffcea0c9960 a2=0 a3=7ffcea0c994c items=0 ppid=2108 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:10.555000 audit[2348]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2348 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:10.555000 audit[2348]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffcea0c9960 a2=0 a3=7ffcea0c994c items=0 ppid=2108 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:10.555000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:10.568548 kernel: audit: type=1327 audit(1752578830.555:929): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:10.568598 kernel: audit: type=1325 audit(1752578830.564:930): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2348 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:10.564000 audit[2348]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2348 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:10.564000 audit[2348]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcea0c9960 a2=0 a3=0 items=0 ppid=2108 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:10.573818 kernel: audit: type=1300 audit(1752578830.564:930): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcea0c9960 a2=0 a3=0 items=0 ppid=2108 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:10.564000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:10.586000 audit[2350]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2350 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:10.586000 audit[2350]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffde90ebcf0 a2=0 a3=7ffde90ebcdc items=0 ppid=2108 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:10.586000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:10.592000 audit[2350]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2350 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:10.592000 audit[2350]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffde90ebcf0 a2=0 a3=0 items=0 ppid=2108 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:10.592000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:12.624000 audit[2352]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2352 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:12.624000 audit[2352]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fffacc34710 a2=0 a3=7fffacc346fc items=0 ppid=2108 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:12.624000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:12.632000 audit[2352]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2352 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:12.632000 audit[2352]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffacc34710 a2=0 a3=0 items=0 ppid=2108 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:12.632000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:12.647000 audit[2354]: NETFILTER_CFG table=filter:95 family=2 entries=19 op=nft_register_rule pid=2354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:12.647000 audit[2354]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fff73cbd340 a2=0 a3=7fff73cbd32c items=0 ppid=2108 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:12.647000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:12.652000 audit[2354]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:12.652000 audit[2354]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff73cbd340 a2=0 a3=0 items=0 ppid=2108 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:12.652000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:13.068158 systemd[1]: Created slice kubepods-besteffort-pod2e0e3f3e_f010_4e13_bfc8_a23776f854ff.slice. Jul 15 11:27:13.172985 kubelet[1942]: I0715 11:27:13.172924 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/2e0e3f3e-f010-4e13-bfc8-a23776f854ff-tigera-ca-bundle\") pod \"calico-typha-6f86978f94-mqn4r\" (UID: \"2e0e3f3e-f010-4e13-bfc8-a23776f854ff\") " pod="calico-system/calico-typha-6f86978f94-mqn4r" Jul 15 11:27:13.172985 kubelet[1942]: I0715 11:27:13.172973 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/2e0e3f3e-f010-4e13-bfc8-a23776f854ff-typha-certs\") pod \"calico-typha-6f86978f94-mqn4r\" (UID: \"2e0e3f3e-f010-4e13-bfc8-a23776f854ff\") " pod="calico-system/calico-typha-6f86978f94-mqn4r" Jul 15 11:27:13.173374 kubelet[1942]: I0715 11:27:13.173002 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-thdmw\" (UniqueName: \"kubernetes.io/projected/2e0e3f3e-f010-4e13-bfc8-a23776f854ff-kube-api-access-thdmw\") pod \"calico-typha-6f86978f94-mqn4r\" (UID: \"2e0e3f3e-f010-4e13-bfc8-a23776f854ff\") " pod="calico-system/calico-typha-6f86978f94-mqn4r" Jul 15 11:27:13.377129 kubelet[1942]: E0715 11:27:13.376978 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:13.377692 env[1203]: time="2025-07-15T11:27:13.377637067Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6f86978f94-mqn4r,Uid:2e0e3f3e-f010-4e13-bfc8-a23776f854ff,Namespace:calico-system,Attempt:0,}" Jul 15 11:27:13.664000 audit[2358]: NETFILTER_CFG table=filter:97 family=2 entries=21 op=nft_register_rule pid=2358 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:13.664000 audit[2358]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffc87a609d0 a2=0 a3=7ffc87a609bc items=0 ppid=2108 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:13.664000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:13.673000 audit[2358]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2358 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:13.673000 audit[2358]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc87a609d0 a2=0 a3=0 items=0 ppid=2108 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:13.673000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:14.097199 env[1203]: time="2025-07-15T11:27:14.096472303Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:27:14.097199 env[1203]: time="2025-07-15T11:27:14.096574886Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:27:14.097199 env[1203]: time="2025-07-15T11:27:14.096717735Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:27:14.102098 env[1203]: time="2025-07-15T11:27:14.101958258Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9289e397f46ad80ee05ff10dfa83aa450ff2b583aafae32bb1e0679692094f07 pid=2365 runtime=io.containerd.runc.v2 Jul 15 11:27:14.115782 systemd[1]: Started cri-containerd-9289e397f46ad80ee05ff10dfa83aa450ff2b583aafae32bb1e0679692094f07.scope. Jul 15 11:27:14.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.126000 audit: BPF prog-id=121 op=LOAD Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2365 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:14.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932383965333937663436616438306565303566663130646661383361 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=2365 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:14.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932383965333937663436616438306565303566663130646661383361 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit: BPF prog-id=122 op=LOAD Jul 15 11:27:14.127000 audit[2374]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0001b9d60 items=0 ppid=2365 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:14.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932383965333937663436616438306565303566663130646661383361 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit: BPF prog-id=123 op=LOAD Jul 15 11:27:14.127000 audit[2374]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0001b9da8 items=0 ppid=2365 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:14.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932383965333937663436616438306565303566663130646661383361 Jul 15 11:27:14.127000 audit: BPF prog-id=123 op=UNLOAD Jul 15 11:27:14.127000 audit: BPF prog-id=122 op=UNLOAD Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.127000 audit: BPF prog-id=124 op=LOAD Jul 15 11:27:14.127000 audit[2374]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003a01b8 items=0 ppid=2365 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:14.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932383965333937663436616438306565303566663130646661383361 Jul 15 11:27:14.130383 systemd[1]: Created slice kubepods-besteffort-pod9636db97_0b6e_42c7_afd7_9276f5134a2d.slice. Jul 15 11:27:14.159412 env[1203]: time="2025-07-15T11:27:14.159362090Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6f86978f94-mqn4r,Uid:2e0e3f3e-f010-4e13-bfc8-a23776f854ff,Namespace:calico-system,Attempt:0,} returns sandbox id \"9289e397f46ad80ee05ff10dfa83aa450ff2b583aafae32bb1e0679692094f07\"" Jul 15 11:27:14.160186 kubelet[1942]: E0715 11:27:14.160158 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:14.161714 env[1203]: time="2025-07-15T11:27:14.161670976Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 15 11:27:14.179992 kubelet[1942]: I0715 11:27:14.179965 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/9636db97-0b6e-42c7-afd7-9276f5134a2d-cni-log-dir\") pod \"calico-node-r9kss\" (UID: \"9636db97-0b6e-42c7-afd7-9276f5134a2d\") " pod="calico-system/calico-node-r9kss" Jul 15 11:27:14.180230 kubelet[1942]: I0715 11:27:14.180004 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/9636db97-0b6e-42c7-afd7-9276f5134a2d-flexvol-driver-host\") pod \"calico-node-r9kss\" (UID: \"9636db97-0b6e-42c7-afd7-9276f5134a2d\") " pod="calico-system/calico-node-r9kss" Jul 15 11:27:14.180230 kubelet[1942]: I0715 11:27:14.180030 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/9636db97-0b6e-42c7-afd7-9276f5134a2d-node-certs\") pod \"calico-node-r9kss\" (UID: \"9636db97-0b6e-42c7-afd7-9276f5134a2d\") " pod="calico-system/calico-node-r9kss" Jul 15 11:27:14.180230 kubelet[1942]: I0715 11:27:14.180053 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/9636db97-0b6e-42c7-afd7-9276f5134a2d-cni-net-dir\") pod \"calico-node-r9kss\" (UID: \"9636db97-0b6e-42c7-afd7-9276f5134a2d\") " pod="calico-system/calico-node-r9kss" Jul 15 11:27:14.180230 kubelet[1942]: I0715 11:27:14.180101 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9636db97-0b6e-42c7-afd7-9276f5134a2d-lib-modules\") pod \"calico-node-r9kss\" (UID: \"9636db97-0b6e-42c7-afd7-9276f5134a2d\") " pod="calico-system/calico-node-r9kss" Jul 15 11:27:14.180230 kubelet[1942]: I0715 11:27:14.180125 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/9636db97-0b6e-42c7-afd7-9276f5134a2d-tigera-ca-bundle\") pod \"calico-node-r9kss\" (UID: \"9636db97-0b6e-42c7-afd7-9276f5134a2d\") " pod="calico-system/calico-node-r9kss" Jul 15 11:27:14.180357 kubelet[1942]: I0715 11:27:14.180200 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nmm69\" (UniqueName: \"kubernetes.io/projected/9636db97-0b6e-42c7-afd7-9276f5134a2d-kube-api-access-nmm69\") pod \"calico-node-r9kss\" (UID: \"9636db97-0b6e-42c7-afd7-9276f5134a2d\") " pod="calico-system/calico-node-r9kss" Jul 15 11:27:14.180357 kubelet[1942]: I0715 11:27:14.180329 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/9636db97-0b6e-42c7-afd7-9276f5134a2d-var-lib-calico\") pod \"calico-node-r9kss\" (UID: \"9636db97-0b6e-42c7-afd7-9276f5134a2d\") " pod="calico-system/calico-node-r9kss" Jul 15 11:27:14.180440 kubelet[1942]: I0715 11:27:14.180397 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9636db97-0b6e-42c7-afd7-9276f5134a2d-xtables-lock\") pod \"calico-node-r9kss\" (UID: \"9636db97-0b6e-42c7-afd7-9276f5134a2d\") " pod="calico-system/calico-node-r9kss" Jul 15 11:27:14.180526 kubelet[1942]: I0715 11:27:14.180473 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/9636db97-0b6e-42c7-afd7-9276f5134a2d-cni-bin-dir\") pod \"calico-node-r9kss\" (UID: \"9636db97-0b6e-42c7-afd7-9276f5134a2d\") " pod="calico-system/calico-node-r9kss" Jul 15 11:27:14.180574 kubelet[1942]: I0715 11:27:14.180547 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/9636db97-0b6e-42c7-afd7-9276f5134a2d-policysync\") pod \"calico-node-r9kss\" (UID: \"9636db97-0b6e-42c7-afd7-9276f5134a2d\") " pod="calico-system/calico-node-r9kss" Jul 15 11:27:14.180615 kubelet[1942]: I0715 11:27:14.180572 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/9636db97-0b6e-42c7-afd7-9276f5134a2d-var-run-calico\") pod \"calico-node-r9kss\" (UID: \"9636db97-0b6e-42c7-afd7-9276f5134a2d\") " pod="calico-system/calico-node-r9kss" Jul 15 11:27:14.282153 kubelet[1942]: E0715 11:27:14.281752 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.282153 kubelet[1942]: W0715 11:27:14.281824 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.282153 kubelet[1942]: E0715 11:27:14.281875 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.282401 kubelet[1942]: E0715 11:27:14.282202 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.282401 kubelet[1942]: W0715 11:27:14.282231 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.282401 kubelet[1942]: E0715 11:27:14.282260 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.282667 kubelet[1942]: E0715 11:27:14.282639 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.282667 kubelet[1942]: W0715 11:27:14.282653 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.282899 kubelet[1942]: E0715 11:27:14.282737 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.282899 kubelet[1942]: E0715 11:27:14.282881 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.282899 kubelet[1942]: W0715 11:27:14.282892 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.283006 kubelet[1942]: E0715 11:27:14.282929 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.283124 kubelet[1942]: E0715 11:27:14.283105 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.283124 kubelet[1942]: W0715 11:27:14.283120 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.283243 kubelet[1942]: E0715 11:27:14.283161 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.283344 kubelet[1942]: E0715 11:27:14.283325 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.283344 kubelet[1942]: W0715 11:27:14.283340 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.283451 kubelet[1942]: E0715 11:27:14.283366 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.286956 kubelet[1942]: E0715 11:27:14.283528 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.286956 kubelet[1942]: W0715 11:27:14.283548 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.286956 kubelet[1942]: E0715 11:27:14.283565 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.286956 kubelet[1942]: E0715 11:27:14.285199 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.286956 kubelet[1942]: W0715 11:27:14.285210 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.286956 kubelet[1942]: E0715 11:27:14.285227 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.286956 kubelet[1942]: E0715 11:27:14.285460 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.286956 kubelet[1942]: W0715 11:27:14.285468 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.286956 kubelet[1942]: E0715 11:27:14.285553 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.286956 kubelet[1942]: E0715 11:27:14.285661 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.287340 kubelet[1942]: W0715 11:27:14.285671 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.287340 kubelet[1942]: E0715 11:27:14.285682 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.287340 kubelet[1942]: E0715 11:27:14.285838 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.287340 kubelet[1942]: W0715 11:27:14.285846 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.287340 kubelet[1942]: E0715 11:27:14.285855 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.287340 kubelet[1942]: E0715 11:27:14.286037 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.287340 kubelet[1942]: W0715 11:27:14.286046 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.287340 kubelet[1942]: E0715 11:27:14.286056 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.287340 kubelet[1942]: E0715 11:27:14.286812 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.287340 kubelet[1942]: W0715 11:27:14.286821 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.287651 kubelet[1942]: E0715 11:27:14.286830 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.335748 kubelet[1942]: E0715 11:27:14.335713 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.335748 kubelet[1942]: W0715 11:27:14.335737 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.335921 kubelet[1942]: E0715 11:27:14.335758 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.359175 kubelet[1942]: E0715 11:27:14.359033 1942 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-tnbnz" podUID="b084be4c-45cb-4d18-beeb-0bfdfb2cbea5" Jul 15 11:27:14.362286 kubelet[1942]: E0715 11:27:14.361875 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.362286 kubelet[1942]: W0715 11:27:14.361898 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.362286 kubelet[1942]: E0715 11:27:14.361920 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.362457 kubelet[1942]: E0715 11:27:14.362294 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.362457 kubelet[1942]: W0715 11:27:14.362304 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.362457 kubelet[1942]: E0715 11:27:14.362320 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.362626 kubelet[1942]: E0715 11:27:14.362604 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.362626 kubelet[1942]: W0715 11:27:14.362620 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.362689 kubelet[1942]: E0715 11:27:14.362631 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.362997 kubelet[1942]: E0715 11:27:14.362940 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.362997 kubelet[1942]: W0715 11:27:14.362966 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.362997 kubelet[1942]: E0715 11:27:14.362978 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.363247 kubelet[1942]: E0715 11:27:14.363227 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.363247 kubelet[1942]: W0715 11:27:14.363242 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.363339 kubelet[1942]: E0715 11:27:14.363253 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.363417 kubelet[1942]: E0715 11:27:14.363389 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.363417 kubelet[1942]: W0715 11:27:14.363408 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.363417 kubelet[1942]: E0715 11:27:14.363416 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.363665 kubelet[1942]: E0715 11:27:14.363537 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.363665 kubelet[1942]: W0715 11:27:14.363544 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.363665 kubelet[1942]: E0715 11:27:14.363551 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.363665 kubelet[1942]: E0715 11:27:14.363653 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.363665 kubelet[1942]: W0715 11:27:14.363660 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.363796 kubelet[1942]: E0715 11:27:14.363670 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.363796 kubelet[1942]: E0715 11:27:14.363780 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.363796 kubelet[1942]: W0715 11:27:14.363786 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.363796 kubelet[1942]: E0715 11:27:14.363792 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.363895 kubelet[1942]: E0715 11:27:14.363888 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.363895 kubelet[1942]: W0715 11:27:14.363894 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.363942 kubelet[1942]: E0715 11:27:14.363900 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.364060 kubelet[1942]: E0715 11:27:14.364016 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.364060 kubelet[1942]: W0715 11:27:14.364035 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.364060 kubelet[1942]: E0715 11:27:14.364043 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.364839 kubelet[1942]: E0715 11:27:14.364812 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.364839 kubelet[1942]: W0715 11:27:14.364830 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.364839 kubelet[1942]: E0715 11:27:14.364841 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.365301 kubelet[1942]: E0715 11:27:14.365011 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.365301 kubelet[1942]: W0715 11:27:14.365022 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.365301 kubelet[1942]: E0715 11:27:14.365033 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.365301 kubelet[1942]: E0715 11:27:14.365197 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.365301 kubelet[1942]: W0715 11:27:14.365225 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.365301 kubelet[1942]: E0715 11:27:14.365235 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.365434 kubelet[1942]: E0715 11:27:14.365401 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.365434 kubelet[1942]: W0715 11:27:14.365411 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.365434 kubelet[1942]: E0715 11:27:14.365421 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.365627 kubelet[1942]: E0715 11:27:14.365603 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.365627 kubelet[1942]: W0715 11:27:14.365622 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.365717 kubelet[1942]: E0715 11:27:14.365633 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.365944 kubelet[1942]: E0715 11:27:14.365922 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.365944 kubelet[1942]: W0715 11:27:14.365935 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.365944 kubelet[1942]: E0715 11:27:14.365944 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.366184 kubelet[1942]: E0715 11:27:14.366162 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.366184 kubelet[1942]: W0715 11:27:14.366173 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.366184 kubelet[1942]: E0715 11:27:14.366181 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.366392 kubelet[1942]: E0715 11:27:14.366378 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.366392 kubelet[1942]: W0715 11:27:14.366388 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.366464 kubelet[1942]: E0715 11:27:14.366394 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.366588 kubelet[1942]: E0715 11:27:14.366575 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.366588 kubelet[1942]: W0715 11:27:14.366584 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.366588 kubelet[1942]: E0715 11:27:14.366591 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.382092 kubelet[1942]: E0715 11:27:14.382032 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.382092 kubelet[1942]: W0715 11:27:14.382055 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.382314 kubelet[1942]: E0715 11:27:14.382107 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.382314 kubelet[1942]: I0715 11:27:14.382140 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/b084be4c-45cb-4d18-beeb-0bfdfb2cbea5-varrun\") pod \"csi-node-driver-tnbnz\" (UID: \"b084be4c-45cb-4d18-beeb-0bfdfb2cbea5\") " pod="calico-system/csi-node-driver-tnbnz" Jul 15 11:27:14.382396 kubelet[1942]: E0715 11:27:14.382355 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.382396 kubelet[1942]: W0715 11:27:14.382366 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.382396 kubelet[1942]: E0715 11:27:14.382379 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.382396 kubelet[1942]: I0715 11:27:14.382394 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/b084be4c-45cb-4d18-beeb-0bfdfb2cbea5-registration-dir\") pod \"csi-node-driver-tnbnz\" (UID: \"b084be4c-45cb-4d18-beeb-0bfdfb2cbea5\") " pod="calico-system/csi-node-driver-tnbnz" Jul 15 11:27:14.382564 kubelet[1942]: E0715 11:27:14.382540 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.382564 kubelet[1942]: W0715 11:27:14.382552 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.382564 kubelet[1942]: E0715 11:27:14.382564 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.382654 kubelet[1942]: I0715 11:27:14.382576 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/b084be4c-45cb-4d18-beeb-0bfdfb2cbea5-socket-dir\") pod \"csi-node-driver-tnbnz\" (UID: \"b084be4c-45cb-4d18-beeb-0bfdfb2cbea5\") " pod="calico-system/csi-node-driver-tnbnz" Jul 15 11:27:14.382848 kubelet[1942]: E0715 11:27:14.382814 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.382848 kubelet[1942]: W0715 11:27:14.382841 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.382892 kubelet[1942]: E0715 11:27:14.382867 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.383035 kubelet[1942]: E0715 11:27:14.383025 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.383035 kubelet[1942]: W0715 11:27:14.383033 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.383118 kubelet[1942]: E0715 11:27:14.383045 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.383214 kubelet[1942]: E0715 11:27:14.383201 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.383214 kubelet[1942]: W0715 11:27:14.383209 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.383276 kubelet[1942]: E0715 11:27:14.383221 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.383370 kubelet[1942]: E0715 11:27:14.383360 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.383370 kubelet[1942]: W0715 11:27:14.383367 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.383421 kubelet[1942]: E0715 11:27:14.383380 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.383534 kubelet[1942]: E0715 11:27:14.383522 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.383534 kubelet[1942]: W0715 11:27:14.383529 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.383606 kubelet[1942]: E0715 11:27:14.383540 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.383606 kubelet[1942]: I0715 11:27:14.383564 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ppxgm\" (UniqueName: \"kubernetes.io/projected/b084be4c-45cb-4d18-beeb-0bfdfb2cbea5-kube-api-access-ppxgm\") pod \"csi-node-driver-tnbnz\" (UID: \"b084be4c-45cb-4d18-beeb-0bfdfb2cbea5\") " pod="calico-system/csi-node-driver-tnbnz" Jul 15 11:27:14.383742 kubelet[1942]: E0715 11:27:14.383728 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.383742 kubelet[1942]: W0715 11:27:14.383737 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.383809 kubelet[1942]: E0715 11:27:14.383760 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.383809 kubelet[1942]: I0715 11:27:14.383786 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/b084be4c-45cb-4d18-beeb-0bfdfb2cbea5-kubelet-dir\") pod \"csi-node-driver-tnbnz\" (UID: \"b084be4c-45cb-4d18-beeb-0bfdfb2cbea5\") " pod="calico-system/csi-node-driver-tnbnz" Jul 15 11:27:14.383891 kubelet[1942]: E0715 11:27:14.383878 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.383891 kubelet[1942]: W0715 11:27:14.383886 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.383963 kubelet[1942]: E0715 11:27:14.383906 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.384029 kubelet[1942]: E0715 11:27:14.384016 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.384029 kubelet[1942]: W0715 11:27:14.384024 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.384105 kubelet[1942]: E0715 11:27:14.384036 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.384194 kubelet[1942]: E0715 11:27:14.384182 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.384194 kubelet[1942]: W0715 11:27:14.384190 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.384265 kubelet[1942]: E0715 11:27:14.384201 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.384332 kubelet[1942]: E0715 11:27:14.384322 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.384332 kubelet[1942]: W0715 11:27:14.384330 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.384374 kubelet[1942]: E0715 11:27:14.384336 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.384476 kubelet[1942]: E0715 11:27:14.384464 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.384476 kubelet[1942]: W0715 11:27:14.384471 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.384476 kubelet[1942]: E0715 11:27:14.384478 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.384630 kubelet[1942]: E0715 11:27:14.384618 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.384630 kubelet[1942]: W0715 11:27:14.384625 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.384694 kubelet[1942]: E0715 11:27:14.384633 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.433642 env[1203]: time="2025-07-15T11:27:14.433568475Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-r9kss,Uid:9636db97-0b6e-42c7-afd7-9276f5134a2d,Namespace:calico-system,Attempt:0,}" Jul 15 11:27:14.484564 kubelet[1942]: E0715 11:27:14.484529 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.484564 kubelet[1942]: W0715 11:27:14.484554 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.484755 kubelet[1942]: E0715 11:27:14.484578 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.484839 kubelet[1942]: E0715 11:27:14.484827 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.484839 kubelet[1942]: W0715 11:27:14.484837 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.484887 kubelet[1942]: E0715 11:27:14.484849 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.485019 kubelet[1942]: E0715 11:27:14.485007 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.485019 kubelet[1942]: W0715 11:27:14.485015 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.485108 kubelet[1942]: E0715 11:27:14.485026 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.485301 kubelet[1942]: E0715 11:27:14.485269 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.485346 kubelet[1942]: W0715 11:27:14.485297 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.485346 kubelet[1942]: E0715 11:27:14.485324 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.485475 kubelet[1942]: E0715 11:27:14.485460 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.485475 kubelet[1942]: W0715 11:27:14.485470 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.485533 kubelet[1942]: E0715 11:27:14.485492 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.485629 kubelet[1942]: E0715 11:27:14.485617 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.485629 kubelet[1942]: W0715 11:27:14.485626 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.485677 kubelet[1942]: E0715 11:27:14.485637 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.485875 kubelet[1942]: E0715 11:27:14.485848 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.485875 kubelet[1942]: W0715 11:27:14.485862 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.485875 kubelet[1942]: E0715 11:27:14.485882 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.486094 kubelet[1942]: E0715 11:27:14.486052 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.486094 kubelet[1942]: W0715 11:27:14.486062 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.486184 kubelet[1942]: E0715 11:27:14.486167 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.486257 kubelet[1942]: E0715 11:27:14.486244 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.486257 kubelet[1942]: W0715 11:27:14.486255 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.486304 kubelet[1942]: E0715 11:27:14.486267 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.486428 kubelet[1942]: E0715 11:27:14.486414 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.486453 kubelet[1942]: W0715 11:27:14.486427 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.486453 kubelet[1942]: E0715 11:27:14.486444 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.486637 kubelet[1942]: E0715 11:27:14.486621 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.486637 kubelet[1942]: W0715 11:27:14.486631 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.486703 kubelet[1942]: E0715 11:27:14.486644 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.486783 kubelet[1942]: E0715 11:27:14.486770 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.486783 kubelet[1942]: W0715 11:27:14.486781 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.486828 kubelet[1942]: E0715 11:27:14.486806 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.486930 kubelet[1942]: E0715 11:27:14.486918 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.486930 kubelet[1942]: W0715 11:27:14.486927 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.486975 kubelet[1942]: E0715 11:27:14.486948 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.487045 kubelet[1942]: E0715 11:27:14.487034 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.487045 kubelet[1942]: W0715 11:27:14.487043 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.487102 kubelet[1942]: E0715 11:27:14.487054 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.487254 kubelet[1942]: E0715 11:27:14.487243 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.487282 kubelet[1942]: W0715 11:27:14.487255 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.487282 kubelet[1942]: E0715 11:27:14.487277 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.487442 kubelet[1942]: E0715 11:27:14.487427 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.487466 kubelet[1942]: W0715 11:27:14.487441 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.487466 kubelet[1942]: E0715 11:27:14.487457 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.487636 kubelet[1942]: E0715 11:27:14.487618 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.487636 kubelet[1942]: W0715 11:27:14.487632 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.487705 kubelet[1942]: E0715 11:27:14.487647 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.487812 kubelet[1942]: E0715 11:27:14.487796 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.487812 kubelet[1942]: W0715 11:27:14.487808 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.487856 kubelet[1942]: E0715 11:27:14.487822 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.488023 kubelet[1942]: E0715 11:27:14.488007 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.488023 kubelet[1942]: W0715 11:27:14.488019 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.488116 kubelet[1942]: E0715 11:27:14.488039 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.488194 kubelet[1942]: E0715 11:27:14.488180 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.488194 kubelet[1942]: W0715 11:27:14.488191 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.488244 kubelet[1942]: E0715 11:27:14.488221 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.488367 kubelet[1942]: E0715 11:27:14.488355 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.488367 kubelet[1942]: W0715 11:27:14.488366 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.488419 kubelet[1942]: E0715 11:27:14.488390 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.488557 kubelet[1942]: E0715 11:27:14.488511 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.488557 kubelet[1942]: W0715 11:27:14.488521 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.488557 kubelet[1942]: E0715 11:27:14.488528 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.488737 kubelet[1942]: E0715 11:27:14.488672 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.488737 kubelet[1942]: W0715 11:27:14.488680 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.488737 kubelet[1942]: E0715 11:27:14.488689 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.488838 kubelet[1942]: E0715 11:27:14.488826 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.488838 kubelet[1942]: W0715 11:27:14.488834 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.488838 kubelet[1942]: E0715 11:27:14.488840 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.489009 kubelet[1942]: E0715 11:27:14.488992 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.489009 kubelet[1942]: W0715 11:27:14.489001 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.489009 kubelet[1942]: E0715 11:27:14.489008 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.575698 kubelet[1942]: E0715 11:27:14.575675 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:14.575879 kubelet[1942]: W0715 11:27:14.575858 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:14.575979 kubelet[1942]: E0715 11:27:14.575959 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:14.584415 env[1203]: time="2025-07-15T11:27:14.584298921Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:27:14.584415 env[1203]: time="2025-07-15T11:27:14.584408547Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:27:14.584672 env[1203]: time="2025-07-15T11:27:14.584440627Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:27:14.584672 env[1203]: time="2025-07-15T11:27:14.584587995Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2e426f00ae5c247906caa91ed3d9e604728d0be8ecd7d36362ef88504a93f7a8 pid=2482 runtime=io.containerd.runc.v2 Jul 15 11:27:14.604801 systemd[1]: Started cri-containerd-2e426f00ae5c247906caa91ed3d9e604728d0be8ecd7d36362ef88504a93f7a8.scope. Jul 15 11:27:14.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit: BPF prog-id=125 op=LOAD Jul 15 11:27:14.641000 audit[2491]: AVC avc: denied { bpf } for pid=2491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[2491]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2482 pid=2491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:14.641000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265343236663030616535633234373930366361613931656433643965 Jul 15 11:27:14.641000 audit[2491]: AVC avc: denied { perfmon } for pid=2491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[2491]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2482 pid=2491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:14.641000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265343236663030616535633234373930366361613931656433643965 Jul 15 11:27:14.641000 audit[2491]: AVC avc: denied { bpf } for pid=2491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[2491]: AVC avc: denied { bpf } for pid=2491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[2491]: AVC avc: denied { bpf } for pid=2491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[2491]: AVC avc: denied { perfmon } for pid=2491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[2491]: AVC avc: denied { perfmon } for pid=2491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[2491]: AVC avc: denied { perfmon } for pid=2491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[2491]: AVC avc: denied { perfmon } for pid=2491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[2491]: AVC avc: denied { perfmon } for pid=2491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[2491]: AVC avc: denied { bpf } for pid=2491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[2491]: AVC avc: denied { bpf } for pid=2491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit: BPF prog-id=126 op=LOAD Jul 15 11:27:14.641000 audit[2491]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00015d200 items=0 ppid=2482 pid=2491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:14.641000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265343236663030616535633234373930366361613931656433643965 Jul 15 11:27:14.641000 audit[2491]: AVC avc: denied { bpf } for pid=2491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[2491]: AVC avc: denied { bpf } for pid=2491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[2491]: AVC avc: denied { perfmon } for pid=2491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[2491]: AVC avc: denied { perfmon } for pid=2491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[2491]: AVC avc: denied { perfmon } for pid=2491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[2491]: AVC avc: denied { perfmon } for pid=2491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[2491]: AVC avc: denied { perfmon } for pid=2491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[2491]: AVC avc: denied { bpf } for pid=2491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit[2491]: AVC avc: denied { bpf } for pid=2491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.641000 audit: BPF prog-id=127 op=LOAD Jul 15 11:27:14.641000 audit[2491]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00015d248 items=0 ppid=2482 pid=2491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:14.641000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265343236663030616535633234373930366361613931656433643965 Jul 15 11:27:14.642000 audit: BPF prog-id=127 op=UNLOAD Jul 15 11:27:14.642000 audit: BPF prog-id=126 op=UNLOAD Jul 15 11:27:14.642000 audit[2491]: AVC avc: denied { bpf } for pid=2491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.642000 audit[2491]: AVC avc: denied { bpf } for pid=2491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.642000 audit[2491]: AVC avc: denied { bpf } for pid=2491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.642000 audit[2491]: AVC avc: denied { perfmon } for pid=2491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.642000 audit[2491]: AVC avc: denied { perfmon } for pid=2491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.642000 audit[2491]: AVC avc: denied { perfmon } for pid=2491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.642000 audit[2491]: AVC avc: denied { perfmon } for pid=2491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.642000 audit[2491]: AVC avc: denied { perfmon } for pid=2491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.642000 audit[2491]: AVC avc: denied { bpf } for pid=2491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.642000 audit[2491]: AVC avc: denied { bpf } for pid=2491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:14.642000 audit: BPF prog-id=128 op=LOAD Jul 15 11:27:14.642000 audit[2491]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00015d658 items=0 ppid=2482 pid=2491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:14.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265343236663030616535633234373930366361613931656433643965 Jul 15 11:27:14.671745 env[1203]: time="2025-07-15T11:27:14.671689121Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-r9kss,Uid:9636db97-0b6e-42c7-afd7-9276f5134a2d,Namespace:calico-system,Attempt:0,} returns sandbox id \"2e426f00ae5c247906caa91ed3d9e604728d0be8ecd7d36362ef88504a93f7a8\"" Jul 15 11:27:15.795699 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount304724012.mount: Deactivated successfully. Jul 15 11:27:16.678279 kubelet[1942]: E0715 11:27:16.678212 1942 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-tnbnz" podUID="b084be4c-45cb-4d18-beeb-0bfdfb2cbea5" Jul 15 11:27:16.918148 env[1203]: time="2025-07-15T11:27:16.918088832Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:16.920044 env[1203]: time="2025-07-15T11:27:16.920022049Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:16.921555 env[1203]: time="2025-07-15T11:27:16.921507954Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:16.922780 env[1203]: time="2025-07-15T11:27:16.922758707Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:16.923143 env[1203]: time="2025-07-15T11:27:16.923115227Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54\"" Jul 15 11:27:16.924226 env[1203]: time="2025-07-15T11:27:16.924185100Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 15 11:27:16.930112 env[1203]: time="2025-07-15T11:27:16.930023815Z" level=info msg="CreateContainer within sandbox \"9289e397f46ad80ee05ff10dfa83aa450ff2b583aafae32bb1e0679692094f07\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 15 11:27:17.821704 env[1203]: time="2025-07-15T11:27:17.821639427Z" level=info msg="CreateContainer within sandbox \"9289e397f46ad80ee05ff10dfa83aa450ff2b583aafae32bb1e0679692094f07\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"84f803ae154d00185596826b7882ffb6cc3a9e3eed6d1d0fe3465850c3f3b103\"" Jul 15 11:27:17.822258 env[1203]: time="2025-07-15T11:27:17.822223266Z" level=info msg="StartContainer for \"84f803ae154d00185596826b7882ffb6cc3a9e3eed6d1d0fe3465850c3f3b103\"" Jul 15 11:27:17.839893 systemd[1]: Started cri-containerd-84f803ae154d00185596826b7882ffb6cc3a9e3eed6d1d0fe3465850c3f3b103.scope. Jul 15 11:27:17.852919 kernel: kauditd_printk_skb: 139 callbacks suppressed Jul 15 11:27:17.853057 kernel: audit: type=1400 audit(1752578837.850:975): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.858721 kernel: audit: type=1400 audit(1752578837.850:976): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.858831 kernel: audit: type=1400 audit(1752578837.850:977): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.861678 kernel: audit: type=1400 audit(1752578837.850:978): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.867427 kernel: audit: type=1400 audit(1752578837.850:979): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.867480 kernel: audit: type=1400 audit(1752578837.850:980): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.874785 kernel: audit: type=1400 audit(1752578837.850:981): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.878063 kernel: audit: type=1400 audit(1752578837.850:982): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.884090 kernel: audit: type=1400 audit(1752578837.850:983): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.884141 kernel: audit: type=1400 audit(1752578837.855:984): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.855000 audit: BPF prog-id=129 op=LOAD Jul 15 11:27:17.855000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.855000 audit[2530]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2365 pid=2530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:17.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834663830336165313534643030313835353936383236623738383266 Jul 15 11:27:17.855000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.855000 audit[2530]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2365 pid=2530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:17.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834663830336165313534643030313835353936383236623738383266 Jul 15 11:27:17.855000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.855000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.855000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.855000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.855000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.855000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.855000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.855000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.855000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.855000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.855000 audit: BPF prog-id=130 op=LOAD Jul 15 11:27:17.855000 audit[2530]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001ca370 items=0 ppid=2365 pid=2530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:17.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834663830336165313534643030313835353936383236623738383266 Jul 15 11:27:17.864000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.864000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.864000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.864000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.864000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.864000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.864000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.864000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.864000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.864000 audit: BPF prog-id=131 op=LOAD Jul 15 11:27:17.864000 audit[2530]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001ca3b8 items=0 ppid=2365 pid=2530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:17.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834663830336165313534643030313835353936383236623738383266 Jul 15 11:27:17.870000 audit: BPF prog-id=131 op=UNLOAD Jul 15 11:27:17.870000 audit: BPF prog-id=130 op=UNLOAD Jul 15 11:27:17.870000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.870000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.870000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.870000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.870000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.870000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.870000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.870000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.870000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.870000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:17.870000 audit: BPF prog-id=132 op=LOAD Jul 15 11:27:17.870000 audit[2530]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001ca7c8 items=0 ppid=2365 pid=2530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:17.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834663830336165313534643030313835353936383236623738383266 Jul 15 11:27:17.960826 env[1203]: time="2025-07-15T11:27:17.960763403Z" level=info msg="StartContainer for \"84f803ae154d00185596826b7882ffb6cc3a9e3eed6d1d0fe3465850c3f3b103\" returns successfully" Jul 15 11:27:18.678937 kubelet[1942]: E0715 11:27:18.678869 1942 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-tnbnz" podUID="b084be4c-45cb-4d18-beeb-0bfdfb2cbea5" Jul 15 11:27:18.728599 kubelet[1942]: E0715 11:27:18.728556 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:18.794572 kubelet[1942]: E0715 11:27:18.794538 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.794572 kubelet[1942]: W0715 11:27:18.794561 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.794572 kubelet[1942]: E0715 11:27:18.794583 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.794792 kubelet[1942]: E0715 11:27:18.794721 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.794792 kubelet[1942]: W0715 11:27:18.794727 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.794792 kubelet[1942]: E0715 11:27:18.794734 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.794870 kubelet[1942]: E0715 11:27:18.794858 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.794870 kubelet[1942]: W0715 11:27:18.794868 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.794917 kubelet[1942]: E0715 11:27:18.794876 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.795093 kubelet[1942]: E0715 11:27:18.795063 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.795093 kubelet[1942]: W0715 11:27:18.795087 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.795147 kubelet[1942]: E0715 11:27:18.795097 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.795276 kubelet[1942]: E0715 11:27:18.795260 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.795276 kubelet[1942]: W0715 11:27:18.795274 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.795329 kubelet[1942]: E0715 11:27:18.795283 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.795440 kubelet[1942]: E0715 11:27:18.795430 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.795465 kubelet[1942]: W0715 11:27:18.795440 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.795465 kubelet[1942]: E0715 11:27:18.795448 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.795603 kubelet[1942]: E0715 11:27:18.795593 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.795628 kubelet[1942]: W0715 11:27:18.795603 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.795628 kubelet[1942]: E0715 11:27:18.795612 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.795753 kubelet[1942]: E0715 11:27:18.795744 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.795778 kubelet[1942]: W0715 11:27:18.795754 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.795778 kubelet[1942]: E0715 11:27:18.795764 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.795919 kubelet[1942]: E0715 11:27:18.795906 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.795919 kubelet[1942]: W0715 11:27:18.795916 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.796004 kubelet[1942]: E0715 11:27:18.795925 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.796063 kubelet[1942]: E0715 11:27:18.796053 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.796107 kubelet[1942]: W0715 11:27:18.796062 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.796107 kubelet[1942]: E0715 11:27:18.796084 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.796234 kubelet[1942]: E0715 11:27:18.796224 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.796288 kubelet[1942]: W0715 11:27:18.796234 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.796288 kubelet[1942]: E0715 11:27:18.796243 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.796383 kubelet[1942]: E0715 11:27:18.796373 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.796413 kubelet[1942]: W0715 11:27:18.796383 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.796413 kubelet[1942]: E0715 11:27:18.796401 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.796563 kubelet[1942]: E0715 11:27:18.796550 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.796563 kubelet[1942]: W0715 11:27:18.796561 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.796649 kubelet[1942]: E0715 11:27:18.796571 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.796723 kubelet[1942]: E0715 11:27:18.796711 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.796723 kubelet[1942]: W0715 11:27:18.796720 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.796801 kubelet[1942]: E0715 11:27:18.796728 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.796857 kubelet[1942]: E0715 11:27:18.796846 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.796885 kubelet[1942]: W0715 11:27:18.796857 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.796885 kubelet[1942]: E0715 11:27:18.796866 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.819291 kubelet[1942]: E0715 11:27:18.819270 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.819291 kubelet[1942]: W0715 11:27:18.819287 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.819424 kubelet[1942]: E0715 11:27:18.819302 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.819498 kubelet[1942]: E0715 11:27:18.819486 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.819498 kubelet[1942]: W0715 11:27:18.819496 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.819594 kubelet[1942]: E0715 11:27:18.819508 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.819692 kubelet[1942]: E0715 11:27:18.819673 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.819750 kubelet[1942]: W0715 11:27:18.819690 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.819750 kubelet[1942]: E0715 11:27:18.819728 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.819947 kubelet[1942]: E0715 11:27:18.819929 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.819947 kubelet[1942]: W0715 11:27:18.819943 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.820062 kubelet[1942]: E0715 11:27:18.819965 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.820156 kubelet[1942]: E0715 11:27:18.820140 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.820156 kubelet[1942]: W0715 11:27:18.820151 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.820233 kubelet[1942]: E0715 11:27:18.820176 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.820381 kubelet[1942]: E0715 11:27:18.820367 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.820381 kubelet[1942]: W0715 11:27:18.820378 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.820479 kubelet[1942]: E0715 11:27:18.820402 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.820649 kubelet[1942]: E0715 11:27:18.820629 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.820679 kubelet[1942]: W0715 11:27:18.820642 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.820679 kubelet[1942]: E0715 11:27:18.820667 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.820835 kubelet[1942]: E0715 11:27:18.820822 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.820835 kubelet[1942]: W0715 11:27:18.820834 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.820930 kubelet[1942]: E0715 11:27:18.820847 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.821010 kubelet[1942]: E0715 11:27:18.820999 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.821034 kubelet[1942]: W0715 11:27:18.821009 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.821034 kubelet[1942]: E0715 11:27:18.821021 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.821189 kubelet[1942]: E0715 11:27:18.821176 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.821189 kubelet[1942]: W0715 11:27:18.821186 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.821267 kubelet[1942]: E0715 11:27:18.821197 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.821357 kubelet[1942]: E0715 11:27:18.821345 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.821357 kubelet[1942]: W0715 11:27:18.821356 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.821451 kubelet[1942]: E0715 11:27:18.821367 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.821572 kubelet[1942]: E0715 11:27:18.821558 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.821572 kubelet[1942]: W0715 11:27:18.821568 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.821645 kubelet[1942]: E0715 11:27:18.821581 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.821768 kubelet[1942]: E0715 11:27:18.821740 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.821768 kubelet[1942]: W0715 11:27:18.821753 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.821858 kubelet[1942]: E0715 11:27:18.821768 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.821982 kubelet[1942]: E0715 11:27:18.821964 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.821982 kubelet[1942]: W0715 11:27:18.821979 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.822093 kubelet[1942]: E0715 11:27:18.821993 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.822205 kubelet[1942]: E0715 11:27:18.822189 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.822205 kubelet[1942]: W0715 11:27:18.822201 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.822300 kubelet[1942]: E0715 11:27:18.822214 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.822377 kubelet[1942]: E0715 11:27:18.822362 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.822440 kubelet[1942]: W0715 11:27:18.822376 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.822440 kubelet[1942]: E0715 11:27:18.822399 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.822570 kubelet[1942]: E0715 11:27:18.822556 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.822570 kubelet[1942]: W0715 11:27:18.822566 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.822644 kubelet[1942]: E0715 11:27:18.822576 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:18.823037 kubelet[1942]: E0715 11:27:18.823012 1942 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:27:18.823037 kubelet[1942]: W0715 11:27:18.823023 1942 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:27:18.823037 kubelet[1942]: E0715 11:27:18.823032 1942 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:27:19.346162 env[1203]: time="2025-07-15T11:27:19.346108652Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:19.348431 env[1203]: time="2025-07-15T11:27:19.348394911Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:19.350472 env[1203]: time="2025-07-15T11:27:19.350439395Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:19.352047 env[1203]: time="2025-07-15T11:27:19.352002894Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:19.352550 env[1203]: time="2025-07-15T11:27:19.352506651Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e\"" Jul 15 11:27:19.355247 env[1203]: time="2025-07-15T11:27:19.355214111Z" level=info msg="CreateContainer within sandbox \"2e426f00ae5c247906caa91ed3d9e604728d0be8ecd7d36362ef88504a93f7a8\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 15 11:27:19.369552 env[1203]: time="2025-07-15T11:27:19.369490293Z" level=info msg="CreateContainer within sandbox \"2e426f00ae5c247906caa91ed3d9e604728d0be8ecd7d36362ef88504a93f7a8\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"b64909e98b63aeb4543600241bc06800c64fe648aab14cbb73801bc0226733a7\"" Jul 15 11:27:19.370301 env[1203]: time="2025-07-15T11:27:19.370255542Z" level=info msg="StartContainer for \"b64909e98b63aeb4543600241bc06800c64fe648aab14cbb73801bc0226733a7\"" Jul 15 11:27:19.398540 systemd[1]: Started cri-containerd-b64909e98b63aeb4543600241bc06800c64fe648aab14cbb73801bc0226733a7.scope. Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f92244f2d28 items=0 ppid=2482 pid=2605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:19.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236343930396539386236336165623435343336303032343162633036 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit: BPF prog-id=133 op=LOAD Jul 15 11:27:19.412000 audit[2605]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c00031bf58 items=0 ppid=2482 pid=2605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:19.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236343930396539386236336165623435343336303032343162633036 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit: BPF prog-id=134 op=LOAD Jul 15 11:27:19.412000 audit[2605]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c00031bfa8 items=0 ppid=2482 pid=2605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:19.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236343930396539386236336165623435343336303032343162633036 Jul 15 11:27:19.412000 audit: BPF prog-id=134 op=UNLOAD Jul 15 11:27:19.412000 audit: BPF prog-id=133 op=UNLOAD Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:19.412000 audit: BPF prog-id=135 op=LOAD Jul 15 11:27:19.412000 audit[2605]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c000358038 items=0 ppid=2482 pid=2605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:19.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236343930396539386236336165623435343336303032343162633036 Jul 15 11:27:19.427487 env[1203]: time="2025-07-15T11:27:19.427442764Z" level=info msg="StartContainer for \"b64909e98b63aeb4543600241bc06800c64fe648aab14cbb73801bc0226733a7\" returns successfully" Jul 15 11:27:19.436103 systemd[1]: cri-containerd-b64909e98b63aeb4543600241bc06800c64fe648aab14cbb73801bc0226733a7.scope: Deactivated successfully. Jul 15 11:27:19.439000 audit: BPF prog-id=135 op=UNLOAD Jul 15 11:27:19.455844 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b64909e98b63aeb4543600241bc06800c64fe648aab14cbb73801bc0226733a7-rootfs.mount: Deactivated successfully. Jul 15 11:27:19.580753 env[1203]: time="2025-07-15T11:27:19.580697178Z" level=info msg="shim disconnected" id=b64909e98b63aeb4543600241bc06800c64fe648aab14cbb73801bc0226733a7 Jul 15 11:27:19.580753 env[1203]: time="2025-07-15T11:27:19.580750429Z" level=warning msg="cleaning up after shim disconnected" id=b64909e98b63aeb4543600241bc06800c64fe648aab14cbb73801bc0226733a7 namespace=k8s.io Jul 15 11:27:19.580753 env[1203]: time="2025-07-15T11:27:19.580759506Z" level=info msg="cleaning up dead shim" Jul 15 11:27:19.587948 env[1203]: time="2025-07-15T11:27:19.587879823Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:27:19Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2643 runtime=io.containerd.runc.v2\n" Jul 15 11:27:19.731032 kubelet[1942]: I0715 11:27:19.731002 1942 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:27:19.731449 kubelet[1942]: E0715 11:27:19.731266 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:19.732180 env[1203]: time="2025-07-15T11:27:19.732137252Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 15 11:27:19.745009 kubelet[1942]: I0715 11:27:19.744952 1942 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-6f86978f94-mqn4r" podStartSLOduration=3.982151532 podStartE2EDuration="6.744935144s" podCreationTimestamp="2025-07-15 11:27:13 +0000 UTC" firstStartedPulling="2025-07-15 11:27:14.161132011 +0000 UTC m=+18.581574143" lastFinishedPulling="2025-07-15 11:27:16.923915623 +0000 UTC m=+21.344357755" observedRunningTime="2025-07-15 11:27:18.74023719 +0000 UTC m=+23.160679322" watchObservedRunningTime="2025-07-15 11:27:19.744935144 +0000 UTC m=+24.165377276" Jul 15 11:27:20.678182 kubelet[1942]: E0715 11:27:20.678136 1942 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-tnbnz" podUID="b084be4c-45cb-4d18-beeb-0bfdfb2cbea5" Jul 15 11:27:22.679192 kubelet[1942]: E0715 11:27:22.679127 1942 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-tnbnz" podUID="b084be4c-45cb-4d18-beeb-0bfdfb2cbea5" Jul 15 11:27:24.682692 kubelet[1942]: E0715 11:27:24.682631 1942 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-tnbnz" podUID="b084be4c-45cb-4d18-beeb-0bfdfb2cbea5" Jul 15 11:27:24.895338 env[1203]: time="2025-07-15T11:27:24.895270673Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:24.898126 env[1203]: time="2025-07-15T11:27:24.898046197Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:24.900266 env[1203]: time="2025-07-15T11:27:24.900213901Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:24.905604 env[1203]: time="2025-07-15T11:27:24.905566597Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:24.906154 env[1203]: time="2025-07-15T11:27:24.906116140Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630\"" Jul 15 11:27:24.918438 env[1203]: time="2025-07-15T11:27:24.918353551Z" level=info msg="CreateContainer within sandbox \"2e426f00ae5c247906caa91ed3d9e604728d0be8ecd7d36362ef88504a93f7a8\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 15 11:27:24.945969 env[1203]: time="2025-07-15T11:27:24.945919780Z" level=info msg="CreateContainer within sandbox \"2e426f00ae5c247906caa91ed3d9e604728d0be8ecd7d36362ef88504a93f7a8\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"0bb6cfeb1def11b968274a400b0a862ca071155da85dbf9f3ec8253bc8ced33c\"" Jul 15 11:27:24.946397 env[1203]: time="2025-07-15T11:27:24.946345550Z" level=info msg="StartContainer for \"0bb6cfeb1def11b968274a400b0a862ca071155da85dbf9f3ec8253bc8ced33c\"" Jul 15 11:27:24.969264 systemd[1]: Started cri-containerd-0bb6cfeb1def11b968274a400b0a862ca071155da85dbf9f3ec8253bc8ced33c.scope. Jul 15 11:27:24.984000 audit[2668]: AVC avc: denied { perfmon } for pid=2668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.986962 kernel: kauditd_printk_skb: 91 callbacks suppressed Jul 15 11:27:24.987015 kernel: audit: type=1400 audit(1752578844.984:1000): avc: denied { perfmon } for pid=2668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.984000 audit[2668]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f390c994d58 items=0 ppid=2482 pid=2668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:24.995646 kernel: audit: type=1300 audit(1752578844.984:1000): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f390c994d58 items=0 ppid=2482 pid=2668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:24.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062623663666562316465663131623936383237346134303062306138 Jul 15 11:27:25.000121 kernel: audit: type=1327 audit(1752578844.984:1000): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062623663666562316465663131623936383237346134303062306138 Jul 15 11:27:24.984000 audit[2668]: AVC avc: denied { bpf } for pid=2668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:25.003673 kernel: audit: type=1400 audit(1752578844.984:1001): avc: denied { bpf } for pid=2668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.984000 audit[2668]: AVC avc: denied { bpf } for pid=2668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:25.007154 kernel: audit: type=1400 audit(1752578844.984:1001): avc: denied { bpf } for pid=2668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:25.007205 kernel: audit: type=1400 audit(1752578844.984:1001): avc: denied { bpf } for pid=2668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.984000 audit[2668]: AVC avc: denied { bpf } for pid=2668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.984000 audit[2668]: AVC avc: denied { perfmon } for pid=2668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:25.015237 kernel: audit: type=1400 audit(1752578844.984:1001): avc: denied { perfmon } for pid=2668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:25.015305 kernel: audit: type=1400 audit(1752578844.984:1001): avc: denied { perfmon } for pid=2668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.984000 audit[2668]: AVC avc: denied { perfmon } for pid=2668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:25.020475 kernel: audit: type=1400 audit(1752578844.984:1001): avc: denied { perfmon } for pid=2668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.984000 audit[2668]: AVC avc: denied { perfmon } for pid=2668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.984000 audit[2668]: AVC avc: denied { perfmon } for pid=2668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:25.023445 kernel: audit: type=1400 audit(1752578844.984:1001): avc: denied { perfmon } for pid=2668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.984000 audit[2668]: AVC avc: denied { perfmon } for pid=2668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.984000 audit[2668]: AVC avc: denied { bpf } for pid=2668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.984000 audit[2668]: AVC avc: denied { bpf } for pid=2668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.984000 audit: BPF prog-id=136 op=LOAD Jul 15 11:27:24.984000 audit[2668]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0002f3c58 items=0 ppid=2482 pid=2668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:24.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062623663666562316465663131623936383237346134303062306138 Jul 15 11:27:24.985000 audit[2668]: AVC avc: denied { bpf } for pid=2668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.985000 audit[2668]: AVC avc: denied { bpf } for pid=2668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.985000 audit[2668]: AVC avc: denied { perfmon } for pid=2668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.985000 audit[2668]: AVC avc: denied { perfmon } for pid=2668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.985000 audit[2668]: AVC avc: denied { perfmon } for pid=2668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.985000 audit[2668]: AVC avc: denied { perfmon } for pid=2668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.985000 audit[2668]: AVC avc: denied { perfmon } for pid=2668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.985000 audit[2668]: AVC avc: denied { bpf } for pid=2668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.985000 audit[2668]: AVC avc: denied { bpf } for pid=2668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.985000 audit: BPF prog-id=137 op=LOAD Jul 15 11:27:24.985000 audit[2668]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0002f3ca8 items=0 ppid=2482 pid=2668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:24.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062623663666562316465663131623936383237346134303062306138 Jul 15 11:27:24.989000 audit: BPF prog-id=137 op=UNLOAD Jul 15 11:27:24.989000 audit: BPF prog-id=136 op=UNLOAD Jul 15 11:27:24.989000 audit[2668]: AVC avc: denied { bpf } for pid=2668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.989000 audit[2668]: AVC avc: denied { bpf } for pid=2668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.989000 audit[2668]: AVC avc: denied { bpf } for pid=2668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.989000 audit[2668]: AVC avc: denied { perfmon } for pid=2668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.989000 audit[2668]: AVC avc: denied { perfmon } for pid=2668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.989000 audit[2668]: AVC avc: denied { perfmon } for pid=2668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.989000 audit[2668]: AVC avc: denied { perfmon } for pid=2668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.989000 audit[2668]: AVC avc: denied { perfmon } for pid=2668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.989000 audit[2668]: AVC avc: denied { bpf } for pid=2668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.989000 audit[2668]: AVC avc: denied { bpf } for pid=2668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:24.989000 audit: BPF prog-id=138 op=LOAD Jul 15 11:27:24.989000 audit[2668]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0002f3d38 items=0 ppid=2482 pid=2668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:24.989000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062623663666562316465663131623936383237346134303062306138 Jul 15 11:27:25.056700 env[1203]: time="2025-07-15T11:27:25.056546977Z" level=info msg="StartContainer for \"0bb6cfeb1def11b968274a400b0a862ca071155da85dbf9f3ec8253bc8ced33c\" returns successfully" Jul 15 11:27:25.937115 systemd[1]: run-containerd-runc-k8s.io-0bb6cfeb1def11b968274a400b0a862ca071155da85dbf9f3ec8253bc8ced33c-runc.GvvxYM.mount: Deactivated successfully. Jul 15 11:27:26.678127 kubelet[1942]: E0715 11:27:26.678019 1942 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-tnbnz" podUID="b084be4c-45cb-4d18-beeb-0bfdfb2cbea5" Jul 15 11:27:26.949863 env[1203]: time="2025-07-15T11:27:26.949799494Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 15 11:27:26.951809 systemd[1]: cri-containerd-0bb6cfeb1def11b968274a400b0a862ca071155da85dbf9f3ec8253bc8ced33c.scope: Deactivated successfully. Jul 15 11:27:26.956000 audit: BPF prog-id=138 op=UNLOAD Jul 15 11:27:26.969685 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0bb6cfeb1def11b968274a400b0a862ca071155da85dbf9f3ec8253bc8ced33c-rootfs.mount: Deactivated successfully. Jul 15 11:27:26.973849 env[1203]: time="2025-07-15T11:27:26.973779526Z" level=info msg="shim disconnected" id=0bb6cfeb1def11b968274a400b0a862ca071155da85dbf9f3ec8253bc8ced33c Jul 15 11:27:26.974121 env[1203]: time="2025-07-15T11:27:26.973860548Z" level=warning msg="cleaning up after shim disconnected" id=0bb6cfeb1def11b968274a400b0a862ca071155da85dbf9f3ec8253bc8ced33c namespace=k8s.io Jul 15 11:27:26.974121 env[1203]: time="2025-07-15T11:27:26.973880957Z" level=info msg="cleaning up dead shim" Jul 15 11:27:26.975969 kubelet[1942]: I0715 11:27:26.975932 1942 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 15 11:27:26.981908 env[1203]: time="2025-07-15T11:27:26.981860705Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:27:26Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2709 runtime=io.containerd.runc.v2\ntime=\"2025-07-15T11:27:26Z\" level=warning msg=\"failed to remove runc container\" error=\"runc did not terminate successfully: exit status 255: \" runtime=io.containerd.runc.v2\n" Jul 15 11:27:27.012717 systemd[1]: Created slice kubepods-besteffort-pod102126cd_aed1_4142_be75_08afc0aaee0e.slice. Jul 15 11:27:27.019845 systemd[1]: Created slice kubepods-besteffort-pod3ea6d0e6_795c_462c_9605_023e2674e09c.slice. Jul 15 11:27:27.025640 systemd[1]: Created slice kubepods-burstable-pod8efa25ab_67dd_4478_83aa_f81b926404db.slice. Jul 15 11:27:27.030783 systemd[1]: Created slice kubepods-burstable-pod6d2ff4b6_e64f_47e4_a6b3_c4634bc37da3.slice. Jul 15 11:27:27.036554 systemd[1]: Created slice kubepods-besteffort-pod36ddb906_20c6_40b4_82cc_d84c9508332f.slice. Jul 15 11:27:27.041534 systemd[1]: Created slice kubepods-besteffort-pod951899ed_3100_4dfb_b01a_631cfe69df36.slice. Jul 15 11:27:27.047672 systemd[1]: Created slice kubepods-besteffort-pod03d68f24_8acc_4aa5_8c84_e46d07f5de09.slice. Jul 15 11:27:27.131230 kubelet[1942]: I0715 11:27:27.131156 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/102126cd-aed1-4142-be75-08afc0aaee0e-whisker-ca-bundle\") pod \"whisker-9dbc9c8cb-7hx4x\" (UID: \"102126cd-aed1-4142-be75-08afc0aaee0e\") " pod="calico-system/whisker-9dbc9c8cb-7hx4x" Jul 15 11:27:27.131230 kubelet[1942]: I0715 11:27:27.131223 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/951899ed-3100-4dfb-b01a-631cfe69df36-calico-apiserver-certs\") pod \"calico-apiserver-7bc956794c-rnlsq\" (UID: \"951899ed-3100-4dfb-b01a-631cfe69df36\") " pod="calico-apiserver/calico-apiserver-7bc956794c-rnlsq" Jul 15 11:27:27.131445 kubelet[1942]: I0715 11:27:27.131254 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/36ddb906-20c6-40b4-82cc-d84c9508332f-goldmane-key-pair\") pod \"goldmane-768f4c5c69-zhhmj\" (UID: \"36ddb906-20c6-40b4-82cc-d84c9508332f\") " pod="calico-system/goldmane-768f4c5c69-zhhmj" Jul 15 11:27:27.131445 kubelet[1942]: I0715 11:27:27.131291 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/8efa25ab-67dd-4478-83aa-f81b926404db-config-volume\") pod \"coredns-668d6bf9bc-7s67n\" (UID: \"8efa25ab-67dd-4478-83aa-f81b926404db\") " pod="kube-system/coredns-668d6bf9bc-7s67n" Jul 15 11:27:27.131445 kubelet[1942]: I0715 11:27:27.131321 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wblc9\" (UniqueName: \"kubernetes.io/projected/36ddb906-20c6-40b4-82cc-d84c9508332f-kube-api-access-wblc9\") pod \"goldmane-768f4c5c69-zhhmj\" (UID: \"36ddb906-20c6-40b4-82cc-d84c9508332f\") " pod="calico-system/goldmane-768f4c5c69-zhhmj" Jul 15 11:27:27.131445 kubelet[1942]: I0715 11:27:27.131354 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3ea6d0e6-795c-462c-9605-023e2674e09c-tigera-ca-bundle\") pod \"calico-kube-controllers-cbfb7dd6-qmmv9\" (UID: \"3ea6d0e6-795c-462c-9605-023e2674e09c\") " pod="calico-system/calico-kube-controllers-cbfb7dd6-qmmv9" Jul 15 11:27:27.131445 kubelet[1942]: I0715 11:27:27.131379 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nm9dk\" (UniqueName: \"kubernetes.io/projected/8efa25ab-67dd-4478-83aa-f81b926404db-kube-api-access-nm9dk\") pod \"coredns-668d6bf9bc-7s67n\" (UID: \"8efa25ab-67dd-4478-83aa-f81b926404db\") " pod="kube-system/coredns-668d6bf9bc-7s67n" Jul 15 11:27:27.131572 kubelet[1942]: I0715 11:27:27.131401 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8mlld\" (UniqueName: \"kubernetes.io/projected/3ea6d0e6-795c-462c-9605-023e2674e09c-kube-api-access-8mlld\") pod \"calico-kube-controllers-cbfb7dd6-qmmv9\" (UID: \"3ea6d0e6-795c-462c-9605-023e2674e09c\") " pod="calico-system/calico-kube-controllers-cbfb7dd6-qmmv9" Jul 15 11:27:27.131572 kubelet[1942]: I0715 11:27:27.131428 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/03d68f24-8acc-4aa5-8c84-e46d07f5de09-calico-apiserver-certs\") pod \"calico-apiserver-7bc956794c-hwnqw\" (UID: \"03d68f24-8acc-4aa5-8c84-e46d07f5de09\") " pod="calico-apiserver/calico-apiserver-7bc956794c-hwnqw" Jul 15 11:27:27.131572 kubelet[1942]: I0715 11:27:27.131448 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mvnpw\" (UniqueName: \"kubernetes.io/projected/03d68f24-8acc-4aa5-8c84-e46d07f5de09-kube-api-access-mvnpw\") pod \"calico-apiserver-7bc956794c-hwnqw\" (UID: \"03d68f24-8acc-4aa5-8c84-e46d07f5de09\") " pod="calico-apiserver/calico-apiserver-7bc956794c-hwnqw" Jul 15 11:27:27.131572 kubelet[1942]: I0715 11:27:27.131477 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/36ddb906-20c6-40b4-82cc-d84c9508332f-config\") pod \"goldmane-768f4c5c69-zhhmj\" (UID: \"36ddb906-20c6-40b4-82cc-d84c9508332f\") " pod="calico-system/goldmane-768f4c5c69-zhhmj" Jul 15 11:27:27.131572 kubelet[1942]: I0715 11:27:27.131502 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/36ddb906-20c6-40b4-82cc-d84c9508332f-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-zhhmj\" (UID: \"36ddb906-20c6-40b4-82cc-d84c9508332f\") " pod="calico-system/goldmane-768f4c5c69-zhhmj" Jul 15 11:27:27.131695 kubelet[1942]: I0715 11:27:27.131530 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2qd7j\" (UniqueName: \"kubernetes.io/projected/6d2ff4b6-e64f-47e4-a6b3-c4634bc37da3-kube-api-access-2qd7j\") pod \"coredns-668d6bf9bc-5t6g9\" (UID: \"6d2ff4b6-e64f-47e4-a6b3-c4634bc37da3\") " pod="kube-system/coredns-668d6bf9bc-5t6g9" Jul 15 11:27:27.131695 kubelet[1942]: I0715 11:27:27.131558 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-67q2d\" (UniqueName: \"kubernetes.io/projected/102126cd-aed1-4142-be75-08afc0aaee0e-kube-api-access-67q2d\") pod \"whisker-9dbc9c8cb-7hx4x\" (UID: \"102126cd-aed1-4142-be75-08afc0aaee0e\") " pod="calico-system/whisker-9dbc9c8cb-7hx4x" Jul 15 11:27:27.131695 kubelet[1942]: I0715 11:27:27.131582 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dhwv9\" (UniqueName: \"kubernetes.io/projected/951899ed-3100-4dfb-b01a-631cfe69df36-kube-api-access-dhwv9\") pod \"calico-apiserver-7bc956794c-rnlsq\" (UID: \"951899ed-3100-4dfb-b01a-631cfe69df36\") " pod="calico-apiserver/calico-apiserver-7bc956794c-rnlsq" Jul 15 11:27:27.131695 kubelet[1942]: I0715 11:27:27.131609 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/6d2ff4b6-e64f-47e4-a6b3-c4634bc37da3-config-volume\") pod \"coredns-668d6bf9bc-5t6g9\" (UID: \"6d2ff4b6-e64f-47e4-a6b3-c4634bc37da3\") " pod="kube-system/coredns-668d6bf9bc-5t6g9" Jul 15 11:27:27.131695 kubelet[1942]: I0715 11:27:27.131629 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/102126cd-aed1-4142-be75-08afc0aaee0e-whisker-backend-key-pair\") pod \"whisker-9dbc9c8cb-7hx4x\" (UID: \"102126cd-aed1-4142-be75-08afc0aaee0e\") " pod="calico-system/whisker-9dbc9c8cb-7hx4x" Jul 15 11:27:27.317549 env[1203]: time="2025-07-15T11:27:27.317408325Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-9dbc9c8cb-7hx4x,Uid:102126cd-aed1-4142-be75-08afc0aaee0e,Namespace:calico-system,Attempt:0,}" Jul 15 11:27:27.322966 env[1203]: time="2025-07-15T11:27:27.322935766Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-cbfb7dd6-qmmv9,Uid:3ea6d0e6-795c-462c-9605-023e2674e09c,Namespace:calico-system,Attempt:0,}" Jul 15 11:27:27.329375 kubelet[1942]: E0715 11:27:27.329337 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:27.329960 env[1203]: time="2025-07-15T11:27:27.329880690Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-7s67n,Uid:8efa25ab-67dd-4478-83aa-f81b926404db,Namespace:kube-system,Attempt:0,}" Jul 15 11:27:27.333361 kubelet[1942]: E0715 11:27:27.333325 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:27.334546 env[1203]: time="2025-07-15T11:27:27.334255977Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-5t6g9,Uid:6d2ff4b6-e64f-47e4-a6b3-c4634bc37da3,Namespace:kube-system,Attempt:0,}" Jul 15 11:27:27.339471 env[1203]: time="2025-07-15T11:27:27.339415517Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-zhhmj,Uid:36ddb906-20c6-40b4-82cc-d84c9508332f,Namespace:calico-system,Attempt:0,}" Jul 15 11:27:27.345013 env[1203]: time="2025-07-15T11:27:27.344831389Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7bc956794c-rnlsq,Uid:951899ed-3100-4dfb-b01a-631cfe69df36,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:27:27.350463 env[1203]: time="2025-07-15T11:27:27.350425105Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7bc956794c-hwnqw,Uid:03d68f24-8acc-4aa5-8c84-e46d07f5de09,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:27:27.791244 env[1203]: time="2025-07-15T11:27:27.791158098Z" level=error msg="Failed to destroy network for sandbox \"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.792114 env[1203]: time="2025-07-15T11:27:27.792088376Z" level=error msg="encountered an error cleaning up failed sandbox \"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.792246 env[1203]: time="2025-07-15T11:27:27.792219752Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-9dbc9c8cb-7hx4x,Uid:102126cd-aed1-4142-be75-08afc0aaee0e,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.792925 kubelet[1942]: E0715 11:27:27.792524 1942 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.792925 kubelet[1942]: E0715 11:27:27.792594 1942 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-9dbc9c8cb-7hx4x" Jul 15 11:27:27.792925 kubelet[1942]: E0715 11:27:27.792613 1942 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-9dbc9c8cb-7hx4x" Jul 15 11:27:27.793459 kubelet[1942]: E0715 11:27:27.792652 1942 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-9dbc9c8cb-7hx4x_calico-system(102126cd-aed1-4142-be75-08afc0aaee0e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-9dbc9c8cb-7hx4x_calico-system(102126cd-aed1-4142-be75-08afc0aaee0e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-9dbc9c8cb-7hx4x" podUID="102126cd-aed1-4142-be75-08afc0aaee0e" Jul 15 11:27:27.797000 env[1203]: time="2025-07-15T11:27:27.796942492Z" level=error msg="Failed to destroy network for sandbox \"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.797343 env[1203]: time="2025-07-15T11:27:27.797312667Z" level=error msg="encountered an error cleaning up failed sandbox \"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.797415 env[1203]: time="2025-07-15T11:27:27.797368682Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-7s67n,Uid:8efa25ab-67dd-4478-83aa-f81b926404db,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.797727 kubelet[1942]: E0715 11:27:27.797566 1942 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.797727 kubelet[1942]: E0715 11:27:27.797624 1942 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-7s67n" Jul 15 11:27:27.797727 kubelet[1942]: E0715 11:27:27.797642 1942 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-7s67n" Jul 15 11:27:27.797831 kubelet[1942]: E0715 11:27:27.797678 1942 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-7s67n_kube-system(8efa25ab-67dd-4478-83aa-f81b926404db)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-7s67n_kube-system(8efa25ab-67dd-4478-83aa-f81b926404db)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-7s67n" podUID="8efa25ab-67dd-4478-83aa-f81b926404db" Jul 15 11:27:27.817257 env[1203]: time="2025-07-15T11:27:27.817203224Z" level=error msg="Failed to destroy network for sandbox \"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.817739 env[1203]: time="2025-07-15T11:27:27.817715616Z" level=error msg="encountered an error cleaning up failed sandbox \"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.817861 env[1203]: time="2025-07-15T11:27:27.817834970Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-zhhmj,Uid:36ddb906-20c6-40b4-82cc-d84c9508332f,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.818377 kubelet[1942]: E0715 11:27:27.818219 1942 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.818377 kubelet[1942]: E0715 11:27:27.818277 1942 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-zhhmj" Jul 15 11:27:27.818377 kubelet[1942]: E0715 11:27:27.818296 1942 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-zhhmj" Jul 15 11:27:27.818488 kubelet[1942]: E0715 11:27:27.818333 1942 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-zhhmj_calico-system(36ddb906-20c6-40b4-82cc-d84c9508332f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-zhhmj_calico-system(36ddb906-20c6-40b4-82cc-d84c9508332f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-zhhmj" podUID="36ddb906-20c6-40b4-82cc-d84c9508332f" Jul 15 11:27:27.819330 env[1203]: time="2025-07-15T11:27:27.819264615Z" level=error msg="Failed to destroy network for sandbox \"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.819857 env[1203]: time="2025-07-15T11:27:27.819820028Z" level=error msg="encountered an error cleaning up failed sandbox \"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.819957 env[1203]: time="2025-07-15T11:27:27.819874611Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-5t6g9,Uid:6d2ff4b6-e64f-47e4-a6b3-c4634bc37da3,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.820214 kubelet[1942]: E0715 11:27:27.820135 1942 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.820361 kubelet[1942]: E0715 11:27:27.820291 1942 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-5t6g9" Jul 15 11:27:27.820361 kubelet[1942]: E0715 11:27:27.820339 1942 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-5t6g9" Jul 15 11:27:27.820482 kubelet[1942]: E0715 11:27:27.820398 1942 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-5t6g9_kube-system(6d2ff4b6-e64f-47e4-a6b3-c4634bc37da3)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-5t6g9_kube-system(6d2ff4b6-e64f-47e4-a6b3-c4634bc37da3)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-5t6g9" podUID="6d2ff4b6-e64f-47e4-a6b3-c4634bc37da3" Jul 15 11:27:27.823816 env[1203]: time="2025-07-15T11:27:27.823717117Z" level=error msg="Failed to destroy network for sandbox \"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.824204 env[1203]: time="2025-07-15T11:27:27.824163335Z" level=error msg="encountered an error cleaning up failed sandbox \"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.824447 env[1203]: time="2025-07-15T11:27:27.824345868Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-cbfb7dd6-qmmv9,Uid:3ea6d0e6-795c-462c-9605-023e2674e09c,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.824653 env[1203]: time="2025-07-15T11:27:27.824501881Z" level=error msg="Failed to destroy network for sandbox \"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.824739 kubelet[1942]: E0715 11:27:27.824579 1942 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.824831 kubelet[1942]: E0715 11:27:27.824758 1942 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-cbfb7dd6-qmmv9" Jul 15 11:27:27.824831 kubelet[1942]: E0715 11:27:27.824778 1942 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-cbfb7dd6-qmmv9" Jul 15 11:27:27.824894 env[1203]: time="2025-07-15T11:27:27.824797656Z" level=error msg="encountered an error cleaning up failed sandbox \"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.824894 env[1203]: time="2025-07-15T11:27:27.824846428Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7bc956794c-hwnqw,Uid:03d68f24-8acc-4aa5-8c84-e46d07f5de09,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.824987 kubelet[1942]: E0715 11:27:27.824819 1942 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-cbfb7dd6-qmmv9_calico-system(3ea6d0e6-795c-462c-9605-023e2674e09c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-cbfb7dd6-qmmv9_calico-system(3ea6d0e6-795c-462c-9605-023e2674e09c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-cbfb7dd6-qmmv9" podUID="3ea6d0e6-795c-462c-9605-023e2674e09c" Jul 15 11:27:27.825038 kubelet[1942]: E0715 11:27:27.824986 1942 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.825038 kubelet[1942]: E0715 11:27:27.825011 1942 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7bc956794c-hwnqw" Jul 15 11:27:27.825038 kubelet[1942]: E0715 11:27:27.825029 1942 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7bc956794c-hwnqw" Jul 15 11:27:27.825141 kubelet[1942]: E0715 11:27:27.825049 1942 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-7bc956794c-hwnqw_calico-apiserver(03d68f24-8acc-4aa5-8c84-e46d07f5de09)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-7bc956794c-hwnqw_calico-apiserver(03d68f24-8acc-4aa5-8c84-e46d07f5de09)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7bc956794c-hwnqw" podUID="03d68f24-8acc-4aa5-8c84-e46d07f5de09" Jul 15 11:27:27.827781 env[1203]: time="2025-07-15T11:27:27.827733310Z" level=error msg="Failed to destroy network for sandbox \"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.827999 env[1203]: time="2025-07-15T11:27:27.827966217Z" level=error msg="encountered an error cleaning up failed sandbox \"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.828038 env[1203]: time="2025-07-15T11:27:27.828013686Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7bc956794c-rnlsq,Uid:951899ed-3100-4dfb-b01a-631cfe69df36,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.828151 kubelet[1942]: E0715 11:27:27.828127 1942 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.828209 kubelet[1942]: E0715 11:27:27.828164 1942 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7bc956794c-rnlsq" Jul 15 11:27:27.828209 kubelet[1942]: E0715 11:27:27.828186 1942 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7bc956794c-rnlsq" Jul 15 11:27:27.828268 kubelet[1942]: E0715 11:27:27.828212 1942 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-7bc956794c-rnlsq_calico-apiserver(951899ed-3100-4dfb-b01a-631cfe69df36)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-7bc956794c-rnlsq_calico-apiserver(951899ed-3100-4dfb-b01a-631cfe69df36)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7bc956794c-rnlsq" podUID="951899ed-3100-4dfb-b01a-631cfe69df36" Jul 15 11:27:27.870579 kubelet[1942]: I0715 11:27:27.870548 1942 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" Jul 15 11:27:27.871203 env[1203]: time="2025-07-15T11:27:27.871154328Z" level=info msg="StopPodSandbox for \"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a\"" Jul 15 11:27:27.871826 kubelet[1942]: I0715 11:27:27.871794 1942 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" Jul 15 11:27:27.872378 env[1203]: time="2025-07-15T11:27:27.872315279Z" level=info msg="StopPodSandbox for \"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4\"" Jul 15 11:27:27.873114 kubelet[1942]: I0715 11:27:27.873092 1942 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" Jul 15 11:27:27.873607 env[1203]: time="2025-07-15T11:27:27.873586656Z" level=info msg="StopPodSandbox for \"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde\"" Jul 15 11:27:27.876386 env[1203]: time="2025-07-15T11:27:27.876364935Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 15 11:27:27.877327 kubelet[1942]: I0715 11:27:27.876980 1942 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" Jul 15 11:27:27.877451 env[1203]: time="2025-07-15T11:27:27.877385531Z" level=info msg="StopPodSandbox for \"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b\"" Jul 15 11:27:27.878462 kubelet[1942]: I0715 11:27:27.878439 1942 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" Jul 15 11:27:27.878782 env[1203]: time="2025-07-15T11:27:27.878753891Z" level=info msg="StopPodSandbox for \"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551\"" Jul 15 11:27:27.880156 kubelet[1942]: I0715 11:27:27.880131 1942 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" Jul 15 11:27:27.880618 env[1203]: time="2025-07-15T11:27:27.880595871Z" level=info msg="StopPodSandbox for \"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c\"" Jul 15 11:27:27.881679 kubelet[1942]: I0715 11:27:27.881440 1942 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" Jul 15 11:27:27.881921 env[1203]: time="2025-07-15T11:27:27.881898978Z" level=info msg="StopPodSandbox for \"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746\"" Jul 15 11:27:27.898986 env[1203]: time="2025-07-15T11:27:27.898932388Z" level=error msg="StopPodSandbox for \"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a\" failed" error="failed to destroy network for sandbox \"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.899573 kubelet[1942]: E0715 11:27:27.899376 1942 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" Jul 15 11:27:27.899573 kubelet[1942]: E0715 11:27:27.899441 1942 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a"} Jul 15 11:27:27.899573 kubelet[1942]: E0715 11:27:27.899506 1942 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"102126cd-aed1-4142-be75-08afc0aaee0e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:27:27.899573 kubelet[1942]: E0715 11:27:27.899531 1942 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"102126cd-aed1-4142-be75-08afc0aaee0e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-9dbc9c8cb-7hx4x" podUID="102126cd-aed1-4142-be75-08afc0aaee0e" Jul 15 11:27:27.903324 env[1203]: time="2025-07-15T11:27:27.903259315Z" level=error msg="StopPodSandbox for \"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4\" failed" error="failed to destroy network for sandbox \"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.903737 kubelet[1942]: E0715 11:27:27.903697 1942 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" Jul 15 11:27:27.903737 kubelet[1942]: E0715 11:27:27.903734 1942 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4"} Jul 15 11:27:27.903852 kubelet[1942]: E0715 11:27:27.903757 1942 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"951899ed-3100-4dfb-b01a-631cfe69df36\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:27:27.903852 kubelet[1942]: E0715 11:27:27.903774 1942 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"951899ed-3100-4dfb-b01a-631cfe69df36\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7bc956794c-rnlsq" podUID="951899ed-3100-4dfb-b01a-631cfe69df36" Jul 15 11:27:27.928363 env[1203]: time="2025-07-15T11:27:27.928267361Z" level=error msg="StopPodSandbox for \"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde\" failed" error="failed to destroy network for sandbox \"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.929472 kubelet[1942]: E0715 11:27:27.929427 1942 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" Jul 15 11:27:27.929561 kubelet[1942]: E0715 11:27:27.929476 1942 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde"} Jul 15 11:27:27.929561 kubelet[1942]: E0715 11:27:27.929511 1942 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6d2ff4b6-e64f-47e4-a6b3-c4634bc37da3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:27:27.929561 kubelet[1942]: E0715 11:27:27.929532 1942 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6d2ff4b6-e64f-47e4-a6b3-c4634bc37da3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-5t6g9" podUID="6d2ff4b6-e64f-47e4-a6b3-c4634bc37da3" Jul 15 11:27:27.942315 env[1203]: time="2025-07-15T11:27:27.942241285Z" level=error msg="StopPodSandbox for \"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746\" failed" error="failed to destroy network for sandbox \"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.942562 kubelet[1942]: E0715 11:27:27.942506 1942 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" Jul 15 11:27:27.942626 kubelet[1942]: E0715 11:27:27.942575 1942 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746"} Jul 15 11:27:27.942653 kubelet[1942]: E0715 11:27:27.942623 1942 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3ea6d0e6-795c-462c-9605-023e2674e09c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:27:27.942719 kubelet[1942]: E0715 11:27:27.942661 1942 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3ea6d0e6-795c-462c-9605-023e2674e09c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-cbfb7dd6-qmmv9" podUID="3ea6d0e6-795c-462c-9605-023e2674e09c" Jul 15 11:27:27.949257 env[1203]: time="2025-07-15T11:27:27.949194084Z" level=error msg="StopPodSandbox for \"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551\" failed" error="failed to destroy network for sandbox \"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.949494 env[1203]: time="2025-07-15T11:27:27.949331652Z" level=error msg="StopPodSandbox for \"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c\" failed" error="failed to destroy network for sandbox \"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.949541 kubelet[1942]: E0715 11:27:27.949455 1942 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" Jul 15 11:27:27.949541 kubelet[1942]: E0715 11:27:27.949504 1942 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551"} Jul 15 11:27:27.949608 kubelet[1942]: E0715 11:27:27.949542 1942 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"8efa25ab-67dd-4478-83aa-f81b926404db\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:27:27.949608 kubelet[1942]: E0715 11:27:27.949462 1942 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" Jul 15 11:27:27.949608 kubelet[1942]: E0715 11:27:27.949579 1942 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"8efa25ab-67dd-4478-83aa-f81b926404db\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-7s67n" podUID="8efa25ab-67dd-4478-83aa-f81b926404db" Jul 15 11:27:27.949743 kubelet[1942]: E0715 11:27:27.949606 1942 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c"} Jul 15 11:27:27.949743 kubelet[1942]: E0715 11:27:27.949641 1942 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"03d68f24-8acc-4aa5-8c84-e46d07f5de09\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:27:27.949743 kubelet[1942]: E0715 11:27:27.949677 1942 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"03d68f24-8acc-4aa5-8c84-e46d07f5de09\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7bc956794c-hwnqw" podUID="03d68f24-8acc-4aa5-8c84-e46d07f5de09" Jul 15 11:27:27.950195 env[1203]: time="2025-07-15T11:27:27.950120414Z" level=error msg="StopPodSandbox for \"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b\" failed" error="failed to destroy network for sandbox \"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:27.950431 kubelet[1942]: E0715 11:27:27.950297 1942 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" Jul 15 11:27:27.950431 kubelet[1942]: E0715 11:27:27.950334 1942 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b"} Jul 15 11:27:27.950431 kubelet[1942]: E0715 11:27:27.950365 1942 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"36ddb906-20c6-40b4-82cc-d84c9508332f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:27:27.950431 kubelet[1942]: E0715 11:27:27.950387 1942 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"36ddb906-20c6-40b4-82cc-d84c9508332f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-zhhmj" podUID="36ddb906-20c6-40b4-82cc-d84c9508332f" Jul 15 11:27:28.683420 systemd[1]: Created slice kubepods-besteffort-podb084be4c_45cb_4d18_beeb_0bfdfb2cbea5.slice. Jul 15 11:27:28.685553 env[1203]: time="2025-07-15T11:27:28.685523692Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-tnbnz,Uid:b084be4c-45cb-4d18-beeb-0bfdfb2cbea5,Namespace:calico-system,Attempt:0,}" Jul 15 11:27:28.733042 env[1203]: time="2025-07-15T11:27:28.732944974Z" level=error msg="Failed to destroy network for sandbox \"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:28.733414 env[1203]: time="2025-07-15T11:27:28.733371906Z" level=error msg="encountered an error cleaning up failed sandbox \"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:28.733469 env[1203]: time="2025-07-15T11:27:28.733429444Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-tnbnz,Uid:b084be4c-45cb-4d18-beeb-0bfdfb2cbea5,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:28.734064 kubelet[1942]: E0715 11:27:28.733690 1942 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:28.734064 kubelet[1942]: E0715 11:27:28.733771 1942 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-tnbnz" Jul 15 11:27:28.734064 kubelet[1942]: E0715 11:27:28.733790 1942 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-tnbnz" Jul 15 11:27:28.734216 kubelet[1942]: E0715 11:27:28.733848 1942 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-tnbnz_calico-system(b084be4c-45cb-4d18-beeb-0bfdfb2cbea5)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-tnbnz_calico-system(b084be4c-45cb-4d18-beeb-0bfdfb2cbea5)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-tnbnz" podUID="b084be4c-45cb-4d18-beeb-0bfdfb2cbea5" Jul 15 11:27:28.735567 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651-shm.mount: Deactivated successfully. Jul 15 11:27:28.883097 kubelet[1942]: I0715 11:27:28.883048 1942 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:27:28.883403 kubelet[1942]: E0715 11:27:28.883335 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:28.884444 kubelet[1942]: I0715 11:27:28.884391 1942 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" Jul 15 11:27:28.884855 env[1203]: time="2025-07-15T11:27:28.884826241Z" level=info msg="StopPodSandbox for \"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651\"" Jul 15 11:27:28.909000 audit[3146]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3146 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:28.909000 audit[3146]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc13f78a20 a2=0 a3=7ffc13f78a0c items=0 ppid=2108 pid=3146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:28.909000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:28.912906 env[1203]: time="2025-07-15T11:27:28.912850938Z" level=error msg="StopPodSandbox for \"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651\" failed" error="failed to destroy network for sandbox \"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:27:28.913184 kubelet[1942]: E0715 11:27:28.913123 1942 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" Jul 15 11:27:28.913260 kubelet[1942]: E0715 11:27:28.913204 1942 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651"} Jul 15 11:27:28.913260 kubelet[1942]: E0715 11:27:28.913237 1942 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b084be4c-45cb-4d18-beeb-0bfdfb2cbea5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:27:28.913367 kubelet[1942]: E0715 11:27:28.913259 1942 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b084be4c-45cb-4d18-beeb-0bfdfb2cbea5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-tnbnz" podUID="b084be4c-45cb-4d18-beeb-0bfdfb2cbea5" Jul 15 11:27:28.913000 audit[3146]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=3146 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:28.913000 audit[3146]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffc13f78a20 a2=0 a3=7ffc13f78a0c items=0 ppid=2108 pid=3146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:28.913000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:29.887040 kubelet[1942]: E0715 11:27:29.887009 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:31.271180 systemd[1]: Started sshd@7-10.0.0.18:22-10.0.0.1:54214.service. Jul 15 11:27:31.270000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.18:22-10.0.0.1:54214 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:31.273157 kernel: kauditd_printk_skb: 40 callbacks suppressed Jul 15 11:27:31.273224 kernel: audit: type=1130 audit(1752578851.270:1009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.18:22-10.0.0.1:54214 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:31.309000 audit[3149]: USER_ACCT pid=3149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:31.311000 audit[3149]: CRED_ACQ pid=3149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:31.312796 sshd[3149]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:27:31.316549 sshd[3149]: Accepted publickey for core from 10.0.0.1 port 54214 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:27:31.317243 systemd-logind[1191]: New session 8 of user core. Jul 15 11:27:31.317950 systemd[1]: Started session-8.scope. Jul 15 11:27:31.318658 kernel: audit: type=1101 audit(1752578851.309:1010): pid=3149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:31.318714 kernel: audit: type=1103 audit(1752578851.311:1011): pid=3149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:31.318735 kernel: audit: type=1006 audit(1752578851.311:1012): pid=3149 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Jul 15 11:27:31.321304 kernel: audit: type=1300 audit(1752578851.311:1012): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1d81d7d0 a2=3 a3=0 items=0 ppid=1 pid=3149 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:31.311000 audit[3149]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1d81d7d0 a2=3 a3=0 items=0 ppid=1 pid=3149 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:31.311000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:27:31.327870 kernel: audit: type=1327 audit(1752578851.311:1012): proctitle=737368643A20636F7265205B707269765D Jul 15 11:27:31.321000 audit[3149]: USER_START pid=3149 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:31.332964 kernel: audit: type=1105 audit(1752578851.321:1013): pid=3149 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:31.322000 audit[3151]: CRED_ACQ pid=3151 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:31.338143 kernel: audit: type=1103 audit(1752578851.322:1014): pid=3151 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:31.458424 sshd[3149]: pam_unix(sshd:session): session closed for user core Jul 15 11:27:31.458000 audit[3149]: USER_END pid=3149 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:31.461173 systemd[1]: sshd@7-10.0.0.18:22-10.0.0.1:54214.service: Deactivated successfully. Jul 15 11:27:31.461802 systemd[1]: session-8.scope: Deactivated successfully. Jul 15 11:27:31.465139 kernel: audit: type=1106 audit(1752578851.458:1015): pid=3149 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:31.465177 kernel: audit: type=1104 audit(1752578851.458:1016): pid=3149 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:31.458000 audit[3149]: CRED_DISP pid=3149 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:31.462147 systemd-logind[1191]: Session 8 logged out. Waiting for processes to exit. Jul 15 11:27:31.462838 systemd-logind[1191]: Removed session 8. Jul 15 11:27:31.458000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.18:22-10.0.0.1:54214 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:36.179086 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2027957110.mount: Deactivated successfully. Jul 15 11:27:36.462289 systemd[1]: Started sshd@8-10.0.0.18:22-10.0.0.1:54222.service. Jul 15 11:27:36.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.18:22-10.0.0.1:54222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:36.463290 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 15 11:27:36.463324 kernel: audit: type=1130 audit(1752578856.461:1018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.18:22-10.0.0.1:54222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:36.881440 env[1203]: time="2025-07-15T11:27:36.881333769Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:36.883937 env[1203]: time="2025-07-15T11:27:36.883902821Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:36.886049 env[1203]: time="2025-07-15T11:27:36.885984578Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:36.888406 env[1203]: time="2025-07-15T11:27:36.888349326Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:36.889301 env[1203]: time="2025-07-15T11:27:36.889259113Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20\"" Jul 15 11:27:36.898721 env[1203]: time="2025-07-15T11:27:36.897755439Z" level=info msg="CreateContainer within sandbox \"2e426f00ae5c247906caa91ed3d9e604728d0be8ecd7d36362ef88504a93f7a8\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 15 11:27:36.898000 audit[3166]: USER_ACCT pid=3166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:36.903347 sshd[3166]: Accepted publickey for core from 10.0.0.1 port 54222 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:27:36.902000 audit[3166]: CRED_ACQ pid=3166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:36.903807 sshd[3166]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:27:36.907532 kernel: audit: type=1101 audit(1752578856.898:1019): pid=3166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:36.907666 kernel: audit: type=1103 audit(1752578856.902:1020): pid=3166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:36.907716 kernel: audit: type=1006 audit(1752578856.902:1021): pid=3166 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Jul 15 11:27:36.909647 systemd[1]: Started session-9.scope. Jul 15 11:27:36.902000 audit[3166]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd6734600 a2=3 a3=0 items=0 ppid=1 pid=3166 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:36.910104 systemd-logind[1191]: New session 9 of user core. Jul 15 11:27:36.914024 kernel: audit: type=1300 audit(1752578856.902:1021): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd6734600 a2=3 a3=0 items=0 ppid=1 pid=3166 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:36.902000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:27:36.916116 kernel: audit: type=1327 audit(1752578856.902:1021): proctitle=737368643A20636F7265205B707269765D Jul 15 11:27:36.921000 audit[3166]: USER_START pid=3166 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:36.923062 env[1203]: time="2025-07-15T11:27:36.923008893Z" level=info msg="CreateContainer within sandbox \"2e426f00ae5c247906caa91ed3d9e604728d0be8ecd7d36362ef88504a93f7a8\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"5ae75d99f201bcb68221ba6a686308db11219ef72442273e2c0634e7c1f34d60\"" Jul 15 11:27:36.923889 env[1203]: time="2025-07-15T11:27:36.923853848Z" level=info msg="StartContainer for \"5ae75d99f201bcb68221ba6a686308db11219ef72442273e2c0634e7c1f34d60\"" Jul 15 11:27:36.930295 kernel: audit: type=1105 audit(1752578856.921:1022): pid=3166 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:36.930362 kernel: audit: type=1103 audit(1752578856.925:1023): pid=3170 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:36.925000 audit[3170]: CRED_ACQ pid=3170 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:36.947710 systemd[1]: Started cri-containerd-5ae75d99f201bcb68221ba6a686308db11219ef72442273e2c0634e7c1f34d60.scope. Jul 15 11:27:36.963000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.963000 audit[3178]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fbebbacaa18 items=0 ppid=2482 pid=3178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:36.972466 kernel: audit: type=1400 audit(1752578856.963:1024): avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.972526 kernel: audit: type=1300 audit(1752578856.963:1024): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fbebbacaa18 items=0 ppid=2482 pid=3178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:36.963000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561653735643939663230316263623638323231626136613638363330 Jul 15 11:27:36.963000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.963000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.963000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.963000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.963000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.963000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.963000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.963000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.963000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.963000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.963000 audit: BPF prog-id=139 op=LOAD Jul 15 11:27:36.963000 audit[3178]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000dfba8 items=0 ppid=2482 pid=3178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:36.963000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561653735643939663230316263623638323231626136613638363330 Jul 15 11:27:36.966000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.966000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.966000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.966000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.966000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.966000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.966000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.966000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.966000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.966000 audit: BPF prog-id=140 op=LOAD Jul 15 11:27:36.966000 audit[3178]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000dfbf8 items=0 ppid=2482 pid=3178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:36.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561653735643939663230316263623638323231626136613638363330 Jul 15 11:27:36.966000 audit: BPF prog-id=140 op=UNLOAD Jul 15 11:27:36.966000 audit: BPF prog-id=139 op=UNLOAD Jul 15 11:27:36.966000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.966000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.966000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.966000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.966000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.966000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.966000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.966000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.966000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.966000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:36.966000 audit: BPF prog-id=141 op=LOAD Jul 15 11:27:36.966000 audit[3178]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000dfc88 items=0 ppid=2482 pid=3178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:36.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561653735643939663230316263623638323231626136613638363330 Jul 15 11:27:37.103568 env[1203]: time="2025-07-15T11:27:37.103401488Z" level=info msg="StartContainer for \"5ae75d99f201bcb68221ba6a686308db11219ef72442273e2c0634e7c1f34d60\" returns successfully" Jul 15 11:27:37.146984 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 15 11:27:37.147191 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 15 11:27:37.177291 sshd[3166]: pam_unix(sshd:session): session closed for user core Jul 15 11:27:37.178000 audit[3166]: USER_END pid=3166 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:37.178000 audit[3166]: CRED_DISP pid=3166 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:37.182059 systemd[1]: sshd@8-10.0.0.18:22-10.0.0.1:54222.service: Deactivated successfully. Jul 15 11:27:37.181000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.18:22-10.0.0.1:54222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:37.182896 systemd[1]: session-9.scope: Deactivated successfully. Jul 15 11:27:37.183500 systemd-logind[1191]: Session 9 logged out. Waiting for processes to exit. Jul 15 11:27:37.184439 systemd-logind[1191]: Removed session 9. Jul 15 11:27:37.245874 env[1203]: time="2025-07-15T11:27:37.245822759Z" level=info msg="StopPodSandbox for \"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a\"" Jul 15 11:27:37.380764 env[1203]: 2025-07-15 11:27:37.297 [INFO][3247] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" Jul 15 11:27:37.380764 env[1203]: 2025-07-15 11:27:37.297 [INFO][3247] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" iface="eth0" netns="/var/run/netns/cni-5c02cbde-9037-fccb-fd40-3ff1264c1728" Jul 15 11:27:37.380764 env[1203]: 2025-07-15 11:27:37.297 [INFO][3247] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" iface="eth0" netns="/var/run/netns/cni-5c02cbde-9037-fccb-fd40-3ff1264c1728" Jul 15 11:27:37.380764 env[1203]: 2025-07-15 11:27:37.298 [INFO][3247] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" iface="eth0" netns="/var/run/netns/cni-5c02cbde-9037-fccb-fd40-3ff1264c1728" Jul 15 11:27:37.380764 env[1203]: 2025-07-15 11:27:37.298 [INFO][3247] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" Jul 15 11:27:37.380764 env[1203]: 2025-07-15 11:27:37.298 [INFO][3247] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" Jul 15 11:27:37.380764 env[1203]: 2025-07-15 11:27:37.370 [INFO][3255] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" HandleID="k8s-pod-network.9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" Workload="localhost-k8s-whisker--9dbc9c8cb--7hx4x-eth0" Jul 15 11:27:37.380764 env[1203]: 2025-07-15 11:27:37.370 [INFO][3255] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:37.380764 env[1203]: 2025-07-15 11:27:37.371 [INFO][3255] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:37.380764 env[1203]: 2025-07-15 11:27:37.376 [WARNING][3255] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" HandleID="k8s-pod-network.9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" Workload="localhost-k8s-whisker--9dbc9c8cb--7hx4x-eth0" Jul 15 11:27:37.380764 env[1203]: 2025-07-15 11:27:37.376 [INFO][3255] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" HandleID="k8s-pod-network.9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" Workload="localhost-k8s-whisker--9dbc9c8cb--7hx4x-eth0" Jul 15 11:27:37.380764 env[1203]: 2025-07-15 11:27:37.377 [INFO][3255] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:37.380764 env[1203]: 2025-07-15 11:27:37.378 [INFO][3247] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" Jul 15 11:27:37.382214 env[1203]: time="2025-07-15T11:27:37.382160382Z" level=info msg="TearDown network for sandbox \"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a\" successfully" Jul 15 11:27:37.382214 env[1203]: time="2025-07-15T11:27:37.382207621Z" level=info msg="StopPodSandbox for \"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a\" returns successfully" Jul 15 11:27:37.383893 systemd[1]: run-netns-cni\x2d5c02cbde\x2d9037\x2dfccb\x2dfd40\x2d3ff1264c1728.mount: Deactivated successfully. Jul 15 11:27:37.491640 kubelet[1942]: I0715 11:27:37.491606 1942 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/102126cd-aed1-4142-be75-08afc0aaee0e-whisker-backend-key-pair\") pod \"102126cd-aed1-4142-be75-08afc0aaee0e\" (UID: \"102126cd-aed1-4142-be75-08afc0aaee0e\") " Jul 15 11:27:37.491640 kubelet[1942]: I0715 11:27:37.491647 1942 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/102126cd-aed1-4142-be75-08afc0aaee0e-whisker-ca-bundle\") pod \"102126cd-aed1-4142-be75-08afc0aaee0e\" (UID: \"102126cd-aed1-4142-be75-08afc0aaee0e\") " Jul 15 11:27:37.492098 kubelet[1942]: I0715 11:27:37.491666 1942 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-67q2d\" (UniqueName: \"kubernetes.io/projected/102126cd-aed1-4142-be75-08afc0aaee0e-kube-api-access-67q2d\") pod \"102126cd-aed1-4142-be75-08afc0aaee0e\" (UID: \"102126cd-aed1-4142-be75-08afc0aaee0e\") " Jul 15 11:27:37.492098 kubelet[1942]: I0715 11:27:37.492026 1942 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/102126cd-aed1-4142-be75-08afc0aaee0e-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "102126cd-aed1-4142-be75-08afc0aaee0e" (UID: "102126cd-aed1-4142-be75-08afc0aaee0e"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 15 11:27:37.495211 kubelet[1942]: I0715 11:27:37.495178 1942 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/102126cd-aed1-4142-be75-08afc0aaee0e-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "102126cd-aed1-4142-be75-08afc0aaee0e" (UID: "102126cd-aed1-4142-be75-08afc0aaee0e"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 15 11:27:37.496619 systemd[1]: var-lib-kubelet-pods-102126cd\x2daed1\x2d4142\x2dbe75\x2d08afc0aaee0e-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d67q2d.mount: Deactivated successfully. Jul 15 11:27:37.496703 systemd[1]: var-lib-kubelet-pods-102126cd\x2daed1\x2d4142\x2dbe75\x2d08afc0aaee0e-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 15 11:27:37.497966 kubelet[1942]: I0715 11:27:37.497945 1942 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/102126cd-aed1-4142-be75-08afc0aaee0e-kube-api-access-67q2d" (OuterVolumeSpecName: "kube-api-access-67q2d") pod "102126cd-aed1-4142-be75-08afc0aaee0e" (UID: "102126cd-aed1-4142-be75-08afc0aaee0e"). InnerVolumeSpecName "kube-api-access-67q2d". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 15 11:27:37.592521 kubelet[1942]: I0715 11:27:37.592494 1942 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/102126cd-aed1-4142-be75-08afc0aaee0e-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 15 11:27:37.592605 kubelet[1942]: I0715 11:27:37.592526 1942 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-67q2d\" (UniqueName: \"kubernetes.io/projected/102126cd-aed1-4142-be75-08afc0aaee0e-kube-api-access-67q2d\") on node \"localhost\" DevicePath \"\"" Jul 15 11:27:37.592605 kubelet[1942]: I0715 11:27:37.592540 1942 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/102126cd-aed1-4142-be75-08afc0aaee0e-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 15 11:27:37.684571 systemd[1]: Removed slice kubepods-besteffort-pod102126cd_aed1_4142_be75_08afc0aaee0e.slice. Jul 15 11:27:37.951317 kubelet[1942]: I0715 11:27:37.951251 1942 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-r9kss" podStartSLOduration=1.734075354 podStartE2EDuration="23.951222113s" podCreationTimestamp="2025-07-15 11:27:14 +0000 UTC" firstStartedPulling="2025-07-15 11:27:14.673437551 +0000 UTC m=+19.093879683" lastFinishedPulling="2025-07-15 11:27:36.89058432 +0000 UTC m=+41.311026442" observedRunningTime="2025-07-15 11:27:37.949575824 +0000 UTC m=+42.370017986" watchObservedRunningTime="2025-07-15 11:27:37.951222113 +0000 UTC m=+42.371664245" Jul 15 11:27:37.966892 systemd[1]: Created slice kubepods-besteffort-podd9d1ee0e_979b_499e_8b4d_ce424ab7c817.slice. Jul 15 11:27:37.995125 kubelet[1942]: I0715 11:27:37.995087 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/d9d1ee0e-979b-499e-8b4d-ce424ab7c817-whisker-backend-key-pair\") pod \"whisker-67f5596b44-57cml\" (UID: \"d9d1ee0e-979b-499e-8b4d-ce424ab7c817\") " pod="calico-system/whisker-67f5596b44-57cml" Jul 15 11:27:37.995270 kubelet[1942]: I0715 11:27:37.995156 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-r6prv\" (UniqueName: \"kubernetes.io/projected/d9d1ee0e-979b-499e-8b4d-ce424ab7c817-kube-api-access-r6prv\") pod \"whisker-67f5596b44-57cml\" (UID: \"d9d1ee0e-979b-499e-8b4d-ce424ab7c817\") " pod="calico-system/whisker-67f5596b44-57cml" Jul 15 11:27:37.995270 kubelet[1942]: I0715 11:27:37.995182 1942 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d9d1ee0e-979b-499e-8b4d-ce424ab7c817-whisker-ca-bundle\") pod \"whisker-67f5596b44-57cml\" (UID: \"d9d1ee0e-979b-499e-8b4d-ce424ab7c817\") " pod="calico-system/whisker-67f5596b44-57cml" Jul 15 11:27:38.271967 env[1203]: time="2025-07-15T11:27:38.271854009Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-67f5596b44-57cml,Uid:d9d1ee0e-979b-499e-8b4d-ce424ab7c817,Namespace:calico-system,Attempt:0,}" Jul 15 11:27:38.431000 audit[3340]: AVC avc: denied { write } for pid=3340 comm="tee" name="fd" dev="proc" ino=25872 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:27:38.431000 audit[3340]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffef87d77f5 a2=241 a3=1b6 items=1 ppid=3310 pid=3340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.431000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 15 11:27:38.431000 audit: PATH item=0 name="/dev/fd/63" inode=24251 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:27:38.431000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:27:38.434000 audit[3338]: AVC avc: denied { write } for pid=3338 comm="tee" name="fd" dev="proc" ino=24258 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:27:38.434000 audit[3338]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffb0cd47e5 a2=241 a3=1b6 items=1 ppid=3314 pid=3338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.434000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 15 11:27:38.434000 audit: PATH item=0 name="/dev/fd/63" inode=25869 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:27:38.434000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:27:38.455000 audit[3357]: AVC avc: denied { write } for pid=3357 comm="tee" name="fd" dev="proc" ino=24856 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:27:38.455000 audit[3357]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd708647f5 a2=241 a3=1b6 items=1 ppid=3323 pid=3357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.455000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 15 11:27:38.455000 audit: PATH item=0 name="/dev/fd/63" inode=26712 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:27:38.455000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:27:38.464000 audit[3378]: AVC avc: denied { write } for pid=3378 comm="tee" name="fd" dev="proc" ino=25888 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:27:38.464000 audit[3378]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe66f097f7 a2=241 a3=1b6 items=1 ppid=3320 pid=3378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.464000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 15 11:27:38.464000 audit: PATH item=0 name="/dev/fd/63" inode=26716 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:27:38.464000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:27:38.470000 audit[3384]: AVC avc: denied { write } for pid=3384 comm="tee" name="fd" dev="proc" ino=25894 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:27:38.470000 audit[3384]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffaab857f5 a2=241 a3=1b6 items=1 ppid=3330 pid=3384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.470000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 15 11:27:38.470000 audit: PATH item=0 name="/dev/fd/63" inode=24862 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:27:38.470000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:27:38.480000 audit[3390]: AVC avc: denied { write } for pid=3390 comm="tee" name="fd" dev="proc" ino=25898 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:27:38.480000 audit[3390]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffbe5b77f6 a2=241 a3=1b6 items=1 ppid=3311 pid=3390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.480000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 15 11:27:38.480000 audit: PATH item=0 name="/dev/fd/63" inode=24867 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:27:38.480000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:27:38.487000 audit[3380]: AVC avc: denied { write } for pid=3380 comm="tee" name="fd" dev="proc" ino=25902 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:27:38.487000 audit[3380]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc926017e6 a2=241 a3=1b6 items=1 ppid=3319 pid=3380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.487000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 15 11:27:38.487000 audit: PATH item=0 name="/dev/fd/63" inode=24861 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:27:38.487000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit: BPF prog-id=142 op=LOAD Jul 15 11:27:38.608000 audit[3440]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe9091f4c0 a2=98 a3=1fffffffffffffff items=0 ppid=3324 pid=3440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.608000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:27:38.608000 audit: BPF prog-id=142 op=UNLOAD Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit: BPF prog-id=143 op=LOAD Jul 15 11:27:38.608000 audit[3440]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe9091f3a0 a2=94 a3=3 items=0 ppid=3324 pid=3440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.608000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:27:38.608000 audit: BPF prog-id=143 op=UNLOAD Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { bpf } for pid=3440 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit: BPF prog-id=144 op=LOAD Jul 15 11:27:38.608000 audit[3440]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe9091f3e0 a2=94 a3=7ffe9091f5c0 items=0 ppid=3324 pid=3440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.608000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:27:38.608000 audit: BPF prog-id=144 op=UNLOAD Jul 15 11:27:38.608000 audit[3440]: AVC avc: denied { perfmon } for pid=3440 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.608000 audit[3440]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffe9091f4b0 a2=50 a3=a000000085 items=0 ppid=3324 pid=3440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.608000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:27:38.614000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.614000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.614000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.614000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.614000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.614000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.614000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.614000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.614000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.614000 audit: BPF prog-id=145 op=LOAD Jul 15 11:27:38.614000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc77e52d80 a2=98 a3=3 items=0 ppid=3324 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.614000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:27:38.615000 audit: BPF prog-id=145 op=UNLOAD Jul 15 11:27:38.615000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.615000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.615000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.615000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.615000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.615000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.615000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.615000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.615000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.615000 audit: BPF prog-id=146 op=LOAD Jul 15 11:27:38.615000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc77e52b70 a2=94 a3=54428f items=0 ppid=3324 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.615000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:27:38.616000 audit: BPF prog-id=146 op=UNLOAD Jul 15 11:27:38.616000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.616000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.616000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.616000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.616000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.616000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.616000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.616000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.616000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.616000 audit: BPF prog-id=147 op=LOAD Jul 15 11:27:38.616000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc77e52ba0 a2=94 a3=2 items=0 ppid=3324 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.616000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:27:38.617000 audit: BPF prog-id=147 op=UNLOAD Jul 15 11:27:38.679677 env[1203]: time="2025-07-15T11:27:38.679627994Z" level=info msg="StopPodSandbox for \"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4\"" Jul 15 11:27:38.722000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.722000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.722000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.722000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.722000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.722000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.722000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.722000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.722000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.722000 audit: BPF prog-id=148 op=LOAD Jul 15 11:27:38.722000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc77e52a60 a2=94 a3=1 items=0 ppid=3324 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.722000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:27:38.723000 audit: BPF prog-id=148 op=UNLOAD Jul 15 11:27:38.723000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.723000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffc77e52b30 a2=50 a3=7ffc77e52c10 items=0 ppid=3324 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.723000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:27:38.730000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.730000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc77e52a70 a2=28 a3=0 items=0 ppid=3324 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.730000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:27:38.730000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.730000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc77e52aa0 a2=28 a3=0 items=0 ppid=3324 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.730000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc77e529b0 a2=28 a3=0 items=0 ppid=3324 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.731000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc77e52ac0 a2=28 a3=0 items=0 ppid=3324 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.731000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc77e52aa0 a2=28 a3=0 items=0 ppid=3324 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.731000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc77e52a90 a2=28 a3=0 items=0 ppid=3324 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.731000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc77e52ac0 a2=28 a3=0 items=0 ppid=3324 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.731000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc77e52aa0 a2=28 a3=0 items=0 ppid=3324 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.731000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc77e52ac0 a2=28 a3=0 items=0 ppid=3324 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.731000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc77e52a90 a2=28 a3=0 items=0 ppid=3324 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.731000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc77e52b00 a2=28 a3=0 items=0 ppid=3324 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.731000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc77e528b0 a2=50 a3=1 items=0 ppid=3324 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.731000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit: BPF prog-id=149 op=LOAD Jul 15 11:27:38.731000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc77e528b0 a2=94 a3=5 items=0 ppid=3324 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.731000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:27:38.731000 audit: BPF prog-id=149 op=UNLOAD Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc77e52960 a2=50 a3=1 items=0 ppid=3324 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.731000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffc77e52a80 a2=4 a3=38 items=0 ppid=3324 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.731000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { confidentiality } for pid=3441 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:27:38.731000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc77e52ad0 a2=94 a3=6 items=0 ppid=3324 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.731000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.731000 audit[3441]: AVC avc: denied { confidentiality } for pid=3441 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:27:38.731000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc77e52280 a2=94 a3=88 items=0 ppid=3324 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.731000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:27:38.732000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.732000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.732000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.732000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.732000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.732000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.732000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.732000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.732000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.732000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.732000 audit[3441]: AVC avc: denied { confidentiality } for pid=3441 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:27:38.732000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc77e52280 a2=94 a3=88 items=0 ppid=3324 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.732000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit: BPF prog-id=150 op=LOAD Jul 15 11:27:38.738000 audit[3473]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcf86dfa00 a2=98 a3=1999999999999999 items=0 ppid=3324 pid=3473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.738000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:27:38.738000 audit: BPF prog-id=150 op=UNLOAD Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit: BPF prog-id=151 op=LOAD Jul 15 11:27:38.738000 audit[3473]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcf86df8e0 a2=94 a3=ffff items=0 ppid=3324 pid=3473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.738000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:27:38.738000 audit: BPF prog-id=151 op=UNLOAD Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.738000 audit: BPF prog-id=152 op=LOAD Jul 15 11:27:38.738000 audit[3473]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcf86df920 a2=94 a3=7ffcf86dfb00 items=0 ppid=3324 pid=3473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.738000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:27:38.738000 audit: BPF prog-id=152 op=UNLOAD Jul 15 11:27:38.784620 systemd-networkd[1025]: vxlan.calico: Link UP Jul 15 11:27:38.784628 systemd-networkd[1025]: vxlan.calico: Gained carrier Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit: BPF prog-id=153 op=LOAD Jul 15 11:27:38.799000 audit[3502]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff139c9b40 a2=98 a3=0 items=0 ppid=3324 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.799000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:27:38.799000 audit: BPF prog-id=153 op=UNLOAD Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit: BPF prog-id=154 op=LOAD Jul 15 11:27:38.799000 audit[3502]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff139c9950 a2=94 a3=54428f items=0 ppid=3324 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.799000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:27:38.799000 audit: BPF prog-id=154 op=UNLOAD Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit: BPF prog-id=155 op=LOAD Jul 15 11:27:38.799000 audit[3502]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff139c9980 a2=94 a3=2 items=0 ppid=3324 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.799000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:27:38.799000 audit: BPF prog-id=155 op=UNLOAD Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff139c9850 a2=28 a3=0 items=0 ppid=3324 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.799000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff139c9880 a2=28 a3=0 items=0 ppid=3324 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.799000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff139c9790 a2=28 a3=0 items=0 ppid=3324 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.799000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff139c98a0 a2=28 a3=0 items=0 ppid=3324 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.799000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff139c9880 a2=28 a3=0 items=0 ppid=3324 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.799000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff139c9870 a2=28 a3=0 items=0 ppid=3324 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.799000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff139c98a0 a2=28 a3=0 items=0 ppid=3324 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.799000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff139c9880 a2=28 a3=0 items=0 ppid=3324 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.799000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff139c98a0 a2=28 a3=0 items=0 ppid=3324 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.799000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff139c9870 a2=28 a3=0 items=0 ppid=3324 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.799000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff139c98e0 a2=28 a3=0 items=0 ppid=3324 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.799000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.799000 audit: BPF prog-id=156 op=LOAD Jul 15 11:27:38.799000 audit[3502]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff139c9750 a2=94 a3=0 items=0 ppid=3324 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.799000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:27:38.801000 audit: BPF prog-id=156 op=UNLOAD Jul 15 11:27:38.801000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.801000 audit[3502]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7fff139c9740 a2=50 a3=2800 items=0 ppid=3324 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.801000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:27:38.802000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.802000 audit[3502]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7fff139c9740 a2=50 a3=2800 items=0 ppid=3324 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.802000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:27:38.802000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.802000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.802000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.802000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.802000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.802000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.802000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.802000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.802000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.802000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.802000 audit: BPF prog-id=157 op=LOAD Jul 15 11:27:38.802000 audit[3502]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff139c8f60 a2=94 a3=2 items=0 ppid=3324 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.802000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:27:38.802000 audit: BPF prog-id=157 op=UNLOAD Jul 15 11:27:38.802000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.802000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.802000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.802000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.802000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.802000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.802000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.802000 audit[3502]: AVC avc: denied { perfmon } for pid=3502 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.802000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.802000 audit[3502]: AVC avc: denied { bpf } for pid=3502 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.802000 audit: BPF prog-id=158 op=LOAD Jul 15 11:27:38.802000 audit[3502]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff139c9060 a2=94 a3=30 items=0 ppid=3324 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.802000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:27:38.804000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.804000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.804000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.804000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.804000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.804000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.804000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.804000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.804000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.804000 audit: BPF prog-id=159 op=LOAD Jul 15 11:27:38.804000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdc2dde690 a2=98 a3=0 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.804000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.804000 audit: BPF prog-id=159 op=UNLOAD Jul 15 11:27:38.805000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.805000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.805000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.805000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.805000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.805000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.805000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.805000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.805000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.805000 audit: BPF prog-id=160 op=LOAD Jul 15 11:27:38.805000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdc2dde480 a2=94 a3=54428f items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.805000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.805000 audit: BPF prog-id=160 op=UNLOAD Jul 15 11:27:38.805000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.805000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.805000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.805000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.805000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.805000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.805000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.805000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.805000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.805000 audit: BPF prog-id=161 op=LOAD Jul 15 11:27:38.805000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdc2dde4b0 a2=94 a3=2 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.805000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.805000 audit: BPF prog-id=161 op=UNLOAD Jul 15 11:27:38.911000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.911000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.911000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.911000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.911000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.911000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.911000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.911000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.911000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.911000 audit: BPF prog-id=162 op=LOAD Jul 15 11:27:38.911000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdc2dde370 a2=94 a3=1 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.911000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.912000 audit: BPF prog-id=162 op=UNLOAD Jul 15 11:27:38.912000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.912000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffdc2dde440 a2=50 a3=7ffdc2dde520 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.912000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.926000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.926000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdc2dde380 a2=28 a3=0 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.926000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.926000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.926000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdc2dde3b0 a2=28 a3=0 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.926000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.927000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.927000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdc2dde2c0 a2=28 a3=0 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.927000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.927000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.927000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdc2dde3d0 a2=28 a3=0 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.927000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.927000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.927000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdc2dde3b0 a2=28 a3=0 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.927000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.928000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.928000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdc2dde3a0 a2=28 a3=0 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.928000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.928000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.928000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdc2dde3d0 a2=28 a3=0 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.928000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.928000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.928000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdc2dde3b0 a2=28 a3=0 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.928000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.928000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.928000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdc2dde3d0 a2=28 a3=0 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.928000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.928000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.928000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdc2dde3a0 a2=28 a3=0 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.928000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.928000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.928000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdc2dde410 a2=28 a3=0 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.928000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.929000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.929000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffdc2dde1c0 a2=50 a3=1 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.929000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.933588 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali4aed63d77c5: link becomes ready Jul 15 11:27:38.929000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.929000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.929000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.929000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.929000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.929000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.929000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.929000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.929000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.929000 audit: BPF prog-id=163 op=LOAD Jul 15 11:27:38.929000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffdc2dde1c0 a2=94 a3=5 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.929000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.930000 audit: BPF prog-id=163 op=UNLOAD Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffdc2dde270 a2=50 a3=1 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.930000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffdc2dde390 a2=4 a3=38 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.930000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { confidentiality } for pid=3506 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:27:38.930000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdc2dde3e0 a2=94 a3=6 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.930000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { confidentiality } for pid=3506 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:27:38.930000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdc2dddb90 a2=94 a3=88 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.930000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { perfmon } for pid=3506 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.930000 audit[3506]: AVC avc: denied { confidentiality } for pid=3506 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:27:38.930000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdc2dddb90 a2=94 a3=88 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.930000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.931000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.931000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffdc2ddf5c0 a2=10 a3=208 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.931000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.931000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.931000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffdc2ddf460 a2=10 a3=3 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.931000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.931000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.931000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffdc2ddf400 a2=10 a3=3 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.931000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.931000 audit[3506]: AVC avc: denied { bpf } for pid=3506 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:38.931000 audit[3506]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffdc2ddf400 a2=10 a3=7 items=0 ppid=3324 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:38.931000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:27:38.930590 systemd[1]: run-containerd-runc-k8s.io-5ae75d99f201bcb68221ba6a686308db11219ef72442273e2c0634e7c1f34d60-runc.f857uk.mount: Deactivated successfully. Jul 15 11:27:38.931251 systemd-networkd[1025]: cali4aed63d77c5: Link UP Jul 15 11:27:38.932765 systemd-networkd[1025]: cali4aed63d77c5: Gained carrier Jul 15 11:27:38.939906 env[1203]: 2025-07-15 11:27:38.829 [INFO][3463] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" Jul 15 11:27:38.939906 env[1203]: 2025-07-15 11:27:38.830 [INFO][3463] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" iface="eth0" netns="/var/run/netns/cni-6c29bd34-378f-05fd-a7ca-ba92f5b41972" Jul 15 11:27:38.939906 env[1203]: 2025-07-15 11:27:38.830 [INFO][3463] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" iface="eth0" netns="/var/run/netns/cni-6c29bd34-378f-05fd-a7ca-ba92f5b41972" Jul 15 11:27:38.939906 env[1203]: 2025-07-15 11:27:38.831 [INFO][3463] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" iface="eth0" netns="/var/run/netns/cni-6c29bd34-378f-05fd-a7ca-ba92f5b41972" Jul 15 11:27:38.939906 env[1203]: 2025-07-15 11:27:38.831 [INFO][3463] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" Jul 15 11:27:38.939906 env[1203]: 2025-07-15 11:27:38.831 [INFO][3463] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" Jul 15 11:27:38.939906 env[1203]: 2025-07-15 11:27:38.852 [INFO][3513] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" HandleID="k8s-pod-network.e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" Workload="localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0" Jul 15 11:27:38.939906 env[1203]: 2025-07-15 11:27:38.852 [INFO][3513] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:38.939906 env[1203]: 2025-07-15 11:27:38.913 [INFO][3513] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:38.939906 env[1203]: 2025-07-15 11:27:38.928 [WARNING][3513] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" HandleID="k8s-pod-network.e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" Workload="localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0" Jul 15 11:27:38.939906 env[1203]: 2025-07-15 11:27:38.928 [INFO][3513] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" HandleID="k8s-pod-network.e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" Workload="localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0" Jul 15 11:27:38.939906 env[1203]: 2025-07-15 11:27:38.933 [INFO][3513] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:38.939906 env[1203]: 2025-07-15 11:27:38.936 [INFO][3463] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" Jul 15 11:27:38.941941 systemd[1]: run-netns-cni\x2d6c29bd34\x2d378f\x2d05fd\x2da7ca\x2dba92f5b41972.mount: Deactivated successfully. Jul 15 11:27:38.940000 audit: BPF prog-id=158 op=UNLOAD Jul 15 11:27:38.943045 env[1203]: time="2025-07-15T11:27:38.942994727Z" level=info msg="TearDown network for sandbox \"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4\" successfully" Jul 15 11:27:38.943270 env[1203]: time="2025-07-15T11:27:38.943244345Z" level=info msg="StopPodSandbox for \"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4\" returns successfully" Jul 15 11:27:38.943981 env[1203]: time="2025-07-15T11:27:38.943958064Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7bc956794c-rnlsq,Uid:951899ed-3100-4dfb-b01a-631cfe69df36,Namespace:calico-apiserver,Attempt:1,}" Jul 15 11:27:38.952818 env[1203]: 2025-07-15 11:27:38.631 [INFO][3423] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--67f5596b44--57cml-eth0 whisker-67f5596b44- calico-system d9d1ee0e-979b-499e-8b4d-ce424ab7c817 957 0 2025-07-15 11:27:37 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:67f5596b44 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-67f5596b44-57cml eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali4aed63d77c5 [] [] }} ContainerID="2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c" Namespace="calico-system" Pod="whisker-67f5596b44-57cml" WorkloadEndpoint="localhost-k8s-whisker--67f5596b44--57cml-" Jul 15 11:27:38.952818 env[1203]: 2025-07-15 11:27:38.631 [INFO][3423] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c" Namespace="calico-system" Pod="whisker-67f5596b44-57cml" WorkloadEndpoint="localhost-k8s-whisker--67f5596b44--57cml-eth0" Jul 15 11:27:38.952818 env[1203]: 2025-07-15 11:27:38.652 [INFO][3445] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c" HandleID="k8s-pod-network.2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c" Workload="localhost-k8s-whisker--67f5596b44--57cml-eth0" Jul 15 11:27:38.952818 env[1203]: 2025-07-15 11:27:38.652 [INFO][3445] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c" HandleID="k8s-pod-network.2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c" Workload="localhost-k8s-whisker--67f5596b44--57cml-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0001b0e30), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-67f5596b44-57cml", "timestamp":"2025-07-15 11:27:38.652114455 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:27:38.952818 env[1203]: 2025-07-15 11:27:38.652 [INFO][3445] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:38.952818 env[1203]: 2025-07-15 11:27:38.652 [INFO][3445] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:38.952818 env[1203]: 2025-07-15 11:27:38.652 [INFO][3445] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:27:38.952818 env[1203]: 2025-07-15 11:27:38.666 [INFO][3445] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c" host="localhost" Jul 15 11:27:38.952818 env[1203]: 2025-07-15 11:27:38.804 [INFO][3445] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:27:38.952818 env[1203]: 2025-07-15 11:27:38.829 [INFO][3445] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:27:38.952818 env[1203]: 2025-07-15 11:27:38.831 [INFO][3445] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:27:38.952818 env[1203]: 2025-07-15 11:27:38.834 [INFO][3445] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:27:38.952818 env[1203]: 2025-07-15 11:27:38.834 [INFO][3445] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c" host="localhost" Jul 15 11:27:38.952818 env[1203]: 2025-07-15 11:27:38.835 [INFO][3445] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c Jul 15 11:27:38.952818 env[1203]: 2025-07-15 11:27:38.883 [INFO][3445] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c" host="localhost" Jul 15 11:27:38.952818 env[1203]: 2025-07-15 11:27:38.911 [INFO][3445] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c" host="localhost" Jul 15 11:27:38.952818 env[1203]: 2025-07-15 11:27:38.911 [INFO][3445] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c" host="localhost" Jul 15 11:27:38.952818 env[1203]: 2025-07-15 11:27:38.911 [INFO][3445] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:38.952818 env[1203]: 2025-07-15 11:27:38.911 [INFO][3445] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c" HandleID="k8s-pod-network.2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c" Workload="localhost-k8s-whisker--67f5596b44--57cml-eth0" Jul 15 11:27:38.953422 env[1203]: 2025-07-15 11:27:38.912 [INFO][3423] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c" Namespace="calico-system" Pod="whisker-67f5596b44-57cml" WorkloadEndpoint="localhost-k8s-whisker--67f5596b44--57cml-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--67f5596b44--57cml-eth0", GenerateName:"whisker-67f5596b44-", Namespace:"calico-system", SelfLink:"", UID:"d9d1ee0e-979b-499e-8b4d-ce424ab7c817", ResourceVersion:"957", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"67f5596b44", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-67f5596b44-57cml", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali4aed63d77c5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:38.953422 env[1203]: 2025-07-15 11:27:38.913 [INFO][3423] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c" Namespace="calico-system" Pod="whisker-67f5596b44-57cml" WorkloadEndpoint="localhost-k8s-whisker--67f5596b44--57cml-eth0" Jul 15 11:27:38.953422 env[1203]: 2025-07-15 11:27:38.913 [INFO][3423] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali4aed63d77c5 ContainerID="2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c" Namespace="calico-system" Pod="whisker-67f5596b44-57cml" WorkloadEndpoint="localhost-k8s-whisker--67f5596b44--57cml-eth0" Jul 15 11:27:38.953422 env[1203]: 2025-07-15 11:27:38.933 [INFO][3423] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c" Namespace="calico-system" Pod="whisker-67f5596b44-57cml" WorkloadEndpoint="localhost-k8s-whisker--67f5596b44--57cml-eth0" Jul 15 11:27:38.953422 env[1203]: 2025-07-15 11:27:38.933 [INFO][3423] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c" Namespace="calico-system" Pod="whisker-67f5596b44-57cml" WorkloadEndpoint="localhost-k8s-whisker--67f5596b44--57cml-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--67f5596b44--57cml-eth0", GenerateName:"whisker-67f5596b44-", Namespace:"calico-system", SelfLink:"", UID:"d9d1ee0e-979b-499e-8b4d-ce424ab7c817", ResourceVersion:"957", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"67f5596b44", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c", Pod:"whisker-67f5596b44-57cml", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali4aed63d77c5", MAC:"8a:6e:0b:13:04:4b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:38.953422 env[1203]: 2025-07-15 11:27:38.950 [INFO][3423] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c" Namespace="calico-system" Pod="whisker-67f5596b44-57cml" WorkloadEndpoint="localhost-k8s-whisker--67f5596b44--57cml-eth0" Jul 15 11:27:38.971403 env[1203]: time="2025-07-15T11:27:38.971310682Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:27:38.971403 env[1203]: time="2025-07-15T11:27:38.971402484Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:27:38.971612 env[1203]: time="2025-07-15T11:27:38.971424496Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:27:38.971677 env[1203]: time="2025-07-15T11:27:38.971600896Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c pid=3570 runtime=io.containerd.runc.v2 Jul 15 11:27:38.993821 systemd[1]: Started cri-containerd-2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c.scope. Jul 15 11:27:39.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.008000 audit: BPF prog-id=164 op=LOAD Jul 15 11:27:39.009000 audit[3589]: AVC avc: denied { bpf } for pid=3589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.009000 audit[3589]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3570 pid=3589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:39.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264383339386432653537353938373365336635353739623838653638 Jul 15 11:27:39.009000 audit[3589]: AVC avc: denied { perfmon } for pid=3589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.009000 audit[3589]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3570 pid=3589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:39.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264383339386432653537353938373365336635353739623838653638 Jul 15 11:27:39.009000 audit[3589]: AVC avc: denied { bpf } for pid=3589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.009000 audit[3589]: AVC avc: denied { bpf } for pid=3589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.009000 audit[3589]: AVC avc: denied { bpf } for pid=3589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.009000 audit[3589]: AVC avc: denied { perfmon } for pid=3589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.009000 audit[3589]: AVC avc: denied { perfmon } for pid=3589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.009000 audit[3589]: AVC avc: denied { perfmon } for pid=3589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.009000 audit[3589]: AVC avc: denied { perfmon } for pid=3589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.009000 audit[3589]: AVC avc: denied { perfmon } for pid=3589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.009000 audit[3589]: AVC avc: denied { bpf } for pid=3589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.009000 audit[3589]: AVC avc: denied { bpf } for pid=3589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.009000 audit: BPF prog-id=165 op=LOAD Jul 15 11:27:39.009000 audit[3589]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0002a3040 items=0 ppid=3570 pid=3589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:39.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264383339386432653537353938373365336635353739623838653638 Jul 15 11:27:39.010000 audit[3589]: AVC avc: denied { bpf } for pid=3589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.010000 audit[3589]: AVC avc: denied { bpf } for pid=3589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.010000 audit[3589]: AVC avc: denied { perfmon } for pid=3589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.010000 audit[3589]: AVC avc: denied { perfmon } for pid=3589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.010000 audit[3589]: AVC avc: denied { perfmon } for pid=3589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.010000 audit[3589]: AVC avc: denied { perfmon } for pid=3589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.010000 audit[3589]: AVC avc: denied { perfmon } for pid=3589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.010000 audit[3589]: AVC avc: denied { bpf } for pid=3589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.010000 audit[3589]: AVC avc: denied { bpf } for pid=3589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.010000 audit: BPF prog-id=166 op=LOAD Jul 15 11:27:39.010000 audit[3589]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0002a3088 items=0 ppid=3570 pid=3589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:39.010000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264383339386432653537353938373365336635353739623838653638 Jul 15 11:27:39.010000 audit: BPF prog-id=166 op=UNLOAD Jul 15 11:27:39.011000 audit: BPF prog-id=165 op=UNLOAD Jul 15 11:27:39.011000 audit[3589]: AVC avc: denied { bpf } for pid=3589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.011000 audit[3589]: AVC avc: denied { bpf } for pid=3589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.011000 audit[3589]: AVC avc: denied { bpf } for pid=3589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.011000 audit[3589]: AVC avc: denied { perfmon } for pid=3589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.011000 audit[3589]: AVC avc: denied { perfmon } for pid=3589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.011000 audit[3589]: AVC avc: denied { perfmon } for pid=3589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.011000 audit[3589]: AVC avc: denied { perfmon } for pid=3589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.011000 audit[3589]: AVC avc: denied { perfmon } for pid=3589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.011000 audit[3589]: AVC avc: denied { bpf } for pid=3589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.011000 audit[3589]: AVC avc: denied { bpf } for pid=3589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.011000 audit: BPF prog-id=167 op=LOAD Jul 15 11:27:39.011000 audit[3589]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0002a3498 items=0 ppid=3570 pid=3589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:39.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264383339386432653537353938373365336635353739623838653638 Jul 15 11:27:39.013347 systemd-resolved[1141]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:27:39.038808 env[1203]: time="2025-07-15T11:27:39.038742115Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-67f5596b44-57cml,Uid:d9d1ee0e-979b-499e-8b4d-ce424ab7c817,Namespace:calico-system,Attempt:0,} returns sandbox id \"2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c\"" Jul 15 11:27:39.040483 env[1203]: time="2025-07-15T11:27:39.040456842Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 15 11:27:39.044000 audit[3637]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=3637 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:27:39.044000 audit[3637]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffccf9ef760 a2=0 a3=7ffccf9ef74c items=0 ppid=3324 pid=3637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:39.044000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:27:39.051000 audit[3636]: NETFILTER_CFG table=nat:102 family=2 entries=15 op=nft_register_chain pid=3636 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:27:39.051000 audit[3636]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7fff67114560 a2=0 a3=7fff6711454c items=0 ppid=3324 pid=3636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:39.051000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:27:39.053000 audit[3640]: NETFILTER_CFG table=filter:103 family=2 entries=39 op=nft_register_chain pid=3640 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:27:39.053000 audit[3640]: SYSCALL arch=c000003e syscall=46 success=yes exit=18968 a0=3 a1=7ffe241d2720 a2=0 a3=7ffe241d270c items=0 ppid=3324 pid=3640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:39.053000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:27:39.055000 audit[3635]: NETFILTER_CFG table=raw:104 family=2 entries=21 op=nft_register_chain pid=3635 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:27:39.055000 audit[3635]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffea30ef0b0 a2=0 a3=7ffea30ef09c items=0 ppid=3324 pid=3635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:39.055000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:27:39.081757 systemd-networkd[1025]: califcd7701b7a1: Link UP Jul 15 11:27:39.083524 systemd-networkd[1025]: califcd7701b7a1: Gained carrier Jul 15 11:27:39.084092 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): califcd7701b7a1: link becomes ready Jul 15 11:27:39.074000 audit[3646]: NETFILTER_CFG table=filter:105 family=2 entries=59 op=nft_register_chain pid=3646 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:27:39.074000 audit[3646]: SYSCALL arch=c000003e syscall=46 success=yes exit=35860 a0=3 a1=7ffcfdc44640 a2=0 a3=7ffcfdc4462c items=0 ppid=3324 pid=3646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:39.074000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:27:39.096397 env[1203]: 2025-07-15 11:27:39.002 [INFO][3558] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0 calico-apiserver-7bc956794c- calico-apiserver 951899ed-3100-4dfb-b01a-631cfe69df36 969 0 2025-07-15 11:27:10 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7bc956794c projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-7bc956794c-rnlsq eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] califcd7701b7a1 [] [] }} ContainerID="9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e" Namespace="calico-apiserver" Pod="calico-apiserver-7bc956794c-rnlsq" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bc956794c--rnlsq-" Jul 15 11:27:39.096397 env[1203]: 2025-07-15 11:27:39.002 [INFO][3558] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e" Namespace="calico-apiserver" Pod="calico-apiserver-7bc956794c-rnlsq" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0" Jul 15 11:27:39.096397 env[1203]: 2025-07-15 11:27:39.044 [INFO][3614] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e" HandleID="k8s-pod-network.9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e" Workload="localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0" Jul 15 11:27:39.096397 env[1203]: 2025-07-15 11:27:39.044 [INFO][3614] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e" HandleID="k8s-pod-network.9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e" Workload="localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000122490), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-7bc956794c-rnlsq", "timestamp":"2025-07-15 11:27:39.044251592 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:27:39.096397 env[1203]: 2025-07-15 11:27:39.044 [INFO][3614] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:39.096397 env[1203]: 2025-07-15 11:27:39.044 [INFO][3614] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:39.096397 env[1203]: 2025-07-15 11:27:39.044 [INFO][3614] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:27:39.096397 env[1203]: 2025-07-15 11:27:39.051 [INFO][3614] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e" host="localhost" Jul 15 11:27:39.096397 env[1203]: 2025-07-15 11:27:39.055 [INFO][3614] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:27:39.096397 env[1203]: 2025-07-15 11:27:39.059 [INFO][3614] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:27:39.096397 env[1203]: 2025-07-15 11:27:39.061 [INFO][3614] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:27:39.096397 env[1203]: 2025-07-15 11:27:39.063 [INFO][3614] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:27:39.096397 env[1203]: 2025-07-15 11:27:39.063 [INFO][3614] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e" host="localhost" Jul 15 11:27:39.096397 env[1203]: 2025-07-15 11:27:39.065 [INFO][3614] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e Jul 15 11:27:39.096397 env[1203]: 2025-07-15 11:27:39.073 [INFO][3614] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e" host="localhost" Jul 15 11:27:39.096397 env[1203]: 2025-07-15 11:27:39.077 [INFO][3614] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e" host="localhost" Jul 15 11:27:39.096397 env[1203]: 2025-07-15 11:27:39.077 [INFO][3614] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e" host="localhost" Jul 15 11:27:39.096397 env[1203]: 2025-07-15 11:27:39.077 [INFO][3614] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:39.096397 env[1203]: 2025-07-15 11:27:39.077 [INFO][3614] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e" HandleID="k8s-pod-network.9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e" Workload="localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0" Jul 15 11:27:39.097237 env[1203]: 2025-07-15 11:27:39.079 [INFO][3558] cni-plugin/k8s.go 418: Populated endpoint ContainerID="9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e" Namespace="calico-apiserver" Pod="calico-apiserver-7bc956794c-rnlsq" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0", GenerateName:"calico-apiserver-7bc956794c-", Namespace:"calico-apiserver", SelfLink:"", UID:"951899ed-3100-4dfb-b01a-631cfe69df36", ResourceVersion:"969", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7bc956794c", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-7bc956794c-rnlsq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"califcd7701b7a1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:39.097237 env[1203]: 2025-07-15 11:27:39.079 [INFO][3558] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e" Namespace="calico-apiserver" Pod="calico-apiserver-7bc956794c-rnlsq" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0" Jul 15 11:27:39.097237 env[1203]: 2025-07-15 11:27:39.080 [INFO][3558] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to califcd7701b7a1 ContainerID="9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e" Namespace="calico-apiserver" Pod="calico-apiserver-7bc956794c-rnlsq" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0" Jul 15 11:27:39.097237 env[1203]: 2025-07-15 11:27:39.083 [INFO][3558] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e" Namespace="calico-apiserver" Pod="calico-apiserver-7bc956794c-rnlsq" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0" Jul 15 11:27:39.097237 env[1203]: 2025-07-15 11:27:39.083 [INFO][3558] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e" Namespace="calico-apiserver" Pod="calico-apiserver-7bc956794c-rnlsq" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0", GenerateName:"calico-apiserver-7bc956794c-", Namespace:"calico-apiserver", SelfLink:"", UID:"951899ed-3100-4dfb-b01a-631cfe69df36", ResourceVersion:"969", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7bc956794c", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e", Pod:"calico-apiserver-7bc956794c-rnlsq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"califcd7701b7a1", MAC:"a2:f6:be:c5:b3:c8", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:39.097237 env[1203]: 2025-07-15 11:27:39.094 [INFO][3558] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e" Namespace="calico-apiserver" Pod="calico-apiserver-7bc956794c-rnlsq" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0" Jul 15 11:27:39.108438 env[1203]: time="2025-07-15T11:27:39.108380886Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:27:39.108629 env[1203]: time="2025-07-15T11:27:39.108606540Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:27:39.108735 env[1203]: time="2025-07-15T11:27:39.108709372Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:27:39.108996 env[1203]: time="2025-07-15T11:27:39.108946097Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e pid=3667 runtime=io.containerd.runc.v2 Jul 15 11:27:39.108000 audit[3672]: NETFILTER_CFG table=filter:106 family=2 entries=50 op=nft_register_chain pid=3672 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:27:39.108000 audit[3672]: SYSCALL arch=c000003e syscall=46 success=yes exit=28208 a0=3 a1=7ffc80541490 a2=0 a3=7ffc8054147c items=0 ppid=3324 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:39.108000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:27:39.123265 systemd[1]: Started cri-containerd-9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e.scope. Jul 15 11:27:39.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.132000 audit: BPF prog-id=168 op=LOAD Jul 15 11:27:39.132000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.132000 audit[3678]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3667 pid=3678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:39.132000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935333830373233303663373865663063333533613765373833333935 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3667 pid=3678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:39.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935333830373233303663373865663063333533613765373833333935 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit: BPF prog-id=169 op=LOAD Jul 15 11:27:39.133000 audit[3678]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0002223b0 items=0 ppid=3667 pid=3678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:39.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935333830373233303663373865663063333533613765373833333935 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit: BPF prog-id=170 op=LOAD Jul 15 11:27:39.133000 audit[3678]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0002223f8 items=0 ppid=3667 pid=3678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:39.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935333830373233303663373865663063333533613765373833333935 Jul 15 11:27:39.133000 audit: BPF prog-id=170 op=UNLOAD Jul 15 11:27:39.133000 audit: BPF prog-id=169 op=UNLOAD Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { perfmon } for pid=3678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit[3678]: AVC avc: denied { bpf } for pid=3678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.133000 audit: BPF prog-id=171 op=LOAD Jul 15 11:27:39.133000 audit[3678]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000222808 items=0 ppid=3667 pid=3678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:39.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935333830373233303663373865663063333533613765373833333935 Jul 15 11:27:39.135180 systemd-resolved[1141]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:27:39.154529 env[1203]: time="2025-07-15T11:27:39.154497711Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7bc956794c-rnlsq,Uid:951899ed-3100-4dfb-b01a-631cfe69df36,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e\"" Jul 15 11:27:39.680496 kubelet[1942]: I0715 11:27:39.680446 1942 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="102126cd-aed1-4142-be75-08afc0aaee0e" path="/var/lib/kubelet/pods/102126cd-aed1-4142-be75-08afc0aaee0e/volumes" Jul 15 11:27:39.681326 env[1203]: time="2025-07-15T11:27:39.681268074Z" level=info msg="StopPodSandbox for \"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651\"" Jul 15 11:27:39.681689 env[1203]: time="2025-07-15T11:27:39.681617951Z" level=info msg="StopPodSandbox for \"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde\"" Jul 15 11:27:39.681725 env[1203]: time="2025-07-15T11:27:39.681664198Z" level=info msg="StopPodSandbox for \"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c\"" Jul 15 11:27:39.768230 env[1203]: 2025-07-15 11:27:39.734 [INFO][3738] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" Jul 15 11:27:39.768230 env[1203]: 2025-07-15 11:27:39.734 [INFO][3738] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" iface="eth0" netns="/var/run/netns/cni-f123aef6-8e27-8752-5d39-ecf17611342e" Jul 15 11:27:39.768230 env[1203]: 2025-07-15 11:27:39.735 [INFO][3738] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" iface="eth0" netns="/var/run/netns/cni-f123aef6-8e27-8752-5d39-ecf17611342e" Jul 15 11:27:39.768230 env[1203]: 2025-07-15 11:27:39.735 [INFO][3738] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" iface="eth0" netns="/var/run/netns/cni-f123aef6-8e27-8752-5d39-ecf17611342e" Jul 15 11:27:39.768230 env[1203]: 2025-07-15 11:27:39.735 [INFO][3738] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" Jul 15 11:27:39.768230 env[1203]: 2025-07-15 11:27:39.735 [INFO][3738] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" Jul 15 11:27:39.768230 env[1203]: 2025-07-15 11:27:39.751 [INFO][3773] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" HandleID="k8s-pod-network.7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" Workload="localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0" Jul 15 11:27:39.768230 env[1203]: 2025-07-15 11:27:39.751 [INFO][3773] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:39.768230 env[1203]: 2025-07-15 11:27:39.751 [INFO][3773] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:39.768230 env[1203]: 2025-07-15 11:27:39.757 [WARNING][3773] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" HandleID="k8s-pod-network.7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" Workload="localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0" Jul 15 11:27:39.768230 env[1203]: 2025-07-15 11:27:39.757 [INFO][3773] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" HandleID="k8s-pod-network.7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" Workload="localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0" Jul 15 11:27:39.768230 env[1203]: 2025-07-15 11:27:39.759 [INFO][3773] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:39.768230 env[1203]: 2025-07-15 11:27:39.766 [INFO][3738] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" Jul 15 11:27:39.769357 env[1203]: time="2025-07-15T11:27:39.769324446Z" level=info msg="TearDown network for sandbox \"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c\" successfully" Jul 15 11:27:39.769495 env[1203]: time="2025-07-15T11:27:39.769449620Z" level=info msg="StopPodSandbox for \"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c\" returns successfully" Jul 15 11:27:39.770486 env[1203]: time="2025-07-15T11:27:39.770465697Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7bc956794c-hwnqw,Uid:03d68f24-8acc-4aa5-8c84-e46d07f5de09,Namespace:calico-apiserver,Attempt:1,}" Jul 15 11:27:39.773011 systemd[1]: run-netns-cni\x2df123aef6\x2d8e27\x2d8752\x2d5d39\x2decf17611342e.mount: Deactivated successfully. Jul 15 11:27:39.775393 env[1203]: 2025-07-15 11:27:39.728 [INFO][3736] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" Jul 15 11:27:39.775393 env[1203]: 2025-07-15 11:27:39.729 [INFO][3736] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" iface="eth0" netns="/var/run/netns/cni-638c3039-0291-0862-8ee8-3c664fcb4d66" Jul 15 11:27:39.775393 env[1203]: 2025-07-15 11:27:39.729 [INFO][3736] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" iface="eth0" netns="/var/run/netns/cni-638c3039-0291-0862-8ee8-3c664fcb4d66" Jul 15 11:27:39.775393 env[1203]: 2025-07-15 11:27:39.730 [INFO][3736] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" iface="eth0" netns="/var/run/netns/cni-638c3039-0291-0862-8ee8-3c664fcb4d66" Jul 15 11:27:39.775393 env[1203]: 2025-07-15 11:27:39.730 [INFO][3736] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" Jul 15 11:27:39.775393 env[1203]: 2025-07-15 11:27:39.730 [INFO][3736] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" Jul 15 11:27:39.775393 env[1203]: 2025-07-15 11:27:39.764 [INFO][3763] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" HandleID="k8s-pod-network.abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" Workload="localhost-k8s-csi--node--driver--tnbnz-eth0" Jul 15 11:27:39.775393 env[1203]: 2025-07-15 11:27:39.764 [INFO][3763] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:39.775393 env[1203]: 2025-07-15 11:27:39.764 [INFO][3763] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:39.775393 env[1203]: 2025-07-15 11:27:39.769 [WARNING][3763] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" HandleID="k8s-pod-network.abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" Workload="localhost-k8s-csi--node--driver--tnbnz-eth0" Jul 15 11:27:39.775393 env[1203]: 2025-07-15 11:27:39.769 [INFO][3763] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" HandleID="k8s-pod-network.abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" Workload="localhost-k8s-csi--node--driver--tnbnz-eth0" Jul 15 11:27:39.775393 env[1203]: 2025-07-15 11:27:39.770 [INFO][3763] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:39.775393 env[1203]: 2025-07-15 11:27:39.773 [INFO][3736] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" Jul 15 11:27:39.777812 systemd[1]: run-netns-cni\x2d638c3039\x2d0291\x2d0862\x2d8ee8\x2d3c664fcb4d66.mount: Deactivated successfully. Jul 15 11:27:39.780221 env[1203]: time="2025-07-15T11:27:39.780172521Z" level=info msg="TearDown network for sandbox \"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651\" successfully" Jul 15 11:27:39.780221 env[1203]: time="2025-07-15T11:27:39.780206915Z" level=info msg="StopPodSandbox for \"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651\" returns successfully" Jul 15 11:27:39.780899 env[1203]: time="2025-07-15T11:27:39.780850784Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-tnbnz,Uid:b084be4c-45cb-4d18-beeb-0bfdfb2cbea5,Namespace:calico-system,Attempt:1,}" Jul 15 11:27:39.782286 env[1203]: 2025-07-15 11:27:39.723 [INFO][3737] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" Jul 15 11:27:39.782286 env[1203]: 2025-07-15 11:27:39.723 [INFO][3737] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" iface="eth0" netns="/var/run/netns/cni-4eda557e-28ec-10df-52c0-9f38d0a9358a" Jul 15 11:27:39.782286 env[1203]: 2025-07-15 11:27:39.723 [INFO][3737] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" iface="eth0" netns="/var/run/netns/cni-4eda557e-28ec-10df-52c0-9f38d0a9358a" Jul 15 11:27:39.782286 env[1203]: 2025-07-15 11:27:39.723 [INFO][3737] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" iface="eth0" netns="/var/run/netns/cni-4eda557e-28ec-10df-52c0-9f38d0a9358a" Jul 15 11:27:39.782286 env[1203]: 2025-07-15 11:27:39.723 [INFO][3737] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" Jul 15 11:27:39.782286 env[1203]: 2025-07-15 11:27:39.723 [INFO][3737] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" Jul 15 11:27:39.782286 env[1203]: 2025-07-15 11:27:39.771 [INFO][3760] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" HandleID="k8s-pod-network.0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" Workload="localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0" Jul 15 11:27:39.782286 env[1203]: 2025-07-15 11:27:39.771 [INFO][3760] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:39.782286 env[1203]: 2025-07-15 11:27:39.771 [INFO][3760] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:39.782286 env[1203]: 2025-07-15 11:27:39.777 [WARNING][3760] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" HandleID="k8s-pod-network.0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" Workload="localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0" Jul 15 11:27:39.782286 env[1203]: 2025-07-15 11:27:39.777 [INFO][3760] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" HandleID="k8s-pod-network.0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" Workload="localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0" Jul 15 11:27:39.782286 env[1203]: 2025-07-15 11:27:39.779 [INFO][3760] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:39.782286 env[1203]: 2025-07-15 11:27:39.781 [INFO][3737] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" Jul 15 11:27:39.782623 env[1203]: time="2025-07-15T11:27:39.782400712Z" level=info msg="TearDown network for sandbox \"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde\" successfully" Jul 15 11:27:39.782623 env[1203]: time="2025-07-15T11:27:39.782423324Z" level=info msg="StopPodSandbox for \"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde\" returns successfully" Jul 15 11:27:39.782703 kubelet[1942]: E0715 11:27:39.782669 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:39.784536 systemd[1]: run-netns-cni\x2d4eda557e\x2d28ec\x2d10df\x2d52c0\x2d9f38d0a9358a.mount: Deactivated successfully. Jul 15 11:27:39.786276 env[1203]: time="2025-07-15T11:27:39.786252169Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-5t6g9,Uid:6d2ff4b6-e64f-47e4-a6b3-c4634bc37da3,Namespace:kube-system,Attempt:1,}" Jul 15 11:27:39.889887 systemd-networkd[1025]: cali8dbfee0cee1: Link UP Jul 15 11:27:39.895712 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:27:39.895779 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8dbfee0cee1: link becomes ready Jul 15 11:27:39.893589 systemd-networkd[1025]: cali8dbfee0cee1: Gained carrier Jul 15 11:27:39.900956 env[1203]: 2025-07-15 11:27:39.834 [INFO][3788] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0 calico-apiserver-7bc956794c- calico-apiserver 03d68f24-8acc-4aa5-8c84-e46d07f5de09 989 0 2025-07-15 11:27:10 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7bc956794c projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-7bc956794c-hwnqw eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali8dbfee0cee1 [] [] }} ContainerID="3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1" Namespace="calico-apiserver" Pod="calico-apiserver-7bc956794c-hwnqw" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bc956794c--hwnqw-" Jul 15 11:27:39.900956 env[1203]: 2025-07-15 11:27:39.834 [INFO][3788] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1" Namespace="calico-apiserver" Pod="calico-apiserver-7bc956794c-hwnqw" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0" Jul 15 11:27:39.900956 env[1203]: 2025-07-15 11:27:39.859 [INFO][3831] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1" HandleID="k8s-pod-network.3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1" Workload="localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0" Jul 15 11:27:39.900956 env[1203]: 2025-07-15 11:27:39.860 [INFO][3831] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1" HandleID="k8s-pod-network.3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1" Workload="localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c92e0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-7bc956794c-hwnqw", "timestamp":"2025-07-15 11:27:39.858804407 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:27:39.900956 env[1203]: 2025-07-15 11:27:39.860 [INFO][3831] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:39.900956 env[1203]: 2025-07-15 11:27:39.860 [INFO][3831] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:39.900956 env[1203]: 2025-07-15 11:27:39.860 [INFO][3831] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:27:39.900956 env[1203]: 2025-07-15 11:27:39.867 [INFO][3831] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1" host="localhost" Jul 15 11:27:39.900956 env[1203]: 2025-07-15 11:27:39.870 [INFO][3831] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:27:39.900956 env[1203]: 2025-07-15 11:27:39.873 [INFO][3831] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:27:39.900956 env[1203]: 2025-07-15 11:27:39.874 [INFO][3831] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:27:39.900956 env[1203]: 2025-07-15 11:27:39.876 [INFO][3831] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:27:39.900956 env[1203]: 2025-07-15 11:27:39.876 [INFO][3831] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1" host="localhost" Jul 15 11:27:39.900956 env[1203]: 2025-07-15 11:27:39.877 [INFO][3831] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1 Jul 15 11:27:39.900956 env[1203]: 2025-07-15 11:27:39.880 [INFO][3831] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1" host="localhost" Jul 15 11:27:39.900956 env[1203]: 2025-07-15 11:27:39.885 [INFO][3831] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1" host="localhost" Jul 15 11:27:39.900956 env[1203]: 2025-07-15 11:27:39.885 [INFO][3831] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1" host="localhost" Jul 15 11:27:39.900956 env[1203]: 2025-07-15 11:27:39.885 [INFO][3831] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:39.900956 env[1203]: 2025-07-15 11:27:39.885 [INFO][3831] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1" HandleID="k8s-pod-network.3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1" Workload="localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0" Jul 15 11:27:39.901531 env[1203]: 2025-07-15 11:27:39.887 [INFO][3788] cni-plugin/k8s.go 418: Populated endpoint ContainerID="3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1" Namespace="calico-apiserver" Pod="calico-apiserver-7bc956794c-hwnqw" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0", GenerateName:"calico-apiserver-7bc956794c-", Namespace:"calico-apiserver", SelfLink:"", UID:"03d68f24-8acc-4aa5-8c84-e46d07f5de09", ResourceVersion:"989", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7bc956794c", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-7bc956794c-hwnqw", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8dbfee0cee1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:39.901531 env[1203]: 2025-07-15 11:27:39.887 [INFO][3788] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1" Namespace="calico-apiserver" Pod="calico-apiserver-7bc956794c-hwnqw" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0" Jul 15 11:27:39.901531 env[1203]: 2025-07-15 11:27:39.887 [INFO][3788] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali8dbfee0cee1 ContainerID="3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1" Namespace="calico-apiserver" Pod="calico-apiserver-7bc956794c-hwnqw" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0" Jul 15 11:27:39.901531 env[1203]: 2025-07-15 11:27:39.890 [INFO][3788] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1" Namespace="calico-apiserver" Pod="calico-apiserver-7bc956794c-hwnqw" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0" Jul 15 11:27:39.901531 env[1203]: 2025-07-15 11:27:39.891 [INFO][3788] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1" Namespace="calico-apiserver" Pod="calico-apiserver-7bc956794c-hwnqw" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0", GenerateName:"calico-apiserver-7bc956794c-", Namespace:"calico-apiserver", SelfLink:"", UID:"03d68f24-8acc-4aa5-8c84-e46d07f5de09", ResourceVersion:"989", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7bc956794c", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1", Pod:"calico-apiserver-7bc956794c-hwnqw", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8dbfee0cee1", MAC:"26:bc:df:46:e3:df", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:39.901531 env[1203]: 2025-07-15 11:27:39.899 [INFO][3788] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1" Namespace="calico-apiserver" Pod="calico-apiserver-7bc956794c-hwnqw" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0" Jul 15 11:27:39.909000 audit[3863]: NETFILTER_CFG table=filter:107 family=2 entries=41 op=nft_register_chain pid=3863 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:27:39.909000 audit[3863]: SYSCALL arch=c000003e syscall=46 success=yes exit=23076 a0=3 a1=7ffef9a8c400 a2=0 a3=7ffef9a8c3ec items=0 ppid=3324 pid=3863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:39.909000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:27:39.915433 env[1203]: time="2025-07-15T11:27:39.915378134Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:27:39.915526 env[1203]: time="2025-07-15T11:27:39.915420904Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:27:39.915526 env[1203]: time="2025-07-15T11:27:39.915431023Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:27:39.915753 env[1203]: time="2025-07-15T11:27:39.915722179Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1 pid=3871 runtime=io.containerd.runc.v2 Jul 15 11:27:39.926150 systemd[1]: Started cri-containerd-3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1.scope. Jul 15 11:27:39.935000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.935000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.935000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.935000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.935000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.935000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.935000 audit: BPF prog-id=172 op=LOAD Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { bpf } for pid=3881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3871 pid=3881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:39.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364353737303334386237653761376138393538346162353539643436 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3871 pid=3881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:39.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364353737303334386237653761376138393538346162353539643436 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { bpf } for pid=3881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { bpf } for pid=3881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { bpf } for pid=3881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { bpf } for pid=3881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { bpf } for pid=3881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit: BPF prog-id=173 op=LOAD Jul 15 11:27:39.936000 audit[3881]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00038e670 items=0 ppid=3871 pid=3881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:39.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364353737303334386237653761376138393538346162353539643436 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { bpf } for pid=3881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { bpf } for pid=3881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { bpf } for pid=3881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { bpf } for pid=3881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit: BPF prog-id=174 op=LOAD Jul 15 11:27:39.936000 audit[3881]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00038e6b8 items=0 ppid=3871 pid=3881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:39.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364353737303334386237653761376138393538346162353539643436 Jul 15 11:27:39.936000 audit: BPF prog-id=174 op=UNLOAD Jul 15 11:27:39.936000 audit: BPF prog-id=173 op=UNLOAD Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { bpf } for pid=3881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { bpf } for pid=3881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { bpf } for pid=3881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { bpf } for pid=3881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit[3881]: AVC avc: denied { bpf } for pid=3881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:39.936000 audit: BPF prog-id=175 op=LOAD Jul 15 11:27:39.936000 audit[3881]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00038eac8 items=0 ppid=3871 pid=3881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:39.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364353737303334386237653761376138393538346162353539643436 Jul 15 11:27:39.939009 systemd-resolved[1141]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:27:39.960099 env[1203]: time="2025-07-15T11:27:39.960047692Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7bc956794c-hwnqw,Uid:03d68f24-8acc-4aa5-8c84-e46d07f5de09,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1\"" Jul 15 11:27:39.997177 systemd-networkd[1025]: cali0abb95ae011: Link UP Jul 15 11:27:39.998894 systemd-networkd[1025]: cali0abb95ae011: Gained carrier Jul 15 11:27:39.999117 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0abb95ae011: link becomes ready Jul 15 11:27:40.011358 env[1203]: 2025-07-15 11:27:39.835 [INFO][3798] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--tnbnz-eth0 csi-node-driver- calico-system b084be4c-45cb-4d18-beeb-0bfdfb2cbea5 988 0 2025-07-15 11:27:14 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-tnbnz eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali0abb95ae011 [] [] }} ContainerID="8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f" Namespace="calico-system" Pod="csi-node-driver-tnbnz" WorkloadEndpoint="localhost-k8s-csi--node--driver--tnbnz-" Jul 15 11:27:40.011358 env[1203]: 2025-07-15 11:27:39.835 [INFO][3798] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f" Namespace="calico-system" Pod="csi-node-driver-tnbnz" WorkloadEndpoint="localhost-k8s-csi--node--driver--tnbnz-eth0" Jul 15 11:27:40.011358 env[1203]: 2025-07-15 11:27:39.866 [INFO][3835] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f" HandleID="k8s-pod-network.8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f" Workload="localhost-k8s-csi--node--driver--tnbnz-eth0" Jul 15 11:27:40.011358 env[1203]: 2025-07-15 11:27:39.866 [INFO][3835] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f" HandleID="k8s-pod-network.8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f" Workload="localhost-k8s-csi--node--driver--tnbnz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c90d0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-tnbnz", "timestamp":"2025-07-15 11:27:39.866673232 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:27:40.011358 env[1203]: 2025-07-15 11:27:39.866 [INFO][3835] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:40.011358 env[1203]: 2025-07-15 11:27:39.886 [INFO][3835] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:40.011358 env[1203]: 2025-07-15 11:27:39.886 [INFO][3835] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:27:40.011358 env[1203]: 2025-07-15 11:27:39.968 [INFO][3835] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f" host="localhost" Jul 15 11:27:40.011358 env[1203]: 2025-07-15 11:27:39.973 [INFO][3835] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:27:40.011358 env[1203]: 2025-07-15 11:27:39.977 [INFO][3835] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:27:40.011358 env[1203]: 2025-07-15 11:27:39.979 [INFO][3835] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:27:40.011358 env[1203]: 2025-07-15 11:27:39.981 [INFO][3835] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:27:40.011358 env[1203]: 2025-07-15 11:27:39.981 [INFO][3835] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f" host="localhost" Jul 15 11:27:40.011358 env[1203]: 2025-07-15 11:27:39.982 [INFO][3835] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f Jul 15 11:27:40.011358 env[1203]: 2025-07-15 11:27:39.986 [INFO][3835] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f" host="localhost" Jul 15 11:27:40.011358 env[1203]: 2025-07-15 11:27:39.991 [INFO][3835] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f" host="localhost" Jul 15 11:27:40.011358 env[1203]: 2025-07-15 11:27:39.991 [INFO][3835] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f" host="localhost" Jul 15 11:27:40.011358 env[1203]: 2025-07-15 11:27:39.991 [INFO][3835] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:40.011358 env[1203]: 2025-07-15 11:27:39.991 [INFO][3835] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f" HandleID="k8s-pod-network.8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f" Workload="localhost-k8s-csi--node--driver--tnbnz-eth0" Jul 15 11:27:40.011916 env[1203]: 2025-07-15 11:27:39.994 [INFO][3798] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f" Namespace="calico-system" Pod="csi-node-driver-tnbnz" WorkloadEndpoint="localhost-k8s-csi--node--driver--tnbnz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--tnbnz-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b084be4c-45cb-4d18-beeb-0bfdfb2cbea5", ResourceVersion:"988", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-tnbnz", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali0abb95ae011", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:40.011916 env[1203]: 2025-07-15 11:27:39.994 [INFO][3798] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f" Namespace="calico-system" Pod="csi-node-driver-tnbnz" WorkloadEndpoint="localhost-k8s-csi--node--driver--tnbnz-eth0" Jul 15 11:27:40.011916 env[1203]: 2025-07-15 11:27:39.994 [INFO][3798] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0abb95ae011 ContainerID="8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f" Namespace="calico-system" Pod="csi-node-driver-tnbnz" WorkloadEndpoint="localhost-k8s-csi--node--driver--tnbnz-eth0" Jul 15 11:27:40.011916 env[1203]: 2025-07-15 11:27:39.999 [INFO][3798] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f" Namespace="calico-system" Pod="csi-node-driver-tnbnz" WorkloadEndpoint="localhost-k8s-csi--node--driver--tnbnz-eth0" Jul 15 11:27:40.011916 env[1203]: 2025-07-15 11:27:39.999 [INFO][3798] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f" Namespace="calico-system" Pod="csi-node-driver-tnbnz" WorkloadEndpoint="localhost-k8s-csi--node--driver--tnbnz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--tnbnz-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b084be4c-45cb-4d18-beeb-0bfdfb2cbea5", ResourceVersion:"988", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f", Pod:"csi-node-driver-tnbnz", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali0abb95ae011", MAC:"46:9f:81:7d:72:e9", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:40.011916 env[1203]: 2025-07-15 11:27:40.007 [INFO][3798] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f" Namespace="calico-system" Pod="csi-node-driver-tnbnz" WorkloadEndpoint="localhost-k8s-csi--node--driver--tnbnz-eth0" Jul 15 11:27:40.017000 audit[3919]: NETFILTER_CFG table=filter:108 family=2 entries=44 op=nft_register_chain pid=3919 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:27:40.017000 audit[3919]: SYSCALL arch=c000003e syscall=46 success=yes exit=21952 a0=3 a1=7ffe11273c20 a2=0 a3=7ffe11273c0c items=0 ppid=3324 pid=3919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.017000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:27:40.019612 env[1203]: time="2025-07-15T11:27:40.019552197Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:27:40.019665 env[1203]: time="2025-07-15T11:27:40.019624292Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:27:40.019665 env[1203]: time="2025-07-15T11:27:40.019645251Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:27:40.019824 env[1203]: time="2025-07-15T11:27:40.019786546Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f pid=3923 runtime=io.containerd.runc.v2 Jul 15 11:27:40.029844 systemd[1]: Started cri-containerd-8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f.scope. Jul 15 11:27:40.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.039000 audit: BPF prog-id=176 op=LOAD Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3923 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862613931616131343433383863323865313938363434333038613763 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3923 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862613931616131343433383863323865313938363434333038613763 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit: BPF prog-id=177 op=LOAD Jul 15 11:27:40.040000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00032b850 items=0 ppid=3923 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862613931616131343433383863323865313938363434333038613763 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit: BPF prog-id=178 op=LOAD Jul 15 11:27:40.040000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00032b898 items=0 ppid=3923 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862613931616131343433383863323865313938363434333038613763 Jul 15 11:27:40.040000 audit: BPF prog-id=178 op=UNLOAD Jul 15 11:27:40.040000 audit: BPF prog-id=177 op=UNLOAD Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { perfmon } for pid=3933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit[3933]: AVC avc: denied { bpf } for pid=3933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.040000 audit: BPF prog-id=179 op=LOAD Jul 15 11:27:40.040000 audit[3933]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00032bca8 items=0 ppid=3923 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862613931616131343433383863323865313938363434333038613763 Jul 15 11:27:40.042377 systemd-resolved[1141]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:27:40.053475 env[1203]: time="2025-07-15T11:27:40.053438208Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-tnbnz,Uid:b084be4c-45cb-4d18-beeb-0bfdfb2cbea5,Namespace:calico-system,Attempt:1,} returns sandbox id \"8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f\"" Jul 15 11:27:40.094560 systemd-networkd[1025]: cali562ee1dbd56: Link UP Jul 15 11:27:40.095701 systemd-networkd[1025]: cali562ee1dbd56: Gained carrier Jul 15 11:27:40.096206 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali562ee1dbd56: link becomes ready Jul 15 11:27:40.115670 env[1203]: 2025-07-15 11:27:39.855 [INFO][3811] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0 coredns-668d6bf9bc- kube-system 6d2ff4b6-e64f-47e4-a6b3-c4634bc37da3 987 0 2025-07-15 11:27:01 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-5t6g9 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali562ee1dbd56 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27" Namespace="kube-system" Pod="coredns-668d6bf9bc-5t6g9" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--5t6g9-" Jul 15 11:27:40.115670 env[1203]: 2025-07-15 11:27:39.855 [INFO][3811] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27" Namespace="kube-system" Pod="coredns-668d6bf9bc-5t6g9" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0" Jul 15 11:27:40.115670 env[1203]: 2025-07-15 11:27:39.880 [INFO][3847] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27" HandleID="k8s-pod-network.b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27" Workload="localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0" Jul 15 11:27:40.115670 env[1203]: 2025-07-15 11:27:39.880 [INFO][3847] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27" HandleID="k8s-pod-network.b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27" Workload="localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000325490), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-5t6g9", "timestamp":"2025-07-15 11:27:39.880104906 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:27:40.115670 env[1203]: 2025-07-15 11:27:39.880 [INFO][3847] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:40.115670 env[1203]: 2025-07-15 11:27:39.991 [INFO][3847] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:40.115670 env[1203]: 2025-07-15 11:27:39.991 [INFO][3847] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:27:40.115670 env[1203]: 2025-07-15 11:27:40.069 [INFO][3847] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27" host="localhost" Jul 15 11:27:40.115670 env[1203]: 2025-07-15 11:27:40.073 [INFO][3847] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:27:40.115670 env[1203]: 2025-07-15 11:27:40.077 [INFO][3847] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:27:40.115670 env[1203]: 2025-07-15 11:27:40.079 [INFO][3847] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:27:40.115670 env[1203]: 2025-07-15 11:27:40.081 [INFO][3847] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:27:40.115670 env[1203]: 2025-07-15 11:27:40.081 [INFO][3847] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27" host="localhost" Jul 15 11:27:40.115670 env[1203]: 2025-07-15 11:27:40.082 [INFO][3847] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27 Jul 15 11:27:40.115670 env[1203]: 2025-07-15 11:27:40.085 [INFO][3847] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27" host="localhost" Jul 15 11:27:40.115670 env[1203]: 2025-07-15 11:27:40.090 [INFO][3847] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27" host="localhost" Jul 15 11:27:40.115670 env[1203]: 2025-07-15 11:27:40.090 [INFO][3847] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27" host="localhost" Jul 15 11:27:40.115670 env[1203]: 2025-07-15 11:27:40.091 [INFO][3847] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:40.115670 env[1203]: 2025-07-15 11:27:40.091 [INFO][3847] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27" HandleID="k8s-pod-network.b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27" Workload="localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0" Jul 15 11:27:40.116294 env[1203]: 2025-07-15 11:27:40.092 [INFO][3811] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27" Namespace="kube-system" Pod="coredns-668d6bf9bc-5t6g9" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6d2ff4b6-e64f-47e4-a6b3-c4634bc37da3", ResourceVersion:"987", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-5t6g9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali562ee1dbd56", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:40.116294 env[1203]: 2025-07-15 11:27:40.093 [INFO][3811] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27" Namespace="kube-system" Pod="coredns-668d6bf9bc-5t6g9" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0" Jul 15 11:27:40.116294 env[1203]: 2025-07-15 11:27:40.093 [INFO][3811] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali562ee1dbd56 ContainerID="b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27" Namespace="kube-system" Pod="coredns-668d6bf9bc-5t6g9" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0" Jul 15 11:27:40.116294 env[1203]: 2025-07-15 11:27:40.098 [INFO][3811] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27" Namespace="kube-system" Pod="coredns-668d6bf9bc-5t6g9" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0" Jul 15 11:27:40.116294 env[1203]: 2025-07-15 11:27:40.099 [INFO][3811] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27" Namespace="kube-system" Pod="coredns-668d6bf9bc-5t6g9" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6d2ff4b6-e64f-47e4-a6b3-c4634bc37da3", ResourceVersion:"987", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27", Pod:"coredns-668d6bf9bc-5t6g9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali562ee1dbd56", MAC:"d6:24:8c:8e:11:a2", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:40.116294 env[1203]: 2025-07-15 11:27:40.109 [INFO][3811] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27" Namespace="kube-system" Pod="coredns-668d6bf9bc-5t6g9" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0" Jul 15 11:27:40.124000 audit[3968]: NETFILTER_CFG table=filter:109 family=2 entries=54 op=nft_register_chain pid=3968 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:27:40.124000 audit[3968]: SYSCALL arch=c000003e syscall=46 success=yes exit=26116 a0=3 a1=7ffe577ff460 a2=0 a3=7ffe577ff44c items=0 ppid=3324 pid=3968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.124000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:27:40.128435 env[1203]: time="2025-07-15T11:27:40.128354917Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:27:40.128435 env[1203]: time="2025-07-15T11:27:40.128405642Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:27:40.128435 env[1203]: time="2025-07-15T11:27:40.128417234Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:27:40.128642 env[1203]: time="2025-07-15T11:27:40.128598964Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27 pid=3974 runtime=io.containerd.runc.v2 Jul 15 11:27:40.140272 systemd[1]: Started cri-containerd-b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27.scope. Jul 15 11:27:40.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.149000 audit: BPF prog-id=180 op=LOAD Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3974 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233383136626566653633346230393538643136383832316264646232 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3974 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233383136626566653633346230393538643136383832316264646232 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit: BPF prog-id=181 op=LOAD Jul 15 11:27:40.150000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000307250 items=0 ppid=3974 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233383136626566653633346230393538643136383832316264646232 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit: BPF prog-id=182 op=LOAD Jul 15 11:27:40.150000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000307298 items=0 ppid=3974 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233383136626566653633346230393538643136383832316264646232 Jul 15 11:27:40.150000 audit: BPF prog-id=182 op=UNLOAD Jul 15 11:27:40.150000 audit: BPF prog-id=181 op=UNLOAD Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.150000 audit: BPF prog-id=183 op=LOAD Jul 15 11:27:40.150000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003076a8 items=0 ppid=3974 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233383136626566653633346230393538643136383832316264646232 Jul 15 11:27:40.152445 systemd-resolved[1141]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:27:40.175612 env[1203]: time="2025-07-15T11:27:40.175564137Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-5t6g9,Uid:6d2ff4b6-e64f-47e4-a6b3-c4634bc37da3,Namespace:kube-system,Attempt:1,} returns sandbox id \"b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27\"" Jul 15 11:27:40.176736 kubelet[1942]: E0715 11:27:40.176695 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:40.182210 env[1203]: time="2025-07-15T11:27:40.182029048Z" level=info msg="CreateContainer within sandbox \"b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 15 11:27:40.201229 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount906205412.mount: Deactivated successfully. Jul 15 11:27:40.203054 env[1203]: time="2025-07-15T11:27:40.203022027Z" level=info msg="CreateContainer within sandbox \"b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"f802176a2511c080828fe21f2955ed8520b553d758f694ab1aa1330909b43b3a\"" Jul 15 11:27:40.203753 env[1203]: time="2025-07-15T11:27:40.203714036Z" level=info msg="StartContainer for \"f802176a2511c080828fe21f2955ed8520b553d758f694ab1aa1330909b43b3a\"" Jul 15 11:27:40.224629 systemd[1]: Started cri-containerd-f802176a2511c080828fe21f2955ed8520b553d758f694ab1aa1330909b43b3a.scope. Jul 15 11:27:40.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.235000 audit: BPF prog-id=184 op=LOAD Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3974 pid=4016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638303231373661323531316330383038323866653231663239353565 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3974 pid=4016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638303231373661323531316330383038323866653231663239353565 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit: BPF prog-id=185 op=LOAD Jul 15 11:27:40.236000 audit[4016]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000394210 items=0 ppid=3974 pid=4016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638303231373661323531316330383038323866653231663239353565 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit: BPF prog-id=186 op=LOAD Jul 15 11:27:40.236000 audit[4016]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000394258 items=0 ppid=3974 pid=4016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638303231373661323531316330383038323866653231663239353565 Jul 15 11:27:40.236000 audit: BPF prog-id=186 op=UNLOAD Jul 15 11:27:40.236000 audit: BPF prog-id=185 op=UNLOAD Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { perfmon } for pid=4016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit[4016]: AVC avc: denied { bpf } for pid=4016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.236000 audit: BPF prog-id=187 op=LOAD Jul 15 11:27:40.236000 audit[4016]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000394668 items=0 ppid=3974 pid=4016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638303231373661323531316330383038323866653231663239353565 Jul 15 11:27:40.249199 systemd-networkd[1025]: califcd7701b7a1: Gained IPv6LL Jul 15 11:27:40.249533 systemd-networkd[1025]: vxlan.calico: Gained IPv6LL Jul 15 11:27:40.253947 env[1203]: time="2025-07-15T11:27:40.253896595Z" level=info msg="StartContainer for \"f802176a2511c080828fe21f2955ed8520b553d758f694ab1aa1330909b43b3a\" returns successfully" Jul 15 11:27:40.319000 audit[4028]: AVC avc: denied { getattr } for pid=4028 comm="coredns" path="cgroup:[4026532321]" dev="nsfs" ino=4026532321 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c521 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 15 11:27:40.319000 audit[4028]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a828 a2=c0000dafa8 a3=0 items=0 ppid=3974 pid=4028 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c116,c521 key=(null) Jul 15 11:27:40.319000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 15 11:27:40.588512 env[1203]: time="2025-07-15T11:27:40.588358678Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:40.590786 env[1203]: time="2025-07-15T11:27:40.590757138Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:40.592646 env[1203]: time="2025-07-15T11:27:40.592610715Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:40.593955 env[1203]: time="2025-07-15T11:27:40.593917167Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:40.596106 env[1203]: time="2025-07-15T11:27:40.595032500Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954\"" Jul 15 11:27:40.597144 env[1203]: time="2025-07-15T11:27:40.597100119Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 15 11:27:40.598347 env[1203]: time="2025-07-15T11:27:40.598314077Z" level=info msg="CreateContainer within sandbox \"2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 15 11:27:40.612411 env[1203]: time="2025-07-15T11:27:40.612363979Z" level=info msg="CreateContainer within sandbox \"2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"d4558d68dd50e9f6fcefb82951f860bef28f3c385fef03a43db27ddcf175dfcd\"" Jul 15 11:27:40.612907 env[1203]: time="2025-07-15T11:27:40.612871521Z" level=info msg="StartContainer for \"d4558d68dd50e9f6fcefb82951f860bef28f3c385fef03a43db27ddcf175dfcd\"" Jul 15 11:27:40.627556 systemd[1]: Started cri-containerd-d4558d68dd50e9f6fcefb82951f860bef28f3c385fef03a43db27ddcf175dfcd.scope. Jul 15 11:27:40.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.641000 audit: BPF prog-id=188 op=LOAD Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3570 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434353538643638646435306539663666636566623832393531663836 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3570 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434353538643638646435306539663666636566623832393531663836 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit: BPF prog-id=189 op=LOAD Jul 15 11:27:40.642000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000269d10 items=0 ppid=3570 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434353538643638646435306539663666636566623832393531663836 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit: BPF prog-id=190 op=LOAD Jul 15 11:27:40.642000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000269d58 items=0 ppid=3570 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434353538643638646435306539663666636566623832393531663836 Jul 15 11:27:40.642000 audit: BPF prog-id=190 op=UNLOAD Jul 15 11:27:40.642000 audit: BPF prog-id=189 op=UNLOAD Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:40.642000 audit: BPF prog-id=191 op=LOAD Jul 15 11:27:40.642000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003e0168 items=0 ppid=3570 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434353538643638646435306539663666636566623832393531663836 Jul 15 11:27:40.669255 env[1203]: time="2025-07-15T11:27:40.669195785Z" level=info msg="StartContainer for \"d4558d68dd50e9f6fcefb82951f860bef28f3c385fef03a43db27ddcf175dfcd\" returns successfully" Jul 15 11:27:40.678000 audit[4068]: AVC avc: denied { search } for pid=4068 comm="nginx" name="crypto" dev="proc" ino=27298 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c573 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 15 11:27:40.678000 audit[4068]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fd3c3475728 a2=0 a3=0 items=0 ppid=3570 pid=4068 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c573 key=(null) Jul 15 11:27:40.678000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 15 11:27:40.822273 systemd-networkd[1025]: cali4aed63d77c5: Gained IPv6LL Jul 15 11:27:40.918002 kubelet[1942]: E0715 11:27:40.917908 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:40.926949 kubelet[1942]: I0715 11:27:40.926883 1942 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-5t6g9" podStartSLOduration=39.926867092 podStartE2EDuration="39.926867092s" podCreationTimestamp="2025-07-15 11:27:01 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:27:40.926623044 +0000 UTC m=+45.347065176" watchObservedRunningTime="2025-07-15 11:27:40.926867092 +0000 UTC m=+45.347309214" Jul 15 11:27:40.942000 audit[4088]: NETFILTER_CFG table=filter:110 family=2 entries=20 op=nft_register_rule pid=4088 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:40.942000 audit[4088]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fffb3d4a6b0 a2=0 a3=7fffb3d4a69c items=0 ppid=2108 pid=4088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.942000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:40.948000 audit[4088]: NETFILTER_CFG table=nat:111 family=2 entries=14 op=nft_register_rule pid=4088 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:40.948000 audit[4088]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7fffb3d4a6b0 a2=0 a3=0 items=0 ppid=2108 pid=4088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.948000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:40.974000 audit[4090]: NETFILTER_CFG table=filter:112 family=2 entries=17 op=nft_register_rule pid=4090 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:40.974000 audit[4090]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe37fda7f0 a2=0 a3=7ffe37fda7dc items=0 ppid=2108 pid=4090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.974000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:40.978000 audit[4090]: NETFILTER_CFG table=nat:113 family=2 entries=35 op=nft_register_chain pid=4090 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:40.978000 audit[4090]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffe37fda7f0 a2=0 a3=7ffe37fda7dc items=0 ppid=2108 pid=4090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:40.978000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:41.142256 systemd-networkd[1025]: cali8dbfee0cee1: Gained IPv6LL Jul 15 11:27:41.398247 systemd-networkd[1025]: cali0abb95ae011: Gained IPv6LL Jul 15 11:27:41.678801 env[1203]: time="2025-07-15T11:27:41.678685718Z" level=info msg="StopPodSandbox for \"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551\"" Jul 15 11:27:41.679399 env[1203]: time="2025-07-15T11:27:41.678716986Z" level=info msg="StopPodSandbox for \"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746\"" Jul 15 11:27:41.718330 systemd-networkd[1025]: cali562ee1dbd56: Gained IPv6LL Jul 15 11:27:41.853231 env[1203]: 2025-07-15 11:27:41.819 [INFO][4116] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" Jul 15 11:27:41.853231 env[1203]: 2025-07-15 11:27:41.819 [INFO][4116] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" iface="eth0" netns="/var/run/netns/cni-262a1084-fa3d-df8c-ea26-3c6a7fcb45a0" Jul 15 11:27:41.853231 env[1203]: 2025-07-15 11:27:41.819 [INFO][4116] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" iface="eth0" netns="/var/run/netns/cni-262a1084-fa3d-df8c-ea26-3c6a7fcb45a0" Jul 15 11:27:41.853231 env[1203]: 2025-07-15 11:27:41.819 [INFO][4116] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" iface="eth0" netns="/var/run/netns/cni-262a1084-fa3d-df8c-ea26-3c6a7fcb45a0" Jul 15 11:27:41.853231 env[1203]: 2025-07-15 11:27:41.819 [INFO][4116] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" Jul 15 11:27:41.853231 env[1203]: 2025-07-15 11:27:41.819 [INFO][4116] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" Jul 15 11:27:41.853231 env[1203]: 2025-07-15 11:27:41.841 [INFO][4132] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" HandleID="k8s-pod-network.762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" Workload="localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0" Jul 15 11:27:41.853231 env[1203]: 2025-07-15 11:27:41.841 [INFO][4132] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:41.853231 env[1203]: 2025-07-15 11:27:41.841 [INFO][4132] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:41.853231 env[1203]: 2025-07-15 11:27:41.848 [WARNING][4132] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" HandleID="k8s-pod-network.762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" Workload="localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0" Jul 15 11:27:41.853231 env[1203]: 2025-07-15 11:27:41.849 [INFO][4132] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" HandleID="k8s-pod-network.762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" Workload="localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0" Jul 15 11:27:41.853231 env[1203]: 2025-07-15 11:27:41.850 [INFO][4132] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:41.853231 env[1203]: 2025-07-15 11:27:41.851 [INFO][4116] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" Jul 15 11:27:41.856448 env[1203]: time="2025-07-15T11:27:41.853335233Z" level=info msg="TearDown network for sandbox \"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746\" successfully" Jul 15 11:27:41.856448 env[1203]: time="2025-07-15T11:27:41.853374827Z" level=info msg="StopPodSandbox for \"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746\" returns successfully" Jul 15 11:27:41.856448 env[1203]: time="2025-07-15T11:27:41.854135635Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-cbfb7dd6-qmmv9,Uid:3ea6d0e6-795c-462c-9605-023e2674e09c,Namespace:calico-system,Attempt:1,}" Jul 15 11:27:41.856343 systemd[1]: run-netns-cni\x2d262a1084\x2dfa3d\x2ddf8c\x2dea26\x2d3c6a7fcb45a0.mount: Deactivated successfully. Jul 15 11:27:41.864297 env[1203]: 2025-07-15 11:27:41.820 [INFO][4115] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" Jul 15 11:27:41.864297 env[1203]: 2025-07-15 11:27:41.820 [INFO][4115] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" iface="eth0" netns="/var/run/netns/cni-4486cc96-8f3a-7d56-e557-63320b52362f" Jul 15 11:27:41.864297 env[1203]: 2025-07-15 11:27:41.821 [INFO][4115] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" iface="eth0" netns="/var/run/netns/cni-4486cc96-8f3a-7d56-e557-63320b52362f" Jul 15 11:27:41.864297 env[1203]: 2025-07-15 11:27:41.821 [INFO][4115] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" iface="eth0" netns="/var/run/netns/cni-4486cc96-8f3a-7d56-e557-63320b52362f" Jul 15 11:27:41.864297 env[1203]: 2025-07-15 11:27:41.821 [INFO][4115] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" Jul 15 11:27:41.864297 env[1203]: 2025-07-15 11:27:41.821 [INFO][4115] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" Jul 15 11:27:41.864297 env[1203]: 2025-07-15 11:27:41.843 [INFO][4134] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" HandleID="k8s-pod-network.38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" Workload="localhost-k8s-coredns--668d6bf9bc--7s67n-eth0" Jul 15 11:27:41.864297 env[1203]: 2025-07-15 11:27:41.844 [INFO][4134] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:41.864297 env[1203]: 2025-07-15 11:27:41.850 [INFO][4134] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:41.864297 env[1203]: 2025-07-15 11:27:41.858 [WARNING][4134] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" HandleID="k8s-pod-network.38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" Workload="localhost-k8s-coredns--668d6bf9bc--7s67n-eth0" Jul 15 11:27:41.864297 env[1203]: 2025-07-15 11:27:41.858 [INFO][4134] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" HandleID="k8s-pod-network.38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" Workload="localhost-k8s-coredns--668d6bf9bc--7s67n-eth0" Jul 15 11:27:41.864297 env[1203]: 2025-07-15 11:27:41.860 [INFO][4134] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:41.864297 env[1203]: 2025-07-15 11:27:41.862 [INFO][4115] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" Jul 15 11:27:41.872290 env[1203]: time="2025-07-15T11:27:41.869143464Z" level=info msg="TearDown network for sandbox \"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551\" successfully" Jul 15 11:27:41.872290 env[1203]: time="2025-07-15T11:27:41.869173510Z" level=info msg="StopPodSandbox for \"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551\" returns successfully" Jul 15 11:27:41.872290 env[1203]: time="2025-07-15T11:27:41.870196219Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-7s67n,Uid:8efa25ab-67dd-4478-83aa-f81b926404db,Namespace:kube-system,Attempt:1,}" Jul 15 11:27:41.872407 kubelet[1942]: E0715 11:27:41.869487 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:41.867157 systemd[1]: run-netns-cni\x2d4486cc96\x2d8f3a\x2d7d56\x2de557\x2d63320b52362f.mount: Deactivated successfully. Jul 15 11:27:41.921899 kubelet[1942]: E0715 11:27:41.921854 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:41.977487 systemd-networkd[1025]: cali399ea10dfe9: Link UP Jul 15 11:27:41.980022 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:27:41.980154 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali399ea10dfe9: link becomes ready Jul 15 11:27:41.980177 systemd-networkd[1025]: cali399ea10dfe9: Gained carrier Jul 15 11:27:42.000721 env[1203]: 2025-07-15 11:27:41.901 [INFO][4150] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0 calico-kube-controllers-cbfb7dd6- calico-system 3ea6d0e6-795c-462c-9605-023e2674e09c 1028 0 2025-07-15 11:27:14 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:cbfb7dd6 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-cbfb7dd6-qmmv9 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali399ea10dfe9 [] [] }} ContainerID="7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974" Namespace="calico-system" Pod="calico-kube-controllers-cbfb7dd6-qmmv9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-" Jul 15 11:27:42.000721 env[1203]: 2025-07-15 11:27:41.901 [INFO][4150] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974" Namespace="calico-system" Pod="calico-kube-controllers-cbfb7dd6-qmmv9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0" Jul 15 11:27:42.000721 env[1203]: 2025-07-15 11:27:41.941 [INFO][4177] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974" HandleID="k8s-pod-network.7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974" Workload="localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0" Jul 15 11:27:42.000721 env[1203]: 2025-07-15 11:27:41.941 [INFO][4177] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974" HandleID="k8s-pod-network.7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974" Workload="localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002df5f0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-cbfb7dd6-qmmv9", "timestamp":"2025-07-15 11:27:41.941564955 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:27:42.000721 env[1203]: 2025-07-15 11:27:41.941 [INFO][4177] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:42.000721 env[1203]: 2025-07-15 11:27:41.941 [INFO][4177] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:42.000721 env[1203]: 2025-07-15 11:27:41.942 [INFO][4177] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:27:42.000721 env[1203]: 2025-07-15 11:27:41.948 [INFO][4177] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974" host="localhost" Jul 15 11:27:42.000721 env[1203]: 2025-07-15 11:27:41.952 [INFO][4177] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:27:42.000721 env[1203]: 2025-07-15 11:27:41.956 [INFO][4177] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:27:42.000721 env[1203]: 2025-07-15 11:27:41.957 [INFO][4177] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:27:42.000721 env[1203]: 2025-07-15 11:27:41.959 [INFO][4177] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:27:42.000721 env[1203]: 2025-07-15 11:27:41.959 [INFO][4177] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974" host="localhost" Jul 15 11:27:42.000721 env[1203]: 2025-07-15 11:27:41.961 [INFO][4177] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974 Jul 15 11:27:42.000721 env[1203]: 2025-07-15 11:27:41.965 [INFO][4177] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974" host="localhost" Jul 15 11:27:42.000721 env[1203]: 2025-07-15 11:27:41.971 [INFO][4177] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974" host="localhost" Jul 15 11:27:42.000721 env[1203]: 2025-07-15 11:27:41.971 [INFO][4177] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974" host="localhost" Jul 15 11:27:42.000721 env[1203]: 2025-07-15 11:27:41.971 [INFO][4177] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:42.000721 env[1203]: 2025-07-15 11:27:41.971 [INFO][4177] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974" HandleID="k8s-pod-network.7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974" Workload="localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0" Jul 15 11:27:42.001371 env[1203]: 2025-07-15 11:27:41.973 [INFO][4150] cni-plugin/k8s.go 418: Populated endpoint ContainerID="7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974" Namespace="calico-system" Pod="calico-kube-controllers-cbfb7dd6-qmmv9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0", GenerateName:"calico-kube-controllers-cbfb7dd6-", Namespace:"calico-system", SelfLink:"", UID:"3ea6d0e6-795c-462c-9605-023e2674e09c", ResourceVersion:"1028", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"cbfb7dd6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-cbfb7dd6-qmmv9", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali399ea10dfe9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:42.001371 env[1203]: 2025-07-15 11:27:41.973 [INFO][4150] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974" Namespace="calico-system" Pod="calico-kube-controllers-cbfb7dd6-qmmv9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0" Jul 15 11:27:42.001371 env[1203]: 2025-07-15 11:27:41.973 [INFO][4150] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali399ea10dfe9 ContainerID="7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974" Namespace="calico-system" Pod="calico-kube-controllers-cbfb7dd6-qmmv9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0" Jul 15 11:27:42.001371 env[1203]: 2025-07-15 11:27:41.980 [INFO][4150] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974" Namespace="calico-system" Pod="calico-kube-controllers-cbfb7dd6-qmmv9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0" Jul 15 11:27:42.001371 env[1203]: 2025-07-15 11:27:41.984 [INFO][4150] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974" Namespace="calico-system" Pod="calico-kube-controllers-cbfb7dd6-qmmv9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0", GenerateName:"calico-kube-controllers-cbfb7dd6-", Namespace:"calico-system", SelfLink:"", UID:"3ea6d0e6-795c-462c-9605-023e2674e09c", ResourceVersion:"1028", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"cbfb7dd6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974", Pod:"calico-kube-controllers-cbfb7dd6-qmmv9", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali399ea10dfe9", MAC:"12:8c:f8:2f:9a:62", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:42.001371 env[1203]: 2025-07-15 11:27:41.993 [INFO][4150] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974" Namespace="calico-system" Pod="calico-kube-controllers-cbfb7dd6-qmmv9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0" Jul 15 11:27:42.008000 audit[4205]: NETFILTER_CFG table=filter:114 family=2 entries=52 op=nft_register_chain pid=4205 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:27:42.019126 kernel: kauditd_printk_skb: 1033 callbacks suppressed Jul 15 11:27:42.019378 kernel: audit: type=1325 audit(1752578862.008:1279): table=filter:114 family=2 entries=52 op=nft_register_chain pid=4205 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:27:42.019426 kernel: audit: type=1300 audit(1752578862.008:1279): arch=c000003e syscall=46 success=yes exit=24328 a0=3 a1=7ffee0c0bf00 a2=0 a3=7ffee0c0beec items=0 ppid=3324 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.019497 kernel: audit: type=1327 audit(1752578862.008:1279): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:27:42.008000 audit[4205]: SYSCALL arch=c000003e syscall=46 success=yes exit=24328 a0=3 a1=7ffee0c0bf00 a2=0 a3=7ffee0c0beec items=0 ppid=3324 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.008000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:27:42.019845 env[1203]: time="2025-07-15T11:27:42.016644080Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:27:42.019845 env[1203]: time="2025-07-15T11:27:42.016707168Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:27:42.019845 env[1203]: time="2025-07-15T11:27:42.016728378Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:27:42.019845 env[1203]: time="2025-07-15T11:27:42.016864244Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974 pid=4212 runtime=io.containerd.runc.v2 Jul 15 11:27:42.031524 systemd[1]: Started cri-containerd-7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974.scope. Jul 15 11:27:42.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.061164 kernel: audit: type=1400 audit(1752578862.046:1280): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.061235 kernel: audit: type=1400 audit(1752578862.046:1281): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.061264 kernel: audit: type=1400 audit(1752578862.046:1282): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.061453 kernel: audit: type=1400 audit(1752578862.046:1283): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.061486 kernel: audit: type=1400 audit(1752578862.046:1284): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.063186 systemd-resolved[1141]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:27:42.065440 kernel: audit: type=1400 audit(1752578862.046:1285): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.068719 kernel: audit: type=1400 audit(1752578862.046:1286): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.046000 audit: BPF prog-id=192 op=LOAD Jul 15 11:27:42.046000 audit[4222]: AVC avc: denied { bpf } for pid=4222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.046000 audit[4222]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4212 pid=4222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762306438376431653338633531306539373565366363366438373032 Jul 15 11:27:42.046000 audit[4222]: AVC avc: denied { perfmon } for pid=4222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.046000 audit[4222]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4212 pid=4222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762306438376431653338633531306539373565366363366438373032 Jul 15 11:27:42.046000 audit[4222]: AVC avc: denied { bpf } for pid=4222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.046000 audit[4222]: AVC avc: denied { bpf } for pid=4222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.046000 audit[4222]: AVC avc: denied { bpf } for pid=4222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.046000 audit[4222]: AVC avc: denied { perfmon } for pid=4222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.046000 audit[4222]: AVC avc: denied { perfmon } for pid=4222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.046000 audit[4222]: AVC avc: denied { perfmon } for pid=4222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.046000 audit[4222]: AVC avc: denied { perfmon } for pid=4222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.046000 audit[4222]: AVC avc: denied { perfmon } for pid=4222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.046000 audit[4222]: AVC avc: denied { bpf } for pid=4222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.046000 audit[4222]: AVC avc: denied { bpf } for pid=4222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.046000 audit: BPF prog-id=193 op=LOAD Jul 15 11:27:42.046000 audit[4222]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0002edd90 items=0 ppid=4212 pid=4222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762306438376431653338633531306539373565366363366438373032 Jul 15 11:27:42.050000 audit[4222]: AVC avc: denied { bpf } for pid=4222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.050000 audit[4222]: AVC avc: denied { bpf } for pid=4222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.050000 audit[4222]: AVC avc: denied { perfmon } for pid=4222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.050000 audit[4222]: AVC avc: denied { perfmon } for pid=4222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.050000 audit[4222]: AVC avc: denied { perfmon } for pid=4222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.050000 audit[4222]: AVC avc: denied { perfmon } for pid=4222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.050000 audit[4222]: AVC avc: denied { perfmon } for pid=4222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.050000 audit[4222]: AVC avc: denied { bpf } for pid=4222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.050000 audit[4222]: AVC avc: denied { bpf } for pid=4222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.050000 audit: BPF prog-id=194 op=LOAD Jul 15 11:27:42.050000 audit[4222]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0002eddd8 items=0 ppid=4212 pid=4222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.050000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762306438376431653338633531306539373565366363366438373032 Jul 15 11:27:42.053000 audit: BPF prog-id=194 op=UNLOAD Jul 15 11:27:42.053000 audit: BPF prog-id=193 op=UNLOAD Jul 15 11:27:42.053000 audit[4222]: AVC avc: denied { bpf } for pid=4222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.053000 audit[4222]: AVC avc: denied { bpf } for pid=4222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.053000 audit[4222]: AVC avc: denied { bpf } for pid=4222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.053000 audit[4222]: AVC avc: denied { perfmon } for pid=4222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.053000 audit[4222]: AVC avc: denied { perfmon } for pid=4222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.053000 audit[4222]: AVC avc: denied { perfmon } for pid=4222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.053000 audit[4222]: AVC avc: denied { perfmon } for pid=4222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.053000 audit[4222]: AVC avc: denied { perfmon } for pid=4222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.053000 audit[4222]: AVC avc: denied { bpf } for pid=4222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.053000 audit[4222]: AVC avc: denied { bpf } for pid=4222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.053000 audit: BPF prog-id=195 op=LOAD Jul 15 11:27:42.053000 audit[4222]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0003e41e8 items=0 ppid=4212 pid=4222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762306438376431653338633531306539373565366363366438373032 Jul 15 11:27:42.093578 systemd-networkd[1025]: calif10205880b7: Link UP Jul 15 11:27:42.095523 systemd-networkd[1025]: calif10205880b7: Gained carrier Jul 15 11:27:42.096180 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif10205880b7: link becomes ready Jul 15 11:27:42.110187 env[1203]: 2025-07-15 11:27:41.916 [INFO][4162] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--7s67n-eth0 coredns-668d6bf9bc- kube-system 8efa25ab-67dd-4478-83aa-f81b926404db 1029 0 2025-07-15 11:27:01 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-7s67n eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calif10205880b7 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed" Namespace="kube-system" Pod="coredns-668d6bf9bc-7s67n" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--7s67n-" Jul 15 11:27:42.110187 env[1203]: 2025-07-15 11:27:41.917 [INFO][4162] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed" Namespace="kube-system" Pod="coredns-668d6bf9bc-7s67n" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--7s67n-eth0" Jul 15 11:27:42.110187 env[1203]: 2025-07-15 11:27:41.943 [INFO][4185] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed" HandleID="k8s-pod-network.f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed" Workload="localhost-k8s-coredns--668d6bf9bc--7s67n-eth0" Jul 15 11:27:42.110187 env[1203]: 2025-07-15 11:27:41.943 [INFO][4185] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed" HandleID="k8s-pod-network.f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed" Workload="localhost-k8s-coredns--668d6bf9bc--7s67n-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ff660), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-7s67n", "timestamp":"2025-07-15 11:27:41.943039291 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:27:42.110187 env[1203]: 2025-07-15 11:27:41.943 [INFO][4185] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:42.110187 env[1203]: 2025-07-15 11:27:41.971 [INFO][4185] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:42.110187 env[1203]: 2025-07-15 11:27:41.971 [INFO][4185] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:27:42.110187 env[1203]: 2025-07-15 11:27:42.057 [INFO][4185] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed" host="localhost" Jul 15 11:27:42.110187 env[1203]: 2025-07-15 11:27:42.062 [INFO][4185] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:27:42.110187 env[1203]: 2025-07-15 11:27:42.067 [INFO][4185] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:27:42.110187 env[1203]: 2025-07-15 11:27:42.069 [INFO][4185] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:27:42.110187 env[1203]: 2025-07-15 11:27:42.071 [INFO][4185] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:27:42.110187 env[1203]: 2025-07-15 11:27:42.071 [INFO][4185] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed" host="localhost" Jul 15 11:27:42.110187 env[1203]: 2025-07-15 11:27:42.072 [INFO][4185] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed Jul 15 11:27:42.110187 env[1203]: 2025-07-15 11:27:42.076 [INFO][4185] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed" host="localhost" Jul 15 11:27:42.110187 env[1203]: 2025-07-15 11:27:42.086 [INFO][4185] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed" host="localhost" Jul 15 11:27:42.110187 env[1203]: 2025-07-15 11:27:42.087 [INFO][4185] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed" host="localhost" Jul 15 11:27:42.110187 env[1203]: 2025-07-15 11:27:42.087 [INFO][4185] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:42.110187 env[1203]: 2025-07-15 11:27:42.087 [INFO][4185] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed" HandleID="k8s-pod-network.f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed" Workload="localhost-k8s-coredns--668d6bf9bc--7s67n-eth0" Jul 15 11:27:42.110935 env[1203]: 2025-07-15 11:27:42.090 [INFO][4162] cni-plugin/k8s.go 418: Populated endpoint ContainerID="f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed" Namespace="kube-system" Pod="coredns-668d6bf9bc-7s67n" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--7s67n-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--7s67n-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"8efa25ab-67dd-4478-83aa-f81b926404db", ResourceVersion:"1029", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-7s67n", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif10205880b7", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:42.110935 env[1203]: 2025-07-15 11:27:42.091 [INFO][4162] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed" Namespace="kube-system" Pod="coredns-668d6bf9bc-7s67n" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--7s67n-eth0" Jul 15 11:27:42.110935 env[1203]: 2025-07-15 11:27:42.091 [INFO][4162] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif10205880b7 ContainerID="f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed" Namespace="kube-system" Pod="coredns-668d6bf9bc-7s67n" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--7s67n-eth0" Jul 15 11:27:42.110935 env[1203]: 2025-07-15 11:27:42.095 [INFO][4162] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed" Namespace="kube-system" Pod="coredns-668d6bf9bc-7s67n" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--7s67n-eth0" Jul 15 11:27:42.110935 env[1203]: 2025-07-15 11:27:42.096 [INFO][4162] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed" Namespace="kube-system" Pod="coredns-668d6bf9bc-7s67n" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--7s67n-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--7s67n-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"8efa25ab-67dd-4478-83aa-f81b926404db", ResourceVersion:"1029", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed", Pod:"coredns-668d6bf9bc-7s67n", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif10205880b7", MAC:"ea:12:f5:bc:2b:70", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:42.110935 env[1203]: 2025-07-15 11:27:42.107 [INFO][4162] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed" Namespace="kube-system" Pod="coredns-668d6bf9bc-7s67n" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--7s67n-eth0" Jul 15 11:27:42.114150 env[1203]: time="2025-07-15T11:27:42.114113490Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-cbfb7dd6-qmmv9,Uid:3ea6d0e6-795c-462c-9605-023e2674e09c,Namespace:calico-system,Attempt:1,} returns sandbox id \"7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974\"" Jul 15 11:27:42.120000 audit[4252]: NETFILTER_CFG table=filter:115 family=2 entries=58 op=nft_register_chain pid=4252 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:27:42.120000 audit[4252]: SYSCALL arch=c000003e syscall=46 success=yes exit=26760 a0=3 a1=7ffc6a12b420 a2=0 a3=7ffc6a12b40c items=0 ppid=3324 pid=4252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.120000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:27:42.148590 env[1203]: time="2025-07-15T11:27:42.148475669Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:27:42.148590 env[1203]: time="2025-07-15T11:27:42.148530762Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:27:42.148590 env[1203]: time="2025-07-15T11:27:42.148541081Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:27:42.149102 env[1203]: time="2025-07-15T11:27:42.149010122Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed pid=4260 runtime=io.containerd.runc.v2 Jul 15 11:27:42.159473 systemd[1]: Started cri-containerd-f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed.scope. Jul 15 11:27:42.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.168000 audit: BPF prog-id=196 op=LOAD Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4260 pid=4270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.169000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634313636306261623532313236323034313465386265633661303537 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4260 pid=4270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.169000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634313636306261623532313236323034313465386265633661303537 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit: BPF prog-id=197 op=LOAD Jul 15 11:27:42.169000 audit[4270]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002cbce0 items=0 ppid=4260 pid=4270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.169000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634313636306261623532313236323034313465386265633661303537 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit: BPF prog-id=198 op=LOAD Jul 15 11:27:42.169000 audit[4270]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002cbd28 items=0 ppid=4260 pid=4270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.169000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634313636306261623532313236323034313465386265633661303537 Jul 15 11:27:42.169000 audit: BPF prog-id=198 op=UNLOAD Jul 15 11:27:42.169000 audit: BPF prog-id=197 op=UNLOAD Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { perfmon } for pid=4270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit[4270]: AVC avc: denied { bpf } for pid=4270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.169000 audit: BPF prog-id=199 op=LOAD Jul 15 11:27:42.169000 audit[4270]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003ce138 items=0 ppid=4260 pid=4270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.169000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634313636306261623532313236323034313465386265633661303537 Jul 15 11:27:42.171199 systemd-resolved[1141]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:27:42.184000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.18:22-10.0.0.1:34022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:42.185313 systemd[1]: Started sshd@9-10.0.0.18:22-10.0.0.1:34022.service. Jul 15 11:27:42.193850 env[1203]: time="2025-07-15T11:27:42.193816417Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-7s67n,Uid:8efa25ab-67dd-4478-83aa-f81b926404db,Namespace:kube-system,Attempt:1,} returns sandbox id \"f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed\"" Jul 15 11:27:42.195474 kubelet[1942]: E0715 11:27:42.194596 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:42.198600 env[1203]: time="2025-07-15T11:27:42.198564424Z" level=info msg="CreateContainer within sandbox \"f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 15 11:27:42.218000 audit[4288]: USER_ACCT pid=4288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:42.219652 sshd[4288]: Accepted publickey for core from 10.0.0.1 port 34022 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:27:42.219000 audit[4288]: CRED_ACQ pid=4288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:42.219000 audit[4288]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe63091500 a2=3 a3=0 items=0 ppid=1 pid=4288 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.219000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:27:42.221279 sshd[4288]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:27:42.224856 systemd-logind[1191]: New session 10 of user core. Jul 15 11:27:42.225709 systemd[1]: Started session-10.scope. Jul 15 11:27:42.228000 audit[4288]: USER_START pid=4288 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:42.229000 audit[4296]: CRED_ACQ pid=4296 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:42.263104 env[1203]: time="2025-07-15T11:27:42.263023631Z" level=info msg="CreateContainer within sandbox \"f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"cc64ce17e0a269f5db71378ff9133cb740f456b0ca876e0f8b08438c3b293755\"" Jul 15 11:27:42.263769 env[1203]: time="2025-07-15T11:27:42.263719807Z" level=info msg="StartContainer for \"cc64ce17e0a269f5db71378ff9133cb740f456b0ca876e0f8b08438c3b293755\"" Jul 15 11:27:42.277400 systemd[1]: Started cri-containerd-cc64ce17e0a269f5db71378ff9133cb740f456b0ca876e0f8b08438c3b293755.scope. Jul 15 11:27:42.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit: BPF prog-id=200 op=LOAD Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4260 pid=4305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363363463653137653061323639663564623731333738666639313333 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=4260 pid=4305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363363463653137653061323639663564623731333738666639313333 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit: BPF prog-id=201 op=LOAD Jul 15 11:27:42.291000 audit[4305]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001b3200 items=0 ppid=4260 pid=4305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363363463653137653061323639663564623731333738666639313333 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit: BPF prog-id=202 op=LOAD Jul 15 11:27:42.291000 audit[4305]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001b3248 items=0 ppid=4260 pid=4305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363363463653137653061323639663564623731333738666639313333 Jul 15 11:27:42.291000 audit: BPF prog-id=202 op=UNLOAD Jul 15 11:27:42.291000 audit: BPF prog-id=201 op=UNLOAD Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { perfmon } for pid=4305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit[4305]: AVC avc: denied { bpf } for pid=4305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.291000 audit: BPF prog-id=203 op=LOAD Jul 15 11:27:42.291000 audit[4305]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0001b3658 items=0 ppid=4260 pid=4305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363363463653137653061323639663564623731333738666639313333 Jul 15 11:27:42.306685 env[1203]: time="2025-07-15T11:27:42.306638740Z" level=info msg="StartContainer for \"cc64ce17e0a269f5db71378ff9133cb740f456b0ca876e0f8b08438c3b293755\" returns successfully" Jul 15 11:27:42.317000 audit[4324]: AVC avc: denied { getattr } for pid=4324 comm="coredns" path="cgroup:[4026532369]" dev="nsfs" ino=4026532369 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c954 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 15 11:27:42.317000 audit[4324]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005aa38 a2=c0004949f8 a3=0 items=0 ppid=4260 pid=4324 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c954 key=(null) Jul 15 11:27:42.317000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 15 11:27:42.494512 sshd[4288]: pam_unix(sshd:session): session closed for user core Jul 15 11:27:42.494000 audit[4288]: USER_END pid=4288 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:42.494000 audit[4288]: CRED_DISP pid=4288 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:42.497037 systemd[1]: sshd@9-10.0.0.18:22-10.0.0.1:34022.service: Deactivated successfully. Jul 15 11:27:42.497946 systemd[1]: session-10.scope: Deactivated successfully. Jul 15 11:27:42.496000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.18:22-10.0.0.1:34022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:42.498665 systemd-logind[1191]: Session 10 logged out. Waiting for processes to exit. Jul 15 11:27:42.499471 systemd-logind[1191]: Removed session 10. Jul 15 11:27:42.679454 env[1203]: time="2025-07-15T11:27:42.679415023Z" level=info msg="StopPodSandbox for \"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b\"" Jul 15 11:27:42.759561 env[1203]: 2025-07-15 11:27:42.723 [INFO][4358] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" Jul 15 11:27:42.759561 env[1203]: 2025-07-15 11:27:42.723 [INFO][4358] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" iface="eth0" netns="/var/run/netns/cni-020762eb-24a6-1ed4-80ad-84f5bcf4c593" Jul 15 11:27:42.759561 env[1203]: 2025-07-15 11:27:42.723 [INFO][4358] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" iface="eth0" netns="/var/run/netns/cni-020762eb-24a6-1ed4-80ad-84f5bcf4c593" Jul 15 11:27:42.759561 env[1203]: 2025-07-15 11:27:42.724 [INFO][4358] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" iface="eth0" netns="/var/run/netns/cni-020762eb-24a6-1ed4-80ad-84f5bcf4c593" Jul 15 11:27:42.759561 env[1203]: 2025-07-15 11:27:42.724 [INFO][4358] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" Jul 15 11:27:42.759561 env[1203]: 2025-07-15 11:27:42.724 [INFO][4358] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" Jul 15 11:27:42.759561 env[1203]: 2025-07-15 11:27:42.749 [INFO][4367] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" HandleID="k8s-pod-network.cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" Workload="localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0" Jul 15 11:27:42.759561 env[1203]: 2025-07-15 11:27:42.749 [INFO][4367] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:42.759561 env[1203]: 2025-07-15 11:27:42.749 [INFO][4367] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:42.759561 env[1203]: 2025-07-15 11:27:42.754 [WARNING][4367] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" HandleID="k8s-pod-network.cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" Workload="localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0" Jul 15 11:27:42.759561 env[1203]: 2025-07-15 11:27:42.754 [INFO][4367] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" HandleID="k8s-pod-network.cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" Workload="localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0" Jul 15 11:27:42.759561 env[1203]: 2025-07-15 11:27:42.755 [INFO][4367] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:42.759561 env[1203]: 2025-07-15 11:27:42.757 [INFO][4358] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" Jul 15 11:27:42.760006 env[1203]: time="2025-07-15T11:27:42.759705982Z" level=info msg="TearDown network for sandbox \"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b\" successfully" Jul 15 11:27:42.760006 env[1203]: time="2025-07-15T11:27:42.759737932Z" level=info msg="StopPodSandbox for \"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b\" returns successfully" Jul 15 11:27:42.760564 env[1203]: time="2025-07-15T11:27:42.760529507Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-zhhmj,Uid:36ddb906-20c6-40b4-82cc-d84c9508332f,Namespace:calico-system,Attempt:1,}" Jul 15 11:27:42.886411 systemd-networkd[1025]: calid026b3d43fd: Link UP Jul 15 11:27:42.888249 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid026b3d43fd: link becomes ready Jul 15 11:27:42.887947 systemd-networkd[1025]: calid026b3d43fd: Gained carrier Jul 15 11:27:42.903995 env[1203]: 2025-07-15 11:27:42.808 [INFO][4376] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0 goldmane-768f4c5c69- calico-system 36ddb906-20c6-40b4-82cc-d84c9508332f 1046 0 2025-07-15 11:27:12 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-768f4c5c69-zhhmj eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calid026b3d43fd [] [] }} ContainerID="005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa" Namespace="calico-system" Pod="goldmane-768f4c5c69-zhhmj" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--zhhmj-" Jul 15 11:27:42.903995 env[1203]: 2025-07-15 11:27:42.808 [INFO][4376] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa" Namespace="calico-system" Pod="goldmane-768f4c5c69-zhhmj" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0" Jul 15 11:27:42.903995 env[1203]: 2025-07-15 11:27:42.836 [INFO][4390] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa" HandleID="k8s-pod-network.005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa" Workload="localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0" Jul 15 11:27:42.903995 env[1203]: 2025-07-15 11:27:42.836 [INFO][4390] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa" HandleID="k8s-pod-network.005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa" Workload="localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00019f7a0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-768f4c5c69-zhhmj", "timestamp":"2025-07-15 11:27:42.836642058 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:27:42.903995 env[1203]: 2025-07-15 11:27:42.836 [INFO][4390] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:42.903995 env[1203]: 2025-07-15 11:27:42.836 [INFO][4390] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:42.903995 env[1203]: 2025-07-15 11:27:42.836 [INFO][4390] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:27:42.903995 env[1203]: 2025-07-15 11:27:42.843 [INFO][4390] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa" host="localhost" Jul 15 11:27:42.903995 env[1203]: 2025-07-15 11:27:42.848 [INFO][4390] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:27:42.903995 env[1203]: 2025-07-15 11:27:42.854 [INFO][4390] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:27:42.903995 env[1203]: 2025-07-15 11:27:42.856 [INFO][4390] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:27:42.903995 env[1203]: 2025-07-15 11:27:42.858 [INFO][4390] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:27:42.903995 env[1203]: 2025-07-15 11:27:42.858 [INFO][4390] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa" host="localhost" Jul 15 11:27:42.903995 env[1203]: 2025-07-15 11:27:42.860 [INFO][4390] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa Jul 15 11:27:42.903995 env[1203]: 2025-07-15 11:27:42.874 [INFO][4390] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa" host="localhost" Jul 15 11:27:42.903995 env[1203]: 2025-07-15 11:27:42.882 [INFO][4390] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa" host="localhost" Jul 15 11:27:42.903995 env[1203]: 2025-07-15 11:27:42.882 [INFO][4390] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa" host="localhost" Jul 15 11:27:42.903995 env[1203]: 2025-07-15 11:27:42.882 [INFO][4390] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:42.903995 env[1203]: 2025-07-15 11:27:42.882 [INFO][4390] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa" HandleID="k8s-pod-network.005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa" Workload="localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0" Jul 15 11:27:42.904910 env[1203]: 2025-07-15 11:27:42.884 [INFO][4376] cni-plugin/k8s.go 418: Populated endpoint ContainerID="005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa" Namespace="calico-system" Pod="goldmane-768f4c5c69-zhhmj" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"36ddb906-20c6-40b4-82cc-d84c9508332f", ResourceVersion:"1046", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-768f4c5c69-zhhmj", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calid026b3d43fd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:42.904910 env[1203]: 2025-07-15 11:27:42.884 [INFO][4376] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa" Namespace="calico-system" Pod="goldmane-768f4c5c69-zhhmj" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0" Jul 15 11:27:42.904910 env[1203]: 2025-07-15 11:27:42.884 [INFO][4376] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid026b3d43fd ContainerID="005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa" Namespace="calico-system" Pod="goldmane-768f4c5c69-zhhmj" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0" Jul 15 11:27:42.904910 env[1203]: 2025-07-15 11:27:42.888 [INFO][4376] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa" Namespace="calico-system" Pod="goldmane-768f4c5c69-zhhmj" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0" Jul 15 11:27:42.904910 env[1203]: 2025-07-15 11:27:42.888 [INFO][4376] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa" Namespace="calico-system" Pod="goldmane-768f4c5c69-zhhmj" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"36ddb906-20c6-40b4-82cc-d84c9508332f", ResourceVersion:"1046", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa", Pod:"goldmane-768f4c5c69-zhhmj", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calid026b3d43fd", MAC:"0a:dc:ea:73:82:60", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:42.904910 env[1203]: 2025-07-15 11:27:42.901 [INFO][4376] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa" Namespace="calico-system" Pod="goldmane-768f4c5c69-zhhmj" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0" Jul 15 11:27:42.913000 audit[4412]: NETFILTER_CFG table=filter:116 family=2 entries=64 op=nft_register_chain pid=4412 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:27:42.913000 audit[4412]: SYSCALL arch=c000003e syscall=46 success=yes exit=31104 a0=3 a1=7ffe82108d90 a2=0 a3=7ffe82108d7c items=0 ppid=3324 pid=4412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.913000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:27:42.915892 env[1203]: time="2025-07-15T11:27:42.915337023Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:27:42.915892 env[1203]: time="2025-07-15T11:27:42.915458350Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:27:42.915892 env[1203]: time="2025-07-15T11:27:42.915494438Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:27:42.916046 env[1203]: time="2025-07-15T11:27:42.915967566Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa pid=4413 runtime=io.containerd.runc.v2 Jul 15 11:27:42.928180 kubelet[1942]: E0715 11:27:42.928132 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:42.928900 systemd[1]: Started cri-containerd-005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa.scope. Jul 15 11:27:42.938191 kubelet[1942]: E0715 11:27:42.938141 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:42.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.955000 audit: BPF prog-id=204 op=LOAD Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000199c48 a2=10 a3=1c items=0 ppid=4413 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030356430323464643164633532656238363564333931313432373365 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001996b0 a2=3c a3=c items=0 ppid=4413 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030356430323464643164633532656238363564333931313432373365 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit: BPF prog-id=205 op=LOAD Jul 15 11:27:42.956000 audit[4424]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001999d8 a2=78 a3=c000393900 items=0 ppid=4413 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030356430323464643164633532656238363564333931313432373365 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit: BPF prog-id=206 op=LOAD Jul 15 11:27:42.956000 audit[4424]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000199770 a2=78 a3=c000393948 items=0 ppid=4413 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030356430323464643164633532656238363564333931313432373365 Jul 15 11:27:42.956000 audit: BPF prog-id=206 op=UNLOAD Jul 15 11:27:42.956000 audit: BPF prog-id=205 op=UNLOAD Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:42.956000 audit: BPF prog-id=207 op=LOAD Jul 15 11:27:42.956000 audit[4424]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000199c30 a2=78 a3=c000393d58 items=0 ppid=4413 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030356430323464643164633532656238363564333931313432373365 Jul 15 11:27:42.960000 audit[4441]: NETFILTER_CFG table=filter:117 family=2 entries=14 op=nft_register_rule pid=4441 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:42.960000 audit[4441]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffbf7d5530 a2=0 a3=7fffbf7d551c items=0 ppid=2108 pid=4441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.960000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:42.961382 systemd-resolved[1141]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:27:42.966277 kubelet[1942]: I0715 11:27:42.959294 1942 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-7s67n" podStartSLOduration=41.959277263 podStartE2EDuration="41.959277263s" podCreationTimestamp="2025-07-15 11:27:01 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:27:42.942998311 +0000 UTC m=+47.363440443" watchObservedRunningTime="2025-07-15 11:27:42.959277263 +0000 UTC m=+47.379719395" Jul 15 11:27:42.968000 audit[4441]: NETFILTER_CFG table=nat:118 family=2 entries=44 op=nft_register_rule pid=4441 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:42.968000 audit[4441]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7fffbf7d5530 a2=0 a3=7fffbf7d551c items=0 ppid=2108 pid=4441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.968000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:42.987882 env[1203]: time="2025-07-15T11:27:42.987826195Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-zhhmj,Uid:36ddb906-20c6-40b4-82cc-d84c9508332f,Namespace:calico-system,Attempt:1,} returns sandbox id \"005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa\"" Jul 15 11:27:42.986000 audit[4450]: NETFILTER_CFG table=filter:119 family=2 entries=14 op=nft_register_rule pid=4450 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:42.986000 audit[4450]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe68cfbf60 a2=0 a3=7ffe68cfbf4c items=0 ppid=2108 pid=4450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.986000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:42.999000 audit[4450]: NETFILTER_CFG table=nat:120 family=2 entries=56 op=nft_register_chain pid=4450 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:42.999000 audit[4450]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffe68cfbf60 a2=0 a3=7ffe68cfbf4c items=0 ppid=2108 pid=4450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:42.999000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:43.183435 systemd[1]: run-netns-cni\x2d020762eb\x2d24a6\x2d1ed4\x2d80ad\x2d84f5bcf4c593.mount: Deactivated successfully. Jul 15 11:27:43.318288 systemd-networkd[1025]: cali399ea10dfe9: Gained IPv6LL Jul 15 11:27:43.446281 systemd-networkd[1025]: calif10205880b7: Gained IPv6LL Jul 15 11:27:43.941517 kubelet[1942]: E0715 11:27:43.941477 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:44.726247 systemd-networkd[1025]: calid026b3d43fd: Gained IPv6LL Jul 15 11:27:44.943588 kubelet[1942]: E0715 11:27:44.943539 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:44.965662 env[1203]: time="2025-07-15T11:27:44.965595399Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:44.973927 env[1203]: time="2025-07-15T11:27:44.973873159Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:44.977046 env[1203]: time="2025-07-15T11:27:44.976955581Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:44.978858 env[1203]: time="2025-07-15T11:27:44.978812355Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:44.979390 env[1203]: time="2025-07-15T11:27:44.979351415Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 15 11:27:44.980560 env[1203]: time="2025-07-15T11:27:44.980528854Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 15 11:27:44.981687 env[1203]: time="2025-07-15T11:27:44.981652332Z" level=info msg="CreateContainer within sandbox \"9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:27:44.997538 env[1203]: time="2025-07-15T11:27:44.997488151Z" level=info msg="CreateContainer within sandbox \"9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"0f725d46325f2e0114af3d271bc7ac35e9f3be7ed57034321e67e2eaa1791020\"" Jul 15 11:27:44.997972 env[1203]: time="2025-07-15T11:27:44.997937313Z" level=info msg="StartContainer for \"0f725d46325f2e0114af3d271bc7ac35e9f3be7ed57034321e67e2eaa1791020\"" Jul 15 11:27:45.017935 systemd[1]: Started cri-containerd-0f725d46325f2e0114af3d271bc7ac35e9f3be7ed57034321e67e2eaa1791020.scope. Jul 15 11:27:45.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.027000 audit: BPF prog-id=208 op=LOAD Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { bpf } for pid=4464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=3667 pid=4464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:45.028000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066373235643436333235663265303131346166336432373162633761 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { perfmon } for pid=4464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=3667 pid=4464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:45.028000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066373235643436333235663265303131346166336432373162633761 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { bpf } for pid=4464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { bpf } for pid=4464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { bpf } for pid=4464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { perfmon } for pid=4464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { perfmon } for pid=4464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { perfmon } for pid=4464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { perfmon } for pid=4464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { perfmon } for pid=4464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { bpf } for pid=4464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { bpf } for pid=4464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit: BPF prog-id=209 op=LOAD Jul 15 11:27:45.028000 audit[4464]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0003aeb40 items=0 ppid=3667 pid=4464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:45.028000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066373235643436333235663265303131346166336432373162633761 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { bpf } for pid=4464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { bpf } for pid=4464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { perfmon } for pid=4464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { perfmon } for pid=4464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { perfmon } for pid=4464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { perfmon } for pid=4464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { perfmon } for pid=4464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { bpf } for pid=4464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { bpf } for pid=4464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit: BPF prog-id=210 op=LOAD Jul 15 11:27:45.028000 audit[4464]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0003aeb88 items=0 ppid=3667 pid=4464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:45.028000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066373235643436333235663265303131346166336432373162633761 Jul 15 11:27:45.028000 audit: BPF prog-id=210 op=UNLOAD Jul 15 11:27:45.028000 audit: BPF prog-id=209 op=UNLOAD Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { bpf } for pid=4464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { bpf } for pid=4464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { bpf } for pid=4464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { perfmon } for pid=4464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { perfmon } for pid=4464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { perfmon } for pid=4464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { perfmon } for pid=4464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { perfmon } for pid=4464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { bpf } for pid=4464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit[4464]: AVC avc: denied { bpf } for pid=4464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.028000 audit: BPF prog-id=211 op=LOAD Jul 15 11:27:45.028000 audit[4464]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0003aef98 items=0 ppid=3667 pid=4464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:45.028000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066373235643436333235663265303131346166336432373162633761 Jul 15 11:27:45.058243 env[1203]: time="2025-07-15T11:27:45.058140603Z" level=info msg="StartContainer for \"0f725d46325f2e0114af3d271bc7ac35e9f3be7ed57034321e67e2eaa1791020\" returns successfully" Jul 15 11:27:45.355353 env[1203]: time="2025-07-15T11:27:45.355244479Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:45.357844 env[1203]: time="2025-07-15T11:27:45.357809020Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:45.359551 env[1203]: time="2025-07-15T11:27:45.359521603Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:45.361101 env[1203]: time="2025-07-15T11:27:45.361047355Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:45.361562 env[1203]: time="2025-07-15T11:27:45.361524470Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 15 11:27:45.363320 env[1203]: time="2025-07-15T11:27:45.363295042Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 15 11:27:45.364120 env[1203]: time="2025-07-15T11:27:45.364090955Z" level=info msg="CreateContainer within sandbox \"3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:27:45.376241 env[1203]: time="2025-07-15T11:27:45.376196495Z" level=info msg="CreateContainer within sandbox \"3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"281db4515273ea0831692f14e5b3c731f1de3e2651f1bec571e402b74850cb10\"" Jul 15 11:27:45.376655 env[1203]: time="2025-07-15T11:27:45.376625620Z" level=info msg="StartContainer for \"281db4515273ea0831692f14e5b3c731f1de3e2651f1bec571e402b74850cb10\"" Jul 15 11:27:45.391807 systemd[1]: Started cri-containerd-281db4515273ea0831692f14e5b3c731f1de3e2651f1bec571e402b74850cb10.scope. Jul 15 11:27:45.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit: BPF prog-id=212 op=LOAD Jul 15 11:27:45.403000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[4504]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3871 pid=4504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:45.403000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238316462343531353237336561303833313639326631346535623363 Jul 15 11:27:45.403000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[4504]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3871 pid=4504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:45.403000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238316462343531353237336561303833313639326631346535623363 Jul 15 11:27:45.403000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit: BPF prog-id=213 op=LOAD Jul 15 11:27:45.403000 audit[4504]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003a2630 items=0 ppid=3871 pid=4504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:45.403000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238316462343531353237336561303833313639326631346535623363 Jul 15 11:27:45.403000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.403000 audit: BPF prog-id=214 op=LOAD Jul 15 11:27:45.403000 audit[4504]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003a2678 items=0 ppid=3871 pid=4504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:45.403000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238316462343531353237336561303833313639326631346535623363 Jul 15 11:27:45.404000 audit: BPF prog-id=214 op=UNLOAD Jul 15 11:27:45.404000 audit: BPF prog-id=213 op=UNLOAD Jul 15 11:27:45.404000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.404000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.404000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.404000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.404000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.404000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.404000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.404000 audit[4504]: AVC avc: denied { perfmon } for pid=4504 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.404000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.404000 audit[4504]: AVC avc: denied { bpf } for pid=4504 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:45.404000 audit: BPF prog-id=215 op=LOAD Jul 15 11:27:45.404000 audit[4504]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003a2a88 items=0 ppid=3871 pid=4504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:45.404000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238316462343531353237336561303833313639326631346535623363 Jul 15 11:27:45.430430 env[1203]: time="2025-07-15T11:27:45.430380171Z" level=info msg="StartContainer for \"281db4515273ea0831692f14e5b3c731f1de3e2651f1bec571e402b74850cb10\" returns successfully" Jul 15 11:27:45.983102 kubelet[1942]: I0715 11:27:45.983028 1942 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-7bc956794c-hwnqw" podStartSLOduration=30.581677269 podStartE2EDuration="35.983006459s" podCreationTimestamp="2025-07-15 11:27:10 +0000 UTC" firstStartedPulling="2025-07-15 11:27:39.961341069 +0000 UTC m=+44.381783201" lastFinishedPulling="2025-07-15 11:27:45.362670239 +0000 UTC m=+49.783112391" observedRunningTime="2025-07-15 11:27:45.964826454 +0000 UTC m=+50.385268586" watchObservedRunningTime="2025-07-15 11:27:45.983006459 +0000 UTC m=+50.403448581" Jul 15 11:27:46.022000 audit[4540]: NETFILTER_CFG table=filter:121 family=2 entries=14 op=nft_register_rule pid=4540 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:46.022000 audit[4540]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff4f8b8960 a2=0 a3=7fff4f8b894c items=0 ppid=2108 pid=4540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:46.022000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:46.030000 audit[4540]: NETFILTER_CFG table=nat:122 family=2 entries=20 op=nft_register_rule pid=4540 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:46.030000 audit[4540]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fff4f8b8960 a2=0 a3=7fff4f8b894c items=0 ppid=2108 pid=4540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:46.030000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:46.042000 audit[4542]: NETFILTER_CFG table=filter:123 family=2 entries=14 op=nft_register_rule pid=4542 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:46.042000 audit[4542]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff2723bac0 a2=0 a3=7fff2723baac items=0 ppid=2108 pid=4542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:46.042000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:46.048000 audit[4542]: NETFILTER_CFG table=nat:124 family=2 entries=20 op=nft_register_rule pid=4542 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:46.048000 audit[4542]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fff2723bac0 a2=0 a3=7fff2723baac items=0 ppid=2108 pid=4542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:46.048000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:46.405000 audit[4475]: AVC avc: denied { watch } for pid=4475 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_27_27.3074563050/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c738 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c61,c738 tclass=file permissive=0 Jul 15 11:27:46.405000 audit[4475]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000e34660 a2=fc6 a3=0 items=0 ppid=3667 pid=4475 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c738 key=(null) Jul 15 11:27:46.405000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:27:46.461000 audit[4515]: AVC avc: denied { watch } for pid=4515 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_27_27.1812869871/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c714,c814 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c714,c814 tclass=file permissive=0 Jul 15 11:27:46.461000 audit[4515]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000c2c000 a2=fc6 a3=0 items=0 ppid=3871 pid=4515 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c714,c814 key=(null) Jul 15 11:27:46.461000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:27:46.954212 kubelet[1942]: I0715 11:27:46.954170 1942 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:27:46.954212 kubelet[1942]: I0715 11:27:46.954205 1942 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:27:47.108876 env[1203]: time="2025-07-15T11:27:47.108828790Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:47.110803 env[1203]: time="2025-07-15T11:27:47.110771103Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:47.112377 env[1203]: time="2025-07-15T11:27:47.112331200Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:47.113639 env[1203]: time="2025-07-15T11:27:47.113618956Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:47.114057 env[1203]: time="2025-07-15T11:27:47.114035967Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d\"" Jul 15 11:27:47.114984 env[1203]: time="2025-07-15T11:27:47.114955312Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 15 11:27:47.116197 env[1203]: time="2025-07-15T11:27:47.116173036Z" level=info msg="CreateContainer within sandbox \"8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 15 11:27:47.132241 env[1203]: time="2025-07-15T11:27:47.132192085Z" level=info msg="CreateContainer within sandbox \"8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"40d7d15878fe93b9d2d62e1e21d5f873464f76ed06fba9c47df8bcee34fc013a\"" Jul 15 11:27:47.132919 env[1203]: time="2025-07-15T11:27:47.132892409Z" level=info msg="StartContainer for \"40d7d15878fe93b9d2d62e1e21d5f873464f76ed06fba9c47df8bcee34fc013a\"" Jul 15 11:27:47.163002 systemd[1]: run-containerd-runc-k8s.io-40d7d15878fe93b9d2d62e1e21d5f873464f76ed06fba9c47df8bcee34fc013a-runc.syAUvB.mount: Deactivated successfully. Jul 15 11:27:47.165053 systemd[1]: Started cri-containerd-40d7d15878fe93b9d2d62e1e21d5f873464f76ed06fba9c47df8bcee34fc013a.scope. Jul 15 11:27:47.186000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.189786 kernel: kauditd_printk_skb: 385 callbacks suppressed Jul 15 11:27:47.189845 kernel: audit: type=1400 audit(1752578867.186:1410): avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.186000 audit[4550]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f7a1c39aa88 items=0 ppid=3923 pid=4550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:47.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430643764313538373866653933623964326436326531653231643566 Jul 15 11:27:47.205693 kernel: audit: type=1300 audit(1752578867.186:1410): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f7a1c39aa88 items=0 ppid=3923 pid=4550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:47.205917 kernel: audit: type=1327 audit(1752578867.186:1410): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430643764313538373866653933623964326436326531653231643566 Jul 15 11:27:47.186000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.214586 kernel: audit: type=1400 audit(1752578867.186:1411): avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.214672 kernel: audit: type=1400 audit(1752578867.186:1411): avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.186000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.186000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.222800 kernel: audit: type=1400 audit(1752578867.186:1411): avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.222854 kernel: audit: type=1400 audit(1752578867.186:1411): avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.186000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.186000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.228654 kernel: audit: type=1400 audit(1752578867.186:1411): avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.228707 kernel: audit: type=1400 audit(1752578867.186:1411): avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.186000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.186000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.234114 kernel: audit: type=1400 audit(1752578867.186:1411): avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.186000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.186000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.186000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.186000 audit: BPF prog-id=216 op=LOAD Jul 15 11:27:47.186000 audit[4550]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00029a608 items=0 ppid=3923 pid=4550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:47.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430643764313538373866653933623964326436326531653231643566 Jul 15 11:27:47.187000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.187000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.187000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.187000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.187000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.187000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.187000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.187000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.187000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.187000 audit: BPF prog-id=217 op=LOAD Jul 15 11:27:47.187000 audit[4550]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00029a658 items=0 ppid=3923 pid=4550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:47.187000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430643764313538373866653933623964326436326531653231643566 Jul 15 11:27:47.187000 audit: BPF prog-id=217 op=UNLOAD Jul 15 11:27:47.187000 audit: BPF prog-id=216 op=UNLOAD Jul 15 11:27:47.187000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.187000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.187000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.187000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.187000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.187000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.187000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.187000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.187000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.187000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:47.187000 audit: BPF prog-id=218 op=LOAD Jul 15 11:27:47.187000 audit[4550]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00029a6e8 items=0 ppid=3923 pid=4550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:47.187000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430643764313538373866653933623964326436326531653231643566 Jul 15 11:27:47.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.18:22-10.0.0.1:34032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:47.499604 systemd[1]: Started sshd@10-10.0.0.18:22-10.0.0.1:34032.service. Jul 15 11:27:47.765000 audit[4581]: USER_ACCT pid=4581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:47.766786 sshd[4581]: Accepted publickey for core from 10.0.0.1 port 34032 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:27:47.766000 audit[4581]: CRED_ACQ pid=4581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:47.766000 audit[4581]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdedbba6e0 a2=3 a3=0 items=0 ppid=1 pid=4581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:47.766000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:27:47.767806 sshd[4581]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:27:47.771131 systemd-logind[1191]: New session 11 of user core. Jul 15 11:27:47.773722 systemd[1]: Started session-11.scope. Jul 15 11:27:47.776000 audit[4581]: USER_START pid=4581 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:47.777000 audit[4583]: CRED_ACQ pid=4583 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:47.784576 env[1203]: time="2025-07-15T11:27:47.784509434Z" level=info msg="StartContainer for \"40d7d15878fe93b9d2d62e1e21d5f873464f76ed06fba9c47df8bcee34fc013a\" returns successfully" Jul 15 11:27:48.076103 sshd[4581]: pam_unix(sshd:session): session closed for user core Jul 15 11:27:48.075000 audit[4581]: USER_END pid=4581 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:48.076000 audit[4581]: CRED_DISP pid=4581 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:48.079126 systemd[1]: sshd@10-10.0.0.18:22-10.0.0.1:34032.service: Deactivated successfully. Jul 15 11:27:48.078000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.18:22-10.0.0.1:34032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:48.079657 systemd[1]: session-11.scope: Deactivated successfully. Jul 15 11:27:48.080219 systemd-logind[1191]: Session 11 logged out. Waiting for processes to exit. Jul 15 11:27:48.081183 systemd[1]: Started sshd@11-10.0.0.18:22-10.0.0.1:34038.service. Jul 15 11:27:48.080000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.18:22-10.0.0.1:34038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:48.081927 systemd-logind[1191]: Removed session 11. Jul 15 11:27:48.109000 audit[4599]: USER_ACCT pid=4599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:48.110422 sshd[4599]: Accepted publickey for core from 10.0.0.1 port 34038 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:27:48.110000 audit[4599]: CRED_ACQ pid=4599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:48.110000 audit[4599]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff8a469c20 a2=3 a3=0 items=0 ppid=1 pid=4599 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:48.110000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:27:48.111434 sshd[4599]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:27:48.114967 systemd-logind[1191]: New session 12 of user core. Jul 15 11:27:48.115769 systemd[1]: Started session-12.scope. Jul 15 11:27:48.118000 audit[4599]: USER_START pid=4599 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:48.120000 audit[4601]: CRED_ACQ pid=4601 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:48.266962 sshd[4599]: pam_unix(sshd:session): session closed for user core Jul 15 11:27:48.266000 audit[4599]: USER_END pid=4599 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:48.266000 audit[4599]: CRED_DISP pid=4599 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:48.270529 systemd[1]: sshd@11-10.0.0.18:22-10.0.0.1:34038.service: Deactivated successfully. Jul 15 11:27:48.269000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.18:22-10.0.0.1:34038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:48.271101 systemd[1]: session-12.scope: Deactivated successfully. Jul 15 11:27:48.272000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.18:22-10.0.0.1:34044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:48.273510 systemd-logind[1191]: Session 12 logged out. Waiting for processes to exit. Jul 15 11:27:48.273729 systemd[1]: Started sshd@12-10.0.0.18:22-10.0.0.1:34044.service. Jul 15 11:27:48.275341 systemd-logind[1191]: Removed session 12. Jul 15 11:27:48.308000 audit[4611]: USER_ACCT pid=4611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:48.309793 sshd[4611]: Accepted publickey for core from 10.0.0.1 port 34044 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:27:48.309000 audit[4611]: CRED_ACQ pid=4611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:48.309000 audit[4611]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe95e89290 a2=3 a3=0 items=0 ppid=1 pid=4611 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:48.309000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:27:48.310737 sshd[4611]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:27:48.314627 systemd-logind[1191]: New session 13 of user core. Jul 15 11:27:48.315367 systemd[1]: Started session-13.scope. Jul 15 11:27:48.318000 audit[4611]: USER_START pid=4611 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:48.319000 audit[4613]: CRED_ACQ pid=4613 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:48.424317 sshd[4611]: pam_unix(sshd:session): session closed for user core Jul 15 11:27:48.424000 audit[4611]: USER_END pid=4611 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:48.424000 audit[4611]: CRED_DISP pid=4611 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:48.427000 systemd[1]: sshd@12-10.0.0.18:22-10.0.0.1:34044.service: Deactivated successfully. Jul 15 11:27:48.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.18:22-10.0.0.1:34044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:48.428006 systemd[1]: session-13.scope: Deactivated successfully. Jul 15 11:27:48.428549 systemd-logind[1191]: Session 13 logged out. Waiting for processes to exit. Jul 15 11:27:48.429244 systemd-logind[1191]: Removed session 13. Jul 15 11:27:50.375542 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2714000084.mount: Deactivated successfully. Jul 15 11:27:50.533854 env[1203]: time="2025-07-15T11:27:50.533778967Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:50.537220 env[1203]: time="2025-07-15T11:27:50.537166846Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:50.539706 env[1203]: time="2025-07-15T11:27:50.539679067Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:50.542445 env[1203]: time="2025-07-15T11:27:50.542411220Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:50.542935 env[1203]: time="2025-07-15T11:27:50.542895543Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f\"" Jul 15 11:27:50.543985 env[1203]: time="2025-07-15T11:27:50.543942423Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 15 11:27:50.545452 env[1203]: time="2025-07-15T11:27:50.545415247Z" level=info msg="CreateContainer within sandbox \"2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 15 11:27:50.567703 env[1203]: time="2025-07-15T11:27:50.567651324Z" level=info msg="CreateContainer within sandbox \"2d8398d2e5759873e3f5579b88e684a29d40d20ea5a738d90198b379f850b98c\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"b5959eb5aadb09077e6446c0596d3591f8f797920c74127786cde904cd69440e\"" Jul 15 11:27:50.568316 env[1203]: time="2025-07-15T11:27:50.568268697Z" level=info msg="StartContainer for \"b5959eb5aadb09077e6446c0596d3591f8f797920c74127786cde904cd69440e\"" Jul 15 11:27:50.581912 systemd[1]: Started cri-containerd-b5959eb5aadb09077e6446c0596d3591f8f797920c74127786cde904cd69440e.scope. Jul 15 11:27:50.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.594000 audit: BPF prog-id=219 op=LOAD Jul 15 11:27:50.594000 audit[4636]: AVC avc: denied { bpf } for pid=4636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.594000 audit[4636]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3570 pid=4636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:50.594000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235393539656235616164623039303737653634343663303539366433 Jul 15 11:27:50.594000 audit[4636]: AVC avc: denied { perfmon } for pid=4636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.594000 audit[4636]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3570 pid=4636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:50.594000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235393539656235616164623039303737653634343663303539366433 Jul 15 11:27:50.594000 audit[4636]: AVC avc: denied { bpf } for pid=4636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.594000 audit[4636]: AVC avc: denied { bpf } for pid=4636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.594000 audit[4636]: AVC avc: denied { bpf } for pid=4636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.594000 audit[4636]: AVC avc: denied { perfmon } for pid=4636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.594000 audit[4636]: AVC avc: denied { perfmon } for pid=4636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.594000 audit[4636]: AVC avc: denied { perfmon } for pid=4636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.594000 audit[4636]: AVC avc: denied { perfmon } for pid=4636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.594000 audit[4636]: AVC avc: denied { perfmon } for pid=4636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.594000 audit[4636]: AVC avc: denied { bpf } for pid=4636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.594000 audit[4636]: AVC avc: denied { bpf } for pid=4636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.594000 audit: BPF prog-id=220 op=LOAD Jul 15 11:27:50.594000 audit[4636]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000277dc0 items=0 ppid=3570 pid=4636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:50.594000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235393539656235616164623039303737653634343663303539366433 Jul 15 11:27:50.595000 audit[4636]: AVC avc: denied { bpf } for pid=4636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.595000 audit[4636]: AVC avc: denied { bpf } for pid=4636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.595000 audit[4636]: AVC avc: denied { perfmon } for pid=4636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.595000 audit[4636]: AVC avc: denied { perfmon } for pid=4636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.595000 audit[4636]: AVC avc: denied { perfmon } for pid=4636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.595000 audit[4636]: AVC avc: denied { perfmon } for pid=4636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.595000 audit[4636]: AVC avc: denied { perfmon } for pid=4636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.595000 audit[4636]: AVC avc: denied { bpf } for pid=4636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.595000 audit[4636]: AVC avc: denied { bpf } for pid=4636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.595000 audit: BPF prog-id=221 op=LOAD Jul 15 11:27:50.595000 audit[4636]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000277e08 items=0 ppid=3570 pid=4636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:50.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235393539656235616164623039303737653634343663303539366433 Jul 15 11:27:50.595000 audit: BPF prog-id=221 op=UNLOAD Jul 15 11:27:50.595000 audit: BPF prog-id=220 op=UNLOAD Jul 15 11:27:50.595000 audit[4636]: AVC avc: denied { bpf } for pid=4636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.595000 audit[4636]: AVC avc: denied { bpf } for pid=4636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.595000 audit[4636]: AVC avc: denied { bpf } for pid=4636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.595000 audit[4636]: AVC avc: denied { perfmon } for pid=4636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.595000 audit[4636]: AVC avc: denied { perfmon } for pid=4636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.595000 audit[4636]: AVC avc: denied { perfmon } for pid=4636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.595000 audit[4636]: AVC avc: denied { perfmon } for pid=4636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.595000 audit[4636]: AVC avc: denied { perfmon } for pid=4636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.595000 audit[4636]: AVC avc: denied { bpf } for pid=4636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.595000 audit[4636]: AVC avc: denied { bpf } for pid=4636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:50.595000 audit: BPF prog-id=222 op=LOAD Jul 15 11:27:50.595000 audit[4636]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003d2218 items=0 ppid=3570 pid=4636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:50.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235393539656235616164623039303737653634343663303539366433 Jul 15 11:27:50.623618 env[1203]: time="2025-07-15T11:27:50.623559582Z" level=info msg="StartContainer for \"b5959eb5aadb09077e6446c0596d3591f8f797920c74127786cde904cd69440e\" returns successfully" Jul 15 11:27:50.978184 kubelet[1942]: I0715 11:27:50.977801 1942 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-7bc956794c-rnlsq" podStartSLOduration=35.153002152 podStartE2EDuration="40.977782328s" podCreationTimestamp="2025-07-15 11:27:10 +0000 UTC" firstStartedPulling="2025-07-15 11:27:39.155550496 +0000 UTC m=+43.575992628" lastFinishedPulling="2025-07-15 11:27:44.980330642 +0000 UTC m=+49.400772804" observedRunningTime="2025-07-15 11:27:45.983992169 +0000 UTC m=+50.404434301" watchObservedRunningTime="2025-07-15 11:27:50.977782328 +0000 UTC m=+55.398224460" Jul 15 11:27:50.978184 kubelet[1942]: I0715 11:27:50.977920 1942 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-67f5596b44-57cml" podStartSLOduration=2.474162375 podStartE2EDuration="13.977912753s" podCreationTimestamp="2025-07-15 11:27:37 +0000 UTC" firstStartedPulling="2025-07-15 11:27:39.039963656 +0000 UTC m=+43.460405788" lastFinishedPulling="2025-07-15 11:27:50.543714034 +0000 UTC m=+54.964156166" observedRunningTime="2025-07-15 11:27:50.97706646 +0000 UTC m=+55.397508613" watchObservedRunningTime="2025-07-15 11:27:50.977912753 +0000 UTC m=+55.398354905" Jul 15 11:27:50.989000 audit[4669]: NETFILTER_CFG table=filter:125 family=2 entries=13 op=nft_register_rule pid=4669 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:50.989000 audit[4669]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffc7d178270 a2=0 a3=7ffc7d17825c items=0 ppid=2108 pid=4669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:50.989000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:50.994000 audit[4669]: NETFILTER_CFG table=nat:126 family=2 entries=27 op=nft_register_chain pid=4669 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:50.994000 audit[4669]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffc7d178270 a2=0 a3=7ffc7d17825c items=0 ppid=2108 pid=4669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:50.994000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:52.504000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:27:52.507127 kernel: kauditd_printk_skb: 129 callbacks suppressed Jul 15 11:27:52.507267 kernel: audit: type=1400 audit(1752578872.504:1463): avc: denied { watch } for pid=1827 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:27:52.504000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00229dd20 a2=fc6 a3=0 items=0 ppid=1641 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 key=(null) Jul 15 11:27:52.519536 kernel: audit: type=1300 audit(1752578872.504:1463): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00229dd20 a2=fc6 a3=0 items=0 ppid=1641 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 key=(null) Jul 15 11:27:52.504000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:27:52.526089 kernel: audit: type=1327 audit(1752578872.504:1463): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:27:52.526140 kernel: audit: type=1400 audit(1752578872.504:1464): avc: denied { watch } for pid=1827 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7309 scontext=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:27:52.504000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7309 scontext=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:27:52.504000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00128b2c0 a2=fc6 a3=0 items=0 ppid=1641 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 key=(null) Jul 15 11:27:52.538052 kernel: audit: type=1300 audit(1752578872.504:1464): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00128b2c0 a2=fc6 a3=0 items=0 ppid=1641 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 key=(null) Jul 15 11:27:52.538113 kernel: audit: type=1327 audit(1752578872.504:1464): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:27:52.504000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:27:52.812000 audit[1796]: AVC avc: denied { watch } for pid=1796 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7305 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:27:52.812000 audit[1796]: AVC avc: denied { watch } for pid=1796 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7309 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:27:52.822599 kernel: audit: type=1400 audit(1752578872.812:1465): avc: denied { watch } for pid=1796 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7305 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:27:52.822670 kernel: audit: type=1400 audit(1752578872.812:1466): avc: denied { watch } for pid=1796 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7309 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:27:52.812000 audit[1796]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c00e1b8b10 a2=fc6 a3=0 items=0 ppid=1670 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 key=(null) Jul 15 11:27:52.828418 kernel: audit: type=1300 audit(1752578872.812:1465): arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c00e1b8b10 a2=fc6 a3=0 items=0 ppid=1670 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 key=(null) Jul 15 11:27:52.812000 audit[1796]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00c2c11d0 a2=fc6 a3=0 items=0 ppid=1670 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 key=(null) Jul 15 11:27:52.833956 kernel: audit: type=1300 audit(1752578872.812:1466): arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00c2c11d0 a2=fc6 a3=0 items=0 ppid=1670 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 key=(null) Jul 15 11:27:52.812000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:27:52.812000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:27:52.817000 audit[1796]: AVC avc: denied { watch } for pid=1796 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:27:52.817000 audit[1796]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00e1b8b40 a2=fc6 a3=0 items=0 ppid=1670 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 key=(null) Jul 15 11:27:52.817000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:27:52.817000 audit[1796]: AVC avc: denied { watch } for pid=1796 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:27:52.817000 audit[1796]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00dae9660 a2=fc6 a3=0 items=0 ppid=1670 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 key=(null) Jul 15 11:27:52.817000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:27:52.822000 audit[1796]: AVC avc: denied { watch } for pid=1796 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:27:52.822000 audit[1796]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c00d48d360 a2=fc6 a3=0 items=0 ppid=1670 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 key=(null) Jul 15 11:27:52.822000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:27:52.822000 audit[1796]: AVC avc: denied { watch } for pid=1796 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7309 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:27:52.822000 audit[1796]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c00c2c1470 a2=fc6 a3=0 items=0 ppid=1670 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c816 key=(null) Jul 15 11:27:52.822000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 15 11:27:53.428534 systemd[1]: Started sshd@13-10.0.0.18:22-10.0.0.1:54148.service. Jul 15 11:27:53.427000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.18:22-10.0.0.1:54148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:53.899000 audit[4673]: USER_ACCT pid=4673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:53.900977 sshd[4673]: Accepted publickey for core from 10.0.0.1 port 54148 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:27:53.900000 audit[4673]: CRED_ACQ pid=4673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:53.900000 audit[4673]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda35d2620 a2=3 a3=0 items=0 ppid=1 pid=4673 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:53.900000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:27:53.902035 sshd[4673]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:27:53.906006 systemd-logind[1191]: New session 14 of user core. Jul 15 11:27:53.907058 systemd[1]: Started session-14.scope. Jul 15 11:27:53.910000 audit[4673]: USER_START pid=4673 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:53.911000 audit[4675]: CRED_ACQ pid=4675 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:54.078436 sshd[4673]: pam_unix(sshd:session): session closed for user core Jul 15 11:27:54.078000 audit[4673]: USER_END pid=4673 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:54.078000 audit[4673]: CRED_DISP pid=4673 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:54.079000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.18:22-10.0.0.1:54148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:54.080688 systemd[1]: sshd@13-10.0.0.18:22-10.0.0.1:54148.service: Deactivated successfully. Jul 15 11:27:54.081422 systemd[1]: session-14.scope: Deactivated successfully. Jul 15 11:27:54.081958 systemd-logind[1191]: Session 14 logged out. Waiting for processes to exit. Jul 15 11:27:54.082651 systemd-logind[1191]: Removed session 14. Jul 15 11:27:55.142861 env[1203]: time="2025-07-15T11:27:55.142807458Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:55.145169 env[1203]: time="2025-07-15T11:27:55.145123464Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:55.146548 env[1203]: time="2025-07-15T11:27:55.146525905Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:55.147876 env[1203]: time="2025-07-15T11:27:55.147847979Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:55.148421 env[1203]: time="2025-07-15T11:27:55.148390008Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a\"" Jul 15 11:27:55.149423 env[1203]: time="2025-07-15T11:27:55.149395340Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 15 11:27:55.160911 env[1203]: time="2025-07-15T11:27:55.158244182Z" level=info msg="CreateContainer within sandbox \"7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 15 11:27:55.172041 env[1203]: time="2025-07-15T11:27:55.171990069Z" level=info msg="CreateContainer within sandbox \"7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"66c04f6b5a097d659bc609cb26b192ffdddeaf9ff9889b233700128526e424f6\"" Jul 15 11:27:55.172489 env[1203]: time="2025-07-15T11:27:55.172429278Z" level=info msg="StartContainer for \"66c04f6b5a097d659bc609cb26b192ffdddeaf9ff9889b233700128526e424f6\"" Jul 15 11:27:55.188516 systemd[1]: Started cri-containerd-66c04f6b5a097d659bc609cb26b192ffdddeaf9ff9889b233700128526e424f6.scope. Jul 15 11:27:55.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.219000 audit: BPF prog-id=223 op=LOAD Jul 15 11:27:55.219000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.219000 audit[4699]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000119c48 a2=10 a3=1c items=0 ppid=4212 pid=4699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:55.219000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636633034663662356130393764363539626336303963623236623139 Jul 15 11:27:55.219000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.219000 audit[4699]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001196b0 a2=3c a3=8 items=0 ppid=4212 pid=4699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:55.219000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636633034663662356130393764363539626336303963623236623139 Jul 15 11:27:55.219000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.219000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.219000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.219000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.219000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.219000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.219000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.219000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.219000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.219000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.219000 audit: BPF prog-id=224 op=LOAD Jul 15 11:27:55.219000 audit[4699]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001199d8 a2=78 a3=c000302840 items=0 ppid=4212 pid=4699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:55.219000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636633034663662356130393764363539626336303963623236623139 Jul 15 11:27:55.220000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.220000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.220000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.220000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.220000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.220000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.220000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.220000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.220000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.220000 audit: BPF prog-id=225 op=LOAD Jul 15 11:27:55.220000 audit[4699]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000119770 a2=78 a3=c000302888 items=0 ppid=4212 pid=4699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:55.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636633034663662356130393764363539626336303963623236623139 Jul 15 11:27:55.220000 audit: BPF prog-id=225 op=UNLOAD Jul 15 11:27:55.220000 audit: BPF prog-id=224 op=UNLOAD Jul 15 11:27:55.220000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.220000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.220000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.220000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.220000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.220000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.220000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.220000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.220000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.220000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:27:55.220000 audit: BPF prog-id=226 op=LOAD Jul 15 11:27:55.220000 audit[4699]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000119c30 a2=78 a3=c000302c98 items=0 ppid=4212 pid=4699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:55.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636633034663662356130393764363539626336303963623236623139 Jul 15 11:27:55.505094 env[1203]: time="2025-07-15T11:27:55.505013681Z" level=info msg="StartContainer for \"66c04f6b5a097d659bc609cb26b192ffdddeaf9ff9889b233700128526e424f6\" returns successfully" Jul 15 11:27:55.673921 env[1203]: time="2025-07-15T11:27:55.673874116Z" level=info msg="StopPodSandbox for \"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651\"" Jul 15 11:27:55.792561 env[1203]: 2025-07-15 11:27:55.759 [WARNING][4751] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--tnbnz-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b084be4c-45cb-4d18-beeb-0bfdfb2cbea5", ResourceVersion:"998", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f", Pod:"csi-node-driver-tnbnz", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali0abb95ae011", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:55.792561 env[1203]: 2025-07-15 11:27:55.762 [INFO][4751] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" Jul 15 11:27:55.792561 env[1203]: 2025-07-15 11:27:55.762 [INFO][4751] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" iface="eth0" netns="" Jul 15 11:27:55.792561 env[1203]: 2025-07-15 11:27:55.762 [INFO][4751] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" Jul 15 11:27:55.792561 env[1203]: 2025-07-15 11:27:55.762 [INFO][4751] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" Jul 15 11:27:55.792561 env[1203]: 2025-07-15 11:27:55.781 [INFO][4762] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" HandleID="k8s-pod-network.abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" Workload="localhost-k8s-csi--node--driver--tnbnz-eth0" Jul 15 11:27:55.792561 env[1203]: 2025-07-15 11:27:55.781 [INFO][4762] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:55.792561 env[1203]: 2025-07-15 11:27:55.781 [INFO][4762] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:55.792561 env[1203]: 2025-07-15 11:27:55.787 [WARNING][4762] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" HandleID="k8s-pod-network.abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" Workload="localhost-k8s-csi--node--driver--tnbnz-eth0" Jul 15 11:27:55.792561 env[1203]: 2025-07-15 11:27:55.787 [INFO][4762] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" HandleID="k8s-pod-network.abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" Workload="localhost-k8s-csi--node--driver--tnbnz-eth0" Jul 15 11:27:55.792561 env[1203]: 2025-07-15 11:27:55.789 [INFO][4762] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:55.792561 env[1203]: 2025-07-15 11:27:55.791 [INFO][4751] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" Jul 15 11:27:55.793184 env[1203]: time="2025-07-15T11:27:55.793138277Z" level=info msg="TearDown network for sandbox \"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651\" successfully" Jul 15 11:27:55.793184 env[1203]: time="2025-07-15T11:27:55.793176330Z" level=info msg="StopPodSandbox for \"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651\" returns successfully" Jul 15 11:27:55.794944 env[1203]: time="2025-07-15T11:27:55.794914470Z" level=info msg="RemovePodSandbox for \"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651\"" Jul 15 11:27:55.794990 env[1203]: time="2025-07-15T11:27:55.794952413Z" level=info msg="Forcibly stopping sandbox \"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651\"" Jul 15 11:27:55.862458 env[1203]: 2025-07-15 11:27:55.829 [WARNING][4780] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--tnbnz-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b084be4c-45cb-4d18-beeb-0bfdfb2cbea5", ResourceVersion:"998", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f", Pod:"csi-node-driver-tnbnz", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali0abb95ae011", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:55.862458 env[1203]: 2025-07-15 11:27:55.829 [INFO][4780] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" Jul 15 11:27:55.862458 env[1203]: 2025-07-15 11:27:55.829 [INFO][4780] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" iface="eth0" netns="" Jul 15 11:27:55.862458 env[1203]: 2025-07-15 11:27:55.829 [INFO][4780] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" Jul 15 11:27:55.862458 env[1203]: 2025-07-15 11:27:55.830 [INFO][4780] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" Jul 15 11:27:55.862458 env[1203]: 2025-07-15 11:27:55.848 [INFO][4790] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" HandleID="k8s-pod-network.abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" Workload="localhost-k8s-csi--node--driver--tnbnz-eth0" Jul 15 11:27:55.862458 env[1203]: 2025-07-15 11:27:55.849 [INFO][4790] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:55.862458 env[1203]: 2025-07-15 11:27:55.849 [INFO][4790] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:55.862458 env[1203]: 2025-07-15 11:27:55.857 [WARNING][4790] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" HandleID="k8s-pod-network.abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" Workload="localhost-k8s-csi--node--driver--tnbnz-eth0" Jul 15 11:27:55.862458 env[1203]: 2025-07-15 11:27:55.857 [INFO][4790] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" HandleID="k8s-pod-network.abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" Workload="localhost-k8s-csi--node--driver--tnbnz-eth0" Jul 15 11:27:55.862458 env[1203]: 2025-07-15 11:27:55.858 [INFO][4790] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:55.862458 env[1203]: 2025-07-15 11:27:55.860 [INFO][4780] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651" Jul 15 11:27:55.863240 env[1203]: time="2025-07-15T11:27:55.862499600Z" level=info msg="TearDown network for sandbox \"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651\" successfully" Jul 15 11:27:55.874209 env[1203]: time="2025-07-15T11:27:55.874136682Z" level=info msg="RemovePodSandbox \"abee1606dfe2178bc5a6f72625570ce2c91f63bda8b186147e63ab17307e8651\" returns successfully" Jul 15 11:27:55.874880 env[1203]: time="2025-07-15T11:27:55.874823810Z" level=info msg="StopPodSandbox for \"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a\"" Jul 15 11:27:55.935456 env[1203]: 2025-07-15 11:27:55.905 [WARNING][4808] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" WorkloadEndpoint="localhost-k8s-whisker--9dbc9c8cb--7hx4x-eth0" Jul 15 11:27:55.935456 env[1203]: 2025-07-15 11:27:55.905 [INFO][4808] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" Jul 15 11:27:55.935456 env[1203]: 2025-07-15 11:27:55.905 [INFO][4808] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" iface="eth0" netns="" Jul 15 11:27:55.935456 env[1203]: 2025-07-15 11:27:55.905 [INFO][4808] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" Jul 15 11:27:55.935456 env[1203]: 2025-07-15 11:27:55.905 [INFO][4808] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" Jul 15 11:27:55.935456 env[1203]: 2025-07-15 11:27:55.924 [INFO][4816] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" HandleID="k8s-pod-network.9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" Workload="localhost-k8s-whisker--9dbc9c8cb--7hx4x-eth0" Jul 15 11:27:55.935456 env[1203]: 2025-07-15 11:27:55.924 [INFO][4816] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:55.935456 env[1203]: 2025-07-15 11:27:55.924 [INFO][4816] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:55.935456 env[1203]: 2025-07-15 11:27:55.930 [WARNING][4816] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" HandleID="k8s-pod-network.9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" Workload="localhost-k8s-whisker--9dbc9c8cb--7hx4x-eth0" Jul 15 11:27:55.935456 env[1203]: 2025-07-15 11:27:55.930 [INFO][4816] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" HandleID="k8s-pod-network.9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" Workload="localhost-k8s-whisker--9dbc9c8cb--7hx4x-eth0" Jul 15 11:27:55.935456 env[1203]: 2025-07-15 11:27:55.932 [INFO][4816] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:55.935456 env[1203]: 2025-07-15 11:27:55.933 [INFO][4808] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" Jul 15 11:27:55.935908 env[1203]: time="2025-07-15T11:27:55.935520918Z" level=info msg="TearDown network for sandbox \"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a\" successfully" Jul 15 11:27:55.935908 env[1203]: time="2025-07-15T11:27:55.935567339Z" level=info msg="StopPodSandbox for \"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a\" returns successfully" Jul 15 11:27:55.936177 env[1203]: time="2025-07-15T11:27:55.936131729Z" level=info msg="RemovePodSandbox for \"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a\"" Jul 15 11:27:55.936233 env[1203]: time="2025-07-15T11:27:55.936174923Z" level=info msg="Forcibly stopping sandbox \"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a\"" Jul 15 11:27:56.189941 kubelet[1942]: I0715 11:27:56.188667 1942 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-cbfb7dd6-qmmv9" podStartSLOduration=29.155332758 podStartE2EDuration="42.188644382s" podCreationTimestamp="2025-07-15 11:27:14 +0000 UTC" firstStartedPulling="2025-07-15 11:27:42.115923706 +0000 UTC m=+46.536365828" lastFinishedPulling="2025-07-15 11:27:55.14923533 +0000 UTC m=+59.569677452" observedRunningTime="2025-07-15 11:27:56.186532433 +0000 UTC m=+60.606974565" watchObservedRunningTime="2025-07-15 11:27:56.188644382 +0000 UTC m=+60.609086514" Jul 15 11:27:56.194402 env[1203]: 2025-07-15 11:27:55.966 [WARNING][4836] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" WorkloadEndpoint="localhost-k8s-whisker--9dbc9c8cb--7hx4x-eth0" Jul 15 11:27:56.194402 env[1203]: 2025-07-15 11:27:55.966 [INFO][4836] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" Jul 15 11:27:56.194402 env[1203]: 2025-07-15 11:27:55.966 [INFO][4836] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" iface="eth0" netns="" Jul 15 11:27:56.194402 env[1203]: 2025-07-15 11:27:55.966 [INFO][4836] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" Jul 15 11:27:56.194402 env[1203]: 2025-07-15 11:27:55.966 [INFO][4836] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" Jul 15 11:27:56.194402 env[1203]: 2025-07-15 11:27:55.995 [INFO][4846] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" HandleID="k8s-pod-network.9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" Workload="localhost-k8s-whisker--9dbc9c8cb--7hx4x-eth0" Jul 15 11:27:56.194402 env[1203]: 2025-07-15 11:27:55.995 [INFO][4846] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:56.194402 env[1203]: 2025-07-15 11:27:55.995 [INFO][4846] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:56.194402 env[1203]: 2025-07-15 11:27:56.185 [WARNING][4846] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" HandleID="k8s-pod-network.9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" Workload="localhost-k8s-whisker--9dbc9c8cb--7hx4x-eth0" Jul 15 11:27:56.194402 env[1203]: 2025-07-15 11:27:56.185 [INFO][4846] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" HandleID="k8s-pod-network.9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" Workload="localhost-k8s-whisker--9dbc9c8cb--7hx4x-eth0" Jul 15 11:27:56.194402 env[1203]: 2025-07-15 11:27:56.190 [INFO][4846] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:56.194402 env[1203]: 2025-07-15 11:27:56.192 [INFO][4836] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a" Jul 15 11:27:56.194893 env[1203]: time="2025-07-15T11:27:56.194415738Z" level=info msg="TearDown network for sandbox \"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a\" successfully" Jul 15 11:27:56.408413 env[1203]: time="2025-07-15T11:27:56.408347533Z" level=info msg="RemovePodSandbox \"9b8b99fa0e1e4bec9196b051a2506456fcb062cebb4e29ea5910db02ebd80b0a\" returns successfully" Jul 15 11:27:56.408993 env[1203]: time="2025-07-15T11:27:56.408953974Z" level=info msg="StopPodSandbox for \"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551\"" Jul 15 11:27:56.485764 env[1203]: 2025-07-15 11:27:56.455 [WARNING][4887] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--7s67n-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"8efa25ab-67dd-4478-83aa-f81b926404db", ResourceVersion:"1059", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed", Pod:"coredns-668d6bf9bc-7s67n", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif10205880b7", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:56.485764 env[1203]: 2025-07-15 11:27:56.455 [INFO][4887] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" Jul 15 11:27:56.485764 env[1203]: 2025-07-15 11:27:56.455 [INFO][4887] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" iface="eth0" netns="" Jul 15 11:27:56.485764 env[1203]: 2025-07-15 11:27:56.455 [INFO][4887] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" Jul 15 11:27:56.485764 env[1203]: 2025-07-15 11:27:56.455 [INFO][4887] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" Jul 15 11:27:56.485764 env[1203]: 2025-07-15 11:27:56.475 [INFO][4896] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" HandleID="k8s-pod-network.38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" Workload="localhost-k8s-coredns--668d6bf9bc--7s67n-eth0" Jul 15 11:27:56.485764 env[1203]: 2025-07-15 11:27:56.475 [INFO][4896] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:56.485764 env[1203]: 2025-07-15 11:27:56.475 [INFO][4896] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:56.485764 env[1203]: 2025-07-15 11:27:56.480 [WARNING][4896] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" HandleID="k8s-pod-network.38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" Workload="localhost-k8s-coredns--668d6bf9bc--7s67n-eth0" Jul 15 11:27:56.485764 env[1203]: 2025-07-15 11:27:56.481 [INFO][4896] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" HandleID="k8s-pod-network.38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" Workload="localhost-k8s-coredns--668d6bf9bc--7s67n-eth0" Jul 15 11:27:56.485764 env[1203]: 2025-07-15 11:27:56.482 [INFO][4896] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:56.485764 env[1203]: 2025-07-15 11:27:56.483 [INFO][4887] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" Jul 15 11:27:56.486284 env[1203]: time="2025-07-15T11:27:56.485759094Z" level=info msg="TearDown network for sandbox \"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551\" successfully" Jul 15 11:27:56.486284 env[1203]: time="2025-07-15T11:27:56.485793560Z" level=info msg="StopPodSandbox for \"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551\" returns successfully" Jul 15 11:27:56.486868 env[1203]: time="2025-07-15T11:27:56.486733987Z" level=info msg="RemovePodSandbox for \"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551\"" Jul 15 11:27:56.486951 env[1203]: time="2025-07-15T11:27:56.486868928Z" level=info msg="Forcibly stopping sandbox \"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551\"" Jul 15 11:27:56.546013 env[1203]: 2025-07-15 11:27:56.517 [WARNING][4913] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--7s67n-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"8efa25ab-67dd-4478-83aa-f81b926404db", ResourceVersion:"1059", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f41660bab5212620414e8bec6a057c109ac780151c950136120e12ff79f737ed", Pod:"coredns-668d6bf9bc-7s67n", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif10205880b7", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:56.546013 env[1203]: 2025-07-15 11:27:56.517 [INFO][4913] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" Jul 15 11:27:56.546013 env[1203]: 2025-07-15 11:27:56.517 [INFO][4913] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" iface="eth0" netns="" Jul 15 11:27:56.546013 env[1203]: 2025-07-15 11:27:56.517 [INFO][4913] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" Jul 15 11:27:56.546013 env[1203]: 2025-07-15 11:27:56.517 [INFO][4913] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" Jul 15 11:27:56.546013 env[1203]: 2025-07-15 11:27:56.535 [INFO][4923] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" HandleID="k8s-pod-network.38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" Workload="localhost-k8s-coredns--668d6bf9bc--7s67n-eth0" Jul 15 11:27:56.546013 env[1203]: 2025-07-15 11:27:56.535 [INFO][4923] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:56.546013 env[1203]: 2025-07-15 11:27:56.535 [INFO][4923] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:56.546013 env[1203]: 2025-07-15 11:27:56.541 [WARNING][4923] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" HandleID="k8s-pod-network.38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" Workload="localhost-k8s-coredns--668d6bf9bc--7s67n-eth0" Jul 15 11:27:56.546013 env[1203]: 2025-07-15 11:27:56.541 [INFO][4923] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" HandleID="k8s-pod-network.38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" Workload="localhost-k8s-coredns--668d6bf9bc--7s67n-eth0" Jul 15 11:27:56.546013 env[1203]: 2025-07-15 11:27:56.542 [INFO][4923] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:56.546013 env[1203]: 2025-07-15 11:27:56.544 [INFO][4913] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551" Jul 15 11:27:56.546499 env[1203]: time="2025-07-15T11:27:56.546030485Z" level=info msg="TearDown network for sandbox \"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551\" successfully" Jul 15 11:27:56.552580 env[1203]: time="2025-07-15T11:27:56.552521701Z" level=info msg="RemovePodSandbox \"38fdb5e9fe55062f928e6b88adcd37ab60d880ee46c580e90f540b15a4290551\" returns successfully" Jul 15 11:27:56.553058 env[1203]: time="2025-07-15T11:27:56.553022007Z" level=info msg="StopPodSandbox for \"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4\"" Jul 15 11:27:56.607039 env[1203]: 2025-07-15 11:27:56.581 [WARNING][4941] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0", GenerateName:"calico-apiserver-7bc956794c-", Namespace:"calico-apiserver", SelfLink:"", UID:"951899ed-3100-4dfb-b01a-631cfe69df36", ResourceVersion:"1090", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7bc956794c", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e", Pod:"calico-apiserver-7bc956794c-rnlsq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"califcd7701b7a1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:56.607039 env[1203]: 2025-07-15 11:27:56.581 [INFO][4941] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" Jul 15 11:27:56.607039 env[1203]: 2025-07-15 11:27:56.581 [INFO][4941] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" iface="eth0" netns="" Jul 15 11:27:56.607039 env[1203]: 2025-07-15 11:27:56.581 [INFO][4941] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" Jul 15 11:27:56.607039 env[1203]: 2025-07-15 11:27:56.581 [INFO][4941] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" Jul 15 11:27:56.607039 env[1203]: 2025-07-15 11:27:56.598 [INFO][4950] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" HandleID="k8s-pod-network.e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" Workload="localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0" Jul 15 11:27:56.607039 env[1203]: 2025-07-15 11:27:56.598 [INFO][4950] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:56.607039 env[1203]: 2025-07-15 11:27:56.598 [INFO][4950] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:56.607039 env[1203]: 2025-07-15 11:27:56.603 [WARNING][4950] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" HandleID="k8s-pod-network.e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" Workload="localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0" Jul 15 11:27:56.607039 env[1203]: 2025-07-15 11:27:56.603 [INFO][4950] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" HandleID="k8s-pod-network.e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" Workload="localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0" Jul 15 11:27:56.607039 env[1203]: 2025-07-15 11:27:56.604 [INFO][4950] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:56.607039 env[1203]: 2025-07-15 11:27:56.605 [INFO][4941] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" Jul 15 11:27:56.607676 env[1203]: time="2025-07-15T11:27:56.607064959Z" level=info msg="TearDown network for sandbox \"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4\" successfully" Jul 15 11:27:56.607676 env[1203]: time="2025-07-15T11:27:56.607102432Z" level=info msg="StopPodSandbox for \"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4\" returns successfully" Jul 15 11:27:56.607676 env[1203]: time="2025-07-15T11:27:56.607563352Z" level=info msg="RemovePodSandbox for \"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4\"" Jul 15 11:27:56.607676 env[1203]: time="2025-07-15T11:27:56.607597969Z" level=info msg="Forcibly stopping sandbox \"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4\"" Jul 15 11:27:56.663164 env[1203]: 2025-07-15 11:27:56.634 [WARNING][4967] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0", GenerateName:"calico-apiserver-7bc956794c-", Namespace:"calico-apiserver", SelfLink:"", UID:"951899ed-3100-4dfb-b01a-631cfe69df36", ResourceVersion:"1090", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7bc956794c", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9538072306c78ef0c353a7e7833958fe45554d2ece51d9c0525b6db899462d4e", Pod:"calico-apiserver-7bc956794c-rnlsq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"califcd7701b7a1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:56.663164 env[1203]: 2025-07-15 11:27:56.634 [INFO][4967] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" Jul 15 11:27:56.663164 env[1203]: 2025-07-15 11:27:56.634 [INFO][4967] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" iface="eth0" netns="" Jul 15 11:27:56.663164 env[1203]: 2025-07-15 11:27:56.634 [INFO][4967] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" Jul 15 11:27:56.663164 env[1203]: 2025-07-15 11:27:56.634 [INFO][4967] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" Jul 15 11:27:56.663164 env[1203]: 2025-07-15 11:27:56.652 [INFO][4976] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" HandleID="k8s-pod-network.e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" Workload="localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0" Jul 15 11:27:56.663164 env[1203]: 2025-07-15 11:27:56.652 [INFO][4976] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:56.663164 env[1203]: 2025-07-15 11:27:56.652 [INFO][4976] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:56.663164 env[1203]: 2025-07-15 11:27:56.658 [WARNING][4976] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" HandleID="k8s-pod-network.e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" Workload="localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0" Jul 15 11:27:56.663164 env[1203]: 2025-07-15 11:27:56.658 [INFO][4976] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" HandleID="k8s-pod-network.e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" Workload="localhost-k8s-calico--apiserver--7bc956794c--rnlsq-eth0" Jul 15 11:27:56.663164 env[1203]: 2025-07-15 11:27:56.659 [INFO][4976] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:56.663164 env[1203]: 2025-07-15 11:27:56.661 [INFO][4967] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4" Jul 15 11:27:56.663619 env[1203]: time="2025-07-15T11:27:56.663223738Z" level=info msg="TearDown network for sandbox \"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4\" successfully" Jul 15 11:27:56.666542 env[1203]: time="2025-07-15T11:27:56.666522980Z" level=info msg="RemovePodSandbox \"e26ff0d9d64320925fd7d71df290db57287fbab75815dafc8ac389c32aaf95a4\" returns successfully" Jul 15 11:27:56.666969 env[1203]: time="2025-07-15T11:27:56.666942409Z" level=info msg="StopPodSandbox for \"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746\"" Jul 15 11:27:56.724023 env[1203]: 2025-07-15 11:27:56.694 [WARNING][4994] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0", GenerateName:"calico-kube-controllers-cbfb7dd6-", Namespace:"calico-system", SelfLink:"", UID:"3ea6d0e6-795c-462c-9605-023e2674e09c", ResourceVersion:"1163", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"cbfb7dd6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974", Pod:"calico-kube-controllers-cbfb7dd6-qmmv9", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali399ea10dfe9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:56.724023 env[1203]: 2025-07-15 11:27:56.694 [INFO][4994] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" Jul 15 11:27:56.724023 env[1203]: 2025-07-15 11:27:56.694 [INFO][4994] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" iface="eth0" netns="" Jul 15 11:27:56.724023 env[1203]: 2025-07-15 11:27:56.694 [INFO][4994] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" Jul 15 11:27:56.724023 env[1203]: 2025-07-15 11:27:56.694 [INFO][4994] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" Jul 15 11:27:56.724023 env[1203]: 2025-07-15 11:27:56.713 [INFO][5004] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" HandleID="k8s-pod-network.762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" Workload="localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0" Jul 15 11:27:56.724023 env[1203]: 2025-07-15 11:27:56.714 [INFO][5004] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:56.724023 env[1203]: 2025-07-15 11:27:56.714 [INFO][5004] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:56.724023 env[1203]: 2025-07-15 11:27:56.719 [WARNING][5004] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" HandleID="k8s-pod-network.762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" Workload="localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0" Jul 15 11:27:56.724023 env[1203]: 2025-07-15 11:27:56.719 [INFO][5004] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" HandleID="k8s-pod-network.762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" Workload="localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0" Jul 15 11:27:56.724023 env[1203]: 2025-07-15 11:27:56.720 [INFO][5004] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:56.724023 env[1203]: 2025-07-15 11:27:56.722 [INFO][4994] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" Jul 15 11:27:56.724576 env[1203]: time="2025-07-15T11:27:56.724058998Z" level=info msg="TearDown network for sandbox \"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746\" successfully" Jul 15 11:27:56.724576 env[1203]: time="2025-07-15T11:27:56.724106450Z" level=info msg="StopPodSandbox for \"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746\" returns successfully" Jul 15 11:27:56.725215 env[1203]: time="2025-07-15T11:27:56.724607357Z" level=info msg="RemovePodSandbox for \"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746\"" Jul 15 11:27:56.725215 env[1203]: time="2025-07-15T11:27:56.724654248Z" level=info msg="Forcibly stopping sandbox \"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746\"" Jul 15 11:27:56.780145 env[1203]: 2025-07-15 11:27:56.753 [WARNING][5021] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0", GenerateName:"calico-kube-controllers-cbfb7dd6-", Namespace:"calico-system", SelfLink:"", UID:"3ea6d0e6-795c-462c-9605-023e2674e09c", ResourceVersion:"1163", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"cbfb7dd6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7b0d87d1e38c510e975e6cc6d87029ed39c65d3b9b38d7aa146fb00e7ed8c974", Pod:"calico-kube-controllers-cbfb7dd6-qmmv9", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali399ea10dfe9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:56.780145 env[1203]: 2025-07-15 11:27:56.754 [INFO][5021] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" Jul 15 11:27:56.780145 env[1203]: 2025-07-15 11:27:56.754 [INFO][5021] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" iface="eth0" netns="" Jul 15 11:27:56.780145 env[1203]: 2025-07-15 11:27:56.754 [INFO][5021] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" Jul 15 11:27:56.780145 env[1203]: 2025-07-15 11:27:56.754 [INFO][5021] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" Jul 15 11:27:56.780145 env[1203]: 2025-07-15 11:27:56.770 [INFO][5030] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" HandleID="k8s-pod-network.762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" Workload="localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0" Jul 15 11:27:56.780145 env[1203]: 2025-07-15 11:27:56.770 [INFO][5030] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:56.780145 env[1203]: 2025-07-15 11:27:56.770 [INFO][5030] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:56.780145 env[1203]: 2025-07-15 11:27:56.776 [WARNING][5030] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" HandleID="k8s-pod-network.762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" Workload="localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0" Jul 15 11:27:56.780145 env[1203]: 2025-07-15 11:27:56.776 [INFO][5030] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" HandleID="k8s-pod-network.762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" Workload="localhost-k8s-calico--kube--controllers--cbfb7dd6--qmmv9-eth0" Jul 15 11:27:56.780145 env[1203]: 2025-07-15 11:27:56.777 [INFO][5030] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:56.780145 env[1203]: 2025-07-15 11:27:56.778 [INFO][5021] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746" Jul 15 11:27:56.780145 env[1203]: time="2025-07-15T11:27:56.780117764Z" level=info msg="TearDown network for sandbox \"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746\" successfully" Jul 15 11:27:56.783388 env[1203]: time="2025-07-15T11:27:56.783368823Z" level=info msg="RemovePodSandbox \"762b7a08230523e8f94cd453816e7a932e018c0606ff745b880437ca6b930746\" returns successfully" Jul 15 11:27:56.783946 env[1203]: time="2025-07-15T11:27:56.783895749Z" level=info msg="StopPodSandbox for \"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b\"" Jul 15 11:27:56.838288 env[1203]: 2025-07-15 11:27:56.810 [WARNING][5047] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"36ddb906-20c6-40b4-82cc-d84c9508332f", ResourceVersion:"1052", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa", Pod:"goldmane-768f4c5c69-zhhmj", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calid026b3d43fd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:56.838288 env[1203]: 2025-07-15 11:27:56.810 [INFO][5047] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" Jul 15 11:27:56.838288 env[1203]: 2025-07-15 11:27:56.810 [INFO][5047] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" iface="eth0" netns="" Jul 15 11:27:56.838288 env[1203]: 2025-07-15 11:27:56.810 [INFO][5047] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" Jul 15 11:27:56.838288 env[1203]: 2025-07-15 11:27:56.810 [INFO][5047] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" Jul 15 11:27:56.838288 env[1203]: 2025-07-15 11:27:56.827 [INFO][5055] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" HandleID="k8s-pod-network.cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" Workload="localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0" Jul 15 11:27:56.838288 env[1203]: 2025-07-15 11:27:56.827 [INFO][5055] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:56.838288 env[1203]: 2025-07-15 11:27:56.827 [INFO][5055] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:56.838288 env[1203]: 2025-07-15 11:27:56.833 [WARNING][5055] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" HandleID="k8s-pod-network.cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" Workload="localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0" Jul 15 11:27:56.838288 env[1203]: 2025-07-15 11:27:56.833 [INFO][5055] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" HandleID="k8s-pod-network.cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" Workload="localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0" Jul 15 11:27:56.838288 env[1203]: 2025-07-15 11:27:56.835 [INFO][5055] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:56.838288 env[1203]: 2025-07-15 11:27:56.836 [INFO][5047] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" Jul 15 11:27:56.838771 env[1203]: time="2025-07-15T11:27:56.838323145Z" level=info msg="TearDown network for sandbox \"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b\" successfully" Jul 15 11:27:56.838771 env[1203]: time="2025-07-15T11:27:56.838357251Z" level=info msg="StopPodSandbox for \"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b\" returns successfully" Jul 15 11:27:56.838923 env[1203]: time="2025-07-15T11:27:56.838897404Z" level=info msg="RemovePodSandbox for \"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b\"" Jul 15 11:27:56.839001 env[1203]: time="2025-07-15T11:27:56.838930548Z" level=info msg="Forcibly stopping sandbox \"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b\"" Jul 15 11:27:56.907711 env[1203]: 2025-07-15 11:27:56.867 [WARNING][5072] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"36ddb906-20c6-40b4-82cc-d84c9508332f", ResourceVersion:"1052", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa", Pod:"goldmane-768f4c5c69-zhhmj", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calid026b3d43fd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:56.907711 env[1203]: 2025-07-15 11:27:56.868 [INFO][5072] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" Jul 15 11:27:56.907711 env[1203]: 2025-07-15 11:27:56.868 [INFO][5072] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" iface="eth0" netns="" Jul 15 11:27:56.907711 env[1203]: 2025-07-15 11:27:56.868 [INFO][5072] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" Jul 15 11:27:56.907711 env[1203]: 2025-07-15 11:27:56.868 [INFO][5072] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" Jul 15 11:27:56.907711 env[1203]: 2025-07-15 11:27:56.895 [INFO][5080] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" HandleID="k8s-pod-network.cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" Workload="localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0" Jul 15 11:27:56.907711 env[1203]: 2025-07-15 11:27:56.895 [INFO][5080] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:56.907711 env[1203]: 2025-07-15 11:27:56.895 [INFO][5080] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:56.907711 env[1203]: 2025-07-15 11:27:56.902 [WARNING][5080] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" HandleID="k8s-pod-network.cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" Workload="localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0" Jul 15 11:27:56.907711 env[1203]: 2025-07-15 11:27:56.902 [INFO][5080] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" HandleID="k8s-pod-network.cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" Workload="localhost-k8s-goldmane--768f4c5c69--zhhmj-eth0" Jul 15 11:27:56.907711 env[1203]: 2025-07-15 11:27:56.903 [INFO][5080] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:56.907711 env[1203]: 2025-07-15 11:27:56.905 [INFO][5072] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b" Jul 15 11:27:56.908187 env[1203]: time="2025-07-15T11:27:56.907740238Z" level=info msg="TearDown network for sandbox \"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b\" successfully" Jul 15 11:27:56.911494 env[1203]: time="2025-07-15T11:27:56.911461484Z" level=info msg="RemovePodSandbox \"cad06147c5ceee8e4360849abfd9a4a71589adad9f3c07722993191f9bedd40b\" returns successfully" Jul 15 11:27:56.911987 env[1203]: time="2025-07-15T11:27:56.911944977Z" level=info msg="StopPodSandbox for \"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c\"" Jul 15 11:27:56.972723 env[1203]: 2025-07-15 11:27:56.944 [WARNING][5097] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0", GenerateName:"calico-apiserver-7bc956794c-", Namespace:"calico-apiserver", SelfLink:"", UID:"03d68f24-8acc-4aa5-8c84-e46d07f5de09", ResourceVersion:"1087", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7bc956794c", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1", Pod:"calico-apiserver-7bc956794c-hwnqw", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8dbfee0cee1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:56.972723 env[1203]: 2025-07-15 11:27:56.945 [INFO][5097] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" Jul 15 11:27:56.972723 env[1203]: 2025-07-15 11:27:56.945 [INFO][5097] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" iface="eth0" netns="" Jul 15 11:27:56.972723 env[1203]: 2025-07-15 11:27:56.945 [INFO][5097] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" Jul 15 11:27:56.972723 env[1203]: 2025-07-15 11:27:56.945 [INFO][5097] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" Jul 15 11:27:56.972723 env[1203]: 2025-07-15 11:27:56.962 [INFO][5106] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" HandleID="k8s-pod-network.7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" Workload="localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0" Jul 15 11:27:56.972723 env[1203]: 2025-07-15 11:27:56.962 [INFO][5106] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:56.972723 env[1203]: 2025-07-15 11:27:56.962 [INFO][5106] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:56.972723 env[1203]: 2025-07-15 11:27:56.967 [WARNING][5106] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" HandleID="k8s-pod-network.7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" Workload="localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0" Jul 15 11:27:56.972723 env[1203]: 2025-07-15 11:27:56.968 [INFO][5106] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" HandleID="k8s-pod-network.7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" Workload="localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0" Jul 15 11:27:56.972723 env[1203]: 2025-07-15 11:27:56.969 [INFO][5106] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:56.972723 env[1203]: 2025-07-15 11:27:56.971 [INFO][5097] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" Jul 15 11:27:56.973290 env[1203]: time="2025-07-15T11:27:56.972770097Z" level=info msg="TearDown network for sandbox \"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c\" successfully" Jul 15 11:27:56.973290 env[1203]: time="2025-07-15T11:27:56.972805986Z" level=info msg="StopPodSandbox for \"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c\" returns successfully" Jul 15 11:27:56.973374 env[1203]: time="2025-07-15T11:27:56.973350117Z" level=info msg="RemovePodSandbox for \"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c\"" Jul 15 11:27:56.973418 env[1203]: time="2025-07-15T11:27:56.973385997Z" level=info msg="Forcibly stopping sandbox \"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c\"" Jul 15 11:27:57.045466 env[1203]: 2025-07-15 11:27:57.007 [WARNING][5124] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0", GenerateName:"calico-apiserver-7bc956794c-", Namespace:"calico-apiserver", SelfLink:"", UID:"03d68f24-8acc-4aa5-8c84-e46d07f5de09", ResourceVersion:"1087", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7bc956794c", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3d5770348b7e7a7a89584ab559d46f5418197263cf94ff65a658e05b021e6ab1", Pod:"calico-apiserver-7bc956794c-hwnqw", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8dbfee0cee1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:57.045466 env[1203]: 2025-07-15 11:27:57.007 [INFO][5124] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" Jul 15 11:27:57.045466 env[1203]: 2025-07-15 11:27:57.007 [INFO][5124] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" iface="eth0" netns="" Jul 15 11:27:57.045466 env[1203]: 2025-07-15 11:27:57.007 [INFO][5124] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" Jul 15 11:27:57.045466 env[1203]: 2025-07-15 11:27:57.007 [INFO][5124] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" Jul 15 11:27:57.045466 env[1203]: 2025-07-15 11:27:57.028 [INFO][5134] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" HandleID="k8s-pod-network.7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" Workload="localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0" Jul 15 11:27:57.045466 env[1203]: 2025-07-15 11:27:57.028 [INFO][5134] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:57.045466 env[1203]: 2025-07-15 11:27:57.028 [INFO][5134] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:57.045466 env[1203]: 2025-07-15 11:27:57.036 [WARNING][5134] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" HandleID="k8s-pod-network.7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" Workload="localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0" Jul 15 11:27:57.045466 env[1203]: 2025-07-15 11:27:57.036 [INFO][5134] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" HandleID="k8s-pod-network.7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" Workload="localhost-k8s-calico--apiserver--7bc956794c--hwnqw-eth0" Jul 15 11:27:57.045466 env[1203]: 2025-07-15 11:27:57.038 [INFO][5134] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:57.045466 env[1203]: 2025-07-15 11:27:57.040 [INFO][5124] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c" Jul 15 11:27:57.046011 env[1203]: time="2025-07-15T11:27:57.045946341Z" level=info msg="TearDown network for sandbox \"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c\" successfully" Jul 15 11:27:57.050111 env[1203]: time="2025-07-15T11:27:57.050040279Z" level=info msg="RemovePodSandbox \"7047265bc38920b6d5bb87f08b97832f40e5db277907e71de41cda941f29130c\" returns successfully" Jul 15 11:27:57.050637 env[1203]: time="2025-07-15T11:27:57.050592556Z" level=info msg="StopPodSandbox for \"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde\"" Jul 15 11:27:57.167990 env[1203]: 2025-07-15 11:27:57.084 [WARNING][5151] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6d2ff4b6-e64f-47e4-a6b3-c4634bc37da3", ResourceVersion:"1018", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27", Pod:"coredns-668d6bf9bc-5t6g9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali562ee1dbd56", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:57.167990 env[1203]: 2025-07-15 11:27:57.085 [INFO][5151] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" Jul 15 11:27:57.167990 env[1203]: 2025-07-15 11:27:57.085 [INFO][5151] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" iface="eth0" netns="" Jul 15 11:27:57.167990 env[1203]: 2025-07-15 11:27:57.085 [INFO][5151] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" Jul 15 11:27:57.167990 env[1203]: 2025-07-15 11:27:57.085 [INFO][5151] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" Jul 15 11:27:57.167990 env[1203]: 2025-07-15 11:27:57.109 [INFO][5161] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" HandleID="k8s-pod-network.0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" Workload="localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0" Jul 15 11:27:57.167990 env[1203]: 2025-07-15 11:27:57.109 [INFO][5161] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:57.167990 env[1203]: 2025-07-15 11:27:57.109 [INFO][5161] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:57.167990 env[1203]: 2025-07-15 11:27:57.163 [WARNING][5161] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" HandleID="k8s-pod-network.0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" Workload="localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0" Jul 15 11:27:57.167990 env[1203]: 2025-07-15 11:27:57.163 [INFO][5161] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" HandleID="k8s-pod-network.0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" Workload="localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0" Jul 15 11:27:57.167990 env[1203]: 2025-07-15 11:27:57.165 [INFO][5161] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:57.167990 env[1203]: 2025-07-15 11:27:57.166 [INFO][5151] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" Jul 15 11:27:57.168509 env[1203]: time="2025-07-15T11:27:57.168014381Z" level=info msg="TearDown network for sandbox \"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde\" successfully" Jul 15 11:27:57.168509 env[1203]: time="2025-07-15T11:27:57.168044549Z" level=info msg="StopPodSandbox for \"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde\" returns successfully" Jul 15 11:27:57.168600 env[1203]: time="2025-07-15T11:27:57.168568750Z" level=info msg="RemovePodSandbox for \"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde\"" Jul 15 11:27:57.168813 env[1203]: time="2025-07-15T11:27:57.168599881Z" level=info msg="Forcibly stopping sandbox \"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde\"" Jul 15 11:27:57.381645 env[1203]: 2025-07-15 11:27:57.347 [WARNING][5178] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6d2ff4b6-e64f-47e4-a6b3-c4634bc37da3", ResourceVersion:"1018", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 27, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b3816befe634b0958d168821bddb27b2a0682b2500b5ed2cfcd8ec35a1061d27", Pod:"coredns-668d6bf9bc-5t6g9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali562ee1dbd56", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:27:57.381645 env[1203]: 2025-07-15 11:27:57.347 [INFO][5178] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" Jul 15 11:27:57.381645 env[1203]: 2025-07-15 11:27:57.347 [INFO][5178] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" iface="eth0" netns="" Jul 15 11:27:57.381645 env[1203]: 2025-07-15 11:27:57.347 [INFO][5178] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" Jul 15 11:27:57.381645 env[1203]: 2025-07-15 11:27:57.347 [INFO][5178] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" Jul 15 11:27:57.381645 env[1203]: 2025-07-15 11:27:57.365 [INFO][5188] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" HandleID="k8s-pod-network.0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" Workload="localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0" Jul 15 11:27:57.381645 env[1203]: 2025-07-15 11:27:57.365 [INFO][5188] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:27:57.381645 env[1203]: 2025-07-15 11:27:57.365 [INFO][5188] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:27:57.381645 env[1203]: 2025-07-15 11:27:57.372 [WARNING][5188] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" HandleID="k8s-pod-network.0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" Workload="localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0" Jul 15 11:27:57.381645 env[1203]: 2025-07-15 11:27:57.372 [INFO][5188] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" HandleID="k8s-pod-network.0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" Workload="localhost-k8s-coredns--668d6bf9bc--5t6g9-eth0" Jul 15 11:27:57.381645 env[1203]: 2025-07-15 11:27:57.374 [INFO][5188] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:27:57.381645 env[1203]: 2025-07-15 11:27:57.378 [INFO][5178] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde" Jul 15 11:27:57.381645 env[1203]: time="2025-07-15T11:27:57.381610452Z" level=info msg="TearDown network for sandbox \"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde\" successfully" Jul 15 11:27:57.418137 env[1203]: time="2025-07-15T11:27:57.418059904Z" level=info msg="RemovePodSandbox \"0bffaa44b6656aabe977262761f3814b1a0fca2c3b7c3f6abe2b50f543f0dcde\" returns successfully" Jul 15 11:27:58.603998 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2723935964.mount: Deactivated successfully. Jul 15 11:27:59.082517 systemd[1]: Started sshd@14-10.0.0.18:22-10.0.0.1:54160.service. Jul 15 11:27:59.081000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.18:22-10.0.0.1:54160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:59.084412 kernel: kauditd_printk_skb: 82 callbacks suppressed Jul 15 11:27:59.084491 kernel: audit: type=1130 audit(1752578879.081:1498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.18:22-10.0.0.1:54160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:59.118000 audit[5203]: USER_ACCT pid=5203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:59.121000 audit[5203]: CRED_ACQ pid=5203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:59.123062 sshd[5203]: Accepted publickey for core from 10.0.0.1 port 54160 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:27:59.123296 kernel: audit: type=1101 audit(1752578879.118:1499): pid=5203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:59.123323 kernel: audit: type=1103 audit(1752578879.121:1500): pid=5203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:59.123381 sshd[5203]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:27:59.138861 kernel: audit: type=1006 audit(1752578879.121:1501): pid=5203 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 15 11:27:59.138972 kernel: audit: type=1300 audit(1752578879.121:1501): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc3a0dfe50 a2=3 a3=0 items=0 ppid=1 pid=5203 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:59.138993 kernel: audit: type=1327 audit(1752578879.121:1501): proctitle=737368643A20636F7265205B707269765D Jul 15 11:27:59.139013 kernel: audit: type=1105 audit(1752578879.129:1502): pid=5203 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:59.121000 audit[5203]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc3a0dfe50 a2=3 a3=0 items=0 ppid=1 pid=5203 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:59.142702 kernel: audit: type=1103 audit(1752578879.130:1503): pid=5205 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:59.121000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:27:59.129000 audit[5203]: USER_START pid=5203 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:59.130000 audit[5205]: CRED_ACQ pid=5205 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:59.127182 systemd-logind[1191]: New session 15 of user core. Jul 15 11:27:59.127525 systemd[1]: Started session-15.scope. Jul 15 11:27:59.439000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:27:59.439000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c001b32a20 a2=fc6 a3=0 items=0 ppid=1641 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 key=(null) Jul 15 11:27:59.450291 kernel: audit: type=1400 audit(1752578879.439:1504): avc: denied { watch } for pid=1827 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:27:59.450365 kernel: audit: type=1300 audit(1752578879.439:1504): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c001b32a20 a2=fc6 a3=0 items=0 ppid=1641 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 key=(null) Jul 15 11:27:59.439000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:27:59.439000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:27:59.439000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002245180 a2=fc6 a3=0 items=0 ppid=1641 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 key=(null) Jul 15 11:27:59.439000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:27:59.489000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:27:59.489000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001739a00 a2=fc6 a3=0 items=0 ppid=1641 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 key=(null) Jul 15 11:27:59.489000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:27:59.543000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7303 scontext=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:27:59.543000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001b32a40 a2=fc6 a3=0 items=0 ppid=1641 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c808,c1019 key=(null) Jul 15 11:27:59.543000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:27:59.567783 sshd[5203]: pam_unix(sshd:session): session closed for user core Jul 15 11:27:59.567000 audit[5203]: USER_END pid=5203 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:59.567000 audit[5203]: CRED_DISP pid=5203 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:59.568000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.18:22-10.0.0.1:54160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:59.569863 systemd[1]: sshd@14-10.0.0.18:22-10.0.0.1:54160.service: Deactivated successfully. Jul 15 11:27:59.570618 systemd[1]: session-15.scope: Deactivated successfully. Jul 15 11:27:59.571190 systemd-logind[1191]: Session 15 logged out. Waiting for processes to exit. Jul 15 11:27:59.571892 systemd-logind[1191]: Removed session 15. Jul 15 11:27:59.868574 env[1203]: time="2025-07-15T11:27:59.868466818Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:59.871083 env[1203]: time="2025-07-15T11:27:59.871040777Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:59.873199 env[1203]: time="2025-07-15T11:27:59.873153618Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:59.877394 env[1203]: time="2025-07-15T11:27:59.877351426Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:27:59.878258 env[1203]: time="2025-07-15T11:27:59.878206212Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b\"" Jul 15 11:27:59.879558 env[1203]: time="2025-07-15T11:27:59.879528841Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 15 11:27:59.880705 env[1203]: time="2025-07-15T11:27:59.880670020Z" level=info msg="CreateContainer within sandbox \"005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 15 11:28:00.273273 env[1203]: time="2025-07-15T11:28:00.273213803Z" level=info msg="CreateContainer within sandbox \"005d024dd1dc52eb865d39114273e025bafcf941d13825a21ab905e15dd98faa\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"5f1115ff078b6580cdbf440b572545abf61ea14d31707dd92df48e53b0771fad\"" Jul 15 11:28:00.273769 env[1203]: time="2025-07-15T11:28:00.273748733Z" level=info msg="StartContainer for \"5f1115ff078b6580cdbf440b572545abf61ea14d31707dd92df48e53b0771fad\"" Jul 15 11:28:00.293523 systemd[1]: Started cri-containerd-5f1115ff078b6580cdbf440b572545abf61ea14d31707dd92df48e53b0771fad.scope. Jul 15 11:28:00.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.304000 audit: BPF prog-id=227 op=LOAD Jul 15 11:28:00.304000 audit[5222]: AVC avc: denied { bpf } for pid=5222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.304000 audit[5222]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4413 pid=5222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:00.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566313131356666303738623635383063646266343430623537323534 Jul 15 11:28:00.304000 audit[5222]: AVC avc: denied { perfmon } for pid=5222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.304000 audit[5222]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=4413 pid=5222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:00.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566313131356666303738623635383063646266343430623537323534 Jul 15 11:28:00.304000 audit[5222]: AVC avc: denied { bpf } for pid=5222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.304000 audit[5222]: AVC avc: denied { bpf } for pid=5222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.304000 audit[5222]: AVC avc: denied { bpf } for pid=5222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.304000 audit[5222]: AVC avc: denied { perfmon } for pid=5222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.304000 audit[5222]: AVC avc: denied { perfmon } for pid=5222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.304000 audit[5222]: AVC avc: denied { perfmon } for pid=5222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.304000 audit[5222]: AVC avc: denied { perfmon } for pid=5222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.304000 audit[5222]: AVC avc: denied { perfmon } for pid=5222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.304000 audit[5222]: AVC avc: denied { bpf } for pid=5222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.304000 audit[5222]: AVC avc: denied { bpf } for pid=5222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.304000 audit: BPF prog-id=228 op=LOAD Jul 15 11:28:00.304000 audit[5222]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000309830 items=0 ppid=4413 pid=5222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:00.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566313131356666303738623635383063646266343430623537323534 Jul 15 11:28:00.305000 audit[5222]: AVC avc: denied { bpf } for pid=5222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.305000 audit[5222]: AVC avc: denied { bpf } for pid=5222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.305000 audit[5222]: AVC avc: denied { perfmon } for pid=5222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.305000 audit[5222]: AVC avc: denied { perfmon } for pid=5222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.305000 audit[5222]: AVC avc: denied { perfmon } for pid=5222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.305000 audit[5222]: AVC avc: denied { perfmon } for pid=5222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.305000 audit[5222]: AVC avc: denied { perfmon } for pid=5222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.305000 audit[5222]: AVC avc: denied { bpf } for pid=5222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.305000 audit[5222]: AVC avc: denied { bpf } for pid=5222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.305000 audit: BPF prog-id=229 op=LOAD Jul 15 11:28:00.305000 audit[5222]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000309878 items=0 ppid=4413 pid=5222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:00.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566313131356666303738623635383063646266343430623537323534 Jul 15 11:28:00.305000 audit: BPF prog-id=229 op=UNLOAD Jul 15 11:28:00.305000 audit: BPF prog-id=228 op=UNLOAD Jul 15 11:28:00.305000 audit[5222]: AVC avc: denied { bpf } for pid=5222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.305000 audit[5222]: AVC avc: denied { bpf } for pid=5222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.305000 audit[5222]: AVC avc: denied { bpf } for pid=5222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.305000 audit[5222]: AVC avc: denied { perfmon } for pid=5222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.305000 audit[5222]: AVC avc: denied { perfmon } for pid=5222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.305000 audit[5222]: AVC avc: denied { perfmon } for pid=5222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.305000 audit[5222]: AVC avc: denied { perfmon } for pid=5222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.305000 audit[5222]: AVC avc: denied { perfmon } for pid=5222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.305000 audit[5222]: AVC avc: denied { bpf } for pid=5222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.305000 audit[5222]: AVC avc: denied { bpf } for pid=5222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:00.305000 audit: BPF prog-id=230 op=LOAD Jul 15 11:28:00.305000 audit[5222]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000309c88 items=0 ppid=4413 pid=5222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:00.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566313131356666303738623635383063646266343430623537323534 Jul 15 11:28:00.338511 env[1203]: time="2025-07-15T11:28:00.337272514Z" level=info msg="StartContainer for \"5f1115ff078b6580cdbf440b572545abf61ea14d31707dd92df48e53b0771fad\" returns successfully" Jul 15 11:28:01.064000 audit[5276]: NETFILTER_CFG table=filter:127 family=2 entries=12 op=nft_register_rule pid=5276 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:28:01.064000 audit[5276]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffd6e44f850 a2=0 a3=7ffd6e44f83c items=0 ppid=2108 pid=5276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:01.064000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:28:01.078000 audit[5276]: NETFILTER_CFG table=nat:128 family=2 entries=22 op=nft_register_rule pid=5276 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:28:01.078000 audit[5276]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffd6e44f850 a2=0 a3=7ffd6e44f83c items=0 ppid=2108 pid=5276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:01.078000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:28:01.101404 kubelet[1942]: I0715 11:28:01.098923 1942 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-zhhmj" podStartSLOduration=32.209120279 podStartE2EDuration="49.098902671s" podCreationTimestamp="2025-07-15 11:27:12 +0000 UTC" firstStartedPulling="2025-07-15 11:27:42.98952385 +0000 UTC m=+47.409965972" lastFinishedPulling="2025-07-15 11:27:59.879306232 +0000 UTC m=+64.299748364" observedRunningTime="2025-07-15 11:28:01.028226756 +0000 UTC m=+65.448668888" watchObservedRunningTime="2025-07-15 11:28:01.098902671 +0000 UTC m=+65.519344803" Jul 15 11:28:01.108000 audit[5278]: NETFILTER_CFG table=filter:129 family=2 entries=11 op=nft_register_rule pid=5278 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:28:01.108000 audit[5278]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff8dcbe020 a2=0 a3=7fff8dcbe00c items=0 ppid=2108 pid=5278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:01.108000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:28:01.117000 audit[5278]: NETFILTER_CFG table=nat:130 family=2 entries=29 op=nft_register_chain pid=5278 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:28:01.117000 audit[5278]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7fff8dcbe020 a2=0 a3=7fff8dcbe00c items=0 ppid=2108 pid=5278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:01.117000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:28:01.994344 env[1203]: time="2025-07-15T11:28:01.994275195Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:28:01.996407 env[1203]: time="2025-07-15T11:28:01.996367519Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:28:01.998244 env[1203]: time="2025-07-15T11:28:01.998194966Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:28:01.999995 env[1203]: time="2025-07-15T11:28:01.999964400Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:28:02.001661 env[1203]: time="2025-07-15T11:28:02.000532372Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866\"" Jul 15 11:28:02.003002 env[1203]: time="2025-07-15T11:28:02.002963908Z" level=info msg="CreateContainer within sandbox \"8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 15 11:28:02.018131 env[1203]: time="2025-07-15T11:28:02.016006605Z" level=info msg="CreateContainer within sandbox \"8ba91aa144388c28e198644308a7c3d4b1688571d8d42d299b8615278a3f199f\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"17d1b68ff392f2f49a4d80135a31a3d307d77c017e8a46920dc27e033cca9f69\"" Jul 15 11:28:02.018131 env[1203]: time="2025-07-15T11:28:02.017328206Z" level=info msg="StartContainer for \"17d1b68ff392f2f49a4d80135a31a3d307d77c017e8a46920dc27e033cca9f69\"" Jul 15 11:28:02.041801 systemd[1]: Started cri-containerd-17d1b68ff392f2f49a4d80135a31a3d307d77c017e8a46920dc27e033cca9f69.scope. Jul 15 11:28:02.055000 audit[5286]: AVC avc: denied { perfmon } for pid=5286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.055000 audit[5286]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f7f9f9972f8 items=0 ppid=3923 pid=5286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:02.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137643162363866663339326632663439613464383031333561333161 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { bpf } for pid=5286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { bpf } for pid=5286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { bpf } for pid=5286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { perfmon } for pid=5286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { perfmon } for pid=5286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { perfmon } for pid=5286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { perfmon } for pid=5286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { perfmon } for pid=5286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { bpf } for pid=5286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { bpf } for pid=5286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit: BPF prog-id=231 op=LOAD Jul 15 11:28:02.056000 audit[5286]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000024b48 items=0 ppid=3923 pid=5286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:02.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137643162363866663339326632663439613464383031333561333161 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { bpf } for pid=5286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { bpf } for pid=5286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { perfmon } for pid=5286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { perfmon } for pid=5286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { perfmon } for pid=5286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { perfmon } for pid=5286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { perfmon } for pid=5286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { bpf } for pid=5286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { bpf } for pid=5286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit: BPF prog-id=232 op=LOAD Jul 15 11:28:02.056000 audit[5286]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000024b98 items=0 ppid=3923 pid=5286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:02.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137643162363866663339326632663439613464383031333561333161 Jul 15 11:28:02.056000 audit: BPF prog-id=232 op=UNLOAD Jul 15 11:28:02.056000 audit: BPF prog-id=231 op=UNLOAD Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { bpf } for pid=5286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { bpf } for pid=5286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { bpf } for pid=5286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { perfmon } for pid=5286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { perfmon } for pid=5286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { perfmon } for pid=5286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { perfmon } for pid=5286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { perfmon } for pid=5286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { bpf } for pid=5286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit[5286]: AVC avc: denied { bpf } for pid=5286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:28:02.056000 audit: BPF prog-id=233 op=LOAD Jul 15 11:28:02.056000 audit[5286]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000024c28 items=0 ppid=3923 pid=5286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:02.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137643162363866663339326632663439613464383031333561333161 Jul 15 11:28:02.083580 env[1203]: time="2025-07-15T11:28:02.083528083Z" level=info msg="StartContainer for \"17d1b68ff392f2f49a4d80135a31a3d307d77c017e8a46920dc27e033cca9f69\" returns successfully" Jul 15 11:28:02.770105 kubelet[1942]: I0715 11:28:02.770051 1942 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 15 11:28:02.771521 kubelet[1942]: I0715 11:28:02.771498 1942 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 15 11:28:03.021282 kubelet[1942]: I0715 11:28:03.020943 1942 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-tnbnz" podStartSLOduration=27.074031286 podStartE2EDuration="49.020922014s" podCreationTimestamp="2025-07-15 11:27:14 +0000 UTC" firstStartedPulling="2025-07-15 11:27:40.054607823 +0000 UTC m=+44.475049955" lastFinishedPulling="2025-07-15 11:28:02.001498551 +0000 UTC m=+66.421940683" observedRunningTime="2025-07-15 11:28:03.020494994 +0000 UTC m=+67.440937146" watchObservedRunningTime="2025-07-15 11:28:03.020922014 +0000 UTC m=+67.441364156" Jul 15 11:28:04.572570 systemd[1]: Started sshd@15-10.0.0.18:22-10.0.0.1:44608.service. Jul 15 11:28:04.572000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.18:22-10.0.0.1:44608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:04.573765 kernel: kauditd_printk_skb: 125 callbacks suppressed Jul 15 11:28:04.573887 kernel: audit: type=1130 audit(1752578884.572:1539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.18:22-10.0.0.1:44608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:04.607000 audit[5324]: USER_ACCT pid=5324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:04.608291 sshd[5324]: Accepted publickey for core from 10.0.0.1 port 44608 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:28:04.611058 sshd[5324]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:28:04.610000 audit[5324]: CRED_ACQ pid=5324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:04.616309 systemd-logind[1191]: New session 16 of user core. Jul 15 11:28:04.617294 kernel: audit: type=1101 audit(1752578884.607:1540): pid=5324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:04.617350 kernel: audit: type=1103 audit(1752578884.610:1541): pid=5324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:04.617381 kernel: audit: type=1006 audit(1752578884.610:1542): pid=5324 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 15 11:28:04.617366 systemd[1]: Started session-16.scope. Jul 15 11:28:04.610000 audit[5324]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe027b55b0 a2=3 a3=0 items=0 ppid=1 pid=5324 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:04.623606 kernel: audit: type=1300 audit(1752578884.610:1542): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe027b55b0 a2=3 a3=0 items=0 ppid=1 pid=5324 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:04.623658 kernel: audit: type=1327 audit(1752578884.610:1542): proctitle=737368643A20636F7265205B707269765D Jul 15 11:28:04.610000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:28:04.624924 kernel: audit: type=1105 audit(1752578884.621:1543): pid=5324 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:04.621000 audit[5324]: USER_START pid=5324 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:04.629171 kernel: audit: type=1103 audit(1752578884.622:1544): pid=5326 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:04.622000 audit[5326]: CRED_ACQ pid=5326 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:04.990552 sshd[5324]: pam_unix(sshd:session): session closed for user core Jul 15 11:28:04.991000 audit[5324]: USER_END pid=5324 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:04.993373 systemd[1]: sshd@15-10.0.0.18:22-10.0.0.1:44608.service: Deactivated successfully. Jul 15 11:28:04.994231 systemd[1]: session-16.scope: Deactivated successfully. Jul 15 11:28:04.994761 systemd-logind[1191]: Session 16 logged out. Waiting for processes to exit. Jul 15 11:28:04.995432 systemd-logind[1191]: Removed session 16. Jul 15 11:28:04.991000 audit[5324]: CRED_DISP pid=5324 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:05.000277 kernel: audit: type=1106 audit(1752578884.991:1545): pid=5324 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:05.000364 kernel: audit: type=1104 audit(1752578884.991:1546): pid=5324 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:04.993000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.18:22-10.0.0.1:44608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:05.492818 kubelet[1942]: I0715 11:28:05.492764 1942 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:28:05.712000 audit[5337]: NETFILTER_CFG table=filter:131 family=2 entries=9 op=nft_register_rule pid=5337 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:28:05.712000 audit[5337]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe17402790 a2=0 a3=7ffe1740277c items=0 ppid=2108 pid=5337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:05.712000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:28:05.718000 audit[5337]: NETFILTER_CFG table=nat:132 family=2 entries=31 op=nft_register_chain pid=5337 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:28:05.718000 audit[5337]: SYSCALL arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7ffe17402790 a2=0 a3=7ffe1740277c items=0 ppid=2108 pid=5337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:05.718000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:28:07.680906 kubelet[1942]: E0715 11:28:07.680830 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:28:08.927333 systemd[1]: run-containerd-runc-k8s.io-5ae75d99f201bcb68221ba6a686308db11219ef72442273e2c0634e7c1f34d60-runc.QxiCHm.mount: Deactivated successfully. Jul 15 11:28:09.995978 systemd[1]: Started sshd@16-10.0.0.18:22-10.0.0.1:52482.service. Jul 15 11:28:09.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.18:22-10.0.0.1:52482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:10.030400 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 15 11:28:10.030488 kernel: audit: type=1130 audit(1752578889.995:1550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.18:22-10.0.0.1:52482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:10.032000 audit[5365]: USER_ACCT pid=5365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:10.034321 sshd[5365]: Accepted publickey for core from 10.0.0.1 port 52482 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:28:10.036647 sshd[5365]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:28:10.035000 audit[5365]: CRED_ACQ pid=5365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:10.041260 systemd-logind[1191]: New session 17 of user core. Jul 15 11:28:10.041957 systemd[1]: Started session-17.scope. Jul 15 11:28:10.042874 kernel: audit: type=1101 audit(1752578890.032:1551): pid=5365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:10.096605 kernel: audit: type=1103 audit(1752578890.035:1552): pid=5365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:10.096667 kernel: audit: type=1006 audit(1752578890.035:1553): pid=5365 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 15 11:28:10.096686 kernel: audit: type=1300 audit(1752578890.035:1553): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcefb62100 a2=3 a3=0 items=0 ppid=1 pid=5365 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:10.096711 kernel: audit: type=1327 audit(1752578890.035:1553): proctitle=737368643A20636F7265205B707269765D Jul 15 11:28:10.096727 kernel: audit: type=1105 audit(1752578890.045:1554): pid=5365 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:10.096747 kernel: audit: type=1103 audit(1752578890.046:1555): pid=5368 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:10.035000 audit[5365]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcefb62100 a2=3 a3=0 items=0 ppid=1 pid=5365 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:10.035000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:28:10.045000 audit[5365]: USER_START pid=5365 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:10.046000 audit[5368]: CRED_ACQ pid=5368 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:10.172417 sshd[5365]: pam_unix(sshd:session): session closed for user core Jul 15 11:28:10.172000 audit[5365]: USER_END pid=5365 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:10.172000 audit[5365]: CRED_DISP pid=5365 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:10.175621 systemd[1]: sshd@16-10.0.0.18:22-10.0.0.1:52482.service: Deactivated successfully. Jul 15 11:28:10.176199 systemd[1]: session-17.scope: Deactivated successfully. Jul 15 11:28:10.176712 systemd-logind[1191]: Session 17 logged out. Waiting for processes to exit. Jul 15 11:28:10.177826 systemd[1]: Started sshd@17-10.0.0.18:22-10.0.0.1:52488.service. Jul 15 11:28:10.178568 systemd-logind[1191]: Removed session 17. Jul 15 11:28:10.181107 kernel: audit: type=1106 audit(1752578890.172:1556): pid=5365 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:10.181178 kernel: audit: type=1104 audit(1752578890.172:1557): pid=5365 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:10.174000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.18:22-10.0.0.1:52482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:10.176000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.18:22-10.0.0.1:52488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:10.207000 audit[5379]: USER_ACCT pid=5379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:10.208797 sshd[5379]: Accepted publickey for core from 10.0.0.1 port 52488 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:28:10.208000 audit[5379]: CRED_ACQ pid=5379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:10.208000 audit[5379]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd2921ec20 a2=3 a3=0 items=0 ppid=1 pid=5379 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:10.208000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:28:10.209872 sshd[5379]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:28:10.213198 systemd-logind[1191]: New session 18 of user core. Jul 15 11:28:10.213954 systemd[1]: Started session-18.scope. Jul 15 11:28:10.216000 audit[5379]: USER_START pid=5379 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:10.217000 audit[5381]: CRED_ACQ pid=5381 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:10.560654 sshd[5379]: pam_unix(sshd:session): session closed for user core Jul 15 11:28:10.560000 audit[5379]: USER_END pid=5379 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:10.560000 audit[5379]: CRED_DISP pid=5379 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:10.563570 systemd[1]: sshd@17-10.0.0.18:22-10.0.0.1:52488.service: Deactivated successfully. Jul 15 11:28:10.562000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.18:22-10.0.0.1:52488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:10.564172 systemd[1]: session-18.scope: Deactivated successfully. Jul 15 11:28:10.564717 systemd-logind[1191]: Session 18 logged out. Waiting for processes to exit. Jul 15 11:28:10.565800 systemd[1]: Started sshd@18-10.0.0.18:22-10.0.0.1:52490.service. Jul 15 11:28:10.564000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.18:22-10.0.0.1:52490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:10.566653 systemd-logind[1191]: Removed session 18. Jul 15 11:28:10.597000 audit[5391]: USER_ACCT pid=5391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:10.598780 sshd[5391]: Accepted publickey for core from 10.0.0.1 port 52490 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:28:10.598000 audit[5391]: CRED_ACQ pid=5391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:10.598000 audit[5391]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd0461320 a2=3 a3=0 items=0 ppid=1 pid=5391 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:10.598000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:28:10.599865 sshd[5391]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:28:10.603180 systemd-logind[1191]: New session 19 of user core. Jul 15 11:28:10.603940 systemd[1]: Started session-19.scope. Jul 15 11:28:10.606000 audit[5391]: USER_START pid=5391 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:10.608000 audit[5393]: CRED_ACQ pid=5393 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:11.441000 audit[5405]: NETFILTER_CFG table=filter:133 family=2 entries=8 op=nft_register_rule pid=5405 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:28:11.441000 audit[5405]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd6befa210 a2=0 a3=7ffd6befa1fc items=0 ppid=2108 pid=5405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:11.441000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:28:11.447000 audit[5405]: NETFILTER_CFG table=nat:134 family=2 entries=26 op=nft_register_rule pid=5405 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:28:11.447000 audit[5405]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffd6befa210 a2=0 a3=7ffd6befa1fc items=0 ppid=2108 pid=5405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:11.447000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:28:11.461249 sshd[5391]: pam_unix(sshd:session): session closed for user core Jul 15 11:28:11.461000 audit[5391]: USER_END pid=5391 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:11.461000 audit[5391]: CRED_DISP pid=5391 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:11.463000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.18:22-10.0.0.1:52490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:11.464320 systemd[1]: sshd@18-10.0.0.18:22-10.0.0.1:52490.service: Deactivated successfully. Jul 15 11:28:11.465004 systemd[1]: session-19.scope: Deactivated successfully. Jul 15 11:28:11.465782 systemd-logind[1191]: Session 19 logged out. Waiting for processes to exit. Jul 15 11:28:11.467463 systemd[1]: Started sshd@19-10.0.0.18:22-10.0.0.1:52500.service. Jul 15 11:28:11.466000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.18:22-10.0.0.1:52500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:11.468872 systemd-logind[1191]: Removed session 19. Jul 15 11:28:11.470000 audit[5410]: NETFILTER_CFG table=filter:135 family=2 entries=20 op=nft_register_rule pid=5410 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:28:11.470000 audit[5410]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffef7379a50 a2=0 a3=7ffef7379a3c items=0 ppid=2108 pid=5410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:11.470000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:28:11.476000 audit[5410]: NETFILTER_CFG table=nat:136 family=2 entries=26 op=nft_register_rule pid=5410 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:28:11.476000 audit[5410]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffef7379a50 a2=0 a3=0 items=0 ppid=2108 pid=5410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:11.476000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:28:11.498000 audit[5409]: USER_ACCT pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:11.499857 sshd[5409]: Accepted publickey for core from 10.0.0.1 port 52500 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:28:11.499000 audit[5409]: CRED_ACQ pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:11.499000 audit[5409]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb02e5520 a2=3 a3=0 items=0 ppid=1 pid=5409 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:11.499000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:28:11.500921 sshd[5409]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:28:11.506733 systemd[1]: Started session-20.scope. Jul 15 11:28:11.508209 systemd-logind[1191]: New session 20 of user core. Jul 15 11:28:11.512000 audit[5409]: USER_START pid=5409 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:11.514000 audit[5412]: CRED_ACQ pid=5412 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:11.772423 sshd[5409]: pam_unix(sshd:session): session closed for user core Jul 15 11:28:11.772000 audit[5409]: USER_END pid=5409 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:11.772000 audit[5409]: CRED_DISP pid=5409 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:11.775000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.18:22-10.0.0.1:52500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:11.776307 systemd-logind[1191]: Session 20 logged out. Waiting for processes to exit. Jul 15 11:28:11.776422 systemd[1]: sshd@19-10.0.0.18:22-10.0.0.1:52500.service: Deactivated successfully. Jul 15 11:28:11.777237 systemd[1]: session-20.scope: Deactivated successfully. Jul 15 11:28:11.778695 systemd[1]: Started sshd@20-10.0.0.18:22-10.0.0.1:52514.service. Jul 15 11:28:11.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.18:22-10.0.0.1:52514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:11.779899 systemd-logind[1191]: Removed session 20. Jul 15 11:28:11.814000 audit[5422]: USER_ACCT pid=5422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:11.815574 sshd[5422]: Accepted publickey for core from 10.0.0.1 port 52514 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:28:11.815000 audit[5422]: CRED_ACQ pid=5422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:11.815000 audit[5422]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd0bde840 a2=3 a3=0 items=0 ppid=1 pid=5422 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:11.815000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:28:11.816705 sshd[5422]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:28:11.820215 systemd-logind[1191]: New session 21 of user core. Jul 15 11:28:11.820884 systemd[1]: Started session-21.scope. Jul 15 11:28:11.824000 audit[5422]: USER_START pid=5422 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:11.825000 audit[5424]: CRED_ACQ pid=5424 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:11.939626 sshd[5422]: pam_unix(sshd:session): session closed for user core Jul 15 11:28:11.939000 audit[5422]: USER_END pid=5422 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:11.939000 audit[5422]: CRED_DISP pid=5422 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:11.941771 systemd[1]: sshd@20-10.0.0.18:22-10.0.0.1:52514.service: Deactivated successfully. Jul 15 11:28:11.942465 systemd[1]: session-21.scope: Deactivated successfully. Jul 15 11:28:11.940000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.18:22-10.0.0.1:52514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:11.943056 systemd-logind[1191]: Session 21 logged out. Waiting for processes to exit. Jul 15 11:28:11.943679 systemd-logind[1191]: Removed session 21. Jul 15 11:28:12.718108 kubelet[1942]: I0715 11:28:12.718046 1942 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:28:12.979000 audit[5436]: NETFILTER_CFG table=filter:137 family=2 entries=32 op=nft_register_rule pid=5436 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:28:12.979000 audit[5436]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffd84f2f7d0 a2=0 a3=7ffd84f2f7bc items=0 ppid=2108 pid=5436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:12.979000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:28:12.987000 audit[5436]: NETFILTER_CFG table=nat:138 family=2 entries=38 op=nft_register_chain pid=5436 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:28:12.987000 audit[5436]: SYSCALL arch=c000003e syscall=46 success=yes exit=12772 a0=3 a1=7ffd84f2f7d0 a2=0 a3=7ffd84f2f7bc items=0 ppid=2108 pid=5436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:12.987000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:28:16.944522 systemd[1]: Started sshd@21-10.0.0.18:22-10.0.0.1:52518.service. Jul 15 11:28:16.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.18:22-10.0.0.1:52518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:16.945806 kernel: kauditd_printk_skb: 63 callbacks suppressed Jul 15 11:28:16.945858 kernel: audit: type=1130 audit(1752578896.943:1601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.18:22-10.0.0.1:52518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:16.980000 audit[5438]: USER_ACCT pid=5438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:16.981818 sshd[5438]: Accepted publickey for core from 10.0.0.1 port 52518 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:28:16.991612 kernel: audit: type=1101 audit(1752578896.980:1602): pid=5438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:16.991669 kernel: audit: type=1103 audit(1752578896.980:1603): pid=5438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:16.991687 kernel: audit: type=1006 audit(1752578896.980:1604): pid=5438 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 15 11:28:16.991703 kernel: audit: type=1300 audit(1752578896.980:1604): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff4b1ddf20 a2=3 a3=0 items=0 ppid=1 pid=5438 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:16.980000 audit[5438]: CRED_ACQ pid=5438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:16.980000 audit[5438]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff4b1ddf20 a2=3 a3=0 items=0 ppid=1 pid=5438 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:16.988368 systemd-logind[1191]: New session 22 of user core. Jul 15 11:28:16.984205 sshd[5438]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:28:16.988758 systemd[1]: Started session-22.scope. Jul 15 11:28:16.980000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:28:16.996492 kernel: audit: type=1327 audit(1752578896.980:1604): proctitle=737368643A20636F7265205B707269765D Jul 15 11:28:16.996532 kernel: audit: type=1105 audit(1752578896.990:1605): pid=5438 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:16.990000 audit[5438]: USER_START pid=5438 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:17.000534 kernel: audit: type=1103 audit(1752578896.990:1606): pid=5440 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:16.990000 audit[5440]: CRED_ACQ pid=5440 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:17.138451 sshd[5438]: pam_unix(sshd:session): session closed for user core Jul 15 11:28:17.138000 audit[5438]: USER_END pid=5438 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:17.140950 systemd[1]: sshd@21-10.0.0.18:22-10.0.0.1:52518.service: Deactivated successfully. Jul 15 11:28:17.141663 systemd[1]: session-22.scope: Deactivated successfully. Jul 15 11:28:17.142478 systemd-logind[1191]: Session 22 logged out. Waiting for processes to exit. Jul 15 11:28:17.143301 systemd-logind[1191]: Removed session 22. Jul 15 11:28:17.159676 kernel: audit: type=1106 audit(1752578897.138:1607): pid=5438 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:17.159732 kernel: audit: type=1104 audit(1752578897.138:1608): pid=5438 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:17.138000 audit[5438]: CRED_DISP pid=5438 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:17.140000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.18:22-10.0.0.1:52518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:18.447000 audit[5452]: NETFILTER_CFG table=filter:139 family=2 entries=20 op=nft_register_rule pid=5452 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:28:18.447000 audit[5452]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc0f71e560 a2=0 a3=7ffc0f71e54c items=0 ppid=2108 pid=5452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:18.447000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:28:18.453000 audit[5452]: NETFILTER_CFG table=nat:140 family=2 entries=110 op=nft_register_chain pid=5452 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:28:18.453000 audit[5452]: SYSCALL arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffc0f71e560 a2=0 a3=7ffc0f71e54c items=0 ppid=2108 pid=5452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:18.453000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:28:20.681564 kubelet[1942]: E0715 11:28:20.681521 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:28:22.142913 systemd[1]: Started sshd@22-10.0.0.18:22-10.0.0.1:40858.service. Jul 15 11:28:22.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.18:22-10.0.0.1:40858 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:22.145303 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 15 11:28:22.145356 kernel: audit: type=1130 audit(1752578902.141:1612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.18:22-10.0.0.1:40858 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:22.172000 audit[5460]: USER_ACCT pid=5460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:22.173969 sshd[5460]: Accepted publickey for core from 10.0.0.1 port 40858 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:28:22.176000 audit[5460]: CRED_ACQ pid=5460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:22.208051 kernel: audit: type=1101 audit(1752578902.172:1613): pid=5460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:22.208123 kernel: audit: type=1103 audit(1752578902.176:1614): pid=5460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:22.208145 kernel: audit: type=1006 audit(1752578902.176:1615): pid=5460 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 15 11:28:22.208163 kernel: audit: type=1300 audit(1752578902.176:1615): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe50abaa60 a2=3 a3=0 items=0 ppid=1 pid=5460 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:22.208321 kernel: audit: type=1327 audit(1752578902.176:1615): proctitle=737368643A20636F7265205B707269765D Jul 15 11:28:22.208343 kernel: audit: type=1105 audit(1752578902.184:1616): pid=5460 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:22.208360 kernel: audit: type=1103 audit(1752578902.185:1617): pid=5462 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:22.176000 audit[5460]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe50abaa60 a2=3 a3=0 items=0 ppid=1 pid=5460 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:22.176000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:28:22.184000 audit[5460]: USER_START pid=5460 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:22.185000 audit[5462]: CRED_ACQ pid=5462 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:22.181064 systemd-logind[1191]: New session 23 of user core. Jul 15 11:28:22.178025 sshd[5460]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:28:22.181894 systemd[1]: Started session-23.scope. Jul 15 11:28:22.314515 sshd[5460]: pam_unix(sshd:session): session closed for user core Jul 15 11:28:22.324109 kernel: audit: type=1106 audit(1752578902.314:1618): pid=5460 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:22.324283 kernel: audit: type=1104 audit(1752578902.314:1619): pid=5460 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:22.314000 audit[5460]: USER_END pid=5460 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:22.314000 audit[5460]: CRED_DISP pid=5460 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:22.314000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.18:22-10.0.0.1:40858 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:22.317184 systemd[1]: sshd@22-10.0.0.18:22-10.0.0.1:40858.service: Deactivated successfully. Jul 15 11:28:22.318020 systemd[1]: session-23.scope: Deactivated successfully. Jul 15 11:28:22.325404 systemd-logind[1191]: Session 23 logged out. Waiting for processes to exit. Jul 15 11:28:22.326176 systemd-logind[1191]: Removed session 23. Jul 15 11:28:25.994997 systemd[1]: run-containerd-runc-k8s.io-66c04f6b5a097d659bc609cb26b192ffdddeaf9ff9889b233700128526e424f6-runc.KYzPuK.mount: Deactivated successfully. Jul 15 11:28:26.678862 kubelet[1942]: E0715 11:28:26.678805 1942 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:28:27.320323 systemd[1]: Started sshd@23-10.0.0.18:22-10.0.0.1:40864.service. Jul 15 11:28:27.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.18:22-10.0.0.1:40864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:27.321718 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 15 11:28:27.321862 kernel: audit: type=1130 audit(1752578907.319:1621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.18:22-10.0.0.1:40864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:27.352000 audit[5495]: USER_ACCT pid=5495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:27.354106 sshd[5495]: Accepted publickey for core from 10.0.0.1 port 40864 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:28:27.356000 audit[5495]: CRED_ACQ pid=5495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:27.358020 sshd[5495]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:28:27.361301 kernel: audit: type=1101 audit(1752578907.352:1622): pid=5495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:27.361415 kernel: audit: type=1103 audit(1752578907.356:1623): pid=5495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:27.361440 kernel: audit: type=1006 audit(1752578907.356:1624): pid=5495 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 15 11:28:27.362028 systemd-logind[1191]: New session 24 of user core. Jul 15 11:28:27.362789 systemd[1]: Started session-24.scope. Jul 15 11:28:27.356000 audit[5495]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe5e662340 a2=3 a3=0 items=0 ppid=1 pid=5495 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:27.367290 kernel: audit: type=1300 audit(1752578907.356:1624): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe5e662340 a2=3 a3=0 items=0 ppid=1 pid=5495 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:27.372484 kernel: audit: type=1327 audit(1752578907.356:1624): proctitle=737368643A20636F7265205B707269765D Jul 15 11:28:27.372517 kernel: audit: type=1105 audit(1752578907.366:1625): pid=5495 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:27.356000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:28:27.366000 audit[5495]: USER_START pid=5495 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:27.378191 kernel: audit: type=1103 audit(1752578907.367:1626): pid=5497 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:27.367000 audit[5497]: CRED_ACQ pid=5497 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:27.516479 sshd[5495]: pam_unix(sshd:session): session closed for user core Jul 15 11:28:27.516000 audit[5495]: USER_END pid=5495 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:27.518965 systemd[1]: sshd@23-10.0.0.18:22-10.0.0.1:40864.service: Deactivated successfully. Jul 15 11:28:27.519715 systemd[1]: session-24.scope: Deactivated successfully. Jul 15 11:28:27.516000 audit[5495]: CRED_DISP pid=5495 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:27.522661 systemd-logind[1191]: Session 24 logged out. Waiting for processes to exit. Jul 15 11:28:27.523314 systemd-logind[1191]: Removed session 24. Jul 15 11:28:27.524909 kernel: audit: type=1106 audit(1752578907.516:1627): pid=5495 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:27.525339 kernel: audit: type=1104 audit(1752578907.516:1628): pid=5495 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:27.516000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.18:22-10.0.0.1:40864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:32.520000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.18:22-10.0.0.1:50154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:32.521093 systemd[1]: Started sshd@24-10.0.0.18:22-10.0.0.1:50154.service. Jul 15 11:28:32.526108 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 15 11:28:32.526213 kernel: audit: type=1130 audit(1752578912.520:1630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.18:22-10.0.0.1:50154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:32.553000 audit[5550]: USER_ACCT pid=5550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:32.554670 sshd[5550]: Accepted publickey for core from 10.0.0.1 port 50154 ssh2: RSA SHA256:HJCyX8JAQ9OMquuEIVT6BTeEdgkyUqyqBnxnhtHUsbo Jul 15 11:28:32.557000 audit[5550]: CRED_ACQ pid=5550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:32.558713 sshd[5550]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:28:32.562897 kernel: audit: type=1101 audit(1752578912.553:1631): pid=5550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:32.562937 kernel: audit: type=1103 audit(1752578912.557:1632): pid=5550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:32.562963 kernel: audit: type=1006 audit(1752578912.557:1633): pid=5550 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Jul 15 11:28:32.562437 systemd-logind[1191]: New session 25 of user core. Jul 15 11:28:32.562788 systemd[1]: Started session-25.scope. Jul 15 11:28:32.557000 audit[5550]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcf9c6fb70 a2=3 a3=0 items=0 ppid=1 pid=5550 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:32.568048 kernel: audit: type=1300 audit(1752578912.557:1633): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcf9c6fb70 a2=3 a3=0 items=0 ppid=1 pid=5550 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:32.568333 kernel: audit: type=1327 audit(1752578912.557:1633): proctitle=737368643A20636F7265205B707269765D Jul 15 11:28:32.557000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:28:32.566000 audit[5550]: USER_START pid=5550 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:32.573515 kernel: audit: type=1105 audit(1752578912.566:1634): pid=5550 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:32.573573 kernel: audit: type=1103 audit(1752578912.567:1635): pid=5552 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:32.567000 audit[5552]: CRED_ACQ pid=5552 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:32.906460 sshd[5550]: pam_unix(sshd:session): session closed for user core Jul 15 11:28:32.906000 audit[5550]: USER_END pid=5550 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:32.906000 audit[5550]: CRED_DISP pid=5550 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:32.908928 systemd[1]: sshd@24-10.0.0.18:22-10.0.0.1:50154.service: Deactivated successfully. Jul 15 11:28:32.909659 systemd[1]: session-25.scope: Deactivated successfully. Jul 15 11:28:32.910327 systemd-logind[1191]: Session 25 logged out. Waiting for processes to exit. Jul 15 11:28:32.911010 systemd-logind[1191]: Removed session 25. Jul 15 11:28:32.915256 kernel: audit: type=1106 audit(1752578912.906:1636): pid=5550 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:32.915379 kernel: audit: type=1104 audit(1752578912.906:1637): pid=5550 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:28:32.908000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.18:22-10.0.0.1:50154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'